Lead Counsel, Data Protection

Diageo ,
London, Greater London

Overview

Job Description

**Job Description :** **Context/Scope:** Reporting to the Chief Business Integrity Officer, the Legal Counsel for Global Data Protection will play a key role in Leading Diageo's Global Data Protection Programme. The core deliverable of the overarching Business Integrity agenda is to create the conditions in which the company and its people are empowered to do the right thing, in the right way, from grain to glass. The role will include providing data protection advice and training to business and legal colleagues and dealing with a wide range of issues and queries that arise. The specific responsibilities are as follows: + Play a key role in leading the development, coordination and implementation of Diageo's Global Data Protection programme covering people, policies, process, systems and applications with a focus on continuous improvement, as well as being effective in risk management yet bringing maximum simplicity to what is required + Work with the Data Protection Officer, lead on the identification and application of the data protection strategy, ensuring compliance with GDPR requirements and other emerging Data Protection legislation across the globe + Research and understand emerging regulatory guidance and emerging regulations, including cyber security laws that impact on processing of personal information + Provision of privacy risk management advice and consultation to business units operating globally, including dealing with problem solving and a high volume of often complex queries + Lead as subject matter expert on: Privacy Impact Assessments design, process, contents and high-risk review, also for Legitimate Interests Assessments and other legal bases for processing, the exercise of individuals rights under data protection laws + Lead breach response and management in relation to certain privacy incidents and data breaches + Work continuously to ensure that data protection becomes fully embedded as a part of business as usual at Diageo, through the development of an extensive range of relationships within key functions + Foster a culture of data protection at Diageo by raising awareness and advocating privacy-by-design; + Work to ensure that data protection is fully integrated into Diageo's compliance framework and model; + Lead Diageo's data protection policies, accountability and sharing of best practices across the organization and ensuring our best practice documentation (guidance, precedents etc) are within Legalpedia + Close collaboration, as part of the Global Data Protection Programme, with the Diageo Business Services (DBS) stakeholders and information and records management and security specialists reporting to the CISO within DBS and their Leading legal counsel; + Provision of privacy risk management advice, guidance and consultation to business units operating globally including Diageo market and global functions lawyers and potentially future DP Compliance officers or subject matter experts in markets; + Diageo's approach should be consistent with best practice and that risks are managed in a proportionate and effective manner that works in the context of Diageo's culture. + Own the Records of Processing Activity model as subject matter expert and process with legal support to DBS legal co-ordinator + Enable markets to use the materials, tools, trainings and finding ways to reach them + Onboarding and training lawyers + Legalpedia content - ensuring our internal learning management system is updated, intuitive and accessible to meet lawyer training needs in the Data Privacy space + Improvements to any programme templates and materials, reviewed annually **Key Challenges** This role is global in its outlook and will require an ability to apply EU data protection principles to arrangements and business practices which span a number of territories, including non-EU jurisdictions, and/or to research and interpret applicable laws in those jurisdictions; The need to build strong relationships with, and gain the trust of business and legal colleagues quickly, including in order to raise awareness of data protection issues generally, and the effective communication, in business terms, of central data protection-related guidance Ability to prioritise and spot red flag issues and escalate quickly Strong drafting skills Diageo is a dynamic and outcome-driven business with a fast-paced data-driven working environment. It is critical that the advice is commercially-orientated and that complex legal principles are understood and emerging developments identified at pace, then explained quickly and simply Leading GAR in audits as required Ensuring WoW optimised with tools deployed to make workflow more efficient and simple and looking for continuous improvement opportunities to sustain and simplify taking into account our must-do productivity agenda and the imperative to lighten the workload of our legal team wherever possible **Qualifications and Experience Required** Qualified lawyer in UK or E