Data Privacy Advisory Service
Data Privacy Advisory Service is a UK-based data protection and privacy consultancy (trading as Gooding & Co Ltd) providing outsourced DPO services, GDPR audits, SAR support, CCTV compliance, AI governance, and accredited BCS/IAPP training to NHS Trusts, local councils, FTSE 100 firms, and SMEs across the UK.
- Company typePrivate
- Founded2000
- HeadquartersExeter, United Kingdom
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Data Privacy Advisory Service does
Data Privacy Advisory Service (DPAS), trading as Gooding & Co Ltd, is a UK-based data protection and privacy consultancy headquartered in Exeter, with regional offices in London and Yorkshire. The firm delivers outsourced Data Protection Officer (DPO) services, GDPR audits, Subject Access Request (SAR) processing and redaction, CCTV and surveillance compliance, international data transfer assessments, compliance documentation (DPIAs, ROPAs, DPAs), and a new AI Governance Services line. Its client base spans UK public sector — NHS Trusts (Royal Devon, SWAST), local councils, Multi-Academy Trusts, universities, and airports — and private enterprise ranging from SMEs to FTSE 100 companies and household-name retailers (BOXPARK, Rhodes Trust, Prestige Nursing & Care). The practice is led by founder and Chief DPO Nigel Gooding, supported by a named team of eight consultants, and the firm reports 20+ years of combined data protection experience.
The business is a pure professional services model with three revenue streams: project- and retainer-based consultancy, accredited training courses, and SAR redaction services. Documentation and policy services start from £750+VAT and CCTV DPIAs from £375; training is sold through scheduled classroom and online delivery as well as bespoke in-house programmes. Go-to-market is consultative, driven by a 'Book a Call' website CTA, content marketing (blog, monthly newsletter, free webinars), the annual 'Engage, Educate, Empower' conference, and a self-service online portal offering templates, audit tools, and e-learning. DPAS is an Accredited Training Provider for both the BCS (Foundation/Practitioner Certificates in Data Protection, CISMP, Freedom of Information) and the IAPP (CIPP/E, CIPM, AIGP), and has published a reference book, 'Mastering AI: A Guide for Data Protection Practitioners'. The firm is privately held, founder-owned, has 11-50 employees, and discloses no external funding or parent company.
Data Privacy Advisory Service firmographics
Firmographics- Name
- Data Privacy Advisory Service
- Legal name
- Gooding & Co Ltd
- Website
- https://dataprivacyadvisory.com
- Company type
- Private
- Founded year
- 2000
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Data Privacy Advisory Service is a UK-based data protection and privacy consultancy (trading as Gooding & Co Ltd) providing outsourced DPO services, GDPR audits, SAR support, CCTV compliance, AI governance, and accredited BCS/IAPP training to NHS Trusts, local councils, FTSE 100 firms, and SMEs across the UK.
- Ownership category
- akta.pro rank
Data Privacy Advisory Service industry classification
Industry- Product category
- Data Protection and Privacy Consultancy
- NAICS
- Business Service Centers (56143)
- SIC
- Services-Business Services, Nec (7389)
- akta.pro primary industry
- Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)
Keywords
Where Data Privacy Advisory Service is headquartered
LocationHeadquarters
- HQ city
- Exeter
- HQ country
- United Kingdom
- HQ region
- Europe
Offices3 records
Markets served
Data Privacy Advisory Service business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure
Revenue model
- Consultancy Services: Revenue from providing outsourced DPO services, GDPR audits, data protection consultancy, CCTV compliance, international data transfer assessments, and compliance documentation services. Billed on a project or retainer basis.
- Training Courses: Revenue from accredited training courses including BCS certificates, IAPP certifications (CIPP/E, CIPM, AIGP), and bespoke training programmes. Classroom and online delivery options available.
- Redaction Services: Revenue from SAR redaction services, including HR/employee SARs, customer SARs, and local authority SARs.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Pay-as-you-go | Policies and Procedures Services - starting price |
| One time/ perpetual license | Pay-as-you-go | CCTV DPIA Services - starting price |
| Subscription | Annual | Training Course Cancellation Policy |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels6 records
Data Privacy Advisory Service product offering
Product offeringCore offering
Data Privacy Advisory Service (DPAS) is a UK-based data protection and privacy consultancy providing outsourced DPO services, GDPR audits, Subject Access Request (SAR) support, CCTV compliance, international data transfer assessments, and AI governance services. The firm also delivers accredited training courses through partnerships with BCS and IAPP, serving organisations from SMEs to FTSE 100 companies across the public and private sectors.
