I’m Jon Baines (Twitter, LinkedIn). I’m interested in all aspects of the fast-developing field of Information Rights, but, specifically, I speak and write about Data Protection and Freedom of Information and related issues. I hold an LLM in Information Rights Law and Practice from the University of Northumbria. In my day job I am Data Protection Advisor at Mishcon de Reya LLP. You can see some of my recent written work and commentary on the firm’s Data Matters blog.
I was previously Data Protection Officer for Network Rail, and subject matter expert for its GDPR programme.
- Chair of NADPO – the National Association of Data Protection and Freedom of Information Officers.
- Special Adviser to PDP’s FOI Journal
- Member of the Examination Board for PDP Practitioner Certificate in FOI
- Member of the Examination Board for ActNow Training Data Protection Practitioner Certificate
- Honorary fellow of IRMS
- Honorary member of ASSO DPO (Italian Data Protection Officer association)
I’m regularly asked for commentary and analysis in specialist and national media. Recent examples are
Charity and Business GDPR Awareness Remains Low, Infosecurity Magazine, January 2018
UK Data Protection Bill lands: Oh dear, security researchers – where’s your exemption? The Register, September 2017
Wetherspoons just deleted its entire customer email database – on purpose Wired, June 2017
Google DeepMind and the NHS were let off lightly by the UK data regulator, lawyers say Business Insider, July 2017
FOI Failings at the Heart of Government, BBC, June 2017
UK government was preparing for cyberattacks before NHS was crippled says Amber Rudd, International Business Times, May 2017
Schools told to ‘guess’ pupils’ ethnicity, The Independent, October 2016
Selected published work
Staying Legit – public authorities and “legitimate interests” basis for processing of personal data, Local Government Lawyer Insight magazine
None of our Business? Private email, FOI and lawful interception PDP FOI Journal, volume 8, issue 2
To Coco or not to Coco? EIRs and confidentiality PDP FOI Journal, volume 8, issue 6
Vexatious Uncertainty: vexatious requests under FOI and EIR PDP FOI Journal, volume 9, issue 3
Social Media Guidance – in accordance with the authorities? Privacy Laws and Business, UK Report, issue 70, November 2013
To jump the gun on the Digitial Economy Act would abuse users’ personal data Macuser, October 2013
Chapter on Data Protection EIRs without the lawyer
Schools, biometric information & the law Education Law Monitor
In my spare time I explore the nature around where I live. Saving the lovely if neglected River Thame is a current focus.
Needless to say, all views on this blog are mine only and not those of my employer or any organisation to which I belong. Please don’t ever rely on what I say. It’s not guaranteed to be correct, and it certainly isn’t advice.