Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead data privacy initiatives and ensure compliance with UK regulations in a dynamic digital health environment.
- Company: Montu UK, a pioneering digital health company focused on cannabis-based medicines.
- Benefits: Competitive salary, supportive culture, and opportunities for professional growth.
- Why this job: Make a real impact on patient care while shaping privacy practices in innovative healthcare.
- Qualifications: UK-qualified solicitor/barrister with 3-6 years of experience in privacy/data protection.
- Other info: Join a mission-driven team dedicated to transforming lives through safe and effective treatments.
The predicted salary is between 36000 - 60000 ÂŁ per year.
Montu UK is hiring a Data Privacy Counsel to lead and elevate our privacy, data protection and information governance across the UK business. You’ll embed robust UK GDPR / DPA 2018 / PECR compliance into our telehealth clinic (Alternaleaf) and online pharmacy, enabling innovation while protecting patient trust.
This is a hands‑on, high‑impact role at the heart of a regulated digital health scale‑up - partnering with Clinical, Pharmacy, Product/Engineering, Governance and Operations to make privacy practical, scalable and “baked in” from day one.
Key responsibilities- Compliance & governance
- Own and improve Montu UK’s privacy compliance framework (UK GDPR, DPA 2018, PECR and healthcare information requirements).
- Maintain core privacy artefacts (RoPA, policies, DPIA framework, retention, cookie/marketing practices) and produce clear internal reporting.
- Act as the UK privacy SME across the business, translating regulation into workable outcomes.
- Advisory & stakeholder partnership
- Advise senior leaders and cross‑functional teams (Clinical, Pharmacy, Governance, Product/Engineering, Customer Support) on privacy‑by‑design and data ethics.
- Support new and existing products/workflows (telehealth, patient portal, remote prescribing, pharmacy systems) through DPIAs/LIAs, risk assessments and pragmatic controls.
- Guide on controller/processor roles, vendor due diligence, cybersecurity expectations and international transfers (including TIAs as needed).
- Contracting & regulator interface
- Draft, review and negotiate DPAs, data‑sharing agreements and privacy/security schedules across commercial and vendor contracts.
- Serve as DPO for Montu UK group companies and act as primary contact for the ICO on UK processing activities.
- Enablement & culture
- Build a strong privacy culture through training, awareness and simple guidance that teams actually use.
- Help teams move fast safely - balancing compliance with patient access, innovation and commercial goals.
- UK‑qualified solicitor/barrister with c. 3–6 years PQE focused on privacy/data protection (in‑house or private practice).
- Strong working knowledge of UK GDPR, DPA 2018, PECR and handling special category health data in regulated contexts.
- Proven experience designing or running privacy compliance programmes (RoPA, DPIAs, policies, training, incident readiness).
- Confident drafting/negotiating DPAs, data‑sharing agreements and privacy/security provisions.
- Comfortable operating autonomously in a high‑growth, mission‑driven environment and influencing technical and non‑technical stakeholders.
- Digital health / telemedicine / online pharmacy experience (particularly specialist medicines/controlled drugs).
- Familiarity with NHS DSP Toolkit and UK information governance standards.
Montu UK is a leading digital health company specialising in cannabis‑based medicines (CBPM). We are committed to transforming lives by improving access to safe, effective treatments and offering an exceptional standard of care. Our dynamic and supportive work environment is the perfect place for you to grow professionally while making a meaningful impact on patients’ lives.
Data Privacy Counsel employer: Montu UK
Contact Detail:
Montu UK Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Data Privacy Counsel
✨Tip Number 1
Network like a pro! Reach out to folks in the digital health space, especially those working with privacy and data protection. Attend industry events or webinars to make connections that could lead to job opportunities.
✨Tip Number 2
Show off your expertise! Create a personal blog or LinkedIn posts discussing UK GDPR, DPA 2018, and your insights on privacy compliance. This not only showcases your knowledge but also gets you noticed by potential employers.
✨Tip Number 3
Prepare for interviews by brushing up on common questions related to privacy law and data protection. Think about how you can apply your experience to Montu's mission of balancing compliance with innovation.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in joining our team at Montu.
We think you need these skills to ace Data Privacy Counsel
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter for the Data Privacy Counsel role. Highlight your experience with UK GDPR, DPA 2018, and any relevant projects you've worked on that align with Montu's mission.
Showcase Your Skills: Don’t just list your qualifications; demonstrate how your skills can benefit Montu. Talk about your experience in drafting DPAs and your ability to work with cross-functional teams to embed privacy into their processes.
Be Clear and Concise: When writing your application, keep it straightforward. Use clear language and avoid jargon where possible. We want to see your personality shine through while still being professional!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you don’t miss out on any important updates from our team.
How to prepare for a job interview at Montu UK
✨Know Your Regulations
Make sure you brush up on UK GDPR, DPA 2018, and PECR before the interview. Being able to discuss these regulations confidently will show that you understand the legal landscape and can translate it into practical solutions for Montu UK.
✨Showcase Your Experience
Prepare specific examples from your past roles where you've successfully implemented privacy compliance programmes or handled sensitive data. This will help demonstrate your hands-on experience and how you can add value to their team.
✨Understand the Business
Familiarise yourself with Montu UK's mission and the services they provide, especially in digital health and telemedicine. Showing that you understand their business model will help you articulate how you can support their goals while ensuring compliance.
✨Ask Insightful Questions
Prepare thoughtful questions about their current privacy challenges or future projects. This not only shows your interest in the role but also gives you a chance to demonstrate your expertise in privacy and data protection.
