Head Of Data Protection & DPO

Overview

In this role you lead data protection at Accurx, shaping privacy strategy and governance for NHS-facing AI-enabled products. You will partner with Product, Legal and Engineering to embed privacy by design and set guardrails for scale, trust, and regulatory compliance. You’ll serve as the independent DPO, governing UK GDPR, DP Act, and related obligations while building a high-performing privacy function for a fast-paced health tech platform. This is a pivotal, impact-driven opportunity to enable responsible innovation in healthcare. You’ll work at the intersection of policy, product, and regulatory engagement to accelerate safe adoption of AI in the NHS.

Pay / Benefits

• salary 110k-140k
• equity options
• hybrid work arrangement
• office in Shoreditch
• hackathons and site visits to GP practices
• enhanced parental leave and wellbeing benefits

Responsibilities

• Steward AI into the NHS by defining how to build, deploy and monitor AI products at scale with accountable data practices
• Define guardrails to empower product teams to move fast while staying compliant and credible to NHS DPOs
• Embed privacy by design across product, design and engineering
• Create reusable governance patterns, data flows and privacy notices for healthcare use
• Hold the statutory DPO role with independence, coordinating with ICO, NHS customers and data subjects, including DPIAs and breach response
• Run corporate privacy functions, registrations, due diligence, and data handling across employees, patients and partners
• Build and scale a privacy team enabling fast, consistent privacy guidance for 200+ colleagues

Key requirements

• product-minded with experience shipping privacy-focused solutions
• strong UK GDPR and data protection expertise (data acts and confidentiality)
• experience building and leading privacy teams
• ability to represent the business to regulators and NHS partners
• familiarity with health sector data practices and NHS data governance principles
• comfort with regulatory guidance and evolving data ethics in AI

• clear communicator
• stakeholder management
• trust-building across functions
• UK GDPR
• Data Protection Act 2018
• Data (Use and Access) Act 2025

…