Job Description

Paralegal - Data Protection / GDPR

Accuflex currently has immediate opportunities for

Paralegals with Data Protection / GDPR experience

to join clients in the

financial services and corporate sectors

. These are short-term, full-time contracts offering exposure to privacy compliance, data protection operations, and high-volume regulatory processes.


We are seeking candidates who are proactive, adaptable, and have a keen understanding of GDPR, including conducting Data Protection Impact Assessments (DPIAs), managing data subject access requests (DSARs), and supporting privacy compliance initiatives.

Responsibilities may include

Assist with data subject access requests (DSARs), including coordinating with external suppliers for review and redaction of high-volume requests. Administer, analyse, and improve the end-to-end Rights Requests process. Support the end-to-end management of reported personal data breach incidents. Act as a conduit for the privacy team, ensuring timely and effective responsiveness. Maintain and improve processes for Rights Requests, ensuring deadlines and compliance standards are met. Support daily administration of the office of the Data Protection Officer (DPO), including managing the team inbox. Prepare periodic and ad hoc compliance and reporting documentation. Provide guidance on data incidents, including fact-finding, internal reporting requirements, and mitigation strategies. Support project work and initiatives relating to data privacy and compliance.

Experience / Skills Required

Demonstrable experience working as a Paralegal or legal assistant in Data Protection / GDPR roles. Experience conducting DPIAs and understanding associated risks. Knowledge of GDPR, data protection compliance, and related regulatory frameworks. Financial services experience is desirable but not essential. Strong organisational skills, attention to detail, and ability to manage multiple priorities. Commercial awareness and ability to work with internal and external stakeholders.

Contract Details

Start: As soon as possible (October start also acceptable). Duration: 1-6 months, depending on the role. Full-time (40 hours per week). Hybrid working arrangements, with some travel to the client's office required (once or twice per week). Competitive day rates, dependent on experience and role.

Locations

Roles are based in

London and Gloucestershire

, with hybrid arrangements available.

Keywords

Data Protection, GDPR, DPIA, DSAR, Paralegal, Privacy, Compliance, Financial Services, Hybrid, Contract.

Applications closing date: 19 September 2025