Associate

Department/Division : TMT UK Privacy, Cyber and Tech Regulatory Group PQE : 4 - 6 Duration : Perm Location : London Reports to : Partner Type of Role : Office Based/Hybrid Reference Number : 9595 The Role / Team We have an opportunity for an experienced Privacy, Cyber and Digital/Tech Regulatory Associate to join our highly ranked Privacy and Cyber Security group in London. Dentons has one of the top-ranked and longest-standing dedicated Privacy and Cyber teams of any firm in the city. The teams are the 'go-to' team for some of the world's largest brands, regularly act for some of the world's biggest technology firms and have managed some of the highest profile cyber incidents in recent times. Candidates will have 4 to 6 years' PQE but we will consider applications from candidates outside this range with suitable skills and knowledge. The 3-partner strong group, led by Simon Elliott, has a collaborative teamwork ethic, a focus on technical subject matter expertise, a necessity to provide commercial and actionable advice and a well-regarded client management approach. We regularly support on global mandates, including coordinating sophisticated advice from across multiple regions, so experience in managing international instructions would be preferable. It is essential that candidates can collaborate across functions, are committed to developing personally and professionally and show a genuine interest in data, cyber and digital regulatory issues and developments. A commitment to delivering a high-quality focused product to our clients is essential, as is taking initiative in identifying and developing their own client relationships. Skills & Personal Attributes Leading teams to deliver material advisory projects for multinational companies on data, cyber or digital regulatory (e.g. AI, online safety) laws, including privacy compliance frameworks, cyber readiness projects, online safety assessments, and international transfer projects (including Binding Corporate Rules applications). Drafting, reviewing and amending a range of Privacy / Data Protection documentation, policies and procedures. Advising clients on a variety of Privacy and Data Protection matters, including on the data protection and cyber implications of the deployment of innovative AI technology. Advising on developing areas of digital and data regulation, including online safety, Data Act, and AI regulation. Acting as a senior member of the core team in providing urgent support on major, international cyber incidents including coordinating international breach notification requirements and regulatory engagement. Assisting regulatory enforcement investigations. Negotiating data privacy related contractual documents. Leading international projects that involve preparing key advice and coordinating local lawyers. Contribute to BD and marketing activities. Having an understanding and maintaining an up-to-date working knowledge of DP, cyber and digital regulatory laws outside the UK and EU. Coach and mentor junior members of the team. Provide thought leadership and raise the profile of the firm externally. Required experience, skills, and attributes Having obtained some experience in all, or some, of the following is highly desirable: Advising clients on a range of Privacy / Data Protection documentation and legal matters. Working within a top tier UK or international firm. High academic achievement. Managing global privacy compliance frameworks covering multiple privacy laws (e.g. GDPR, CCPA, CPPA, LGPD, etc.). High-profile or large-scale cyber incident response. Managing responses to complex regulatory investigations and experience in regulatory enforcement proceedings. AI risk advisory and governance matters. Online safety / trust & safety advisory projects. Advisory projects assessing emerging digital regulations, including Data Act, NIS2, Digital Services Act, Online Safety Act etc. Large scale data transfers projects, including Binding Corporate Rules. AdTech, consumer data exploitation and strategy. DSAR and Individual Rights. Complex data protection impact assessments on emerging technologies. Data protection compliance gaps assessments and/or audits. Data protection compliance in operation of loyalty programmes and other direct marketing activities. Negotiation of data protection provisions in large-scale technology or outsourcing agreements. Firm Profile Across more than 80 countries, Dentons helps you grow, protect, operate and finance your organisation by providing uniquely global and deeply local legal solutions. Polycentric, purpose-driven and committed to inclusion, diversity, equity and sustainability, we focus on what matters most to you. Inclusion and Diversity We are committed to building an inclusive culture here at Dentons where our people can thrive, regardless of their background or circumstance. As well as being the right thing to do, it makes good business sense too. A richness of backgrounds, experiences and perspectives helps us best serve our clients and the communities in which we operate. You can find out more about inclusion and diversity at Dentons here: Inclusion and Diversity . Equal Opportunities Dentons is committed to providing equal opportunities for all. We welcome applications from everyone including of any age, ethnicity, religion, sex, sexual orientation, gender identity, nationality, neurodiversity, disability, or with parental or caring responsibilities. We also offer flexible working hours. During the application process, all applicants have the opportunity to tell us about any adjustments or support they require so they are able to perform at their best. Any information you share with us during the application process is treated in confidence. If you have any questions about this or the role criteria, please email . NO AGENCIES PLEASE If you are interested in applying for this position, we welcome direct applications via our careers page, but if you have any questions beforehand, please email . Enquiries only please – applications will not be accepted via email. Please note that we will not accept unsolicited CVs sent to the business, nor will we accept any associated terms of business.