Data Protection Specialist in Houghton Regis

Location: Dunstable, (LU5 5XE) hybrid working (3 days per week in the office)

Salary: £68,000 - £73,000 dependant on skills and experience + up to 20% bonus + up to 10% pension contributions + health + benefits

Reports To: Senior Legal Counsel – Data Privacy and Compliance

Looking to join a collaborative, supportive legal team where your expertise is trusted and your work genuinely matters? Whitbread is a FTSE 100 company, the UK’s largest hospitality business, and home to one of the country’s most recognisable brands, Premier Inn. We have heritage that stretches back over 275 years. We combine scale and stability with a strong focus on doing the right thing for our guests and our people.

This is a key role in ensuring Whitbread meets its data protection obligations. You will support the development, implementation, and continuous improvement of data protection practices across the business, helping to embed a strong culture of privacy and compliance.

About the role:

• The primary focus of the role will be to manage and take ownership of the organisation’s day-to-day data protection compliance, whilst providing additional support on the wider strategy, governance, and AI related matters.
• You’ll work closely with colleagues across Legal, Technology, Digital, HR and the wider business, acting as a key data protection point of contact.

Flexible Working – Although this role is advertised as full time, we recognise that people do their best work in different ways. For the right person, we’re open to conversations about alternative working patterns.

What you’ll be doing:

• Support the implementation and maintenance of data protection policies, notices and templates.
• Maintain records of processing activities (ROPA) and ensure other privacy management tools are up to date.
• Coordinate DPIAs and other risk assessments from scoping through to completion.
• Respond to and manage data protection rights requests (e.g. DSARs) and complaints.
• Management of the data privacy inbox – handling queries and requests from employees and guests directly.
• Act as a key contact for data protection queries, supporting teams with guidance on best practice.
• Assist with personal data breaches, including investigation, risk assessment, and reporting.
• Initial review of supplier due diligence and data processing agreements, identifying gaps and potential risks.
• Identify privacy risks and elevate key issues to the Senior Legal Counsel and external UK DPO, when required.
• Provide support to data protection teams in Ireland and Germany.
• Coordinate and progress the work of the Data Champions Network.
• Contribute to ongoing improvement in data privacy processes and standards.

What we’re looking for:

• At least 2 years data protection experience (or be a qualified lawyer NQ-2 PQE)
• Strong experience in UK data protection law requirements
• Excellent organisational and management skills
• Experience working with consumer and/or employee personal data
• Strong communication skills with the ability to write clear, accurate and practical advice
• Confidence working with senior stakeholders in a complex organisation
• A pragmatic, solutions focused approach

Private practice or in‑house backgrounds are welcome.

What kind of person thrives here?

• Approachable, positive, and collaborative
• Comfortable taking ownership, while working closely with others
• Excellent communicator with a strong customer service focus
• Organised and strong attention to detail
• Motivated by improving processes and making a real difference

Why Whitbread:

At Whitbread, people matter. You’ll be joining a collegiate, pragmatic legal team that works closely with the business, values good judgement over bureaucracy, and gives genuine autonomy. We’re proud to be a Top Employer for 14 consecutive years, a top apprenticeship employer, #10 in the Stonewall Workplace Equality Index, and a Top 25 Exemplary Employer in the Investing in Ethnicity Parliamentary Matrix.