Data Privacy Manager

Job-:
Legal

Location:

United Kingdom Workplace:
Remote

Schedule:

Full time Posted:
The Data Privacy Manager (“Privacy Manager”) is responsible for managing, co-ordinating and generally implementing KLDiscovery’s data protection strategy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”), the UK Data Protection Act 2018 and US State privacy laws including the California Consumer Privacy Act (“CCPA”) and Health Insurance Portability and Accountability Act (“HIPAA”). The Privacy Manager will act as the internal lead for KLDiscovery on data privacy queries, serves as the primary point of contact for data subjects and regulatory authorities, provides expert advice on data protection matters, undertakes implementation of data privacy initiatives, ensures compliance with KLDiscovery policies and supports KLDiscovery in managing risks associated with the processing of personal data for clients and employees.

Key Responsibilities Compliance Monitoring and Advisory Monitor compliance against global data protection laws and internal policies, procedures, and controls, both for clients and employees.

Advise KLDiscovery and its employees on data protection obligations and best practices.

Monitor emerging trends, legislative changes, and guidance relating to data privacy, particularly involving use of artificial-intelligence.

Risk and Assessment Conduct regular audits, risk assessments, and reviews of data processing activities including vendor due diligence as it relates Data Privacy  and manage Data Protection Impact Assessments (“DPIAs”), Transfer Impact Assessments (“TIAs”), Legitimate Interest Assessments (‘’LIAs’’) and advise on mitigating risks for both product and internal initiatives. Maintain KLDiscovery’s compliance with cross‑border data transfer requirements, including the Data Privacy Framework (“DPF”), Schrems II obligations, and any successor or equivalent transfer mechanisms.

Records and Documentation Own and maintain the Records of Processing Activities (“ROPA”) as required by law on a per country basis, covering all business units.

Develop and maintain data protection policies, privacy notices, and supporting documentation.

Assist in development of contractual frameworks for clients and providing advice on best practices.

Data Subject and Regulatory Liaison Serve as the primary contact for data subjects regarding data protection queries, complaints, and requests, including Subject Access Requests (“SARs”), with responses managed within applicable statutory time frames and data deletion.

Act as the primary liaison with supervisory authorities and facilitate communication in the event of a data breach or investigation.

Support the cybersecurity incident response process by providing expert guidance on breach classification, notification obligations, and regulatory reporting requirements across applicable jurisdictions including GDPR, HIPAA, DORA, NIS2, and US state laws.

Governance, Training and Awareness Deliver KLDiscovery’s data protection training and awareness programme.

Monitoring changes in privacy laws and advising the organization accordingly.

Client and commercial support answering data privacy questions from clients as part of client RFPs and due diligence process and questionnaires.

Support KLD's AI governance framework and EU AI Act compliance readiness, including reviewing AI-driven data processing activities for privacy risk and control adequacy.

Qualifications and Experience Minimum of 5 years’ experience in a dedicated privacy role, such as a privacy manager or equivalent, in an international business, preferably SaaS.A degree in law, information security, IT, compliance, or a related field.

Professional…