Associate/Senior or Principal Associate - Contentious Data Protection & Information Governance (0551)
Posted 2 weeks ago by Mills & Reeve
Negotiable
Undetermined
Undetermined
Oxford, England, United Kingdom
Summary: The role involves recruiting a data protection and information law solicitor or an experienced data protection practitioner to join a contentious data protection and information governance team. The position emphasizes practical data protection work, particularly in advising clients during challenging situations. Candidates with both legal and non-legal backgrounds are encouraged to apply, provided they have relevant experience in data protection matters. The successful candidate will be proactive, collaborative, and possess strong communication skills while managing various data protection tasks.
Key Responsibilities:
- Manage day-to-day DSAR queries, including strategy, proportionality, exemptions, and risk.
- Assist with ICO investigations, including information gathering and drafting responses.
- Support matters before the First-tier Tribunal.
- Advise on third-party data requests, such as those from police and regulators.
- Guide clients on handling personal data in internal processes like grievances and disciplinaries.
- Support pre-action correspondence and litigation arising from data breaches.
- Advise on responses to data subject rights requests.
Key Skills:
- 1–8 years' post-qualification experience in data protection law.
- Experience managing Data Subject Access Requests (DSARs) and responding to data breaches.
- Strong communication and organizational skills.
- Ability to manage competing priorities effectively.
- Collaborative working style and proactive approach.
- Familiarity with FOIA requests and data breach response.
- Exposure to ICO investigations and regulatory enquiries.
Salary (Rate): undetermined
City: Oxford
Country: United Kingdom
Working Arrangements: undetermined
IR35 Status: undetermined
Seniority Level: undetermined
Industry: Other
We are seeking to recruit a data protection and information law solicitor, or an experienced data protection practitioner (non-qualified candidates welcome) to join our contentious data protection and information governance team!
The role
You will work closely with a highly collaborative and supportive data, privacy and information law group in a friendly team environment. This role focuses on practical, applied data protection work, with a particular emphasis on advising clients in challenging or sensitive situations.
The person
We welcome applications from both legal and non-legal professionals with relevant experience. This includes qualified solicitors with between 1–8 years' post-qualification experience, as well as non-qualified candidates such as in-house data protection practitioners, legal executives, specialist advisors, or senior paralegals who have strong, hands-on experience handling Data Subject Access Requests (DSARs), Freedom of Information Act (FOIA) requests, or broader GDPR compliance work. The successful candidate will bring solid, practical experience advising on matters relating to the GDPR and the Data Protection Act. You will be confident managing DSARs and responding to data breaches, demonstrating a pragmatic and solutions-focused approach. Strong communication and organisational skills are essential, alongside the ability to manage competing priorities effectively. We are looking for someone who is collaborative in their working style, proactive in their approach, and motivated to continue learning and developing in a fast-evolving area of law. While not essential, additional experience in certain areas would be advantageous. This includes familiarity with FOIA requests, involvement in data breach response—particularly in the context of cyber incidents—and experience supporting contentious data matters. Exposure to ICO investigations, regulatory enquiries, or First-tier Tribunal proceedings would also be beneficial.
The activities
- Manage day-to-day DSAR queries, including strategy, proportionality, exemptions, and risk (with paralegal support on document review)
- Assist with ICO investigations (information gathering, drafting responses, managing correspondence)
- Support matters before the First-tier Tribunal
- Advise on third-party data requests (e.g. police, regulators)
- Guide clients on handling personal data in internal processes (e.g. grievances, disciplinaries)
- Support pre-action correspondence and litigation arising from data breaches
- Advise on responses to data subject rights requests
Please ensure you read the job description below for full details
We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.
The Benefits
As you'd expect, we offer a competitive salary and a wide range of benefits. Click here to find out more about our core benefit offering.
Pre employment screening
If we offer you a role, we will conduct comprehensive pre-employment screening. This screening will include, but is not limited to, a basic DBS, verification of your right to work, a three year employment history and a self-declaration to assess your character and suitability for the role. Full details of our pre-screening employment process are available upon request.
The firm
Mills & Reeve is centred on achieving more for clients, their businesses and the wider communities we serve. Our clients and their industries benefit from our knowledge and learning, and receive consistent experiences with no surprises. We tell them what they need to know when they need to know it. We build personal relationships, with advice individually tailored to individual need. And if clients need things we don't offer, we draw on our network to give recommendations. Our 1,450 plus people and over 850 lawyers share one vision – achieving more for clients. By joining Mills & Reeve, you'll have the chance to build your skills and experience within a firm that's not only ranked in the top 50 UK law firms, but also one that truly values their people. We're also ranked in The Sunday Times Best Places to Work list, and have been awarded Platinum Investors in People. Our mantra is “Achieve more. Together.”, which we feel embodies our purpose and is more than just a catchphrase!
Our values are the principles that help us fulfil our purpose. Our people shaped them and live them every day.
We're ambitious - We aim high, we embrace new ideas and we're passionate about our work
We're open - We communicate openly and honestly to build trust, and we do what's right
We care - We're committed to each other, our clients, our communities and the planet
We collaborate - We're easy to work with, we offer help willingly and we get things done – together
And finally
Everyone at Mills & Reeve brings a unique perspective and ideas to the team and we do everything we can to help each person to thrive. We're committed to providing an inclusive and supportive working environment, are happy to consider flexible working arrangements, and want to achieve the right balance for both our people and the firm. We encourage everyone to ask if they feel they need any workplace adjustments, and will do our best to support with these.
To find out more about our diversity and inclusion work, visit our website.