15 years’ experience in information governance and data protection.

From the 1998 Act to the GDPR, UK GDPR, Data Protection Act 2018 and now the DUAA.

Most clients have been charity or public sector, with some private sector clients in digital or sales and services. More globally, I have delivered data protection consultancy in numerous sectors, from energy to education, from AI to manufacturing.

I have also delivered BCS-accredited FOI courses and provided FOI consultancy and training.

From running whole data protection programmes, to looking at some of your operations and providing project-based assistance or helping support and develop your own teams – my associates and I can provide whatever data protection, PECR or e-privacy  services you need.

WhatsApp-Image-2025-11-29-at-10.25.16-PM.jpeg

Bilal Ghafoor

Data Protection & FOI Consultant

BCS DP Practitioner CIPP/E CIPM FIP

Bilal has 15 years’ experience in running data protections programs, having lead these in many jurisdictions, including several large public and charity sector organisations

Sectors we have worked in

Government

Non-profit

Health

Education

Justice

Commerce

Digital

AI