# Pembroke Privacy

- **Type:** Advisory firm
- **Website:** https://pembrokeprivacy.com
- **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd)

A Dublin data protection and AI governance consultancy with a London office, offering outsourced data protection officers, EU and UK representative services and IAPP certification training.

## Pembroke Privacy scores

Scored 1 to 5 on six criteria. There is no overall score.

### Help when things go wrong: 3/5

Publishes data-breach-management and DSAR service pages and names qualified staff firm-wide, but discloses no regulator-engagement outcomes or incident case detail (pembrokeprivacy.com, checked 2026-07-16).

### Qualifications of the people who do the work: 4/5

Named practitioners with published IAPP (CIPP/E, CIPM, FIP) and solicitor credentials on the team page (checked 2026-07-16); credentials are firm-published rather than linked to an independent register.

### What it publishes about fees: 3/5

Training prices published in full (CIPP/E €1,349; €2,199 including exam and membership) but no consultancy or DPO fee model or figures anywhere on the site as of 2026-07-16.

### Knowledge of your sector: 3/5

DPO page cites health, financial-tech and global-tech experience, but no sector practice pages or sector-specific published work found as of 2026-07-16.

### Independence from what it sells: 4/5

Advice-and-training model with no software or toolkit products to sell; IAPP training partnership openly branded (pembrokeprivacy.com, checked 2026-07-16).

### Who carries the risk if the advice is wrong: 1/5

No PI insurance, liability terms or breach-response commitment published anywhere on the public site as of 2026-07-16 (FAQ and privacy policy checked).

## Sources for Pembroke Privacy

Every line carries the page it was read on and the date it was checked.

- Irish company registration (as reproduced from CRO data by SoloCheck)
  - Source: https://www.solocheck.ie/Irish-Company/Pembroke-Privacy-Limited-639312
  - Checked: 2026-07-16
- UK Companies House registration: Pembroke Privacy UK Limited, company number 15938251, incorporated 5 September 2024, status Active, registered office 2 Upperton Gardens, Eastbourne BN21 2AH; sole director Kate Colleary (appointed 5 September 2024)
  - Source: https://find-and-update.company-information.service.gov.uk/company/15938251
  - Checked: 2026-07-16
- Service scope: External/interim/support DPO services, data protection consulting (DPIA, breach management, DSARs, gap assessments), AI governance, EU and UK representative services, and IAPP certification training (CIPP/E, CIPM, CIPT, AIGP); offices listed in Dublin and at 1 Mark Square, London EC2A 4EG
  - Source: https://pembrokeprivacy.com/
  - Checked: 2026-07-16
- Consultancy pricing disclosure: The outsourced DPO service page and FAQ publish no fees, retainers, day rates or worked examples as of 2026-07-16
  - Source: https://pembrokeprivacy.com/data-protection-support-consulting-services/outsourced-data-protection-officer-dpo-services/
  - Checked: 2026-07-16
- Training pricing disclosure: CIPP/E training priced at €1,349 (course), with add-ons itemised, IAPP membership €275, eBook €65, exam €510, total €2,199, published on the training page
  - Source: https://pembrokeprivacy.com/iapp-certified-cippe-training/
  - Checked: 2026-07-16
- Published team credentials: Named team page lists Kate Colleary (qualified solicitor, CIPP/E, FIP, IAPP Country Leader for Ireland), Sara Bloomer (solicitor, CIPP/E, CIPM), Rachel Nyasani (CIPP/E, CIPM, LLM), Poojan Bulani (CIPP/E) and others
  - Source: https://pembrokeprivacy.com/about-pembroke-privacy/
  - Checked: 2026-07-16
- PI insurance disclosure: Does not publish professional indemnity insurance or liability terms on its public website as of 2026-07-16 (FAQ and privacy policy checked)
  - Source: https://pembrokeprivacy.com/frequently-asked-questions/
  - Checked: 2026-07-16
- Named client outcomes: Does not publish named client case studies on its DPO service page as of 2026-07-16; sectors referenced generically (health, financial-tech, global tech)
  - Source: https://pembrokeprivacy.com/data-protection-support-consulting-services/outsourced-data-protection-officer-dpo-services/
  - Checked: 2026-07-16
- AI-use disclosure: Privacy policy does not disclose how Pembroke Privacy itself uses AI tools or name any AI processors handling client data as of 2026-07-16
  - Source: https://pembrokeprivacy.com/privacy-policy/
  - Checked: 2026-07-16
- EU AI Act / ISO 42001 service claims: Offers EU AI Act-focused AI governance services (framework development using ISO 42001 as foundation, AI risk assessment, AI literacy training); self-declared, with no claim that the firm itself holds ISO 42001 certification
  - Source: https://pembrokeprivacy.com/ai-governance/
  - Checked: 2026-07-16
- UK GDPR representative service: Offers a UK Representative service addressing Article 27 UK GDPR for overseas companies, acting as contact point for the ICO and UK data subjects
  - Source: https://pembrokeprivacy.com/data-protection-support-consulting-services/uk-representative-services/
  - Checked: 2026-07-16

## What this provider publishes

Not published means we did not find it on the firm's own pages.

- Price: Published
- Indemnity cover: Not published
- Credentials: Published
- Independent accreditation: Not published
- Client results: Not published
- How it uses AI: Not published

## Strengths

- Publishes a full named team page with individual credentials, qualified solicitors plus CIPP/E, CIPM and FIP holders, led by founder Kate Colleary, solicitor, CIPP/E, FIP
- Dedicated AI-governance practice covering EU AI Act readiness, AI risk assessment, ISO 42001-based framework design and AI-literacy training
- Verifiable UK footprint: London office, UK-registered subsidiary Pembroke Privacy UK Limited (Companies House 15938251, incorporated 5 September 2024) and a UK GDPR Article 27 representative service
- IAPP Official Training Partner with fully itemised published training prices, e.g. CIPP/E at €1,349 plus exam and membership costs

## Things to check

Each one carries the factual basis it rests on.

- Does not publish any consultancy or DPO-service pricing, fees are quote-only.
  - Basis: Outsourced DPO service page and FAQ show no fees, retainers, day rates or worked examples as of 2026-07-16 (pembrokeprivacy.com).
- Ask for its insurance cover and contract terms. We found neither explained in its FAQ or privacy policy.
  - Basis: FAQ (pembrokeprivacy.com/frequently-asked-questions/) and privacy policy checked 2026-07-16 contain no insurance or liability disclosure.
- Ask for named client examples and how the firm uses AI. Its DPO page and privacy policy do not explain these.
  - Basis: DPO service page shows no named clients; privacy policy (pembrokeprivacy.com/privacy-policy/) contains no own-AI-use disclosure, both checked 2026-07-16.

## Where this firm appears

- [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment)
- [After a data breach: what UK law asks of you](https://theassurancedesk.com/best/post-breach)
- [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed)
- [Which data protection, AI governance and cyber security providers publish a price?](https://theassurancedesk.com/lists/providers-that-publish-a-price)
- [Compare providers](https://theassurancedesk.com/compare)

---

**Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in.

**Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here.

**Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.
