Data Protection Officer

China-Britain Business Council; Nuneaton; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

33 days holidays including bank

Private medical insurance – single

Annual health test kit

Employee assistance programme

Colleague discount

Cycle to work

Job summary

Holland & Barrett is seeking a Data Protection Officer to lead our privacy and responsible use of data and AI across the group. The role reports to senior leadership with visibility across customer and colleague data, digital products, marketing, technology, suppliers and business change.

This hybrid role requires presence at Holland & Barrett offices in Nuneaton or London for at least 3 days a week. You'll own and evolve the data protection programme, advise the board on privacy risk, oversee

Qualifications

• Significant experience in a senior privacy role, ideally as a DPO or deputy DPO.
• Deep knowledge of UK and EU data protection law with practical governance.
• Ability to translate complex rules into business-ready decisions.
• Proven track record of building privacy governance in practice.

Responsibilities

• Act as Holland & Barrett's independent Data Protection Officer and senior privacy expert.
• Own and evolve the Group privacy strategy, governance, policies and assurance programme.
• Give clear advice and challenge to the Board, Executive Committee and senior leaders.
• Oversee DPIAs, data subject rights, breaches, complaints, international transfers, retention and third-party privacy risk.
• Lead engagement with supervisory authorities and support complex regulatory matters and investigations.
• Build privacy by design into digital, data, technology, marketing, HR and transformation activity.
• Develop the Personal Data and AI Centre of Excellence, including practical standards, guidance and training.
• Shape proportionate governance for AI, automated decision-making and emerging uses of personal data.
• Work closely with Cyber Security, Legal, Compliance, Data, Technology, Product and Procurement.
• Lead and develop the Data Protection team.

Skills

Senior privacy experience

DPO experience

UK & EU data protection law

Privacy governance

AI governance knowledge

Job description

We offer hybrid working, with an expectation that you'll be present at our Holland & Barrett office in Nuneaton or London for a minimum of 3 days per week.

Holland & Barrett is doing more with data, digital and AI. We need someone who can help us move forward without losing sight of privacy, trust and good judgement.

We're looking for a Data Protection Officer to lead Holland & Barrett's approach to privacy and the responsible use of data and AI.

This is an independent, Group-wide role with direct access to senior leadership and influence across customer and colleague data, digital products, marketing, technology, suppliers and business change.

You'll own and evolve our data protection programme across H&B's markets, giving the business clear advice and challenge on privacy risk while helping teams find practical ways to use data responsibly.

And there's something to build.

You'll develop our Personal Data and AI Centre of Excellence, bringing privacy and emerging AI governance together so that innovation can move at pace - with the right safeguards around it.

What you'll be doing

• Act as H&B's independent Data Protection Officer and senior privacy expert.
• Own and evolve our Group privacy strategy, governance, policies and assurance programme.
• Give clear advice and challenge to the Board, Executive Committee and senior leaders.
• Oversee DPIAs, data subject rights, breaches, complaints, international transfers, retention and third-party privacy risk.
• Lead engagement with supervisory authorities and support complex regulatory matters and investigations.
• Build privacy by design into digital, data, technology, marketing, HR and transformation activity.
• Develop the Personal Data and AI Centre of Excellence, including practical standards, guidance and training.
• Shape proportionate governance for AI, automated decision-making and emerging uses of personal data.
• Work particularly closely with Cyber Security, alongside Legal, Compliance, Data, Technology, Product and Procurement.
• Lead and develop the Data Protection team.

What you'll bring

• You'll have significant experience in a senior privacy role - ideally as a DPO, Deputy DPO or senior privacy lead in a complex organisation.
• You'll know UK and EU data protection law in depth, but you'll also know that quoting legislation isn't the same as helping a business make a good decision.
• You'll be able to take something technically or legally complicated and make it clear: what's the risk, what needs to change and what can we reasonably do next?
• You'll be confident challenging senior leaders independently, handling complex incidents and regulatory matters, and building privacy governance that works in practice.
• Experience with AI governance or automated decision-making would be useful, but you don't need to arrive as an AI specialist. What matters is having enough digital and data fluency to understand the use case, ask good questions and recognise where privacy risk sits.

Holidays

• 33 days, including bank holidays
• 24/7 Virtual GP access
• Private medical insurance – single cover
• Annual free at-home health testing kit (after 6 months' service)
• Access to our Employee Assistance Programme and a network of Mental Health First Aiders whenever you need support

Financial Wellbeing

• Workplace pension with 5% employer contribution
• Life assurance (2x salary, after 6 months' service)

Reward

• Annual Bonus (subject to company and individual performance) up to 20%
• £50 Colleague product allowance on Holland & Barrett products (after 6 months' service)
• Access to cashback and discounts from a wide range of retailers
• 25% colleague discount, available in store and online
• Free Wellhub membership, with discounted access to gyms, studios and premium wellbeing apps
• Cycle to Work scheme

This could suit someone who wants the independence of a true DPO role, but also wants to be close to where the business is changing.

You’ll have the opportunity to strengthen an established privacy programme, shape how H&B approaches AI governance and help teams use data and technology responsibly without creating barriers for the sake of them.

AboutHolland & Barrett

Holland & Barrett exists to make health and wellness a way of life for everyone, adding quality years to life.

We've been earning people's trust for more than 150 years. As our use of data, digital products and technology continues to evolve, protecting that trust matters just as much as ever.

Inclusion & accessibility statement

Every journey is different, and we want people with different backgrounds, experiences and perspectives to feel welcome at Holland & Barrett.

If you need an adjustment or additional support at any stage of the recruitment process, please let us know.