Data Protection Lead – UK GDPR Practitioner

About the role

We are looking for an experienced Data Protection Lead to join a high‑profile digital delivery environment. This hands‑on privacy professional will work closely with product, technology, analytics and delivery teams to embed privacy requirements from the outset of new digital services.

Key responsibilities

• Lead and deliver Data Protection Impact Assessments (DPIAs) for new and existing digital services.
• Provide expert advice on UK GDPR, the Data Protection Act and privacy best practices.
• Embed Privacy by Design principles throughout the product and delivery lifecycle.
• Support the creation and maintenance of privacy notices, Records of Processing Activities (ROPAs), data‑sharing documentation and risk assessments.
• Collaborate with product managers, engineers and stakeholders to identify and mitigate privacy risks.
• Analyse digital products, data flows and technical architectures to assess compliance implications.
• Assist governance activities related to emerging technologies and AI‑enabled solutions.

Required profile

• Minimum 3 years of experience in data protection, privacy or information governance.
• Strong experience conducting and reviewing DPIAs.
• Proven expertise in UK GDPR and Data Protection legislation.
• Experience embedding Privacy by Design within digital products or services.
• Excellent communication and stakeholder‑engagement skills.

Required skills

• Data Protection Impact Assessment (DPIA) methodology.
• UK GDPR and Data Protection Act knowledge.
• Privacy by Design implementation.
• Risk assessment and mitigation.

What we offer

• 6‑month contract with a daily rate of £650 (inside IR35).
• Hybrid working model – typically one day per week onsite in London, Bristol or Manchester.
• Opportunity to work on innovative digital products within a fast‑paced environment.