Data Privacy Officer at McDonald

Job Description

At McDonald’s UK & Ireland, we serve millions of customers every day and protecting their data is essential to maintaining trust in our brand. We’re looking for an experienced Data Privacy Officer (DPO) to lead and continue the development of our privacy programme during a 12 month maternity cover. This is a high‑impact role at the heart of one of the UK & Ireland’s most recognised and fast‑moving businesses.

Reporting directly to the VP, General Counsel & Company Secretary, you’ll act as the senior authority on data protection across the market. You’ll partner closely with the UK&I Leadership Team, the Legal function, and stakeholders across all departments to embed a strong privacy‑by‑design culture and ensure compliance with UK, EU, and global data protection laws.

What You’ll Be Doing:

• Managing and further developing the UK&I data privacy strategy
• Leading the UK privacy function and acting as the first point of contact for all privacy related queries
• Preparing, reviewing, and delivering policies and procedures to support data privacy governance
• Conducting Legitimate Interest Assessments (LIAs), Data Protection Impact Assessments (DPIAs), and maintaining Article 30 processing records
• Supporting teams across the business to embed Privacy by Design into all initiatives
• Providing oversight of all data privacy activities carried out by departments
• Monitoring compliance with Data Privacy Law and managing internal data protection activities
• Supporting the business in their use of AI and maintaining robust AI policies and procedures
• Performing annual audits of privacy practices, including Data Processing Agreements
• Ensuring remediation actions are completed following audits
• Delivering data privacy training across the organisation
• Managing regulatory, customer, and employee data‑related enquiries
• Overseeing the response to any potential data incidents
• Collaborating with stakeholders at all levels to ensure privacy requirements are met
• Providing regular updates to Global functions, senior management, and other key stakeholders

Qualifications

What You’ll Need:

• UK qualified solicitor with a minimum of 10 years’ PQE and deep expertise in data privacy
• IAPP certification and up‑to‑date privacy qualifications
• Experience using privacy compliance tools such as OneTrust, with the ability to learn new systems quickly
• Strong knowledge of the UK Data Protection Act, UK GDPR, EU GDPR, PECR, the Children’s Code, EU AI Act and the upcoming Data Use and Access Act and be able to apply these appropriately within a large, consumer‑facing organisation
• Extensive experience advising businesses on data privacy compliance
• Excellent judgement, with the ability to interpret complex issues and support strategic decision making
• Clear, concise written and verbal communication skills, with the ability to explain concepts to stakeholders at all levels
• Ability to work independently in a fast‑paced, complex environment
• Highly motivated, proactive, and solutions focused
• Strong problem solving skills and a commitment to continuous learning