Data Protection Advisor

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.

Job Description: Data Protection Advisor

Company: Brown & Brown (UK)
Location: Mark Lane / Aldgate House, London
Salary: Negotiable + Benefits

Role Purpose

We are currently looking for a Data Protection Advisor to join the welcoming and professional London team.

The Data Protection Advisor provides practical, business-facing privacy advice and helps ensure Brown & Brown (UK) meets its obligations under UK GDPR, the Data Protection Act 2018 and PECR. The role manages individual rights requests, supports the review of suppliers and marketing activity, and contributes to incident management and privacy awareness across the business.

Key Responsibilities

Individual rights

• Lead the end-to-end handling of Data Subject Access Requests (DSARs) and other individual rights requests, ensuring responses are accurate, complete and issued within statutory deadlines.

Advice and guidance

• Provide day-to-day data protection and privacy advice to colleagues and stakeholders across the business.
• Review marketing activities for compliance with UK GDPR and PECR.

Contracts and suppliers

• Review supplier contracts, data processing agreements and data protection clauses, and advise on risk and negotiation positions.

Risk and assurance

• Support the completion of Data Protection Impact Assessments (DPIAs) and carry out first-line reviews.

Incidents

• Assist with data breach investigations and incident management, including assessment, documentation and follow-up actions.

Training and awareness

• Support the delivery of privacy training and awareness activities.

Person Specification

Essential

• 2 to 5 years' practical data protection or privacy experience.
• Proven experience managing DSARs independently.
• Good working knowledge of UK GDPR and PECR.
• Experience reviewing contracts and data processing agreements.
• Experience providing privacy advice to business stakeholders.
• Experience supporting and reviewing DPIAs.

Desirable

• privacy qualification such as PDP, CIPP/E or CIPM.

Skills and Attributes

• Clear, concise communicator who can explain legal requirements in practical terms.
• Sound judgement and the confidence to advise and, where necessary, challenge.
• Strong organisational skills, with the ability to manage competing deadlines.
• Discretion when handling sensitive and confidential information.

We are an Equal Opportunity Employer. We take pride in the diversity of our team and seek diversity in our applicants.