Matt Bruce

Background

About Matt Bruce

I am the Founder and Managing Director of Bruce & Butler, a UK-based data protection, cyber security, and digital risk advisory practice supporting organisations to manage risk, protect data and build trust in an increasingly regulated and technology-driven environment.For over a decade, I have advised boards, executive teams and regulated organisations on the practical implementation of cyber security, privacy and governance frameworks - translating complex regulatory and technical requirements into commercially effective operating models.My work sits at the intersection of data protection, cyber security, risk management and emerging AI governance, helping organisations move beyond compliance towards sustainable digital assurance.Bruce & Butler operates as a professional services advisory firm, working closely with organisations to integrate cyber and privacy into wider risk, audit and governance ecosystems. Typical areas of support include: • Data Protection & Outsourced DPO Services • Data Subject Access Request (DSAR) Management • Cyber Security & Information Security Governance • ISO 27001 & Cyber Essentials Certification • Digital Risk & Assurance Programmes • Responsible AI & AI Governance (ISO 42001) • Incident Response & Regulatory SupportI regularly support organisations operating in highly regulated sectors including healthcare, insurance, professional services and sport, where resilience, accountability and trust are critical.My approach is pragmatic and commercially grounded: combining governance, technical understanding and executive-level advisory to help leadership teams make confident decisions about risk, technology and data.