ENGAGE, EDUCATE, EMPOWER 2025

A Data Protection and Information Security Conference

Thursday 6th February 2025, 9:00am – 16:30pm

The Paintworks, Bristol, UK

Attending this event? Please click here to answer a few questions about travel, dinner, and drinks.

conference agenda

9:10 – 9:30: Welcome from the Hosts and Sponsors

9:30 – 10:15: A Simple Guide to Privacy, Security, and Compliance for Generative AI Nish Imthiyaz (Vodafone) and Nigel Gooding (DPAS)

10:15 – 10:55: How Big Is Our Organisation’s Digital Footprint Anyway? Chris Roberts (Cybata) and Dave Parsons (NHS Digital Health and Care Wales)

10:55 – 11:15: Break

11:15 – 11:55: Countdown to Accountability Barry Moult (BJM IG Privacy Ltd) and Raz Edwards (NHS)

11:55 – 12:35: Crumbs of Control: Ethics, Technologies & Impact of Invasive Cookie Tracking Rowenna Fielding (Miss IG Geek) and Stef Elliott (Six Serving Men)

12:35 – 13:20: Lunch and Networking

13:20 – 14:00: Special Category Data: More Than Just A Legal Term Emma Martins (Data and Marketing Commission UK)

14:00 – 14:40: Privacy Risks in Your Supply Chain and Identifying Hidden Vulnerabilities Ray Stanton (CRO/CiSO/CSO, Board Advisor) and Mark Logsdon (CISO at NHS England)

14:40 – 15:00: Break

15:00 – 15:45: Cases from the Frontline Workshop South West Regional Cyber Crime Unit

15:45 – 16:15: Panel Session (Hosted by Emma Martins)

16:15 – 16:30: Closing and Prizes

17:00 – 18:30: Networking and Drinks

19:00: Dinner

Meet the speakers

Nigel Gooding

DPAS

Nish Imthiyaz

Vodafone

David Parsons

Digital Health and Care Wales

Barry Moult

BJM IG Privacy Ltd

Rowenna Fielding

Miss IG Geek

Stef Elliott

Six Serving Men

Emma Martins

Data and Marketing Commission UK

Ray Stanton

Board Advisor

Raz Edwards

NHS

other information

PARKING

The venue has onsite parking (50 spaces), and there are multiple car parks within short distance. Visit Parkopedia for help.

TRAIN STATION

The Bristol Temple Meads station is roughly a 25 minute walk or a 5 minute taxi ride.

ATTENDANCE LIMIT

Due to high demand, we’re limiting attendance to just two free tickets per organisation. Get in touch with us for further details.

meet nigel

About

Nigel, DPAS founder, is a leading expert in the industry. A hugely experienced Data Protection Officer, he has held many senior positions in both the private and public sectors, experience invaluable to the conception and growth of the company.

As you could probably imagine, Nigel keeps very busy – not just in the office, but outside of work hours, too! When he isn’t walking his dog Beau, he’s refereeing rugby games on the weekends, or out exploring the beautiful scenery of the UK in his camper.

Together with Mel, Nigel brought DPAS into existence, and for years, has done incredible work for a multitude of clients and organisations. Nigel has poured his heart and soul into DPAS, and it simply wouldn’t exist without his efforts.

qualifications/experience

  • Master’s degrees in Data Protection, Information Governance, and Information Rights Law, with a speciality in Subject Access Requests, Children’s and Young Person’s Data Sharing, Freedom of Information, and Environmental Information Regulations Law, plus practitioner level qualifications
  • A national board role with NHS Direct as Chief Operating Officer
  • Has been DPO at South Western Ambulance NHS, Macmillan Cancer Support, Bristol Airport, Teignbridge Council and Watford Council, as well as having worked with a number of local authorities
  • External Examiner, Master of Laws (LLM)
  • A graduate of the Oxford Artificial Intelligence Programme at Saïd Business School, University of Oxford
  • A Fellow of BCS, The Chartered Institute for IT
  • Certified Information Privacy Professional/Europe (CIPP/E) with IAPP
  • Led the development of a Global Data Strategy with one of the world’s largest companies
  • Was Strategic Data Protection Subject Matter Expert advising the Government of Jersey in Health, Social Care, and Children’s Services, including safeguarding and education
  • Wrote the first UK DPO CPD Accredited Training Course

meet Nish

About

Nish is a global privacy lawyer with experience in data protection across the Telco and Financial Services. As the Global Privacy Counsel for Vodafone, Nish drives the data protection strategy across its global operations, ensuring compliance with diverse and complex regulatory landscape.

Nish is currently focusing on the intersection of privacy and AI, Nish is at the forefront of navigating the challenges presented by AI. He is currently playing a key role in the formulation of Vodafone’s Responsible AI Program.

