Industry overview
What is shaping information services
Data, ratings and information providers need to understand what users actually need, keep their data fresh and size new opportunities accurately.
- Users want timely, verified data in their workflow
- Data collection at scale needs strong quality control
- New products need validation before launch
Client background
A B2B contact data provider, working in Germany, France & Spain. Client identity is withheld to protect confidentiality.
- Organisation
- A B2B contact data provider
- Sector
- Information services
- Team engaged
- Market Research
- Services
- Cybersecurity services, IT consulting, Research consultancy
Client challenge
Clients asked for assurance about data protection compliance. Several large clients had paused contracts while their legal teams reviewed the provider’s practices. Several European clients paused contracts while they reviewed the provider’s data protection practices.
Research objectives
- Deliver on the brief: reviewing data protection practices for a data provider.
- Produce results that can be compared across groups and locations.
- Give the client evidence it can act on within 3 months.
Target audience
Scope: Data collection and storage processes.
Audiences we typically reach in information services
Data users and analystsSubscribers and enterprise buyersData contributorsProspectsPartners
Geographic coverage
Coverage: Germany, France & Spain. Markets: Germany, France and Spain.
- Germany
- France
- Spain
Research methodology
A structured quantitative design, so results could be compared across groups, locations and time.
- 1Brief
- 2Data flow mapping
- 3Compliance review
- 4Insight
We mapped data flows, reviewed consent and retention practices, and recommended controls. We mapped how contact data was collected, stored, used and deleted, reviewed legal bases and retention periods, and checked security controls. We interviewed data, legal and sales teams to understand how practices worked in reality. Recommendations were prioritised by risk, with quick fixes separated from longer-term changes.
Cybersecurity servicesIT consultingResearch consultancy
Sampling strategy
- The sample was designed with the client around the decision to be made, with quotas to keep key groups readable.
Data collection
- Auditors and mystery shoppers followed a standard checklist, recording evidence at each visit.
Data quality & validation
- Photo or document evidence for audit points
- Second-reviewer checks on scores
- Logic and range checks on the final data
- Work carried out under our ISO 20252 quality procedures
Data analysis
- Structured analysis against the study objectives
Key findings
- Paused contracts resumed after clients reviewed the updated documentation.
Clear documentation supported trust.
Recommendations
- Build on the core insight: clear documentation supported trust.
- Focus effort where the evidence was strongest: paused contracts resumed after clients reviewed the updated documentation.
- Re-measure after the changes to confirm the effect.
Business impact
- The provider improved documentation and answered client questions confidently.
- The provider also introduced an annual data protection review.
What changed in the business as a result of the work. Impact is described qualitatively.
Deliverables & next steps
- Insight report and management presentation
- Repeat the measure after changes are in place to track progress.
- A natural follow-on question: what do users need from the product?
Client identity is withheld to protect confidentiality.