About Us

Our Founding Principals

Our Founding Principals at BLS Stay Compliant

Our Story so Far

BLS Stay Compliant was established back in 2014 by Gary Baker, Sandra Lomax and Lynne Shackley.

As founders we had all enjoyed successful careers in public service and businesses at senior level and felt that the Data Protection sector and advice, as it was then, was somewhat subdued with little practical and pragmatic guidance available.

Our unique experience and positive can-do approach was immediately popular with our peers and we were soon approached by some well-established, blue chip, global companies like Microsoft and KPMG to provide specialist Information Governance advice.

At the same time, we continued our own personal development, gaining new qualifications and roles which would ultimately enhance our business. We continue to develop our personal skills and abilities and attend several IG conferences and events across the world each year to maintain our up-to-date knowledge.

In 2016 we were chosen to provide IG advice to the newly formed Manchester Connect Group, one of only 3 consultants alongside KPMG and PCW to be selected and in the same year we began working with a local Software provider and established one of the first service applications to help public organisations deal with Freedom of Information requests.

By the end of our third year in business we had trained over 5000 senior IG and medical professionals in the application of GDPR to their sector.

Along the way we have been supported by some great, handpicked staff who all share our high standards and ethical approach. We are fortunate to have engaged with some really encouraging clients and networks and built our company to the position where we have now been persuaded to expand into providing GDPR advice and bespoke support for non-EU organisations.

We have continuously provided solid, expert, quality advice to our clients to help them to comply with their obligations, whilst at the same time making full use of the huge amount of positiveness in the GDPR legislation and associated codes of practice. They appreciate that only with our full depth of experience and understanding gained from decades of working at senior level can you hope to guide companies and organisations through the legal landscape.

We are immensely proud that our first handful of clients we gained back in 2014 remain loyal and supportive clients to this day.

We are lucky to have some very knowledgeable business advisor and some fantastic go-to, dependable people who have successful careers as CEOs and Chairs of public organisations that we can bounce ideas and concerns off.

To date we have only expanded following some deep thinking about our business model, timing, patience and cultivation of our company culture. We have always resisted growing too quickly by cutting corners to meet demands.

Following a noticeable, Post-pandemic increase in demand for our services we held lots of internal discussions and consultations, and with encouragement, support and advice from experienced Business Consultants, in 2022 we embarked on an ambitious growth plan.

However, our Senior Management Team are resolute that our guiding principles will endure; we will not sacrifice our very high standards simply to grow our business. We are very mindful of the importance of maintaining our products, clients and services that served as the foundation for the growth of our company to date, and that they are not sacrificed to make space for future focus.

We now rely on our own committed employed staff who are fully engaged in the ethos and values of our business and now we are in the fortunate position that we don’t need to use any associates to support our clients, all our work is kept in house within our brilliant team.

We have never been so focused on the bottom line and expansion that we lost sight of our company purpose or our own, and our staff’s, quality of life.

At work, if we are not delivering or are immersed in our core values and maintaining our integrity, we will all feel that we have lost sight of our initial purpose.

We would like to thank all BLS’s past and future clients, supporters and our fantastic staff, to whom our immense gratitude is owed for creating the envied reputation and trust that BLS enjoys today.

Gary

Data Protection

Data Protection Officer

Data Protection Officer

Data Protection (GDPR) Overview

Data Protection (GDPR) Overview

Data Protection Impact Assessment (DPIA)

Data Protection Impact Assessment (DPIA)
Subject Access Requests

Subject Access Requests & Redaction (SAR Training)

Subject Access Requests & Redaction (SAR Training)

Subject Access Requests Workshop (Advanced)

Subject Access Requests Workshop (Advanced)
RIPA For Local Authorities

Authorisation & Oversight for Senior Officers

Authorisation & Oversight for Senior Officers

A Practical Approach for Enforcement Officers

A Practical Approach for Enforcement Officers
Caldicott Guardian

Caldicott Guardian Training

Caldicott Guardian Training

Advanced Caldicott Guardian

Advanced Caldicott Guardian
Senior Information Risk Owner

Senior Risk Owner Training

Senior Risk Owner Training

Advanced Senior Risk Owner Training

Advanced Senior Risk Owner Training
Additional Courses

Safer Recruitment

Safer Recruitment

Information Asset Owner

Information Asset Owner

Freedom of Information & Environmental Information Regulations

Freedom of Information & Environmental Information Regulations

Board Briefings / Senior Staff Training

Board Briefings / Senior Staff Training

Marketing, Fundraising & Data Protection

Marketing, Fundraising & Data Protection
Audits

GDPR Audit

GDPR Audit

DSP Toolkit Audit & Support

DSP Toolkit Audit & Support

Physical Security Review

Physical Security Review

Data Protection Impact Assessment

Data Protection Impact Assessment
Policy Creation & Review

Policy Creation & Review

Policy Creation & Review

DPIA Assessment & Support

DPIA Assessment & Support
Managed Support

Freedom of Information Requests (FOI)

Freedom of Information Requests (FOI)

Incident & Breach Management

Incident & Breach Management

Subject Access Requests / Redaction

Subject Access Requests / Redaction

DSP Toolkit Guidance / Assurance

DSP Toolkit Guidance / Assurance

Managed Data Protection Service (DPO)

Managed Data Protection Service (DPO)

Managed Caldicott Guardian (CG)

Managed Caldicott Guardian (CG)

Information Sharing

Information Sharing