Data Privacy Paralegal

We have a fantastic opportunity with one of our in-house clients, who are looking for a Data Privacy Paralegal.

Duties include, but are not limited to:

Privacy & Legal Compliance

• Apply working knowledge of UK GDPR, DPA 2018, PECR, and EU GDPR.
• Assess lawful bases, high‑risk processing, and ensure compliance with BA’s internal policies.
• Navigate aviation‑specific contexts including PNR, APIS, marketing consent, and employee monitoring.
• Draft or validate Data Processing Agreements (DPAs) and SCC/IDTA annexes.
• Create and maintain Records of Processing Activities (ROPA) in OneTrust/SharePoint.
• Complete DPIAs, LIAs, and TRAs using templates and AI‑assisted tools.
• Evaluate proportionality, residual risk, and escalation red path cases to Legal/DPO.

Governance & Documentation

• Maintain audit trails, evidence folders, and version control.
• Draft concise summaries for stakeholder briefings and executive reports.
• Align privacy risk scoring with InfoSec vulnerabilities.
• Identify data‑flow dependencies across systems and vendors (e.g., Salesforce, Medallia).

Experience Required

• Excellent written and verbal communication skills, with the ability to convey technical matters and other key points succinctly, tailoring approach as needed. Must be familiar with legal terminology and be comfortable writing client emails.
• Self‑motivated, enthusiastic and possess a positive attitude towards challenges and change.
• Excellent technical skills with a keen eye for detail.
• A strong academic record.
• Ability to effectively manage own workload.
• Ability to communicate effectively with people at all levels.
• Ability to work independently and as part of a team.
• Personable and confident, able to build relationships with partners/key stakeholders.

Qualifications

• Completion of your LLB, GDL, SQE 1 etc.
• 6 months of paralegal experience in a Data Privacy role.

#J-18808-Ljbffr…