Senior Data & Information Lawyer

This role follows 37 hours, Monday to Friday working pattern. The vacancy will be offered on a remote working basis, with a requirement to attend our main hub spaces as and when required., * Acting as the Trust’s senior legal adviser on information governance, data protection, privacy, cyber, AI and information rights law, including UK GDPR, Data Protection Act 2018, Freedom of Information Act 2000 and Environmental Information Regulations 2004.

• Advising the Trust, including senior leaders and directors, on complex information governance risk, statutory disclosure obligations, privacy compliance, data processing, data sharing, cyber incidents, AI adoption and regulatory exposure.
• Providing senior legal advice on data protection impact assessments, privacy-by-design, data processing agreements, data sharing agreements, controller/processor arrangements, joint controller arrangements, privacy notices and lawful use of personal data across Trust activities.
• Advising on AI, digital, cyber and information security matters, including privacy risks arising from new systems, AI-enabled tools, automated processing, data leakage, cyber incidents, emerging technology adoption and associated governance controls.
• Supporting the legal response to personal data breaches, cyber incidents, complaints, ICO enquiries, regulatory engagement and information rights challenges, ensuring proportionate and compliant handling.
• Advising on complex, sensitive or high-risk subject access requests, FOI requests, EIR requests, internal reviews, complaints and appeals, including application of exemptions, exceptions, redactions, disclosure risk and statutory decision-making.
• Supporting the Data Protection Officer and Information Governance team on regulatory compliance, risk escalation, statutory records, DPIAs, breach records, data sharing records, ICO correspondence and evidence of compliance.
• Supporting the development of governance frameworks, policies, procedures, templates and training to strengthen information governance compliance, improve consistency and reduce legal and regulatory exposure.
• Monitoring legislative, regulatory and technological developments in information governance, data protection, AI, privacy and cyber risk, identifying emerging risks and advising on implementation of required change.
• Providing legal advice on other information governance, privacy, cyber, AI and statutory disclosure matters affecting the Trust, as required., We care passionately for our waterways, and as importantly, for those who look after and use them. We are committed to building a diverse and inclusive workforce where everyone can thrive. We are striving to represent the diverse communities that we are a part of and welcome applicants from across all sectors of the community. We want everyone to have the opportunity to perform at their best during our recruitment process. If you require any reasonable adjustments - whether for a disability, neurodiversity, or health condition - please let us know what you need and how we can support you. We’ll work with you to make any necessary changes. All of our jobs can be considered on a part time, flexible or job basis. We operate a Guaranteed Interview Scheme for disabled applicants who meet the minimum criteria for the role. You are considered disabled under the Equality Act 2010 if you have a physical or mental impairment that has a substantial and long-term negative effect on your ability to carry out normal day-to-day activities. We recognise not everyone who is classified as disabled under the Equality Act personally identifies this way, or with this definition of disability. Please do not let this discourage you from ing under the scheme. At Canal & River Trust, we are committed to fair, transparent, and ethical recruitment practices. As part of our hiring process, we may use AI to analyse applications and support us work more efficiently. However, all hiring decisions - without exception - are made by our hiring managers. Navigate your future and lock in your career as we keep our canals open and alive.

You are a qualified lawyer with significant experience in information governance, data protection, privacy and information rights law. Confident advising senior stakeholders, you bring strong knowledge of UK GDPR and related legislation, alongside experience managing complex compliance, disclosure, cyber and regulatory matters. You provide pragmatic, risk-based legal advice, work effectively under pressure, and are comfortable managing a varied caseload in a fast-paced environment., * Qualified lawyer with significant experience, ideally 10+ years PQE or equivalent experience, in information governance, data protection, privacy and information rights law gained in private practice, public sector or in-house environments.

• Strong knowledge of UK GDPR, Data Protection Act 2018, Freedom of Information Act 2000, Environmental Information Regulations 2004 and associated regulatory guidance.
• Demonstrable experience advising on complex data protection, privacy, information rights, statutory disclosure, confidentiality and regulatory compliance issues.
• Experience advising on DPIAs, privacy-by-design, data processing agreements, data sharing agreements, controller/processor analysis, joint controller arrangements, privacy notices, records of processing and information governance frameworks.
• Experience advising on cyber incidents, personal data breaches, ICO engagement, complaints, regulatory investigations and information rights appeals.
• Experience supporting or advising a Data Protection Officer, Information Governance team or equivalent compliance function.
• Experience working within or advising a public sector, charity, infrastructure, regulated or public-facing organisation is desirable.
• Demonstrable experience advising senior leadership and operational teams on information governance risk and strategic implications.
• Ability to provide pragmatic advice and resolve complex legal issues in an operational environment.
• Ability to work autonomously, manage a wide and varied caseload and meet tight statutory and operational deadlines.
• Displays a can-do mentality and ability to work independently while contributing effectively within a team.
• Comply with Canal & River Trust Health & Safety policy and defined standards, report incidents, accidents and near misses. Assess risks and make adjustments to work methods where appropriate. Ensure all equipment, PPE, plant and materials are appropriate for the task. Consider your own and others’ behaviour.

We offer an annual salary of £68,000. Enjoy a competitive pension scheme, increasing holiday entitlement, and a range of employee benefits.