Data Privacy & Security Advisors
Data Privacy & Security Advisors is a boutique professional services firm that provides data privacy and security consulting — including compliance assessments, policy development, outsourced Privacy Office services, and OneTrust implementation — to organizations facing GDPR, US state, HIPAA, and Caribbean regulatory obligations.
- Company typePrivate
- Founded2016
- HeadquartersElizabethtown, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Data Privacy & Security Advisors does
Data Privacy & Security Advisors (DPSA) is a privately held professional services firm that provides advisory, consulting, and policy-template solutions for data privacy and information security compliance. Founded in 2016 and headquartered in Elizabethtown, Pennsylvania, DPSA employs between 11 and 50 people and serves organizations across the United States, the Caribbean, and South America. Its core services cover the full compliance lifecycle: risk and readiness assessments, privacy impact assessments (PIA/DPIA), data mapping and Record of Processing Activities (RoPA), policy and notice development, outsourced Privacy Office functions delivered through its "Privacy Expert on Demand" offering, employee training and awareness, and ISO 27001/27701 certification readiness. The firm holds OneTrust Certified Expert credentials across all modules and operates a dedicated OneTrust Implementation & Migration practice. Its regulatory scope spans GDPR, a wide range of US state privacy laws, HIPAA, GLBA, COPPA, PIPEDA, LGPD, and the Jamaican Data Protection Act.
The business model is professional services–led, with a complementary productized layer. Direct consulting engagements — sold sales-led and priced by quote — represent the primary revenue stream, supplemented by a tiered line of one-time policy template packages (Start Up, Basic, Expanded at $3,000, Comprehensive at $4,500) that include bundled expert consultation hours and are creditable against future consulting work. Distribution is primarily direct-to-client with light content marketing support via the company blog and email newsletter; template packages are sold via email order and the website storefront. The firm has no disclosed technology platform, no AI/ML capabilities, and no app, SDK, or API surface — its technology footprint is operational rather than productized.
Ownership is independent and bootstrapped: DPSA is a Pennsylvania LLC with no disclosed institutional investors, parent company, acquisitions, or funding rounds. Founding partner James Koons (CIPP/US certified, 30+ years of experience) and partner George Whyte lead the practice, with Whyte managing the Calibra/DPSA Caribbean and South America partnership across banking, insurance, energy, telecoms, hospitality, retail, and government sectors. Scale signals on the company website reference over 15,286 Risk/Readiness Assessments, 29,217 Privacy Impact Assessments, 26,713 Processing Activities Mapped, and 11,287 trainings delivered, indicating a substantial cumulative engagement base though the time period is undisclosed.
Data Privacy & Security Advisors firmographics
Firmographics- Name
- Data Privacy & Security Advisors
- Legal name
- Data Privacy & Security Advisors LLC
- Website
- https://thedpsa.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Data Privacy & Security Advisors is a boutique professional services firm that provides data privacy and security consulting — including compliance assessments, policy development, outsourced Privacy Office services, and OneTrust implementation — to organizations facing GDPR, US state, HIPAA, and Caribbean regulatory obligations.
- Ownership category
- akta.pro rank
Data Privacy & Security Advisors industry classification
Industry- Product category
- Data Privacy and Security Consulting
- akta.pro primary industry
- Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)
Keywords
Where Data Privacy & Security Advisors is headquartered
LocationHeadquarters
- HQ city
- Elizabethtown
- HQ country
- United States
- HQ region
- North America
Offices7 records
Markets served
Data Privacy & Security Advisors business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D
Revenue model
- Consulting Services: Professional consulting engagements including outsourced Privacy Office services, Privacy Expert on Demand, data mapping, impact assessments, ISO readiness assistance, and third-party risk management.
- Policy Template Packages: Pre-packaged compliance bundles sold as one-time purchases including policy templates, compliance activity templates, and expert consultation hours. Packages range from startup to comprehensive levels.
