# Data Protection People - **Type:** Advisory firm - **Website:** https://dataprotectionpeople.com/ - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A Leeds data protection and information security consultancy offering outsourced DPO services, a subject access request bureau, GDPR audits, ISO 27001 and PCI DSS consultancy. ## Data Protection People scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 3/5 The Outsourced DPO page describes ICO liaison and security incident investigation support, but no named staff are tied to specific ICO cases and no outcomes are disclosed (dataprotectionpeople.com/service/outsourced-dpo/). ### Qualifications of the people who do the work: 4/5 About page names specific staff with credentials, Phil Brining (LLM, PCI DSS QSA), Oluwagbenga Onojobi (CIPP/E), Vaibhavi Deshpande (CIPM), though not the full 24+ team (dataprotectionpeople.com/about/). ### What it publishes about fees: 1/5 No prices, rate card or worked examples were found on the Outsourced DPO page; packages are named but not priced (dataprotectionpeople.com/service/outsourced-dpo/). ### Knowledge of your sector: 4/5 A dedicated healthcare sector page sets out tailored claims on special category data and SAR handling, though no healthcare-specific staff are individually named (dataprotectionpeople.com/key-sectors/healthcare-data-protection/). ### Independence from what it sells: 3/5 The firm sells its own DataWise software alongside advisory services, with no disclosed policy on separating product recommendations from DPO advice (dataprotectionpeople.com/). ### Who carries the risk if the advice is wrong: 1/5 No professional indemnity insurance or liability terms are disclosed on the homepage, About page or service pages checked (dataprotectionpeople.com/about/). ## Sources for Data Protection People Every line carries the page it was read on and the date it was checked. - Registered at Companies House as Data Protection People Limited - Source: https://find-and-update.company-information.service.gov.uk/company/09706626 - Checked: 2026-07-17 - No firm-level ICO registration number is published - Source: https://dataprotectionpeople.com/privacy-notice/ - Checked: 2026-07-17 - Publishes a defined outsourced DPO service scope - Source: https://dataprotectionpeople.com/service/outsourced-dpo/ - Checked: 2026-07-17 - Does not publish pricing - Source: https://dataprotectionpeople.com/service/outsourced-dpo/ - Checked: 2026-07-17 - Publishes team size and named staff with individual credentials - Source: https://dataprotectionpeople.com/about/ - Checked: 2026-07-17 - Publishes dedicated sector pages with tailored content - Source: https://dataprotectionpeople.com/key-sectors/healthcare-data-protection/ - Checked: 2026-07-17 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Not published - How it uses AI: Not published ## Strengths - Named leadership with published legal and technical credentials, including an LLM in information rights law and a PCI DSS QSA qualification - In-house SAR Bureau alongside the DPO service, giving a dedicated DSAR-handling capability - Dedicated sector pages (e.g. healthcare) with tailored compliance content rather than a single generic service page - Team includes IAPP-certified staff (CIPP/E, CIPM) named on the About page ## Things to check Each one carries the factual basis it rests on. - Does not publish pricing - Basis: The Outsourced DPO service page lists package names but shows no fees or rate card (dataprotectionpeople.com/service/outsourced-dpo/, checked 2026-07-17). - No professional indemnity insurance disclosure found on the public site - Basis: PI insurance was not mentioned on the About page or Outsourced DPO service page as checked (dataprotectionpeople.com/about/, dataprotectionpeople.com/service/outsourced-dpo/, checked 2026-07-17). - Sells its own information management software (DataWise) alongside DPO advisory services - Basis: The homepage lists 'Information management software (DataWise)' as part of its service range, with no disclosed policy separating product recommendations from DPO advice (dataprotectionpeople.com/, checked 2026-07-17). ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [After a data breach: what UK law asks of you](https://theassurancedesk.com/best/post-breach) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.