Group Data Protection Officer, Shawbrook
Matthew holds the CIPP/E, CIPM and a Masters in Information Rights Law and Practice. He also has the BCS certificate in Data Protection as well as IAPP Fellow of Information Privacy.
He is the Group Data Protection Officer for Shawbrook(includes Shawbrook Bank, The Mortgage Lender, Bluestone Mortgages Limited and JBR), reporting to the General Counsel, forming part of the legal leadership team and leading the data protection function. He operates under the Seniors Managers Certification Regime(SMCR) as a Material Risk Taker setting the strategy for all aspects of data protection compliance for the group.
Before working at Shawbrook he led the Data Protection function for Metro Bank providing strategic leadership to a team of data protection and records management professionals ensuring the bank complied with the UK GDPR and other associated legislation. Part of his role saw him sit on the senior leadership team for the bank with a dotted line into both the Chief Information Officer and the Chief Risk Officer.
Prior to working in financial services he has worked as a Data Protection Officer for large scale organisations across numerous sectors such as media, technology, construction, health and safety and local government. In these roles he has provided expert guidance across 96 jurisdictions, driving robust compliance by implementing strong controls to reduce privacy risk.
Before his time as an in house Data Protection Officer he led a team of Auditors at the Information Commissioner’s Office (ICO) within the Assurance department helping organisations improve their data protection, privacy and information security(assessing to ISO27001 standard) practices to reduce risk. He provided expert advice to local government, criminal justice and health organisations through on-site audits which were followed up with listed recommendations. Matthew also worked as part of a network of trainers delivering internal training to all levels within ICO.
In addition to his core work in Financial Services he is also a board member of the Data Protection Network(https://www.dpnetwork.org.uk), sits on the Alumni Advisory Board for Brunel University as well as the board of trustees for Dyslexia Sparks.
He is also a regular speaker at numerous external events on Data Protection and Privacy to help assist other organisations with compliance and share best practice.

My Sessions
When Trust Breaks Down: The Governance Lessons of the Capita Breach
Cyber GRC Stage
Thursday 13th November 2025, 16:05pm - 16:50pm

No comments yet