Data Privacy Paralegal – 2-Month Contract

Location: London / Greater London – Hybrid
Working pattern: Full-time, 40 hours per week, with 2 days per week in the office
Start date: Beginning of October 2026
Duration: 2 months initially, with potential for extension

The Opportunity

Accuflex is seeking a Data Privacy Paralegal to join the privacy team of a large UK organisation on an initial two-month assignment.

This is a hands-on role supporting a busy privacy function across data subject rights, personal data incidents and wider data protection compliance. The successful candidate will work closely with the organisation's privacy team and Office of the DPO, helping to ensure requests and incidents are managed effectively and within applicable deadlines.

The role would suit a paralegal or legal professional with previous practical experience in data protection and privacy who is comfortable managing sensitive information, competing deadlines and multiple stakeholders.

Key Responsibilities

• Assist with Data Subject Access Requests (DSARs) and other data subject rights requests, including the review and redaction of information.

• Support the management of external suppliers assisting with high-volume DSAR reviews and redactions.

• Administer and support the end-to-end Rights Requests process, ensuring relevant deadlines are met.

• Assist with the management of reported personal data breach incidents, including fact-finding and internal reporting.

• Support the privacy team with identifying appropriate mitigations and lessons learned following data incidents.

• Act as a point of coordination between the privacy team and relevant internal and external stakeholders.

• Support the day-to-day administration of the Office of the DPO, including management of the team's inbox and ensuring queries receive timely responses.

• Maintain and help improve privacy processes and compliance monitoring.

• Prepare periodic and ad hoc reports for the privacy team.

About You

We are looking for candidates who can demonstrate:

• Previous professional experience in data protection, privacy or information governance.

• Practical experience with DSARs and/or other data subject rights requests.

• A good working knowledge of UK GDPR and wider data protection requirements.

• Experience reviewing and redacting sensitive or confidential information.

• Strong organisational skills and the ability to manage statutory and internal deadlines.

• Excellent attention to detail and sound judgement when handling sensitive information.

• Strong written and verbal communication skills.

• Confidence working with stakeholders across different business functions.

Experience supporting personal data breach investigations, a DPO/privacy function, high-volume DSARs or external review providers would be particularly advantageous.

About Accuflex

Accuflex provides flexible legal professionals to leading organisations and law firms across the UK. This opportunity is offered on a temporary basis through Accuflex.

Candidates must have the right to work in the UK and be available to commence the assignment at the beginning of October 2026.

Qualifying Work Experience (QWE)

Please note that experience gathered under this role will not be counted as QWE. If you are interested in QWE please make a separate application for Trainee Solicitor opportunities.