Product overview
Data Privacy Advisory Service (DPAS) offers a comprehensive suite of data protection and privacy consultancy services, positioned as a one-stop solution for UK GDPR compliance. The core offering consists of seven interconnected service pillars: Data Protection Help & Support (including outsourced DPO services), Audits/Assessments & Reports, Subject Access Requests Support, Compliance Documentation, CCTV Compliance Services, International Data Transfer Services, and AI Governance Services. Complementing the consultancy services is an extensive training portfolio providing BCS-accredited, IAPP-accredited, and non-accredited courses covering data protection, AI governance, cybersecurity, and Freedom of Information. The company operates across the UK with offices in London, Devon, and Yorkshire, serving public sector clients (NHS Trusts, councils, local government), private sector organisations (including FTSE 100 companies and household-name retailers), and multi-academy trusts.
Differentiator
Problem solved
Functional benefit
Products and services
- Data Protection Help & Support Comprehensive UK GDPR and data protection consultancy services including outsourced DPO services, Senior Responsible Officer support, emergency data breach assistance, interim Data Protection Manager cover, and ad hoc support for organisations.
- Audits, Assessments & Reports Data protection and information security audit services including GDPR audit and report, Data Protection self-assessed audit tool, NHS Data Security and Protection Toolkit (DSPT) support, and third-party supplier assessment reviews.
- Subject Access Requests Support Support services for handling Subject Access Requests and Individual Rights Requests, including redaction services for HR/employee/customer SARs, local authority SAR support, SAR processing audits, and SAR Lite ad hoc advice.
- Compliance Documentation Privacy management framework services including policies and procedures drafting, accountability documentation (DPIAs, ROPAs), Data Processing Agreements, Data Sharing Agreements, and records of processing activities.
- CCTV Compliance Services Expert support for CCTV and surveillance compliance including surveillance camera audits, CCTV Data Protection Impact Assessments (DPIAs), CCTV compliance documentation, gap analysis, and passport to compliance with the Surveillance Camera Code of Practice.
- International Data Transfer Services Services to assess risks of international data transfers and implement appropriate documentation including Transfer Risk Assessments, Standard Contractual Clauses (SCCs), UK Addendum documentation, and Data Sharing Agreements for third country transfers.
- AI Governance Services AI-specific data protection compliance support including AI and GDPR compliance services for businesses, AI developers, and healthcare organisations, covering AI governance, risk assessment, and regulatory alignment.
- Data Protection Training Accredited and non-accredited data protection training courses including Certified Data Protection Officer (C-DPO), Data Champion/Privacy Champion, Handling and Redacting SARs, Caldicott Guardian, Senior Information Risk Owner, and Managing CCTV courses.
- BCS Training Courses BCS-accredited professional certification training including BCS Foundation Certificate in Data Protection, BCS Practitioner Certificate in Data Protection, BCS Foundation Certificate in Information Security Management Principles (CISMP), and BCS Practitioner Certificate in Freedom of Information.
- IAPP Training Courses IAPP-accredited privacy professional certification training including Certified Information Privacy Manager (CIPM), Certified Information Privacy Professional/Europe (CIPP/E), and Artificial Intelligence Governance Professional (AIGP).
- AI, Information and Cyber Security Training AI and cybersecurity training courses including Introduction to AI for Data Protection Practitioners, AI for Data Protection Practitioners, Data Protection and AI for staff, and Utilising AI in Business and Understanding the Risks.
- Freedom of Information Training FOI-specific training including Foundation Certificate in Freedom of Information to support public sector organisations with their FOIA obligations.
- Bespoke Training Customised in-house training solutions including bespoke data protection training, bespoke SAR training, bespoke data incident and cyber attack workshops, and data protection e-learning modules tailored to organisational needs.
Quantifiable outcome
- Clients report that DPAS approach was 'thorough, efficient and remarkably unobtrusive from an operations perspective'
- +1 more outcomes
Companies that use Data Privacy Advisory Service
Customer profileNamed customers10 records
Segments6 records
Ideal customer profiles5 records
Data Privacy Advisory Service technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Data Privacy Advisory Service partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered minor and core.
- 4LouisminorDPAS proudly supports 4Louis as their charity partner, helping families who have experienced the loss of a child. This is a corporate social responsibility partnership.
- BCS (Chartered Institute for IT)coreDPAS is an Accredited Training Provider for BCS, delivering the Foundation Certificate in Data Protection, Practitioner Certificate in Data Protection, Practitioner Certificate in Freedom of Information, and BCS Foundation Certificate in Information Security Management Principles (CISMP).
