Oversee and maintain internal data protection policies and procedures.
Manage data subject access requests (DSARs) and ensure timely responses.
Support on data retention projects in line with firm policy.
Review client and vendor data processing agreements (DPAs), privacy notices, and contractual clauses.
Assist with response to client information security questionnaires and assessments.
Support the Firm during regulatory investigations or data breach incidents.
Conduct privacy impact assessments (DPIAs) for new services and technologies.
Develop the Firm’s Record of Processing Activities (ROPA).
Deliver tailored privacy training to legal teams and support staff.
Promote privacy-by-design principles in client engagements and internal projects.
Act as the firm’s point of contact with the Data Protection Commission (DPC).
Monitor changes in data protection laws and advise on implications for the firm and its clients.

Relevant 3rd level qualification in corporate law/data protection law or related field.
Minimum 3-5 years’ experience in privacy law, ideally within a corporate law firm or advising corporate clients.
Demonstrable experience in developing and implementing data protection risk and compliance framework.
Professional certification (e.g., CIPP/E, CIPM) is highly desirable.
In-depth knowledge of GDPR, Irish Data Protection Acts 1988 to 2018, and international privacy frameworks.
Strategic thinking and commercial awareness.
Excellent communication and stakeholder management.
Ability to manage complex projects and regulatory timelines.
High attention to detail and analytical skills.

Data Privacy Manager

Key skills