
ABOUT US

Established in 2007, we are a data protection consultancy business providing practical privacy and data protection compliance advice at attractive rates.
Lead Consultant Gary Brooks has over 20 years' experience as a data protection specialist and has provided data protection compliance advice to some of the UK's leading businesses, including secondments to Tesco and BP.
Gary worked on some of the very first data protection compliance programmes for online businesses during the early days of the internet and has been working in the field ever since. After reading law at Cambridge University, Gary commenced his legal training at city law firm Bryan Cave Leighton Paisner (BCLP) , qualifying in 2001 as a specialist data protection lawyer. Gary headed the Data Protection Unit at BCLP from 2004 to 2007, before leaving the legal profession and setting up his data protection consultancy business, Data Protected.
​
He has particular expertise of the data protection compliance issues affecting retailers, e-businesses, energy companies and television production companies, but has experience across most sectors including the public sector. Clients range from large multinationals with established compliance programmes to SMEs who need to start a privacy compliance framework from scratch.
Particular areas of expertise include the privacy aspects of direct marketing and customer loyalty schemes, customer data analytics and profiling activities and e-privacy compliance.
​
Gary is a contributor to legal and industry journals on privacy and data protection.
​
​
OUR VISION
Our aim is to provide pragmatic, risk-based privacy advice.
​
We believe that data protection is about more than legal compliance – it is key to earning and maintaining trust in your organisation, particularly in a world which is becoming increasingly digital. We therefore encourage clients to look at data protection holistically, focussing on the competitive and reputational benefits to be gained from promoting a culture of data privacy within their organisation.
Our approach involves understanding how your organisation uses personal data and identifying your commercial objectives to ensure that the compliance efforts are proportionate and workable.
We know that it can be difficult to find clear, practical advice in this area, so our aim is to keep it simple and to make sure it works for you!
​
​
​
​