We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk

Data Privacy & Security Advisors, LLC (The DPSA) review

Advisory firm

A US privacy advisory firm offering an outsourced privacy office for US laws such as CCPA/CPRA and HIPAA, built around a named founding partner.

Relevant if you need an outsourced US privacy contact for CCPA/CPRA, HIPAA and state privacy laws

Price Not published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

Data Privacy & Security Advisors scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 2/5
Qualifications of the people who do the work 3/5
What it publishes about fees 2/5
Knowledge of your sector 3/5
Independence from what it sells 2/5
Who carries the risk if the advice is wrong 2/5

What Data Privacy & Security Advisors offers, and what it publishes

You get an outsourced privacy service called Privacy Office as a Service. Its services page names US laws including CCPA/CPRA, HIPAA, GLBA, COPPA and a list of state privacy statutes. The firm says founding partner James Koons holds CIPP/US, has 30+ years in data protection and IT security and has testified before US House and Senate committees.

Data Privacy & Security Advisors does not publish a price. Its services pages give no fees or cost ranges. It names two leaders, James Koons and George Whyte, though its copy describes a wider team of former CISOs, Chief Privacy Officers, Big 4 partners and attorneys. It publishes no client case studies.

The firm says it is a OneTrust Certified Expert, and it sells OneTrust set-up and migration as a paid service, a commercial tie to a privacy software vendor. It does not describe an AI governance practice. We searched Pennsylvania's business register and OpenCorporates and found no exact-name match for the firm.

Strengths

  • Founding partner James Koons holds CIPP/US and brings 30+ years of hands-on data-protection/IT-security experience, including expert-witness testimony before US House and Senate committees.
  • Explicit, named coverage of the in-scope US regime: CCPA/CPRA and HIPAA plus at least eight other state consumer-privacy statutes.
  • A defined outsourced-DPO offering ("Privacy Expert on Demand" / Privacy Office as a Service) rather than only one-off project work.
  • OneTrust Certified Expert status (all modules) signals real technical depth in the privacy-management tooling most mid-market clients already run.
  • Publishes a regulatory-tracking blog (e.g. covering the CA AG's DoorDash CCPA settlement and CPPA enforcement advisories), showing active engagement with US privacy enforcement.

Things to check

  • The public site names only two leadership figures (James Koons and George Whyte) despite marketing copy claiming a team of former CISOs, Chief Privacy Officers, Big 4 Partners and attorneys, none of whom are named.
  • No fee structure, pricing tiers, or engagement-cost ranges are published anywhere on the site.
  • The firm's paid OneTrust implementation/migration service and OneTrust Certified Expert status create a direct commercial tie to a privacy-software vendor.
  • No client case studies, named client logos, or testimonials are published to substantiate any regulatory-defence or incident-response track record.

Common questions

Does The DPSA publish its fees?

No. Its services pages give no pricing, fee ranges or engagement costs. Every quote needs a direct enquiry.

Is the firm on a public business register?

Not that we found. Searches of Pennsylvania's business register and OpenCorporates returned no exact-name match. A search for 'DPS Advisors' found five entities we could not match with confidence to the firm's addresses or its named partner.

Does it offer an outsourced DPO service?

Yes. The firm advertises Privacy Office as a Service and Privacy Expert on Demand, built around founding partner James Koons, CIPP/US.

Does it advise on AI governance?

Not on its site. We found no AI governance practice, named person or case study, and no reference to the NIST AI RMF or US state AI laws.

Evidence for each Data Privacy & Security Advisors score

Show our working

Notes behind each thing to check

  • The public site names only two leadership figures (James Koons and George Whyte) despite marketing copy claiming a team of former CISOs, Chief Privacy Officers, Big 4 Partners and attorneys, none of whom are named. (Leadership and leadership-original pages list just two named partners with one disclosed credential (CIPP/US) between them)
  • No fee structure, pricing tiers, or engagement-cost ranges are published anywhere on the site. (Services and Privacy-Office-as-a-Service pages contain no pricing information at all)
  • The firm's paid OneTrust implementation/migration service and OneTrust Certified Expert status create a direct commercial tie to a privacy-software vendor. (About-us and services pages list OneTrust implementation and migration as a sold service line)
  • No client case studies, named client logos, or testimonials are published to substantiate any regulatory-defence or incident-response track record. (About-us and services pages contain no named clients, case studies or references)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 2/5 No named incident-response engagements, breach cases or regulatory-defence outcomes are published; incident/breach work appears only in a third-party LinkedIn summary, absent from the firm's own services page.
Qualifications of the people who do the work 3/5 Founding partner holds CIPP/US and has testified before US House/Senate committees, but only one further named partner appears with no credential disclosed for him.
What it publishes about fees 2/5 No pricing, fee ranges, or engagement-cost structure is published anywhere on the site; all quotes require a direct sales enquiry.
Knowledge of your sector 3/5 Site claims work across financial services, healthcare, retail, technology and pharma but names no specific client engagements to verify sector depth.
Independence from what it sells 2/5 Firm is a paid OneTrust Certified Expert selling OneTrust implementation and migration, a direct commercial tie to a privacy-software vendor.
Who carries the risk if the advice is wrong 2/5 No professional-indemnity insurance, liability cap, or standing-behind-the-work language appears on the public site or terms of service.

Sources for Data Privacy & Security Advisors

  • LinkedIn lists the firm's founding year and headquarters (Founded 2016; HQ Washington, DC 20007) (linkedin.com, checked 20 September 2026)
  • Firm's published office address (48 South Market St., Suite 211, Elizabethtown, PA 17022) (thedpsa.com, checked 20 September 2026)
  • Founding Partner's credential and experience (James Koons, CIPP/US, 30+ years in data protection/IT security, has testified before US House and Senate committees) (thedpsa.com, checked 20 September 2026)
  • US regulatory frameworks the firm explicitly lists as served (CCPA/CPRA, HIPAA, GLBA, COPPA, plus VCDPA, UCPA, CPA, CDPA, DPDPA, ICDPA, MCDPA, OCPA, TIPA, TDPSA) (thedpsa.com, checked 20 September 2026)
  • Firm's disclosed vendor certification (OneTrust Certified Expert (all modules); also offers OneTrust implementation & migration as a paid service) (thedpsa.com, checked 20 September 2026)

CIPP/US OneTrust Certified Expert

First DPO or AI policyRegulated sectors

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.