We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk
Pembroke Privacy logo

Pembroke Privacy review

Advisory firm

A Dublin data protection and AI governance consultancy with a London office, offering outsourced data protection officers, EU and UK representative services and IAPP certification training.

Relevant if you need one adviser for EU and UK GDPR work and want named, qualified staff

Price Published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

Pembroke Privacy scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 3/5
Qualifications of the people who do the work 4/5
What it publishes about fees 3/5
Knowledge of your sector 3/5
Independence from what it sells 4/5
Who carries the risk if the advice is wrong 1/5

What Pembroke Privacy offers, and what it publishes

You can see who you would work with. Its team page names staff and their credentials, including solicitors and holders of CIPP/E, CIPM and FIP. Founder Kate Colleary leads the firm. It has a London office, a UK company and a UK GDPR Article 27 representative service. Its AI governance work is built around the EU AI Act.

Pembroke Privacy does not publish a price for DPO or consultancy work. Those are by quote. It does publish training prices: the CIPP/E course is €1,349, or €2,199 with the exam, eBook and IAPP membership. It does not publish its professional indemnity insurance, liability terms or named client case studies.

The firm says its AI governance frameworks use ISO 42001 as a foundation. It makes no claim to hold that certification itself. Its privacy policy does not say how it uses AI or name any AI processors that handle client data. Its UK company, Pembroke Privacy UK Limited, was set up in September 2024.

Strengths

  • Publishes a full named team page with individual credentials, qualified solicitors plus CIPP/E, CIPM and FIP holders, led by founder Kate Colleary, solicitor, CIPP/E, FIP
  • Dedicated AI-governance practice covering EU AI Act readiness, AI risk assessment, ISO 42001-based framework design and AI-literacy training
  • Verifiable UK footprint: London office, UK-registered subsidiary Pembroke Privacy UK Limited (Companies House 15938251, incorporated 5 September 2024) and a UK GDPR Article 27 representative service
  • IAPP Official Training Partner with fully itemised published training prices, e.g. CIPP/E at €1,349 plus exam and membership costs

Things to check

  • Does not publish any consultancy or DPO-service pricing, fees are quote-only.
  • Ask for its insurance cover and contract terms. We found neither explained in its FAQ or privacy policy.
  • Ask for named client examples and how the firm uses AI. Its DPO page and privacy policy do not explain these.

Common questions

Does Pembroke Privacy publish its prices?

Partly. Training prices are published in full, for example the CIPP/E course at €1,349. DPO and consultancy work is quote only, with no fees, retainers or day rates on its site.

Is Pembroke Privacy a UK firm?

It is Irish, with a UK arm. Its main company is registered in Dublin. It has a London office, a UK company set up in September 2024, and a UK GDPR Article 27 representative service.

Who runs Pembroke Privacy?

Founder and director Kate Colleary, a qualified solicitor who holds CIPP/E and FIP and is IAPP Country Leader for Ireland, according to the firm's team page.

Evidence for each Pembroke Privacy score

Show our working

Notes behind each thing to check

  • Does not publish any consultancy or DPO-service pricing, fees are quote-only. (Outsourced DPO service page and FAQ show no fees, retainers, day rates or worked examples as of 2026-07-16 (pembrokeprivacy.com).)
  • Ask for its insurance cover and contract terms. We found neither explained in its FAQ or privacy policy. (FAQ (pembrokeprivacy.com/frequently-asked-questions/) and privacy policy checked 2026-07-16 contain no insurance or liability disclosure.)
  • Ask for named client examples and how the firm uses AI. Its DPO page and privacy policy do not explain these. (DPO service page shows no named clients; privacy policy (pembrokeprivacy.com/privacy-policy/) contains no own-AI-use disclosure, both checked 2026-07-16.)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 3/5 Publishes data-breach-management and DSAR service pages and names qualified staff firm-wide, but discloses no regulator-engagement outcomes or incident case detail (pembrokeprivacy.com, checked 2026-07-16).
Qualifications of the people who do the work 4/5 Named practitioners with published IAPP (CIPP/E, CIPM, FIP) and solicitor credentials on the team page (checked 2026-07-16); credentials are firm-published rather than linked to an independent register.
What it publishes about fees 3/5 Training prices published in full (CIPP/E €1,349; €2,199 including exam and membership) but no consultancy or DPO fee model or figures anywhere on the site as of 2026-07-16.
Knowledge of your sector 3/5 DPO page cites health, financial-tech and global-tech experience, but no sector practice pages or sector-specific published work found as of 2026-07-16.
Independence from what it sells 4/5 Advice-and-training model with no software or toolkit products to sell; IAPP training partnership openly branded (pembrokeprivacy.com, checked 2026-07-16).
Who carries the risk if the advice is wrong 1/5 No PI insurance, liability terms or breach-response commitment published anywhere on the public site as of 2026-07-16 (FAQ and privacy policy checked).