- IAPP (International Association of Privacy Professionals)coreDPAS is an Accredited Training Provider for IAPP, delivering Certified Information Privacy Professional/Europe (CIPP/E), Certified Information Privacy Manager (CIPM), and Artificial Intelligence Governance Professional (AIGP) certifications.
Scale indicators2 records
Recent moves6 records
Expansion highlights6 records
Data Privacy Advisory Service competitors and assessment
Company assessmentBroad incumbents
- OneTrust: Global privacy, security, and data governance SaaS platform; not a direct service peer, but increasingly competes with consultancies like DPAS as its tooling absorbs DPIA, ROPA, DSAR, and consent management workflows.
- EY (Ernst & Young) UK: Big 4 professional services firm with a substantial UK cyber, risk, and privacy advisory practice that competes with DPAS for large enterprise and public-sector data protection engagements.
- RSM UK: Mid-tier UK accounting and advisory firm offering risk, cyber, and data protection consulting to mid-market and enterprise clients, competing with DPAS for governance, GDPR, and outsourced DPO mandates.
- DWF Law LLP: UK-headquartered full-service law firm with a dedicated data protection and privacy practice that competes with DPAS on regulatory advisory, DPO outsourcing, and complex data work.
- KPMG UK: Big 4 firm providing data protection, cyber, and risk advisory to large UK enterprises and public sector bodies, including NHS-focused engagements that overlap with DPAS's NHS DSPT work.
Direct peers
- Securys: UK-based data protection and cyber security consultancy delivering DPO services, GDPR advisory, and ISO 27001 support, comparable in service mix and client base to DPAS.
- Privacy Compliance Hub: UK data protection advisory firm providing outsourced DPO, GDPR audits, training, and breach response to UK organisations, overlapping directly with DPAS's core service pillars.
- Data Protection People: UK data protection consultancy providing DPO outsourcing, GDPR consultancy, and training to organisations of all sizes, directly competing with DPAS in the SME-to-enterprise outsourced DPO market.
- DPO Centre: UK-based outsourced DPO and GDPR advisory firm; one of the closest direct competitors to DPAS, offering outsourced DPO, audits, training, and breach support to public and private sector clients across the UK.
Regional players
- 2B Advice: European (German-headquartered) data protection consultancy with UK presence providing GDPR, DPO outsourcing, and AI governance services, partially comparable to DPAS but operating from a different primary geography.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
Data Privacy Advisory Service social profiles
Digital presenceData Privacy Advisory Service financial estimates
Financial estimateRevenue estimate
Valuation estimate
Data Privacy Advisory Service leadership team
Management profileNumber of profiles
Profiles8 records
Data Privacy Advisory Service funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Data Privacy Advisory Service M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Data Privacy Advisory Service
What does Data Privacy Advisory Service do?
Data Privacy Advisory Service (DPAS) is a UK-based data protection and privacy consultancy providing outsourced DPO services, GDPR audits, Subject Access Request (SAR) support, CCTV compliance, international data transfer assessments, and AI governance services. The firm also delivers accredited training courses through partnerships with BCS and IAPP, serving organisations from SMEs to FTSE 100 companies across the public and private sectors.
Is Data Privacy Advisory Service a public or private company?
Data Privacy Advisory Service is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Data Privacy Advisory Service founded?
Data Privacy Advisory Service was founded in 2000. It employs 11 to 50 people.
Where is Data Privacy Advisory Service based?
Data Privacy Advisory Service is headquartered in Exeter, United Kingdom, in the Europe region.
How does Data Privacy Advisory Service make money?
Three revenue lines are on record. Consultancy Services are the primary driver. The others are training Courses and redaction Services.
Who are Data Privacy Advisory Service's main competitors?
Broad incumbents on record are OneTrust, EY (Ernst & Young) UK, RSM UK, DWF Law LLP and KPMG UK. Direct peers are Securys, Privacy Compliance Hub, Data Protection People and DPO Centre. 2B Advice is listed as a regional player.
Does Data Privacy Advisory Service have an API?
No public API is recorded for Data Privacy Advisory Service.
What industry is Data Privacy Advisory Service in?
Data Privacy Advisory Service's product category is Data Protection and Privacy Consultancy. Its primary akta.pro industry code is HDADAFAH, Privacy Management (Consent, DSAR, RoPA). Its NAICS code is 56143 and its SIC code is 7389.