Job Description
We have a fantastic opportunity with one of our in-house clients, who are looking for a Data Privacy Paralegal.
Duties include, but are not limited to:
Privacy & Legal Compliance
- Apply working knowledge of UK GDPR, DPA 2018, PECR, and EU GDPR.
- Assess lawful bases, high‑risk processing, and ensure compliance with BA’s internal policies.
- Navigate aviation‑specific contexts including PNR, APIS, marketing consent, and employee monitoring.
- Draft or validate Data Processing Agreements (DPAs) and SCC/IDTA annexes.
- Create and maintain Records of Processing Activities (ROPA) in OneTrust/SharePoint.
- Complete DPIAs, LIAs, and TRAs using templates and AI‑assisted tools.
- Evaluate proportionality, residual risk, and escalation red path cases to Legal/DPO.
Governance & Documentation
- Maintain audit trails, evidence folders, and version control.
- Draft concise sum...