Guardians of Data

AI agents are widely regarded as the next major evolution in artificial intelligence. From managing workflows and responding to customers to supporting HR, compliance, and operational functions, they are set to transform how organisations work. But as with all powerful new technologies, understanding the opportunities and the risks is vital so that good governance structures can be put in place.Last month, the Australian Prime Minister disclosed that an AI agent hacked a government portal. This seems to be one of the world’s first examples of an AI-led attack on a government website. And, over the summer, there were a number of other media reports of AI agents "going rogue", hacking into websites and even falsely reporting crimes.In this episode, Ibrahim is joined by James Moss who is Director of Cyber Investigations at the law firm Addleshaw Goddard LLP, based in Manchester. Before returning to private practice, James held a senior leadership role at the Information Commission.James and Ibrahim explore what AI agents actually are, how they differ from conventional generative AI, the risks they present and what organisations should be doing now to prepare for their deployment. They also discuss how existing laws impact this technology, and what IG professionals should be doing to ensure they are part of the conversation when their organisation is considering deploying AI agents.Useful LinksAddleshaw GoddardAI Agents Risk BlogAI and Cybersecurity – Myth(os) or Reality? We recommend action. | Addleshaw Goddard LLP  Recent article for practical law magazine on the regulatory landscape https://uk.practicallaw.thomsonreuters.com/w-050-5301?transitionType=Default&contextData=(sc.Default)&firstPage=true Computer Weekly https://www.computerweekly.com/opinion/Supply-chain-cyber-resilience-from-paper-promises-to-operational-realityNCSC Guide to Managing the Cyber Risk of Agentic AIIBM Guide to AI Agents  AI Agents WebinarPhaselawSend us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.

In episode 18, we spoke to Professor Mark Mon-Williams about the concept of connected data: how bringing information together can deliver joined-up public services and improve outcomes for children and young people. That leads to a practical question: how do organisations share information in a way, which is fair, lawful and transparent?.This episode looks at the governance mechanisms required that can turn the promise of connected data into better services and better outcomes. Having data is one thing, but we need to also ensure we have the governance, agreements and accountability in place. A great example of where this has been done can be found in WASPI, the Wales Accord on the Sharing of Personal Information,  and the new UK GDPR Code of Conduct for Information Sharing Protocols which was recently approved by the Information Commission.In this episode we explore:How WASPI works in practiceWhat the Code of Conduct for Information Sharing Protocols adds to itHow it can help organisations move from asking whether information can be shared to ensuring it is shared lawfully with robust governance And what other parts of the UK can learn from the Welsh experience.My guest is Dave Parsons, who has worked in information governance for twenty years, including many yearsin local government in Wales. As the WASPI code manager, Dave has played a leading role in developing WASPI and the new code of conduct. Useful LinksPodcast - Connected Data The WASPI ServiceICO AnnouncementWASPI on LinkedInhttps://www.waspi.gov.wales/code-of-conduct/https://www.waspi.gov.wales/news/waspi-uk-gdpr-code-of-conduct-for-information-sharing-protocols-published/https://www.instituteforgovernment.org.uk/publication/government-data-sharing-pandemicPhaselawSend us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.

How can we make better use of the information already held about children to improve their lives?That is the question explored in the latest episode of the Guardians of Data podcast. Ibrahim Hasan is joined by Professor Mark Mon-Williams, who holds a Chair in Cognitive Psychology at the University of Leeds, and is Professor of Psychology at the Bradford Institute of Health Research.Mark argues that children and families do not fit neatly into the organisational silos in which public services operate. A school may see attendance and educational needs, a GP may hold health information, and social care may have a different part of the picture. When those pieces remain disconnected, important patterns can be missed. As Mark puts it, “the challenge is to move from fragmented services towards a more holistic, child-centred approach”.Mark is one of the executive authors of a report (Connecting Data: Intelligent and informed delivery to support every child to succeed ) which was published in July 2026 by a group of academics, education professionals and children’s services practitioners. The report suggests a new model approach for information sharing to improve the lives of children and young people (Connected Data). In this podcast, we explore how the Connected Bradford project, is putting that approach into practice, and discuss examples where linking health and education data has revealed issues that would have been difficult to identify from individual datasets alone. But this isn't simply a conversation about the benefits of connecting data. The UK has tried to improve information sharing before, from ContactPoint to Care.Data, and those experiences raise important questions about privacy, governance and public trust. We discuss what is different about the Connected Data model, including its emphasis on devolved systems, secure environments and community engagement.We also examine the emerging policy landscape, including the Children’s Wellbeing and Schools Act 2026 and the proposed education data spine, and ask what greater connectivity could mean for the future of children’s services. And there is a wider question: as public-sector data infrastructure increasingly involves major technology companies, how do we ensure that public data remains under public control? Listen now and join the conversation about how we can connect data to improve children’s lives while protecting their rights, privacy and trust. Useful LinksNew Child of the North reportChild of the North campaignBorn in Bradford ProjectThe NIHR Applied Research Collaboration Podcast - The Government's Plans for Children's Data PhaselawSend us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.

