Data Protection People
Data Protection People is a UK-based data protection, information governance and cybersecurity consultancy founded in 2015, serving SMEs, enterprises, public sector, charities, education, healthcare and housing clients with GDPR advisory, outsourced DPO, PCI DSS, ISO 27001 and penetration testing services, underpinned by its proprietary DataWise compliance platform.
- Company typePrivate
- Founded2015
- HeadquartersLeeds, United Kingdom
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Data Protection People does
Data Protection People Ltd is a UK-based data protection, information governance and cybersecurity consultancy headquartered in Leeds, founded in 2015 by Phil Brining alongside co-founders David Hendry, Robin Hill and Andrew Mason (the latter two previously co-founded RandomStorm, sold to Accumli PLC in 2014). The firm serves UK organisations across both the private and public sectors, with named client logos spanning multinational enterprises (Danone, DP World, National Express, P&O Ferrymasters), local authorities (Tendring District Council, Veritau), housing associations (Eastlight Community Homes), charities (Dyslexia Action) and risk services (Woodgate & Clarke), addressing GDPR, UK GDPR, PECR, ISO 27001 and PCI DSS obligations.
The company's product and service portfolio is anchored by DataWise, a proprietary privacy technology platform originally developed in 2011 to manage GDPR compliance, and supported by a broad services catalogue covering Outsourced DPO, SAR support, GDPR audits and consultancy, training, documentation, toolkit, GDPR representative, PCI DSS, ISO 27001, cyber security consultancy, penetration testing (delivered through a SecurePortal PTaaS model) and external attack surface / dark web monitoring. The team is qualified with regulated accreditations including PCI DSS QSA, CISSP, CIPP/E, CIPM and BSI Lead Auditor, and is augmented by a content and community engine comprising the 'Data Protection Made Easy' podcast (150+ episodes, distributed on Spotify and other platforms), weekly webinars with 1,200+ subscribers, and a 10,000+ follower digital community.
DPP operates a hybrid go-to-market combining direct sales-led engagement (business development and account managers), inbound enquiries via its website, and an ongoing support desk for retained clients. Revenue is generated primarily through professional services engagements (consultancy, audits, training) supplemented by subscription-style recurring outsourced DPO and support desk contracts. Distribution is exclusively domestic UK with no international footprint, and the company is privately held by founders with no disclosed external venture capital or private equity investment.
Data Protection People firmographics
Firmographics- Name
- Data Protection People
- Legal name
- Data Protection People Ltd
- Website
- https://dataprotectionpeople.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Data Protection People is a UK-based data protection, information governance and cybersecurity consultancy founded in 2015, serving SMEs, enterprises, public sector, charities, education, healthcare and housing clients with GDPR advisory, outsourced DPO, PCI DSS, ISO 27001 and penetration testing services, underpinned by its proprietary DataWise compliance platform.
- Ownership category
- akta.pro rank
Data Protection People industry classification
Industry- Product category
- Data Protection & Cybersecurity Consultancy
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)
- akta.pro secondary industry
- Data Privacy, Consent & Compliance Management (HDAEADAG)
Keywords
Where Data Protection People is headquartered
LocationHeadquarters
- HQ city
- Leeds
- HQ country
- United Kingdom
- HQ region
- Europe
Offices1 record
Markets served
Data Protection People business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales, Others
Revenue model
- Data Protection Consultancy Services: Professional consultancy services including GDPR audits, compliance gap analysis, ROPA design and production, DPO services, and policy reviews. Revenue generated through project-based engagements and retainer arrangements.
- Outsourced DPO Services: Ongoing data protection officer services provided on a retainer or contract basis, offering organisations continuous compliance support, expert guidance, and regulatory engagement.
- Cyber Security Services: PCI DSS compliance services, ISO 27001 implementation and audits, penetration testing, external attack surface management, and cybersecurity consultancy. Includes QSA (Qualified Security Assessor) services for PCI assessments.
- Training Services: Customised data protection training programmes for operational staff, specialist roles, and DPOs. Training covers GDPR compliance, FOI requirements, and specific sector needs.
Go-to-market motion1 record
Distribution channels3 records
Marketing channels5 records
Data Protection People product offering
Product offeringCore offering
Data Protection People is a UK-based data protection and cybersecurity consultancy that helps organisations achieve and maintain GDPR/UK GDPR compliance. The firm delivers outsourced Data Protection Officer (DPO) services, GDPR audits, Subject Access Request (SAR) handling, ISO 27001 and PCI DSS implementation, penetration testing, and customised training programmes, supported by its proprietary DataWise privacy management platform.
Product overview
Data Protection People is a UK-based data protection and cybersecurity consultancy offering a portfolio of services and one core software product (DataWise). The company provides both Cyber Security Services (PCI DSS, ISO 27001, Cyber Security Consultancy, Support, Pentesting, External Attack Surface Management) and Data Protection Services (SAR Support, Data Protection Support, Outsourced DPO, Consultancy, Training, Audits, GDPR Toolkit, Documentation, and Representative services). DataWise serves as the company's proprietary privacy tech platform for GDPR compliance management. The company also produces the 'Data Protection Made Easy' podcast as a content offering. Services are delivered by a team of qualified professionals including QSAs (Qualified Security Assessors) for PCI DSS and certified consultants for ISO 27001.
