# Data Privacy & Security Advisors, LLC (The DPSA) - **Type:** Advisory firm - **Website:** https://thedpsa.com - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A US privacy advisory firm offering an outsourced privacy office for US laws such as CCPA/CPRA and HIPAA, built around a named founding partner. ## Data Privacy & Security Advisors scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 2/5 No named incident-response engagements, breach cases or regulatory-defence outcomes are published; incident/breach work appears only in a third-party LinkedIn summary, absent from the firm's own services page. ### Qualifications of the people who do the work: 3/5 Founding partner holds CIPP/US and has testified before US House/Senate committees, but only one further named partner appears with no credential disclosed for him. ### What it publishes about fees: 2/5 No pricing, fee ranges, or engagement-cost structure is published anywhere on the site; all quotes require a direct sales enquiry. ### Knowledge of your sector: 3/5 Site claims work across financial services, healthcare, retail, technology and pharma but names no specific client engagements to verify sector depth. ### Independence from what it sells: 2/5 Firm is a paid OneTrust Certified Expert selling OneTrust implementation and migration, a direct commercial tie to a privacy-software vendor. ### Who carries the risk if the advice is wrong: 2/5 No professional-indemnity insurance, liability cap, or standing-behind-the-work language appears on the public site or terms of service. ## Sources for Data Privacy & Security Advisors Every line carries the page it was read on and the date it was checked. - LinkedIn lists the firm's founding year and headquarters - Source: https://www.linkedin.com/company/dps-advisors-llc - Checked: 2026-09-20 - Firm's published office address - Source: https://thedpsa.com/about-us/ - Checked: 2026-09-20 - Founding Partner's credential and experience - Source: https://thedpsa.com/leadership/ - Checked: 2026-09-20 - US regulatory frameworks the firm explicitly lists as served - Source: https://thedpsa.com/services - Checked: 2026-09-20 - Firm's disclosed vendor certification - Source: https://thedpsa.com/about-us/ - Checked: 2026-09-20 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Not published - How it uses AI: Not published ## Strengths - Founding partner James Koons holds CIPP/US and brings 30+ years of hands-on data-protection/IT-security experience, including expert-witness testimony before US House and Senate committees. - Explicit, named coverage of the in-scope US regime: CCPA/CPRA and HIPAA plus at least eight other state consumer-privacy statutes. - A defined outsourced-DPO offering ("Privacy Expert on Demand" / Privacy Office as a Service) rather than only one-off project work. - OneTrust Certified Expert status (all modules) signals real technical depth in the privacy-management tooling most mid-market clients already run. - Publishes a regulatory-tracking blog (e.g. covering the CA AG's DoorDash CCPA settlement and CPPA enforcement advisories), showing active engagement with US privacy enforcement. ## Things to check Each one carries the factual basis it rests on. - The public site names only two leadership figures (James Koons and George Whyte) despite marketing copy claiming a team of former CISOs, Chief Privacy Officers, Big 4 Partners and attorneys, none of whom are named. - Basis: Leadership and leadership-original pages list just two named partners with one disclosed credential (CIPP/US) between them - No fee structure, pricing tiers, or engagement-cost ranges are published anywhere on the site. - Basis: Services and Privacy-Office-as-a-Service pages contain no pricing information at all - The firm's paid OneTrust implementation/migration service and OneTrust Certified Expert status create a direct commercial tie to a privacy-software vendor. - Basis: About-us and services pages list OneTrust implementation and migration as a sold service line - No client case studies, named client logos, or testimonials are published to substantiate any regulatory-defence or incident-response track record. - Basis: About-us and services pages contain no named clients, case studies or references ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.