Burberry Data Protection Counsel

Burberry is a British luxury fashion house renowned for its heritage craftsmanship, iconic outerwear and digital-first approach to luxury retail. As a global brand, Burberry emphasizes creativity, sustainability and innovation across product, marketing and customer experience while offering a collaborative, cross‑functional legal environment that supports international operations.

1. Provide day-to-day, commercially focused legal advice on data protection matters (GDPR, PECR and other applicable privacy laws) to business stakeholders across marketing, e‑commerce, IT and operations.
2. Draft, review and negotiate data protection clauses in commercial contracts, including IT, services and marketing agreements, and advise on data transfers and vendor relationships.
3. Lead and support privacy governance tasks: complete and advise on DPIAs, LIAs, privacy notices, consent language and retention policies.
4. Advise on incident response and breach reporting obligations, data subject rights requests, cookies compliance and lawful bases for processing (including direct marketing and AI use cases).
5. Coordinate and obtain local counsel advice on cross‑border privacy issues and translate foreign legal input into pragmatic guidance for internal stakeholders.
6. Partner closely with internal teams and external vendors to embed privacy requirements into business projects and ongoing commercial activities.

1. Qualified solicitor (England & Wales) with approximately 1–3 PQE.
2. Specialisation in data protection law at or since qualification, with strong working knowledge of the GDPR and PECR.
3. Strong academic credentials.
4. Ability to operate with minimal supervision and to interface directly with internal clients and external partners.
5. In‑house experience preferred; experience working with foreign counsel on cross‑border matters is an advantage.

1. GDPR
2. PECR
3. Data Protection Impact Assessments (DPIAs)
4. Legitimate Interest Assessments (LIAs)
5. Privacy notices and consent drafting
6. Data transfer mechanisms and cross‑border privacy law
7. Contract drafting and negotiation (data protection clauses)
8. Incident response and breach reporting
9. Cookies and direct marketing compliance
10. Stakeholder management and cross‑functional collaboration

Approximately 1–3 years PQE with demonstrable hands‑on experience in data protection matters, ideally gained in a law firm and/or in‑house setting; experience advising on marketing, e‑commerce and cross‑border projects is desirable.

Qualified solicitor (England & Wales) with strong academic credentials; specialised training or coursework in data protection/privacy law preferred.

The company fosters a creative, collaborative environment that blends heritage craftsmanship with digital innovation. Colleagues work in cross‑disciplinary teams and are encouraged to champion sustainability and responsible practices while delivering luxury experiences globally.