Differentiator
Problem solved
Functional benefit
Products and services
- DataWise Information Management Software
- Outsourced DPO
- Data Protection Consultancy
- GDPR Audits
- GDPR Training
- SAR Support
- Data Protection Support
- GDPR Representative
- GDPR Documentation
- GDPR Toolkit
- Information Rights Request
- PCI DSS Services
- ISO 27001 Services
- Cyber Security Consultancy
- Cyber Security Support
- Penetration Testing
- External Attack Surface Management
Quantifiable outcome
- Community of 10,000+ followers and subscribers across digital platforms
- +2 more outcomes
Companies that use Data Protection People
Customer profileNamed customers9 records
Segments9 records
Ideal customer profiles7 records
Data Protection People technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature1 record
Data Protection People partnerships and signals
Strategic signalScale indicators3 records
Recent moves6 records
Expansion highlights5 records
Data Protection People competitors and assessment
Company assessmentBroad incumbents
- TrustArc: Global privacy compliance platform offering consent management, DSAR automation, and assessments. Indirect competitor on the technology layer DPP's DataWise addresses.
- OneTrust: Global privacy management software platform with consent, DSAR, and ROPA capabilities. Represents the platform-side competitor to DPP's DataWise, with broader scope and much larger scale.
- RSM UK Risk Advisory: Mid-tier professional services network with GDPR/DPO, ISO 27001, and cyber security offerings in the UK. Direct competitor for mid-market outsourced DPO and compliance engagements.
- KPMG UK Cyber & Privacy: Big 4 advisory with large UK data protection and cyber practice. Competes with DPP for enterprise engagements; note DPP team members include ex-KPMG consultants.
- PwC UK Cyber & Privacy: Big 4 firm with established UK GDPR, PCI DSS, and cyber security advisory practices. Competes for large enterprise and public sector mandates where DPP also operates.
Emerging players
- Drata: Compliance automation platform rapidly expanding into ISO 27001 and broader frameworks. Threatens the traditional GRC consultancy model DPP operates in by automating audit-readiness work.
- DataGuard: UK GDPR and information security consultancy supporting SMEs with compliance, training, and DPO services. Comparable scale and customer profile to DPP.
Direct peers
- Securys: UK data privacy and cyber consultancy offering GDPR, DPO, and information security services to enterprise and public sector. Comparable in scale and positioning to DPP, with similar Big 4-alternative value proposition.
- The DPO Centre: UK-based pure-play outsourced DPO and GDPR services firm. Most directly comparable to DPP given near-identical service portfolio (DPO-as-a-service, SAR support, training) and UK SME/mid-market focus.
- Bridewell: UK-based cyber security consultancy with privacy and PCI DSS services. Competes with DPP's cyber security arm across ISO 27001, pen testing, and EASM, with a similar UK mid-market/enterprise focus.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
Data Protection People social profiles
Digital presenceData Protection People compliance and trust
Trust signalCompliance2 records
Data Protection People financial estimates
Financial estimateRevenue estimate
Valuation estimate
Data Protection People leadership team
Management profileNumber of profiles
Profiles16 records
Data Protection People funding detail
Funding detailFunding overview
Funding rounds1 record
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Data Protection People M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Data Protection People
What does Data Protection People do?
Data Protection People is a UK-based data protection and cybersecurity consultancy that helps organisations achieve and maintain GDPR/UK GDPR compliance. The firm delivers outsourced Data Protection Officer (DPO) services, GDPR audits, Subject Access Request (SAR) handling, ISO 27001 and PCI DSS implementation, penetration testing, and customised training programmes, supported by its proprietary DataWise privacy management platform.
Is Data Protection People a public or private company?
Data Protection People is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Data Protection People founded?
Data Protection People was founded in 2015. It employs 11 to 50 people.
Where is Data Protection People based?
Data Protection People is headquartered in Leeds, United Kingdom, in the Europe region.
How does Data Protection People make money?
Four revenue lines are on record. Data Protection Consultancy Services are the primary driver. The others are outsourced DPO Services, cyber Security Services and training Services.
Who are Data Protection People's main competitors?
Broad incumbents on record are TrustArc, OneTrust, RSM UK Risk Advisory, KPMG UK Cyber & Privacy and PwC UK Cyber & Privacy. Emerging players are Drata and DataGuard. Direct peers are Securys, The DPO Centre and Bridewell.
Does Data Protection People have an API?
No public API is recorded for Data Protection People.
What industry is Data Protection People in?
Data Protection People's product category is Data Protection & Cybersecurity Consultancy. Its primary akta.pro industry code is HDADAFAH, Privacy Management (Consent, DSAR, RoPA), with a secondary code of HDAEADAG, Data Privacy, Consent & Compliance Management. Its NAICS code is 51821 and its SIC code is 7370.