About Clark & Company
The Practice
Clark & Company Information Governance Services is a specialist information governance practice working with higher education institutions, further education colleges, schools, multi-academy trusts, local authorities, and public sector organisations across the UK.
The practice was established to address a gap that has become increasingly visible as information governance obligations have grown in complexity. Most organisations in education and the public sector face the same problem: significant, overlapping regulatory requirements across data protection, cyber security, and AI governance — without the in-house resource or specialist expertise to manage them with confidence.
Clark & Company exists to close that gap. Not with generic compliance frameworks, but with sector-specific expertise, practical judgement, and advice that holds up under scrutiny.
“Good information governance isn’t about ticking boxes. It’s about building something that holds up when it matters.”
Craig Clark, Director
Craig Clark founded Clark & Company in 2016, and works across information governance, cyber security and AI governance in the education and public sectors.
Before establishing the practice, Craig worked as an in-house Data Protection Officer and cyber security specialist, giving him direct experience of the pressures, priorities, and practical realities that his clients face. That background shapes everything the practice does. Advice is grounded in operational reality, not theoretical compliance positions.
Craig holds a range of professional credentials across the full scope of the practice’s service offer, reflecting a commitment to maintained, verifiable expertise rather than broad-brush advisory.
Credentials
Data Protection
- Certified Information Privacy Professional Europe (CIPP/E), IAPP
- Former in-house Data Protection Officer
AI Governance
- AI Governance Professional (AIGP), IAPP
- AI Governance Program Architect, Logical AI Governance
Information Security
- CompTIA Security+
- ISO 27001 Lead Implementer
- Certified Information Security Manager
Sector Roles and Contributions
- Group Chair, Information Rights Special Interest Group, IRMS.
- Former in house Chief Information Security Officer (CISO) & Data Protection Officer (DPO)
What the Practice Covers
Clark & Company’s work spans three connected disciplines data protection and information governance, cyber security, and AI governance. The practice also provides strategic retained advisory to senior leadership teams and boards who need a named, senior practitioner on an ongoing basis.
Full details of all services, pricing, and engagement models are on the Services pages.
Working with Clark & Company
Every engagement begins with a conversation. There is no standard onboarding process, no account management layer, and no handoff to a junior team. Clients work directly with the practitioner responsible for their account from the first conversation to the last deliverable.
If you are ready to have that conversation, the booking link below goes directly to Craig Clark’s diary.