Associate/Senior or Principal Associate - Contentious Data Protection & Information Governance (0551)
We are seeking to recruit a data protection and information law solicitor, or an experienced data protection practitioner (non-qualified candidates welcome) to join our contentious data protection and information governance team!
The role
The person
We welcome applications from both legal and non-legal professionals with relevant experience. This includes qualified solicitors with between 1–8 years' post-qualification experience, as well as non-qualified candidates such as in-house data protection practitioners, legal executives, specialist advisors, or senior paralegals who have strong, hands-on experience handling Data Subject Access Requests (DSARs), Freedom of Information Act (FOIA) requests, or broader GDPR compliance work.
The successful candidate will bring solid, practical experience advising on matters relating to the GDPR and the Data Protection Act. You will be confident managing DSARs and responding to data breaches, demonstrating a pragmatic and solutions-focused approach. Strong communication and organisational skills are essential, alongside the ability to manage competing priorities effectively. We are looking for someone who is collaborative in their working style, proactive in their approach, and motivated to continue learning and developing in a fast-evolving area of law.
While not essential, additional experience in certain areas would be advantageous. This includes familiarity with FOIA requests, involvement in data breach response—particularly in the context of cyber incidents—and experience supporting contentious data matters. Exposure to ICO investigations, regulatory enquiries, or First-tier Tribunal proceedings would also be beneficial.
The activities
- Manage day-to-day DSAR queries, including strategy, proportionality, exemptions, and risk (with paralegal support on document review)
- Assist with ICO investigations (information gathering, drafting responses, managing correspondence)
- Support matters before the First-tier TribunalAdvise on third-party data requests (e.g. police, regulators)
- Guide clients on handling personal data in internal processes (e.g. grievances, disciplinaries)
- Support pre-action correspondence and litigation arising from data breaches
- Advise on responses to data subject rights requests
Please ensure you read the job description below for full details
We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.
The benefits
As you'd expect, we offer a competitive salary and a wide range of benefits. Click here to find out more about our core benefit offering.
Pre employment screening
If we offer you a role, we will conduct comprehensive pre-employment screening. This screening will include, but is not limited to, a basic DBS, verification of your right to work, a three year employment history and a self-declaration to assess your character and suitability for the role. Full details of our pre-screening employment process are available upon request.
The firm
Mills & Reeve is centred on achieving more for clients, their businesses and the wider communities we serve. Our clients and their industries benefit from our knowledge and learning, and receive consistent experiences with no surprises. We tell them what they need to know when they need to know it.
We build personal relationships, with advice individually tailored to individual need. And if clients need things we don't offer, we draw on our network to give recommendations. Our 1,450 plus people and over 850 lawyers share one vision – achieving more for clients.
By joining Mills & Reeve, you'll have the chance to build your skills and experience within a firm that's not only ranked in the top 50 UK law firms, but also one that truly values their people. We're also ranked in The Sunday Times Best Places to Work list, and have been awarded Platinum Investors in People. Our mantra is “Achieve more. Together.”, which we feel embodies our purpose and is more than just a catchphrase!
Our values are the principles that help us fulfil our purpose. Our people shaped them and live them every day.
• We're ambitious - We aim high, we embrace new ideas and we're passionate about our work
• We're open - We communicate openly and honestly to build trust, and we do what's right
• We care - We're committed to each other, our clients, our communities and the planet
• We collaborate - We're easy to work with, we offer help willingly and we get things done – together
And finally
Everyone at Mills & Reeve brings a unique perspective and ideas to the team and we do everything we can to help each person to thrive. We're committed to providing an inclusive and supportive working environment, are happy to consider flexible working arrangements, and want to achieve the right balance for both our people and the firm. We encourage everyone to ask if they feel they need any workplace adjustments, and will do our best to support with these.
To find out more about our diversity and inclusion work, visit our website.
- Vacancy Title:Associate/Senior or Principal Associate - Contentious Data Protection & Information Governance
- Office:Birmingham, Cambridge, Manchester, Norwich, Oxford
- Contract Type:Fixed Term
Vacancy Alerts
People perspectives
Find out more about some of the people that work at Mills & Reeve.