- Training & Awareness Programs: Custom privacy and data security training services for company and business-unit employees on regulatory compliance including GDPR, CCPA/CPRA, VCDPA, HIPAA, and more.
- OneTrust Implementation & Migration: Implementation and migration services for OneTrust privacy technology platform, including environment customization and workflow setup.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Pay-as-you-go | Expanded Package - Mid-level compliance bundle with core policies and two hours of expert consultation |
| One time/ perpetual license | Pay-as-you-go | Comprehensive Package - Full compliance bundle with extensive policies and four hours of expert consultation |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels3 records
Data Privacy & Security Advisors product offering
Product offeringCore offering
Data Privacy & Security Advisors (DPSA) is a professional services firm that delivers data privacy and information security advisory, compliance, training, and implementation services to organizations. The firm conducts risk/readiness assessments, Privacy Impact Assessments, Data Mapping/RoPA, develops privacy policies and notices, provides outsourced Privacy Office services (Privacy Expert on Demand), delivers custom training, and implements OneTrust privacy technology platforms. DPSA also sells pre-packaged policy template bundles (Start Up, Basic, Expanded, Comprehensive) covering GDPR, CCPA/CPRA, VCDPA, HIPAA, and other regulatory frameworks.
Product overview
Data Privacy & Security Advisors (DPSA) is a professional services firm providing advisory, consulting, and template-based solutions for data privacy and security compliance. The company offers a portfolio of human expert-driven services including Assessments, Consulting & Expert Services, Training & Awareness Programs, OneTrust Implementation & Migration, and Notices & Policies. These core offerings are complemented by a set of policy template bundles (Comprehensive Package at $4,500, Expanded Package at $3,000, Basic Package, and Start Up Package) that provide organizations with ready-to-implement documentation including privacy policies, data subject request procedures, vendor management checklists, incident response plans, and GDPR/CCPA compliance materials. The Privacy Expert on Demand service provides on-demand access to DPSA's senior privacy specialists. The overall offering is services-based rather than a software platform, focused on helping organizations navigate complex regulatory requirements including GDPR, CCPA/CPRA, VCDPA, ISO 27001/27701, HIPAA, GLBA, and the Jamaican Data Protection Act.
Differentiator
Problem solved
Functional benefit
Brands
- Calibra / DPSA: Caribbean and South America operations managed through Calibra partnership, serving clients across banking, insurance, energy, telecommunications, hospitality, retail, consumer products and government sectors.
Products and services
- Privacy Expert on Demand
Quantifiable outcome
- Over 15,286 Risk/Readiness Assessments completed
- +3 more outcomes
Companies that use Data Privacy & Security Advisors
Customer profileSegments2 records
Ideal customer profiles3 records
Data Privacy & Security Advisors technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Data Privacy & Security Advisors partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- OneTrustcoreDPSA holds OneTrust Certified Expert certifications for all OneTrust modules. They provide OneTrust implementation and migration services, including environment customization and workflow setup. The partnership enables DPSA to help clients implement or switch to OneTrust privacy technology platforms.
Scale indicators4 records
Recent moves5 records
Expansion highlights5 records
Data Privacy & Security Advisors competitors and assessment
Company assessmentDirect peers
- TrustArc: TrustArc sells a privacy management platform bundled with professional services for assessments, certifications and ongoing program management — directly overlapping DPSA's privacy expert, assessment and policy work for the same mid-market and enterprise buyer.
- Securiti: Securiti combines privacy automation software (DSAR, consent, RoPA) with advisory and assessment services — a direct overlap with DPSA's Privacy Impact Assessments, RoPA and policy consulting offerings, often to the same enterprise buyer.
- Schellman & Co. Schellman is a boutique compliance/cybersecurity assessor offering privacy assessments, ISO 27701 readiness and program advisory — comparable boutique-services model and similarly sized firm competing for the same compliance-driven buyer.
