Operations
Seven roles a fitness creator release needs, from release owner to privacy lead
Seven unranked fitness creator roles cover release ownership, clinical evidence, advertising, safeguarding, accessibility, privacy and people controls.
A fitness creator release needs seven roles, from release owner to privacy lead. This unranked list, where roles may be combined, should be assigned by risk rather than an assumed agency chart. It was compiled on 5 September 2026 for an England operation.
A function was included only where a directly responsible UK or England source explains the control it supports. The list excludes salary data, staffing ratios and named suppliers.
It does not claim each function must be a separate employee. One person may cover several areas when competent, available and free of a conflict, but every release still needs one clear decision owner.
What to take away
- The seven roles are release owner, registered health reviewer, advertising and claims reviewer, safeguarding lead, accessibility reviewer, privacy lead and people and cover owner.
- Every release needs one clear decision owner, and silence cannot count as specialist approval.
- One person may cover several roles if competent, available and free of a conflict.
- Registration does not establish competence for every exercise or condition a reviewer checks.
- If the only specialist is absent, hold affected work rather than reassign their approval.
- The list was compiled for an England operation and excludes salary data and named suppliers.
1. Release owner (release manager)
This role holds the brief, version, approvals, publication record and archive. The release owner can return or stop work.
The NHS standard for creating health content recommends documented approval, version control, source records and planned review. It is a useful health-publishing model, not authority to use NHS branding or claim NHS endorsement.
Example: a caption published without a version log entry is returned to the release owner for correction.
Evidence to retain: owner name, version log, gate decisions, public URL and next review trigger.
2. Registered health reviewer (HCPC-registered clinician)
This reviewer checks professional scope, claim evidence, instructions, exclusions and referral language. For an HCPC-regulated profession, verify the individual through the HCPC register on the review date.
The HCPC standards of conduct, performance and ethics explain the professional framework, but registration does not establish competence for every exercise or condition. Keep the register result, declared expertise, conflicts, reviewed version and signed decision.
Example: a reviewer holds a post that claims to treat a condition outside their recorded scope.
3. Advertising and claims reviewer (CAP Code compliance lead)
This role sees sponsor terms and content. It decides whether material is advertising, checks visible disclosure and ties each objective claim to evidence.
CAP Code section 12 sets a high evidence bar for health marketing and limits treatment or diagnosis claims. The ASA's influencer hub covers disclosure, affiliate arrangements and responsibility across creators, brands and agencies.
Example: a supplement video goes live with no visible ad label, so the reviewer adds disclosure before publication.
The file needs the relationship record, claim register, label position and approval conditions.
4. Designated safeguarding lead (DSL)
The safeguarding lead writes audience exclusions, moderation rules and routes for a concern about a child. They train cover staff and keep local contacts usable.
Working Together to Safeguard Children 2026 applies in England and lists sports organisations among its intended audiences. A creator service must obtain specialist advice on the duties that actually apply.
Example: a direct message from a child triggers the escalation route and is entered in the concern log.
Retain training records, escalation details, concern logs and the reason for any information sharing.
5. Accessibility reviewer (WCAG 2.2 and Equality Act checks)
This reviewer checks captions, transcripts, readable graphics, keyboard paths, alternatives and the complaints route. WCAG 2.2 sets measurable success criteria for those checks. The 2026 Equality Act services code explains anticipatory reasonable adjustments for services, including remote provision. Because the page is a draft code, qualified legal advice and a publication-day status check are essential.
Example: a caption failure on a workout video is logged, repaired and checked again.
Record the applicable checks, user barriers found, repair owner and unresolved exclusions.
6. Privacy lead (data protection officer)
This function maps personal information under UK GDPR, approves access, logs incidents and coordinates recovery. The ICO's breach-control framework calls for severity criteria, response plans and records of breaches and near misses. It carries a DUAA review notice, so a privacy specialist must check current guidance rather than copy an old playbook.
Example: a breach log entry records a leaked email list, the response decision and the recovery test.
Evidence includes the data map, access list, breach log, response decision and recovery test.
7. People and cover owner (employment status and absence cover)
This person confirms working arrangements, handovers, competence records and absence cover. Acas says employment status depends on the contract, the original agreement and how work happens in practice. A role label or invoice does not settle the legal position.
Example: an invoice labels a coach as self-employed, but the working pattern suggests employee status, so the owner seeks advice.
Keep current agreements, responsibility boundaries, training, deputy access and escalation authority.
Risk tiers
Use three risk tiers: low, medium and high. Low risk covers general fitness content with no health claim, no children and no personal data beyond basic accounts. Medium risk adds a health claim, sponsor terms or a public accessibility duty. High risk adds children, clinical claims, regulated health professions, personal data at scale or an Equality Act service duty.
Low risk may combine release owner and people and cover owner. Medium risk needs the release owner plus the specialist reviewer for the claim or access issue. High risk needs all seven roles, or a written reason why a role does not apply and who signs off.
Before you act
- Release owner confirms one decision owner before the brief is signed off.
- Health reviewer checks HCPC registration on the review date and records the result.
- Advertising reviewer labels or clears sponsor material before publication.
- Safeguarding lead writes audience exclusions and concern routes before first upload.
- Accessibility reviewer checks captions, transcripts and the complaints route before publication.
- People and cover owner confirms employment status against the contract and practice before onboarding.
Common questions
Who signs off the release?
The release owner signs off the release, but each specialist approval stays with that specialist. The owner records who approved each gate and when.
What does this cost?
Costs vary by release. In-house staff time, HCPC or legal advice, accessibility fixes and moderation cover drive the total. A fixed figure would depend on scope and risk tier, so we do not quote one.
How often should we re-verify?
Re-verify registration on each review date. Check advertising labels at each publication. Review privacy, safeguarding and access arrangements when the law, platform or team changes.
