About the role
💬 Accurx is solving healthcare productivity for the NHS. For decades, the NHS has struggled with fragmented systems that make simple tasks feel impossible. At Accurx, we’re changing that by building a single, system-wide platform that helps every patient get gold-standard, efficient, and joined-up care. What started as a way for GPs to text a patient has now evolved into an all-in-one digital toolkit used by 98% of GP practices. Our platform now powers Total Triage to manage patient demand, and Self-Book , which lets patients schedule their own appointments in seconds. We’ve automated routine care with Patient Questionnaires for long-term conditions, while Accumail finally allows staff-to-staff communication to happen instantly across different care settings. We’re now pushing the boundaries of the consultation itself with Accurx Scribe , our AI-powered note-taker that drafts medical notes in real-time. We’re not just shipping features. We’re giving clinicians their time back and ensuring every patient journey is as smooth as it should be. Challenges you’ll solve... Own our privacy frameworks end-to-end: Maintain and continuously improve the ROPA, data mapping and third-party risk programme so they're accurate, scalable and understood by the people who use them. Lead the DPIA process: Run end-to-end assessments for new products, features and integrations, ensuring higher-risk processing gets proper scrutiny and a consistent standard of output. Be the internal authority on NHS IG: Lead our annual DSPT submission and own day-to-day NHS Information Governance compliance, building deep expertise the business can rely on. Act as the primary advisory point: Handle the majority of data protection and IG queries from across the business, giving practical, well-reasoned guidance and knowing when to escalate. Own supplier due diligence: Lead vendor privacy reviews, including DPA reviews, TIAs, DPIAs for high-risk suppliers and security questionnaire reviews. Handle individual rights requests: Lead on complex or sensitive DSRs, ensuring responses are accurate, timely and well-considered. Build privacy culture: Design and deliver training and awareness activities that make privacy feel practical and relevant, not a blocker. You should apply if... You have 4+ years in privacy or data protection, ideally with exposure to health-tech, NHS IG or high-growth technology environments You're comfortable driving work forward independently - you make confident calls, own your outputs and know when to escalate You have a strong working knowledge of UK GDPR, DPA 2018, and PECR applied to SaaS products You've built or maintained privacy frameworks before (ROPA, DPIA programmes, third-party risk management) and understand what makes them work in practice You see yourself as an enabler, you enjoy working with product and engineering teams and help them build compliance rather than slowing them down You're a clear, practical communicator who can translate legal
