Pembroke Privacy

What Pembroke Privacy does

Pembroke Privacy Limited is an Ireland- and UK-based data protection, privacy, and AI governance consultancy founded in 2019 by Kate Colleary. The firm delivers outsourced and interim Data Protection Officer (DPO) services under Article 39 of the GDPR, project-based engagements covering Data Protection Impact Assessments (DPIAs), data breach management, Data Subject Access Request (DSAR) handling, gap assessments, direct marketing compliance, Microsoft SSPA reviews, international data transfer compliance (TIA-based), third-party processor audits, EU and UK GDPR Representative services, and DPF self-certification. Technology assets are predominantly codified methodologies rather than software platforms: a proprietary DSAR management process, a bespoke DPIA assessment template, a standardized Transfer Impact Assessment (TIA) process framework, and a self-paced e-learning platform at courses.pembrokeprivacy.com.

The commercial model is professional services across four revenue streams: consulting engagements, a Training Academy offering IAPP-certified courses (CIPP/E, CIPM, CIPT, AIGP) plus bespoke live and self-paced training, EU/UK Representative retainers, and an AI Governance services line spanning framework development, risk assessment, policy drafting, and AI literacy programmes priced at €97 for individual e-learners and €2,400 for the AIGP certification package. Distribution is direct sales to enterprise clients combined with self-serve course purchases; the firm also generates inbound demand through LinkedIn Live events on AI governance, DSARs, and DPIAs.

The firm employs 13 staff across offices at 4 Upper Pembroke Street, Dublin (HQ) and 1 Mark Square, London (UK regional office), targeting enterprise customers in pharmaceutical, technology, financial, healthcare, and education sectors. Named enterprise clients include AIB, Tesco Ireland, Tallaght University Hospital, Trinity College Dublin, and Amoss Solicitors. Pembroke Privacy is a founding member of the Strand Alliance international network of independent privacy consultancies and an official IAPP training partner, with recognized logos spanning Dublin, London, Brussels, Munich, Zurich, Rome, and Tel Aviv. The firm was a 2023 Piccasso Awards finalist and remains privately held and founder-led with no disclosed institutional investors.

Name

Pembroke Privacy

Legal name

Pembroke Privacy Limited

Website

https://pembrokeprivacy.com

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

Pembroke Privacy is an Ireland- and UK-based data protection, privacy, and AI governance consultancy delivering outsourced DPO services, GDPR/EU AI Act advisory, and IAPP-certified training to enterprise clients in pharmaceutical, technology, and financial sectors.

Ownership category

akta.pro rank

Product category

Privacy and Data Protection Consulting

akta.pro industry

PRIMARYHDADAIAI

Privacy Governance & Consent Management

Hardware, Technology & Telecom/Cybersecurity/Governance, Risk & Compliance (GRC)

SECONDARYHDADAFAH

Privacy Management (Consent, DSAR, RoPA)

Hardware, Technology & Telecom/Cybersecurity/Data Security & Privacy (DLP, Encryption, Key Mgmt)

Keywords

• Data protection consulting
• GDPR compliance services
• Outsourced DPO services
• AI governance advisory
• Privacy certification training

Headquarters

HQ city

Dublin

HQ country

Ireland

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Marketing or Sales, Operations, Technology or R&D, Infrastructure

Revenue model

1. Professional Consulting Services: Revenue from DPO services (external, interim, and support), data protection impact assessments, data breach management, data subject access request management, gap assessments, and regulatory compliance advisory.
2. Training Services: IAPP certification training (CIPP/E, CIPM, CIPT, AIGP), live online courses, bespoke training programs, and self-paced e-learning courses generating recurring training revenue.
3. Representative Services: EU and UK Representative services for organizations required to designate representatives under GDPR Article 27.
4. AI Governance Services: AI governance framework development, AI risk assessment, AI policies and procedures, and AI literacy training programs.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

Pembroke Privacy is a data protection, privacy, and AI governance consultancy that helps organisations meet GDPR, EU AI Act, and other privacy law obligations. Its offerings span outsourced and interim Data Protection Officer (DPO) services, DPIAs, breach management, DSAR handling, international data transfer compliance, EU/UK Representative services, AI governance frameworks, and IAPP-certified training programs (CIPP/E, CIPM, CIPT, AIGP) delivered live online or via self-paced e-learning.

