Data Protection Lead - CIPP/E, CIPM, CIPT, UK GDPR practitioner

Data Protection Lead

Location: London, Bristol or Manchester (Hybrid - typically 1 day per week onsite)
Contract: 6 Months
IR35: £650 daily Inside IR35
Clearance: BPSS

The Opportunity

We are seeking an experienced Data Protection Lead to join a high-profile digital delivery environment, supporting the development of innovative digital products and services.

This is a hands-on role for a privacy professional who enjoys working closely with product, technology, analytics and delivery teams to ensure privacy requirements are embedded from the outset. You will play a key role in delivering practical data protection solutions, conducting risk assessments, and enabling teams to deliver at pace while maintaining compliance.

This is not a strategic leadership or people management position. We're looking for a practitioner who is comfortable getting into the detail of complex digital services, privacy risks and DPIAs.

Key Responsibilities

Lead and deliver Data Protection Impact Assessments (DPIAs) for new and existing digital services.
Provide expert advice on UK GDPR, Data Protection Act requirements and privacy best practices.
Embed Privacy by Design principles throughout the product and delivery lifecycle.
Support the creation and maintenance of:
Privacy Notices
Records of Processing Activities (ROPAs)
Data-sharing documentation
Risk assessments
Work closely with product managers, delivery teams, engineers and stakeholders to identify and mitigate privacy risks.
Analyse digital products, data flows and technical architectures to assess compliance implications.
Provide pragmatic, risk-based guidance that enables delivery while maintaining regulatory compliance.
Support governance activities relating to emerging technologies and AI-enabled solutions.

Essential Experience

Minimum 3 years' experience in a Data Protection, Privacy or Information Governance role.
Strong experience conducting and reviewing DPIAs.
Proven expertise in UK GDPR and Data Protection legislation.
Experience embedding Privacy by Design within digital products or services.
Strong risk assessment and problem-solving capabilities.
Experience working with technical stakeholders, digital teams and delivery environments.
Excellent communication and stakeholder engagement skills.
Ability to work collaboratively within multidisciplinary teams.

Desirable Experience

Experience working within digital delivery organisations.
Knowledge of PECR, cookies and tracking technologies.
Exposure to analytics platforms and privacy considerations surrounding digital analytics.
Experience supporting AI governance or AI-related risk assessments.
Public sector or government experience.
Experience working within Agile delivery environments.

Qualifications

One or more of the following would be highly desirable:

CIPP/E
CIPM
CIPT
Data Protection Practitioner Certificate
UK GDPR Practitioner Certificate
Equivalent privacy or data protection qualificationEquivalent practical experience will also be considered.

Personal Attributes

We are particularly interested in individuals who are:

Personable and collaborative
Pragmatic in their approach to compliance and risk
Detail-oriented and analytical
Comfortable working in fast-paced environments
Able to build strong relationships across technical and non-technical teams
Focused on delivery and outcomes rather than high-level strategy
Only candidates based in UK and eligible to work in UK are allowed