We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk
Data Protection People logo

Data Protection People review

Advisory firm

A Leeds data protection and information security consultancy offering outsourced DPO services, a subject access request bureau, GDPR audits, ISO 27001 and PCI DSS consultancy.

Relevant if you want DPO support and subject access request handling from one firm with named staff

Price Not published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

Data Protection People scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 3/5
Qualifications of the people who do the work 4/5
What it publishes about fees 1/5
Knowledge of your sector 4/5
Independence from what it sells 3/5
Who carries the risk if the advice is wrong 1/5

What Data Protection People offers, and what it publishes

You get a broad service from one firm: outsourced DPO packages, a SAR bureau for subject access requests, GDPR audits, ISO 27001 and PCI DSS work. Its About page says it has a 24+ person team and names Phil Brining (LLM in information rights law, PCI DSS QSA), Oluwagbenga Onojobi (CIPP/E) and Vaibhavi Deshpande (CIPM).

Data Protection People does not publish a price. Its outsourced DPO page names packages such as DPO Lite, Group DPO and Interim DPO but shows no fees. It does not publish professional indemnity cover or an ICO registration number.

Data Protection People also sells its own information management software, DataWise, and publishes no policy on keeping product recommendations separate from DPO advice. Its healthcare page covers NHS bodies, GP practices and care providers. Search results show a Trustpilot rating of around 5 out of 5 from roughly 56 reviews. We could not check the live page.

Strengths

  • Named leadership with published legal and technical credentials, including an LLM in information rights law and a PCI DSS QSA qualification
  • In-house SAR Bureau alongside the DPO service, giving a dedicated DSAR-handling capability
  • Dedicated sector pages (e.g. healthcare) with tailored compliance content rather than a single generic service page
  • Team includes IAPP-certified staff (CIPP/E, CIPM) named on the About page

Things to check

  • Does not publish pricing
  • No professional indemnity insurance disclosure found on the public site
  • Sells its own information management software (DataWise) alongside DPO advisory services

Common questions

Does Data Protection People publish its DPO prices?

No. Its outsourced DPO page names DPO Lite, Group DPO and Interim DPO but shows no fees, rate card or worked examples.

Does it publish professional indemnity cover?

No. We found no professional indemnity disclosure on its homepage, About page or outsourced DPO page.

Does it sell software as well as advice?

Yes. Its homepage lists its own information management software, DataWise, in its service range, with no published policy on keeping product recommendations separate from DPO advice.

Evidence for each Data Protection People score

Show our working

Notes behind each thing to check

  • Does not publish pricing (The Outsourced DPO service page lists package names but shows no fees or rate card (dataprotectionpeople.com/service/outsourced-dpo/, checked 2026-07-17).)
  • No professional indemnity insurance disclosure found on the public site (PI insurance was not mentioned on the About page or Outsourced DPO service page as checked (dataprotectionpeople.com/about/, dataprotectionpeople.com/service/outsourced-dpo/, checked 2026-07-17).)
  • Sells its own information management software (DataWise) alongside DPO advisory services (The homepage lists 'Information management software (DataWise)' as part of its service range, with no disclosed policy separating product recommendations from DPO advice (dataprotectionpeople.com/, checked 2026-07-17).)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 3/5 The Outsourced DPO page describes ICO liaison and security incident investigation support, but no named staff are tied to specific ICO cases and no outcomes are disclosed (dataprotectionpeople.com/service/outsourced-dpo/).
Qualifications of the people who do the work 4/5 About page names specific staff with credentials, Phil Brining (LLM, PCI DSS QSA), Oluwagbenga Onojobi (CIPP/E), Vaibhavi Deshpande (CIPM), though not the full 24+ team (dataprotectionpeople.com/about/).
What it publishes about fees 1/5 No prices, rate card or worked examples were found on the Outsourced DPO page; packages are named but not priced (dataprotectionpeople.com/service/outsourced-dpo/).
Knowledge of your sector 4/5 A dedicated healthcare sector page sets out tailored claims on special category data and SAR handling, though no healthcare-specific staff are individually named (dataprotectionpeople.com/key-sectors/healthcare-data-protection/).
Independence from what it sells 3/5 The firm sells its own DataWise software alongside advisory services, with no disclosed policy on separating product recommendations from DPO advice (dataprotectionpeople.com/).
Who carries the risk if the advice is wrong 1/5 No professional indemnity insurance or liability terms are disclosed on the homepage, About page or service pages checked (dataprotectionpeople.com/about/).

Sources for Data Protection People

  • Registered at Companies House as Data Protection People Limited (Company number 09706626, incorporated 28 July 2015, status: Active, registered office 25-27 The Tannery, 91 Kirkstall Road, Leeds, LS3 1HS) (Companies House, checked 17 July 2026)
  • No firm-level ICO registration number is published (The privacy notice states the company name, address and DPO contact but no ICO registration number) (dataprotectionpeople.com, checked 17 July 2026)
  • Publishes a defined outsourced DPO service scope (Services include Outsourced DPO, DPO Lite (smaller organisations), DPO for Schools, Group DPO, Privacy Officer, Interim DPO, SAR Bureau, GDPR audits, DPIAs, ISO 27001 and PCI DSS consultancy) (dataprotectionpeople.com, checked 17 July 2026)
  • Does not publish pricing (The Outsourced DPO service page lists package names (DPO Lite, Group DPO, Interim DPO) but shows no fees, rate card or worked examples) (dataprotectionpeople.com, checked 17 July 2026)
  • Publishes team size and named staff with individual credentials (About page states a 24+ person team and names Phil Brining (LLM information rights law, PCI DSS QSA), Oluwagbenga Onojobi (CIPP/E) and Vaibhavi Deshpande (CIPM)) (dataprotectionpeople.com, checked 17 July 2026)
  • Publishes dedicated sector pages with tailored content (A healthcare-specific page describes support for NHS bodies, GP practices and care providers and SAR handling for special category medical data, though no healthcare-specific staff are named) (dataprotectionpeople.com, checked 17 July 2026)
  • Trustpilot: A Trustpilot profile exists for dataprotectionpeople.com; search-indexed results show a rating of around 5 out of 5 from roughly 56 reviews, with reviewers citing the SAR service and staff responsiveness. Direct verification of the live page was blocked by Trustpilot's bot protection, so exact current figures should be treated as approximate. (Trustpilot, checked 17 July 2026)

Phil Brining (Founder & Managing Director) holds an LLM in information rights law and is a PCI DSS Qualified Security Assessor (QSA) (stated on dataprotectionpeople.com/about/) Oluwagbenga Onojobi (Data Protection Consultant) is CIPP/E certified (stated on dataprotectionpeople.com/about/) Vaibhavi Deshpande (Support Officer) is CIPM certified by IAPP (stated on dataprotectionpeople.com/about/) Kenechi Obetta (Cyber Security Consultant) has ISO 27001, ISO 27701 and ISO 22301 implementation experience (stated on dataprotectionpeople.com/about/)

First DPO or AI policySeeking ISO 42001 certificationAfter a breach or ICO contactRegulated sectors

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.