Health Data Protection and Data Licensing Consultant

About Intelance

Intelance is an independent technology, AI and cyber assurance firm based in the UK. We help organisations check, govern and improve their technology through enterprise architecture, AI governance, cyber assurance and data governance work. We are building a small panel of senior associates to deliver technology and AI due diligence on company sales and investments.

The role

You will check whether a company has the legal right to use the health data its business depends on, as part of technology due diligence for clients who are selling, buying or investing in data and AI companies. Buyers in life sciences want to know that client data is handled lawfully, deleted when it should be, and not used for anything the contracts do not allow.

You report to an Intelance engagement partner and work with our technology due diligence lead, who brings your findings into the final report.

What you will do

• Confirm who is the controller and who is the processor for each type of data, and check the data processing agreements in place.

• Review client contracts to see whether client data may be used to improve AI workflows, test suites or models.

• Check how data is deleted when contracts end, and whether that is possible where data has shaped models or tests.

• Review licences for real world data from third party providers, and what happens to them if the company changes owner.

• Check data transfers outside the UK, including any use of outside AI providers.

• Check HIPAA readiness where US health data is involved.

• Rate each finding by how it could affect the deal, and write clear, practical fixes.

What you will bring

• At least five years advising on data protection in health, pharmaceutical or life sciences settings.

• Strong working knowledge of UK GDPR, EU GDPR and international data transfers. HIPAA knowledge is a strong plus.

• Experience reviewing data processing agreements and data licences.

• A recognised qualification such as CIPP/E or the BCS Practitioner Certificate, or legal practice in data protection.

• Clear, plain writing that founders, buyers and lawyers can follow.

• Experience of AI and data rights, or of due diligence work, is a strong plus.

How the work is set up

• Remote within the UK, with occasional meetings in London.

• Around 3 to 5 days between late November 2026 and the end of January 2027, with further engagements as the practice grows.

• Freelance, or through your own limited company, at £450 to £600 a day depending on experience. Reasonable travel costs for client meetings are covered.

• A panel agreement, NDA and statement of work are signed before any client details are shared.

• You work from an Intelance mailbox and use our evidence log and report templates, so every report meets the same standard.

How to apply

Send your CV and answer the short screening questions. They take about two minutes. We aim to reply to every shortlisted candidate within five working days.