Northern Ireland-based CRM and AI consultancy reinforces its commitment to responsible data management, privacy and client trust.
Atlanticus Digital Ltd has completed the Information Commissioner's Office (ICO) Data Protection Essentials programme. Our organisational certificate of completion was issued on 8 November 2026 and is valid until 8 November 2027, and Atlanticus Digital now appears on the ICO's Data Protection Essentials public register.
What is Data Protection Essentials?
Data Protection Essentials is the ICO's online training and self-assessment programme for small and medium-sized organisations and sole traders. The ICO describes it as bite-sized and self-paced, giving organisations the practical know-how to apply the essentials of data protection law in their everyday work. For an organisation, completing the programme involves both the training and a self-assessment carried out by its designated lead.
You can read more about the programme, alongside the ICO's other free guidance, on its advice hub for small and medium organisations.
Why it matters to the work we do
We are a Northern Ireland-based CRM, HubSpot and AI consultancy, working with organisations across Ireland and the UK. Much of our work involves helping clients organise, connect and automate systems that hold information about real people: contacts, customers, members and enquiries.
Whether we are onboarding a team onto HubSpot, tidying up CRM data, connecting systems together or helping a client think through how AI tools fit into their processes, getting the data protection basics right is part of doing that work properly. Clients give us access to their systems, and that trust has to be earned and kept.
Completing the programme gave us a structured opportunity to refresh our knowledge and to look again at how we handle information in our own business, from the enquiries we receive to the way we approach client projects.
What being on the register means, and what it doesn't
The Data Protection Essentials public register lists small organisations and sole traders that have chosen to share that they have completed the programme. Anyone can search it, and you can view our entry on the register.
It is worth being clear about what this does and does not mean:
- It shows that we have completed the ICO's data protection training and self-assessment programme.
- It is not a certification scheme or an ICO endorsement. As the ICO itself says, being on the register does not confirm that an organisation complies with data protection law.
- It does not mean the ICO has audited Atlanticus Digital or assessed our information security.
- It is separate from the ICO's register of data protection fee payers, which records organisations that have paid the data protection fee. The Data Protection Essentials register reflects completion of training, not fee payment.
We think that distinction matters. Overstating what a credential means doesn't help anyone, least of all the organisations trying to make sensible decisions about who they work with.
An ongoing responsibility
Data protection isn't something you complete once and forget. Our certificate runs for a year, and we will keep reviewing how we work as guidance, technology and our own practices change. If you would like to know how we handle personal information, our privacy policy sets out the details.
Useful ICO resources
If you run a small or medium-sized organisation and want to strengthen your own approach, the ICO's free resources are a good place to start:
- Data Protection Essentials public register: check which organisations have completed the programme.
- Advice for small and medium organisations: practical guidance, self-serve tools and the Data Protection Essentials programme itself.
- Data Protection Essentials sharing pack: the ICO's guidance for organisations talking about their completion.
If you are reviewing how your CRM handles personal information, or planning a HubSpot or AI project and want to get the foundations right, we are always happy to talk it through.