Data Protection People

What Data Protection People does

Data Protection People Ltd is a UK-based data protection, information governance and cybersecurity consultancy headquartered in Leeds, founded in 2015 by Phil Brining alongside co-founders David Hendry, Robin Hill and Andrew Mason (the latter two previously co-founded RandomStorm, sold to Accumli PLC in 2014). The firm serves UK organisations across both the private and public sectors, with named client logos spanning multinational enterprises (Danone, DP World, National Express, P&O Ferrymasters), local authorities (Tendring District Council, Veritau), housing associations (Eastlight Community Homes), charities (Dyslexia Action) and risk services (Woodgate & Clarke), addressing GDPR, UK GDPR, PECR, ISO 27001 and PCI DSS obligations.

The company's product and service portfolio is anchored by DataWise, a proprietary privacy technology platform originally developed in 2011 to manage GDPR compliance, and supported by a broad services catalogue covering Outsourced DPO, SAR support, GDPR audits and consultancy, training, documentation, toolkit, GDPR representative, PCI DSS, ISO 27001, cyber security consultancy, penetration testing (delivered through a SecurePortal PTaaS model) and external attack surface / dark web monitoring. The team is qualified with regulated accreditations including PCI DSS QSA, CISSP, CIPP/E, CIPM and BSI Lead Auditor, and is augmented by a content and community engine comprising the 'Data Protection Made Easy' podcast (150+ episodes, distributed on Spotify and other platforms), weekly webinars with 1,200+ subscribers, and a 10,000+ follower digital community.

DPP operates a hybrid go-to-market combining direct sales-led engagement (business development and account managers), inbound enquiries via its website, and an ongoing support desk for retained clients. Revenue is generated primarily through professional services engagements (consultancy, audits, training) supplemented by subscription-style recurring outsourced DPO and support desk contracts. Distribution is exclusively domestic UK with no international footprint, and the company is privately held by founders with no disclosed external venture capital or private equity investment.

Name

Data Protection People

Legal name

Data Protection People Ltd

Website

https://dataprotectionpeople.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

11–50 employees

Short description

Data Protection People is a UK-based data protection, information governance and cybersecurity consultancy founded in 2015, serving SMEs, enterprises, public sector, charities, education, healthcare and housing clients with GDPR advisory, outsourced DPO, PCI DSS, ISO 27001 and penetration testing services, underpinned by its proprietary DataWise compliance platform.

Ownership category

akta.pro rank

Product category

Data Protection & Cybersecurity Consultancy

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

akta.pro secondary industry

Data Privacy, Consent & Compliance Management (HDAEADAG)

Keywords

• Data protection consultancy
• GDPR compliance services
• Outsourced DPO services
• Cybersecurity compliance consulting
• Information security advisory

Headquarters

HQ city

Leeds

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Others

Revenue model

1. Data Protection Consultancy Services: Professional consultancy services including GDPR audits, compliance gap analysis, ROPA design and production, DPO services, and policy reviews. Revenue generated through project-based engagements and retainer arrangements.
2. Outsourced DPO Services: Ongoing data protection officer services provided on a retainer or contract basis, offering organisations continuous compliance support, expert guidance, and regulatory engagement.
3. Cyber Security Services: PCI DSS compliance services, ISO 27001 implementation and audits, penetration testing, external attack surface management, and cybersecurity consultancy. Includes QSA (Qualified Security Assessor) services for PCI assessments.
4. Training Services: Customised data protection training programmes for operational staff, specialist roles, and DPOs. Training covers GDPR compliance, FOI requirements, and specific sector needs.

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

Data Protection People is a UK-based data protection and cybersecurity consultancy that helps organisations achieve and maintain GDPR/UK GDPR compliance. The firm delivers outsourced Data Protection Officer (DPO) services, GDPR audits, Subject Access Request (SAR) handling, ISO 27001 and PCI DSS implementation, penetration testing, and customised training programmes, supported by its proprietary DataWise privacy management platform.

Product overview

Data Protection People is a UK-based data protection and cybersecurity consultancy offering a portfolio of services and one core software product (DataWise). The company provides both Cyber Security Services (PCI DSS, ISO 27001, Cyber Security Consultancy, Support, Pentesting, External Attack Surface Management) and Data Protection Services (SAR Support, Data Protection Support, Outsourced DPO, Consultancy, Training, Audits, GDPR Toolkit, Documentation, and Representative services). DataWise serves as the company's proprietary privacy tech platform for GDPR compliance management. The company also produces the 'Data Protection Made Easy' podcast as a content offering. Services are delivered by a team of qualified professionals including QSAs (Qualified Security Assessors) for PCI DSS and certified consultants for ISO 27001.

Differentiator

Problem solved

Functional benefit

Products and services

• DataWise Information Management Software
• Outsourced DPO
• Data Protection Consultancy
• GDPR Audits
• GDPR Training
• SAR Support
• Data Protection Support
• GDPR Representative
• GDPR Documentation
• GDPR Toolkit
• Information Rights Request
• PCI DSS Services
• ISO 27001 Services
• Cyber Security Consultancy
• Cyber Security Support
• Penetration Testing
• External Attack Surface Management

Quantifiable outcome

• Community of 10,000+ followers and subscribers across digital platforms
• +2 more outcomes

Named customers9 records

Segments9 records

Ideal customer profiles7 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• TrustArc: Global privacy compliance platform offering consent management, DSAR automation, and assessments. Indirect competitor on the technology layer DPP's DataWise addresses.
• OneTrust: Global privacy management software platform with consent, DSAR, and ROPA capabilities. Represents the platform-side competitor to DPP's DataWise, with broader scope and much larger scale.
• RSM UK Risk Advisory: Mid-tier professional services network with GDPR/DPO, ISO 27001, and cyber security offerings in the UK. Direct competitor for mid-market outsourced DPO and compliance engagements.
• KPMG UK Cyber & Privacy: Big 4 advisory with large UK data protection and cyber practice. Competes with DPP for enterprise engagements; note DPP team members include ex-KPMG consultants.
• PwC UK Cyber & Privacy: Big 4 firm with established UK GDPR, PCI DSS, and cyber security advisory practices. Competes for large enterprise and public sector mandates where DPP also operates.

Emerging players

• Drata: Compliance automation platform rapidly expanding into ISO 27001 and broader frameworks. Threatens the traditional GRC consultancy model DPP operates in by automating audit-readiness work.
• DataGuard: UK GDPR and information security consultancy supporting SMEs with compliance, training, and DPO services. Comparable scale and customer profile to DPP.

Direct peers

• Securys: UK data privacy and cyber consultancy offering GDPR, DPO, and information security services to enterprise and public sector. Comparable in scale and positioning to DPP, with similar Big 4-alternative value proposition.
• The DPO Centre: UK-based pure-play outsourced DPO and GDPR services firm. Most directly comparable to DPP given near-identical service portfolio (DPO-as-a-service, SAR support, training) and UK SME/mid-market focus.
• Bridewell: UK-based cyber security consultancy with privacy and PCI DSS services. Competes with DPP's cyber security arm across ISO 27001, pen testing, and EASM, with a similar UK mid-market/enterprise focus.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/datapropeople
• LinkedInlinkedin.com/company/data-protection-people-limited

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles16 records

Funding overview

Funding rounds1 record

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Data Protection People