Head Of Data Protection & DPO
Core
Steward AI into the NHS safely and responsibly by building data protection frameworks, setting guardrails for product teams, and embedding privacy by design in AI/ML products handling sensitive patient data.
Role type
Senior in-house Data Protection Officer (DPO) and Head of Data Protection
Builds
Governance templates, pre-approved data flows, privacy notices, and a scalable privacy function for a healthcare AI platform
Domain
Healthcare / AI & Machine Learning / UK Data Protection
Deliverable
production ML models
Required skills
UK GDPR expertise, AI/ML data handling, privacy by design, team leadership, regulatory engagement, health system knowledge (NHS)
Preferred skills
Experience with Caldicott Principles, DSPT, DTAC, Data (Use and Access) Act 2025
Technologies
UK GDPR, Data Protection Act 2018, Data (Use and Access) Act 2025, common law duty of confidentiality, ICO AI guidance
Responsibilities
Set positions on building, deploying, and monitoring AI products; define guardrails for product teams; embed privacy in product design; hold statutory DPO role (DPIAs, audits, breach reporting); run corporate privacy obligations and due diligence; lead and grow the privacy team
Seniority
Senior, hands-on IC with strategic leadership
