
Our Values
At Black Penny we strive to be:
- Knowledgeable but not assuming
- Confident but not arrogant
- Professional but not stuffy
- Collaborative but not passive
- Disruptive but not contentious

Alan Crawford – CIO @ City & Guilds Group
“’What Black Penny have done I’ve found a real help for me and I know my colleagues and peers have been impressed with the output”
“This type of analysis really helps us to make sure we make the investments in the right place”

Andrew Heggie – Group Commercial Director @ Woodrow Mercer
“One of the things I found refreshing with these guys it wasn’t just a box ticking exercise and it wasn’t just about being compliant and that was it. It was about understanding some of the ways we use our data and off the back of this we will actually be able to use it more effectively.”
Who we have worked with
Our Services
Data Protection Officer as a Service
DPO as a service is a practical and cost-effective solution for organisations that don’t have the requisite data protection expertise and knowledge to fulfil their Data Protection Officer obligations under the GDPR and Data Protection Act 2018. An outsource mode can be cost effective.
Data Protection Consulting
Data protection is a foundational pillar for all organisations. This requires mandatory processes and policies to demonstrate an organisations accountability. By working through a proven and robust alignment framework, Black Penny can help embed this pillar into your organisation.
ISO/IEC 27001 Readiness
ISO 27001 is an information security standard adopted by many organisations to manage their own governance and prove to their customers that they secure their data appropriately. As a framework based standard it is essential to adopt the right tools, policies and processes to gain the certification.
The Compliance Space
To demonstrate strong alignment to data privacy legislation and manage data protection effectively an organisation should use a robust framework. Black Penny Consulting partner with The Compliance Space platform to manage our clients operational processes and maintain data processing records.