Sources for Pembroke Privacy

  • Irish company registration (as reproduced from CRO data by SoloCheck) (Pembroke Privacy Limited, Irish CRO company number 639312, registered 10 December 2018, status Normal, registered address Greenway Iconic Offices, 112-114 St Stephens Green, Dublin 2, D02 TD28) (solocheck.ie, checked 16 July 2026)
  • UK Companies House registration: Pembroke Privacy UK Limited, company number 15938251, incorporated 5 September 2024, status Active, registered office 2 Upperton Gardens, Eastbourne BN21 2AH; sole director Kate Colleary (appointed 5 September 2024) (Companies House, checked 16 July 2026)
  • Service scope: External/interim/support DPO services, data protection consulting (DPIA, breach management, DSARs, gap assessments), AI governance, EU and UK representative services, and IAPP certification training (CIPP/E, CIPM, CIPT, AIGP); offices listed in Dublin and at 1 Mark Square, London EC2A 4EG (pembrokeprivacy.com, checked 16 July 2026)
  • Consultancy pricing disclosure: The outsourced DPO service page and FAQ publish no fees, retainers, day rates or worked examples as of 2026-07-16 (pembrokeprivacy.com, checked 16 July 2026)
  • Training pricing disclosure: CIPP/E training priced at €1,349 (course), with add-ons itemised, IAPP membership €275, eBook €65, exam €510, total €2,199, published on the training page (pembrokeprivacy.com, checked 16 July 2026)
  • Published team credentials: Named team page lists Kate Colleary (qualified solicitor, CIPP/E, FIP, IAPP Country Leader for Ireland), Sara Bloomer (solicitor, CIPP/E, CIPM), Rachel Nyasani (CIPP/E, CIPM, LLM), Poojan Bulani (CIPP/E) and others (pembrokeprivacy.com, checked 16 July 2026)
  • PI insurance disclosure: Does not publish professional indemnity insurance or liability terms on its public website as of 2026-07-16 (FAQ and privacy policy checked) (pembrokeprivacy.com, checked 16 July 2026)
  • Named client outcomes: Does not publish named client case studies on its DPO service page as of 2026-07-16; sectors referenced generically (health, financial-tech, global tech) (pembrokeprivacy.com, checked 16 July 2026)
  • AI-use disclosure: Privacy policy does not disclose how Pembroke Privacy itself uses AI tools or name any AI processors handling client data as of 2026-07-16 (pembrokeprivacy.com, checked 16 July 2026)
  • EU AI Act / ISO 42001 service claims: Offers EU AI Act-focused AI governance services (framework development using ISO 42001 as foundation, AI risk assessment, AI literacy training); self-declared, with no claim that the firm itself holds ISO 42001 certification (pembrokeprivacy.com, checked 16 July 2026)
  • UK GDPR representative service: Offers a UK Representative service addressing Article 27 UK GDPR for overseas companies, acting as contact point for the ICO and UK data subjects (pembrokeprivacy.com, checked 16 July 2026)

IAPP Official Training Partner (badge shown on pembrokeprivacy.com training pages, checked 2026-07-16)

First DPO or AI policyExposed to the EU AI ActAfter a breach or ICO contact

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.