Feedback form

Thank you, we have a career assistant 'Aisha' which can help you consider roles that value your experience.

No worries — lots of people start here. Aisha can help you find the training you need and get you job-ready.

“Thanks for letting us know. You can continue exploring without training support.”

“Don’t let cost stop you. There is support available to help with training and financial resilience. Please visit: www.lutonsupportingyou.co.uk'

“Looks like that provider isn’t nearby. Have you considered distance-learning opportunities instead.”

“We respect that you may have other priorities. Please do come back if your situation changes.”

Thank you, we have a career assistant 'Aisha' which can help you consider roles that value your experience

No worries — lots of people start here. Aisha can help you find the training you need and get you job-ready

“Thanks for letting us know. You can continue exploring the page without support.”

“It’s okay to ask for help. We will redirect you to a page that can support you"

“Understood. You can continue exploring opportunities at your own pace.”

“Salary is an important factor. Here are alternative jobs with different pay ranges.”

“You can get support with confidence, CV writing and job readiness through Seacole Academy. You will be redirected to their page for support."

“No problem — here are other opportunities that might suit you better.”

No worries — lots of people start here. Aisha can help you find the skills you need and get you job-ready

“Not every opportunity is the right fit. Here are other options you may prefer.”

“Salary is an important factor. Here are alternative opportunities with different pay ranges.”

“We respect that you may have other priorities. Please do come back if your situation changes.”

Apply form

Data Protection Specialist

ocation:       Dunstable, (LU5 5XE) hybrid working (3 days per week in the office)

Salary:           £68,000 – £73,000 dependant on skills and experience + up to 20% bonus + up to 10% pension contributions + health + bens

Function:       Legal

Reports To:   Senior Legal Counsel – Data Privacy and Compliance

 

Looking to join a collaborative, supportive legal team where your expertise is trusted and your work genuinely matters?

Whitbread is a FTSE 100 company, the UK’s largest hospitality business, and home to one of the country’s most recognisable brands, Premier Inn. We have heritage that stretches back over 275 years. We combine scale and stability with a strong focus on doing the right thing for our guests and our people.

We’re now looking for a Data Protection Specialist to join our Legal team. This is a key role in ensuring Whitbread meets its data protection obligations. You will support the development, implementation, and continuous improvement of data protection practices across the business, helping to embed a strong culture of privacy and compliance.

About the role

The primary focus of the role will be to manage and take ownership of the organisation’s day-to-day data protection compliance, whilst providing additional support on the wider strategy, governance, and AI related matters.

The role would suit a data protection specialist or junior qualified lawyer looking to build on their data protection experience. Note that for a qualified lawyer the job title would be amended to Legal Counsel – Data Privacy.

You’ll work closely with colleagues across Legal, Technology, Digital, HR and the wider business, acting as a key data protection point of contact.

Flexible Working – Although this role is advertised as full time, we recognise that people do their best work in different ways. For the right person, we’re open to conversations about alternative working patterns.

What you’ll be doing

Data Protection (UK led, with international exposure)

  • Support the implementation and maintenance of data protection policies, notices and templates.
  • Maintain records of processing activities (ROPA) and ensure other privacy management tools are up to date.
  • Coordinate DPIAs and other risk assessments from scoping through to completion.
  • Respond to and manage data protection rights requests (e.g. DSARs) and complaints.
  • Management of the data privacy inbox – handling queries and requests from employees and guests directly.
  • Act as a key contact for data protection queries, supporting teams with guidance on best practice.
  • Provide data protection advice on CRM, digital marketing, cookies and consent.
  • Assist with personal data breaches, including investigation, risk assessment, and reporting.
  • Initial review of supplier due diligence and data processing agreements, identifying gaps and potential risks.
  • Identify privacy risks and escalate key issues to the Senior Legal Counsel and external UK DPO, when required.
  • Provide support to data protection teams in Ireland and Germany.
  • Coordinate and progress the work of the Data Champions Network.
  • Contribute to ongoing improvement in data privacy processes and standards.

Our partners