 Nish regularly participates in policy-influencing initiatives as an active member of several industry think tanks, contributing fresh perspectives and insights to shape the future of data privacy in telecommunications, ensuring that regulations are both progressive and practical.

meet Dave

About

Dave Parsons is the WASPI Code Manager within Digital Health & Care Wales. Dave has responsibility for the strategic development and operational implementation of the Wales Accord on the Sharing of Personal Information (WASPI) framework, as well as delivering advice and support to DHCW and All-Wales projects and programmes and to other stakeholders in the health and social care sector in Wales.

Dave has worked extensively within public services for 20 years and has worked more exclusively within the areas of Data Protection and Information Governance for the past 18 years.

meet barry

About

Barry has years of valuable experience in the field, offering bespoke and off-the-shelf courses focusing on information governance in Health and Social Care, and delivers our health-focused GDPR training, SIRO, and Caldicott Guardian courses.

Barry has many accomplishments in the field; he won the ICO’s Practitioner Award for Excellence in Data Protection Award 2020, the NHS Strategic Information Governance Network IG Professional of the Year 2021 and the IRMS Lifetime Achievement Award 2020.

Barry formed the first national Strategic Information Governance Network Group, supported the development of the former NHS Information Governance Toolkit, and initiated and supported the development of the Information Governance/Data Protection Apprenticeship.

qualifications/experience

     Former Chair for the Eastern Region IG Forum

meet Rowenna

About

Rowenna, since earning her qualification before the GDPR came along and made data protection cool, has built up over a decade of experience helping organisations stitch together law, tech and humanity as best they can.

She has worked with charities, the public sector, and commercial businesses, has written many articles, given plenty of talks, and has been proud to accept a couple of awards for her outstanding services to geekery.

Rowenna firmly believes that a strong commitment to human rights and welfare is what stands between us and the future-tech dystopia of nightmares. She’s happy to be on the human side, opposing any sci-fi threats that may present themselves in years to come.

qualifications/experience

  • Certificate in Data Protection

meet stef

About

Experience is the name we give to our mistakes – Stef has plenty of Experience!

His carelessly “planned” career path working across the Data Industry has involved working globally with Brands (e.g. Diageo, BBC, Haymarket Publishing), Service providers (Experian, Oracle, Towers Watson) and trade bodies (UK Information Office, Association of Online Publishers). Acting as the Translator for Marketing, Legal and Technical, he brings a pragmatic perspective to Data, its utility, and organisations’ Fiduciary duties.

Perpetually inquisitive, he believes the only bad question is the unasked one.

meet emma

About

Emma has worked in data protection for over 25 years. Starting her career as a data protection officer in the public sector, she moved to work in the regulatory office for Jersey, Channel Islands, in 2002.

Since then, she has been Commissioner for Jersey and, since 2018, for the Bailiwick of Guernsey where she worked with a team responsible for implementation, oversight, and adequacy assessment for the new GDPR-standard legal framework for the Islands.

Her fixed term in that role finished in December 2023. In January 2024, Emma was appointed as Chief Commissioner for the Data and Marketing Commission. She also has a small portfolio of work acting in an advisory role and is a charity trustee.

Throughout her career, Emma has been committed to driving high standards of ethical and legal data handling and encouraging more inclusive and accessible conversations around the role of data in our lives. She is a strong advocate of cultural engagement and has spearheaded a number of community-wide initiatives to support social and economic benefits that come with effective data protection.

meet RAY

About

Ray is heavily involved with the strategic and operational direction of Content Guru for Risk, Compliance and Security, working where necessary, at a technical, procedural and compliance level with all the core teams that deliver high-level products and services commercially for the company’s go-to-market strategy.

Ray has held CISO/CRO/CSO roles for Airbus UK, BT, National Grid and TDC Denmark. Ray is currently also Chair, NED and Board Advisor for three companies specialising in AI, Security, Privacy & Risk. Further, Ray has held commercial leadership roles in BT, Unisys and IBM as well as these ‘end user’ roles & ran the global SI Division for BT Global Services for five years.

Ray has been involved in various charities over the past three decades but takes most pride in establishing in 2004 the White Hat foundation in support of Childline (NSPCC). It has gone on to deliver £3M in net contributions to Childline and is entering its 20th anniversary in 2025 for its marquee event – The White Hat Ball.

meet RAZ

About

Raz, a certified data ethics professional, is Head of Data Security and Protection (or DPO) for the NHS. Having been at the organisation for 10 years now, Raz’s previous experience comes from her six years at a local authority. She has also been a member of the General Regulatory chamber (Information Rights Tribunal) for over four years. On top of this, Raz is Chair of the West Midlands Strategic Information Governance Network and IG lead for local Shared Care Records.