Counsel Data Protection - open to flexible working

Park Royal, London
20 Aug 2019
20 Sep 2019
Contract Type

Reporting to the Senior Counsel Global Data Protection and Group DPO, the Legal Counsel for Data Protection will play a key role in Leading Diageo’s Global Data Protection Programme. The role will include providing data protection advice and training to business and legal colleagues and dealing with a wide range of issues and queries that arise. The specific responsibilities are as follows:

  • Playing a key role in Leading the development, coordination and implementation of Diageo’s global data protection programme covering people, policies, process, systems and applications with a focus on continuous improvement as well as being effective in risk management yet bringing maximum simplicity to what is required and using the Nymity Accountability Framework to ensure a consistency of approach to data protection challenges emerging
  • Leading compliance with the identification, interpretation and application of the EU General Data Protection Regulation, national laws, national and European Data Protection Board Guidance and lookalike laws emerging including Leading and working alongside business owners or with working groups on issues, researching and understanding emerging regulatory guidance across the EU Member States and emerging regulations, including cyber security laws that impact on processing of personal information;
  • Provision of privacy risk management advice and consultation to business units operating globally, including dealing with problem solving and a high volume of often complex queries
  • Leading as subject matter expert on: Privacy Impact Assessments design, process, contents and high risk review, also for Legitimate Interests Assessments and other legal bases for processing, the exercise of individuals rights under data protection laws
  • Leading breach response and management in relation to certain privacy incidents and data breaches;
  • Working continuously to ensure that data protection becomes fully embedded as a part of business as usual at Diageo, through the development of an extensive range of relationships within key functions, including;
  • Fostering a culture of data protection at Diageo by raising awareness and advocating privacy-by-design;
  • Working to ensure that data protection is fully integrated into Diageo’s compliance framework and model;
  • Leading Diageo’s data protection policies, accountability and sharing of best practices across the organization and ensuring our best practice documentation (guidance, precedents etc) are within Legalpedia
  • Close collaboration, as part of the Global Data Protection Programme, with the Diageo Business Services (DBS) stakeholders and information and records management and security specialists reporting to the CISO within DBS and their Leading legal counsel;
  • Provision of privacy risk management advice, guidance and consultation to business units operating globally including Diageo market and global functions lawyers and potentially future DP Compliance officers or subject matter experts in markets;
  • Diageo’s approach should be consistent with best practice and that risks are managed in a proportionate and effective manner that works in the context of Diageo’s culture.
  • Own the Records of Processing Activity model as subject matter expert and process with legal support to DBS legal co-ordinator
  • Enabling markets to use the materials, tools, trainings and finding ways to reach them
  • Onboarding and training lawyers
  • Legalpedia content – ensuring this works and is intuitive and accessible and meets lawyers training needs
  • Improvements to any programme templates and materials, reviewed annually

Key Challenges

  • This role is global in its outlook and will require an ability to apply EU data protection principles to arrangements and business practices which span a number of territories, including non-EU jurisdictions, and/or to research and interpret applicable laws in those jurisdictions;
  • need to build strong relationships with, and gain the trust of, business and legal colleagues quickly, including in order to raise awareness of data protection issues generally and the data protection capabilities available within the legal and Global Risk & Compliance and Global Audit and Risk teams;
  • Ability to prioritise and spot red flag issues and escalate quickly;
  • Strong drafting skills;
  • Diageo is a dynamic and outcome-driven business with a fast-paced data-driven working environment. It is critical that the advice is commercially-orientated and that complex legal principles are understood and emerging developments identified at pace, then explained quickly and simply.
  • Leading GAR in audits as required
  • Ensuring WoW optimised with tools deployed to make workflow more efficient and simple and looking for continuous improvement opportunities to sustain and simplify taking into account our must-do productivity agenda and the imperative to lighten the workload of our legal team wherever possible

Qualifications, Experience and Qualities

  • Qualified lawyer in UK or European Jurisdiction with extensive experience of data protection and the EU General Data Protection Regulation gained in private practice at a prominent firm or in-house at a leading international business;
  • 5+ years PQE;
  • Able to work in a multi-disciplinary context
  • Experience of cross functional cooperation
  • Experience of working in-house
  • Knowledge of the consumer goods sector
  • International experience
  • IAPP or similar accreditations, investigatory / litigation / contractual experience may be advantageous


  • Ability to establish good working relationships with highly demanding internal and other stakeholders;
  • Robust and confident manner and an ability to work autonomously knowing when to escalate;
  • Ability to manage complex legal issues with a high degree of commerciality and pragmatism;
  • Excellent communication skills to convey legal aspects with clarity, precision and simplicity;
  • Fluency in English is essential
  • Excellent drafting skills
  • Role model bringing data protection to life in the context of our Values of valuing one another and being passionate about our customers and consumers recognising data protection as a fundamental human right

 Please click apply to make your application or to find out more

Similar jobs

Similar jobs