We are seeking a data protection, privacy and commercial specialist to join a national Data & Digital team based in Aberdeen. The role focuses on managing data subject rights programmes and DSAR operations for large organisational clients across sectors such as retail, technology, sport, healthcare and financial services.

The post-holder will handle a mix of advisory and delivery work including DSAR triage, search, review, redaction and disclosure, incident response, international transfers, PECR and AI/data ethics matters. You will work closely with commercial, disputes and legal‑tech colleagues to deliver practical privacy operations and compliance solutions.

This is an associate-level role for candidates with solid hands-on experience in privacy operations who want to lead client-facing DSAR and data rights projects and contribute to team strategy, training and product development.

Minimum 3 years' post‑qualification experience in data protection, privacy and information law.
Proven, hands‑on experience handling DSARs and wider data subject rights at scale (triage, search, review, redaction, disclosure).
Practical knowledge of UK GDPR/EU GDPR and PECR, and experience advising across multiple sectors.
Experience drafting and negotiating data processing/sharing provisions and commercial contracts involving data and IT issues.
Strong client‑facing skills with a consultative approach; ability to lead projects and manage senior stakeholder relationships.

Apply for this role

Confidential. We never contact your current employer.