Product overview

Pembroke Privacy is a data protection, privacy, and AI governance consultancy operating as a unified service offering rather than a software product. The portfolio consists of three interconnected pillars: (1) Consulting Services including External DPO, DPO Support/Interim DPO, DPIA, Data Breach Management, DSAR Management, Gap Assessment, Direct Marketing, Microsoft SSPA, International Data Transfer, Third Party Audit, EU/UK Rep Services, and DPF Self-Certification; (2) AI Governance Services including AI Governance Framework, AI Risk Assessment, AI Policies and Procedures, and AI Literacy Programme; and (3) Training Academy comprising IAPP certification courses (CIPP/E, CIPM, CIPT, AIGP), AI Literacy ELearning, Data Protection Online Courses, Bespoke Self-Paced Training, and topic-specific live training sessions (General Awareness, Board Training, Data Breach Response, DSAR Training, Master Class). Services are delivered via in-house consultants, live online sessions, and a dedicated e-learning platform at courses.pembrokeprivacy.com.

Differentiator

Problem solved

Functional benefit

Products and services

• External DPO Services

Quantifiable outcome

• Reduces risk of data breach through staff training
• +2 more outcomes

Named customers6 records

Segments6 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Five partnerships are on record, tiered core and minor.

• International Association of Privacy Professionals (IAPP)coreStrategic or Co-development PartnerPembroke Privacy is an official IAPP training partner, delivering certified CIPP/E, CIPM, CIPT, and AIGP training courses. The partnership provides access to IAPP certification materials, exam vouchers, and official partner branding. This partnership positions Pembroke Privacy as a premier training institution for data protection professionals.
• Strand AlliancecoreStrategic or Co-development PartnerPembroke Privacy is a founding member of Strand Alliance, an international network of independent privacy consultancies, law firms, and external DPO providers based in Europe, Middle East, and Asia Pacific with partners in Dublin, London, Brussels, Munich, Zurich, Rome, and Tel Aviv. Members share values and way of working, offering clients local expertise combined with global industry knowledge.
• Or-HofminorStrategic or Co-development PartnerPartner in the Strand Alliance international network of data protection experts, based in Israel (Tel Aviv).
• PANETTA Consulting GroupminorStrategic or Co-development PartnerPartner in the Strand Alliance international network of privacy consultancies.
• Strand AdvisorycoreStrategic or Co-development PartnerPembroke Privacy has joined forces with Strand Advisory, a data protection consulting firm with global reach. Clients benefit from local expertise and relationships while gaining access to global colleagues through this partnership.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Hogan Lovells: Global law firm with a sizeable privacy and cybersecurity practice, serving multinational clients on GDPR, AI Act, and cross-border data transfer compliance. It competes at the higher end of the enterprise privacy mandate market that Pembroke Privacy also addresses.
• Bird & Bird: Global law firm with one of Europe's leading data protection and AI practices, providing advisory, DPO, and regulatory representation services. It competes with Pembroke Privacy for enterprise privacy mandates but with a full-service legal platform and significantly greater scale.
• TrustArc: TrustArc provides privacy compliance software and managed services, including privacy program management and DPO-as-a-service offerings. It competes with Pembroke Privacy across both consulting and managed-service lines, but at much larger scale and with proprietary technology.
• OneTrust: OneTrust is the dominant privacy management software platform spanning consent, DSAR, DPIA, and AI governance. While it is a software-led business rather than a consultancy, its product overlaps directly with Pembroke Privacy's service offerings (DSAR management, DPIA, RoPA) and it represents the primary technology-based alternative and potential partner.
• Deloitte: Big Four firm with a global privacy, data protection, and AI governance practice offering advisory, managed services, DPO support, and compliance transformation. It is the archetypal broad incumbent against which boutique consultancies like Pembroke Privacy compete for large enterprise mandates.

Emerging players

• Baringa Partners: Consultancy with established data privacy and AI risk practices serving financial services and regulated industries. Baringa competes with Pembroke Privacy in the same regulated-enterprise segments but covers a broader consulting mandate.

Others

• DataGuidance (OneTrust): Provider of privacy and data protection regulatory intelligence, research, and comparison tools used by privacy professionals globally. It is an enabling/adjacent data resource for the same privacy compliance audience that Pembroke Privacy serves.

Direct peers

• Wired Relations: A privacy consultancy based in Denmark offering outsourced DPO, AI governance, and data protection services to European clients. Like Pembroke Privacy, it is a specialist boutique consultancy focused on GDPR, AI Act compliance, and EU/UK Representative services for a similar enterprise customer base.
• Privacy Compliance Hub: A privacy management software and services firm providing tools and operational support for privacy program management, DPO functions, and data subject rights handling. It competes with Pembroke Privacy across similar service lines, though with a more productised technology base.
• Securys: A UK-based data privacy and cybersecurity consultancy offering DPO-as-a-service, GDPR compliance, and AI governance services. It is a closely comparable boutique consultancy with overlapping service offerings and target markets to Pembroke Privacy.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/PembrokePrivacy
• LinkedInlinkedin.com/company/pembroke-privacy

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Pembroke Privacy