Who We Are
Mount Sinai Consultants LTD (MSCL) is a team of experienced data protection consultants. The company was founded in 2012 to deliver innovative solutions that address dynamic information governance services. We have the passion and commitment for solving our clients' compliance challenges within legal time limits and customer deadlines.
Please visit our services page for other service provisions.


Our Story
MSCL began by helping organisations meet their obligations under the Data Protection Act, the Freedom of Information Act and the Environmental Information Regulations, often stepping in to clear backlogs of requests that had built up over months. Over time our clients asked us to do more, and our services grew to include acting as an outsourced Data Protection Officer, NHS Data Security and Protection Toolkit compliance, redaction, records management and training.
From our start in compliance, we have also expanded into ESOL (English for Speakers of Other Languages) training and AI advice and risk assessments, so that we can support organisations as technology and regulation continue to change.
Our Mission
Our mission is simple: to make data protection and information governance manageable for every organisation we work with. We do that by giving clear, practical advice, by doing the hard work alongside your team, and by leaving you with processes that keep working long after a project ends.
A Data Protection Consultant Based in Buckinghamshire
Our corporate office is at 78 Frederick Street in Waddesdon, near Aylesbury, Buckinghamshire. From here our data protection consultants support organisations across Aylesbury Vale, High Wycombe, Milton Keynes, Oxford and London, and our team works remotely and on site with clients throughout England, Wales, Scotland and Ireland, as well as in Africa.
Being a smaller, specialist consultancy means you deal directly with experienced people who know your organisation, rather than a different contact every time you call.


Our Values
- We only promise what we can deliver – honest advice, realistic timescales and no hidden surprises.
- Expertise – deep, practical knowledge of the UK GDPR, the Data Protection Act 2018, FOI and records management.
- Flexibility – a flexible contract approach that caters to your specific compliance needs without burdening your organisation financially.
- Partnership – an initiative-taking approach and a clear path that supports your ongoing compliance journey.
- People – we continue to seek the right talent for the right job, because a healthy culture is the foundation of our success.
How Our Data Protection Consultants Work With You
Every engagement follows the same straightforward approach, whether it is a one-off project or ongoing support:
- An initial conversation – we listen to what you need, the deadlines you face and any concerns from your board, regulators or service users.
- A review of where you are now – we look at your existing policies, records of processing, open requests and recent incidents so that our advice is grounded in reality.
- A clear, prioritised plan – you receive a practical plan with timescales and costs agreed up front, in line with our promise to only commit to what we can deliver.
- Delivery alongside your team – our consultants carry out the work, from handling requests and redaction to drafting policies and delivering training, keeping you updated throughout.
- Ongoing support – once the immediate work is complete, many clients keep us on as their outsourced Data Protection Officer or call on our advisory service when new issues arise.
This approach means you always know what is happening, what it will cost and what your organisation needs to do next to stay compliant with data protection law.
Clear communication at every stage
Data protection can feel technical, so we explain our recommendations in plain English and put them in writing. You will always know who is working on your project, what has been done, what is next and whether anything needs a decision from you. Regular updates mean there are no surprises, and our reports are written so that they can be shared with your senior leadership team or board without any rewriting.
Our Areas of Expertise
As experienced data protection consultants, we cover the full range of information governance work that organisations need, either as individual projects or as part of an ongoing package:
- UK GDPR and Data Protection Act 2018 compliance – audits, gap analysis, policies, privacy notices and records of processing.
- Subject access requests and individual rights – handling requests end to end, including the management of backlogs.
- Freedom of Information and Environmental Information Regulations – request handling, exemptions advice and backlog management for public authorities.
- Redaction – careful redaction of personal and exempt information for disclosures under the Data Protection Act, FOI and EIR.
- Outsourced Data Protection Officer – an independent, experienced DPO without the cost of a full-time appointment.
- NHS Data Security and Protection Toolkit (DSPT) – helping health and care organisations complete and evidence their submission.
- Records management and training – retention schedules, practical guidance and staff training on GDPR, FOI and records management.
Find out more on our outsourced DPO and data protection services page.
Confidentiality and Quality You Can Rely On
The information we handle for clients is often sensitive, from employee records to health information. Every data protection consultant on our team works to strict confidentiality standards, uses secure methods for sharing information and follows clear, documented processes so that work is consistent and can be checked. We keep clients informed throughout, and we are always happy to explain the reasoning behind our advice so that your own team builds confidence and knowledge along the way.
Frequently Asked Questions About Our Data Protection Consultants
Answers to the questions we are asked most often about who we are and how we work.
Where are your data protection consultants based?
Our office is at 78 Frederick Street in Waddesdon, near Aylesbury in Buckinghamshire. We support organisations across the UK, working both remotely and on site, as well as clients in Africa.
How long has Mount Sinai Consultants been operating?
Mount Sinai Consultants LTD was founded in 2012 and has been helping organisations with data protection, Freedom of Information and wider information governance ever since.
What types of organisation do you work with?
We work with local authorities and other public bodies, NHS trusts, GP practices and care providers, schools and academies, housing associations, charities and private businesses of all sizes.
Can you act as our Data Protection Officer?
Yes. Our outsourced DPO service gives you an independent, experienced Data Protection Officer without the cost of a full-time appointment.
How do we get started?
Call us on 01296 298609 or send us an enquiry. We will arrange an initial conversation to understand what you need and then set out a clear proposal.
Who We Work With
Our information governance consultants work with a wide range of organisations, including local authorities and other public bodies, NHS trusts, GP practices and care providers, schools and academies, housing associations, charities and private businesses. Each has different risks and pressures, so we always tailor our approach rather than offering a one-size-fits-all package.
Speak to a Data Protection Consultant Today
Whether you need urgent help with a data breach, support with a backlog of subject access requests or a long-term outsourced DPO, we would be glad to help. Call 01296 298609, send us an enquiry or find out why organisations choose MSCL.
Mount Sinai Consultants Ltd is registered in England and Wales, company number 08048792.