Broad incumbents
- BDO USA: BDO's advisory practice includes privacy risk assessments, ISO 27701 readiness and compliance support — competing with DPSA in the mid-market where DPSA is strongest, but with greater cross-sell into audit and tax clients.
- KPMG: KPMG's cyber/privacy advisory offers GDPR/CCPA compliance, third-party risk and managed services — broadly comparable scope delivered by a Big Four incumbent with global delivery capacity DPSA cannot match.
- OneTrust: OneTrust is DPSA's named 'core' strategic technology partner and the dominant privacy platform; it also offers its own professional services and partner ecosystem, making it both a channel and a broader incumbent competitor in privacy advisory.
- Deloitte (Privacy & Data Protection practice): Deloitte's global Cyber & Strategic Risk practice covers privacy program build, GDPR/CCPA advisory and certification readiness — a broad incumbent increasingly competing for the same enterprise privacy engagements DPSA pursues.
- Ernst & Young (EY): EY's privacy and data protection practice delivers assessments, GDPR readiness and managed privacy services — a large incumbent with deeper enterprise relationships that DPSA must compete against for larger mandates.
- Baker Tilly: Baker Tilly's risk and advisory practice includes privacy program assessments, ISO 27001/27701 readiness and data protection advisory — a mid-tier accounting-firm incumbent that overlaps with DPSA's mid-market privacy buyer.
Emerging players
- DataGrail: DataGrail is a privacy automation startup offering DSAR, mapping and consent tools that increasingly encroach on DPSA's assessment and mapping workflow; smaller and more product-led, but increasingly competitive for the same buyer profile.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat3 records
Key risks6 records
Key highlights6 records
Customer concentration
Data Privacy & Security Advisors social profiles
Digital presenceData Privacy & Security Advisors financial estimates
Financial estimateRevenue estimate
Valuation estimate
Data Privacy & Security Advisors leadership team
Management profileNumber of profiles
Profiles2 records
Data Privacy & Security Advisors funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Data Privacy & Security Advisors M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Data Privacy & Security Advisors
What does Data Privacy & Security Advisors do?
Data Privacy & Security Advisors (DPSA) is a professional services firm that delivers data privacy and information security advisory, compliance, training, and implementation services to organizations. The firm conducts risk/readiness assessments, Privacy Impact Assessments, Data Mapping/RoPA, develops privacy policies and notices, provides outsourced Privacy Office services (Privacy Expert on Demand), delivers custom training, and implements OneTrust privacy technology platforms. DPSA also sells pre-packaged policy template bundles (Start Up, Basic, Expanded, Comprehensive) covering GDPR, CCPA/CPRA, VCDPA, HIPAA, and other regulatory frameworks.
Is Data Privacy & Security Advisors a public or private company?
Data Privacy & Security Advisors is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Data Privacy & Security Advisors founded?
Data Privacy & Security Advisors was founded in 2016. It employs 11 to 50 people.
Where is Data Privacy & Security Advisors based?
Data Privacy & Security Advisors is headquartered in Elizabethtown, United States, in the North America region.
How does Data Privacy & Security Advisors make money?
Four revenue lines are on record. Consulting Services are the primary driver. The others are policy Template Packages, training & Awareness Programs and oneTrust Implementation & Migration.
Who are Data Privacy & Security Advisors's main competitors?
Direct peers on record are TrustArc, Securiti and Schellman & Co.. Broad incumbents are BDO USA, KPMG, OneTrust, Deloitte (Privacy & Data Protection practice), Ernst & Young (EY) and Baker Tilly. DataGrail is listed as an emerging player.
Does Data Privacy & Security Advisors have an API?
No public API is recorded for Data Privacy & Security Advisors.
What industry is Data Privacy & Security Advisors in?
Data Privacy & Security Advisors's product category is Data Privacy and Security Consulting. Its primary akta.pro industry code is HDADAFAH, Privacy Management (Consent, DSAR, RoPA).