Health Data Protection and Data Licensing Consultant

Intelance; Greater London; Hybrid; GBP 83,000 - 111,000; Part time

Job summary

Intelance is seeking a senior data protection advisor to perform technology due diligence for buyers, sellers and investors in data and AI companies. You will assess data controllers/ processors, contracts, data deletion, and cross-border transfers, with a focus on health data and HIPAA readiness.

Remote within the UK with occasional London meetings. Experience of data rights, AI data usage, and related due diligence is highly valued.

Qualifications

• Minimum five years advising on data protection in health, pharma or life sciences.
• Strong working knowledge of UK GDPR, EU GDPR and international data transfers; HIPAA knowledge is a plus.
• Experience reviewing data processing agreements and data licenses.
• A recognised qualification such as CIPP/E or the BCS Practitioner Certificate, or legal practice in data protection.
• Clear, plain writing that stakeholders can follow.
• Experience of AI and data rights, or due diligence work is a strong plus.

Responsibilities

• Confirm data controllers and processors for each data type and check processing agreements.
• Review client contracts to see if data may be used to improve AI workflows, test suites or models.
• Check data deletion at contract end and whether deletion is possible where data has shaped models or tests.
• Review licences for real-world data from third parties and what happens if the company changes owner.
• Check data transfers outside the UK, including use of outside AI providers.
• Check HIPAA readiness where US health data is involved.
• Rate findings by impact on deal and write clear, practical fixes.

Skills

Data protection experience

UK GDPR knowledge

HIPAA knowledge a plus

Clear writing

Due diligence exposure

Education

CIPP/E or BCS Practitioner Certificate or data protection legal practice

Job description

About Intelance

Intelance is an independent technology, AI and cyber assurance firm based in the UK. We help organisations check, govern and improve their technology through enterprise architecture, AI governance, cyber assurance and data governance work. We are building a small panel of senior associates to deliver technology and AI due diligence on company sales and investments.

The role

You will check whether a company has the legal right to use the health data its business depends on, as part of technology due diligence for clients who are selling, buying or investing in data and AI companies. Buyers in life sciences want to know that client data is handled lawfully, deleted when it should be, and not used for anything the contracts do not allow.

You report to an Intelance engagement partner and work with our technology due diligence lead, who brings your findings into the final report.

What you will do

• Confirm who is the controller and who is the processor for each type of data, and check the data processing agreements in place.

• Review client contracts to see whether client data may be used to improve AI workflows, test suites or models.

• Check how data is deleted when contracts end, and whether that is possible where data has shaped models or tests.

• Review licences for real world data from third party providers, and what happens to them if the company changes owner.

• Check data transfers outside the UK, including any use of outside AI providers.

• Check HIPAA readiness where US health data is involved.

• Rate each finding by how it could affect the deal, and write clear, practical fixes.

What you will bring

• At least five years advising on data protection in health, pharmaceutical or life sciences settings.

• Strong working knowledge of UK GDPR, EU GDPR and international data transfers. HIPAA knowledge is a strong plus.

• Experience reviewing data processing agreements and data licences.

• A recognised qualification such as CIPP/E or the BCS Practitioner Certificate, or legal practice in data protection.

• Clear, plain writing that founders, buyers and lawyers can follow.

• Experience of AI and data rights, or of due diligence work, is a strong plus.

How the work is set up

• Remote within the UK, with occasional meetings in London.

• Around 3 to 5 days between late November 2026 and the end of January 2027, with further engagements as the practice grows.

• Freelance, or through your own limited company, at £450 to £600 a day depending on experience. Reasonable travel costs for client meetings are covered.

• A panel agreement, NDA and statement of work are signed before any client details are shared.

• You work from an Intelance mailbox and use our evidence log and report templates, so every report meets the same standard.