In the UK, Freedom of Information laws are now more than 20 years old. If you want to understand how they have impacted the way government operates, there are plenty of clues in the news headlines over the last few years; from the Covid Inquiry to the Peter Mandleson affair and the release of the Epstein files.In this podcast we are joined by Dr Ben Worthy, a Reader in Politics and Public Policy at Birkbeck College, University of London. Ben has written extensively on issues around Transparency and Freedom of Information including authoring the book “The Politics of FOI”. Ben discusses the research studies that he has conducted into FOI practice in various sectors, to give us an insight into the practice and effectiveness of FOI in achieving transparency. We also explore what transparency actually looks like inside government and the wider public sector, what FOI can (and can’t) achieve and where transparency in the UK might be heading next.Hit the play button to start listening to Ben's insights.If you want more perspectives on this important topic be sure to check out our other podcast episodes. In Episode 3, Maurice Frankel , the Director of the Campaign for Freedom of Information explains the history of FOI and his views on current and future challenges to the legislation. In Episode 9 we talk to Martin Rosenbaum, an ex BBC Journalist, who also shares practical tips on dealing with FOI requests from journalists. Finally, in Episode 14 barrister, Saara Idelbi, gives practical advice on handling AI generated information requests.Further ResourcesAct Now FOI BlogsWorthy, B. (2025). Freedom of Information at 20. Political Insight, 16( 4), 34-36. https://doi.org/10.1177/20419058251403821Government by WhatsApp? Covid, Transparency and Government by Text: https://politicalquarterly.org.uk/blog/government-by-whatsapp-covid-transparency-and-government-by-text/Ben Worthy & Megan Waugh (2024), "More open, more democratic or better at hiding? Two decades of local government transparency in the UK",  Report: https://eprints.bbk.ac.uk/id/eprint/54509/9/54509a.pdfThe Future of FOI: Martin’s view here: https://rosenbaum6.substack.com/p/registering-risk-with-andy-burnhamFOI at 20: https://www.civilserviceworld.com/professions/article/the-freedom-of-information-act-turns-20-can-it-outwit-the-delete-buttonTransparency and FOI: https://www.bbk.ac.uk/events/event/54736/secrets-and-lies-does-more-transparency-make-for-better-politics Send us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.

In this episode we discuss workplace monitoring of employees.Employers have always made use of the latest technology to monitor employees. In the past this would have involved things like CCTV and telephone monitoring and vehicle tracking. But new technologies, particularly AI, are taking employee surveillance to another level. Employers can now collect much more detailed information about what employees do, where they are and how they work. This is increasingly being used, with AI and algorithms, to allocate tasks and assess employee performance.But just because we can monitor employees more, does it mean we should? Can surveillance really improve productivity? What happens to trust when employees know that every action can be measured? And as AI takes on more employee management functions, what are employers losing?To help answer these questions, I'm joined by Professor Kirstie Ball from the University of St Andrews. Kirstie is an internationally recognised expert on workplace surveillance and the author of the report Electronic Monitoring and Surveillance in the Workplace which was published by the European Union in 2021. Kirstie is also the co-director and founder of the Centre for Research into Information, Surveillance and Privacy and has been a consultant to the UK's Information Commissioner. The focus of this podcast is not the law on workplace monitoring. It's a conversation about what happens when surveillance changes the relationship between employers and employees. We talk about trust, dignity, autonomy and wellbeing; and about whether technology designed to improve performance can sometimes have the opposite effect.Click the play button to jump in.Please complete Kirsty's SurveyYou are invited to complete this survey if you have used the ICO’s Data Protection and Worker Monitoring Guidance. This survey asks you whether you have noticed any changes in your and others’ understanding of electronic monitoring as a data protection issue, and if you have noticed any changes in compliance since using the guidance. It takes five minutes to complete.https://standrews.eu.qualtrics.com/jfe/form/SV_5cdnck6giupnLSuUseful LinksPodcast - The Hidden Algorithms Behind Modern Policing JRC report ‘Electronic Monitoring and Surveillance in the Workplace’  Saints Talk: ‘Employee Surveillance: Risks, Wellbeing and Justice’ Surveillance in the workplace: Past, present, future (shorter summary of the report in the journal Surveillance and Society)  GDPR and Employee Surveillance ICO’s Data Protection and Worker Monitoring GuidanceICO Guide to Workplace MonitoringPodcast - Managing Workplace Data Protection Risks PhaselawSend us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.

In recent years, we’ve seen a remarkable shift in the way people use AI chatbots. They are no longer simply tools for answering questions or writing emails. Many people are entering into deep conversations with the likes of ChatGPT and Claude often forming emotional and even romantic relationships with them.Last year’s controversy surrounding GPT-4o was a striking example: that particular model’s unusually agreeable and flattering responses to user queries raised concerns about AI reinforcing unhealthy beliefs, while its eventual retirement prompted some users to describe a genuine sense of loss. At the same time, lawsuits involving AI chatbots allegedly causing harm to vulnerable young people have raised serious questions about emotional dependency and the responsibilities of the companies developing these systems. So what is actually happening when we begin to form relationships with machines that can talk to us, remember us and appear to understand us? And what does it tell us about ourselves? In this episode, Ibrahim Hasan talks to psychologist, academic and award-winning filmmaker Dr. Agnieszka Piotrowska about the profound ways that generative AI is changing human relationships, drawing on the themes of her book AI Intimacy and Psychoanalysis. We talk about why people form bonds with AI, the potential benefits for companionship, creativity and accessibility, and the risks surrounding privacy, emotional dependency, mental wellbeing and digital amnesia. We also explore the importance of boundaries, education and proportionate regulation as AI grows more personalised and embedded in everyday life.Useful Linkshttp://www.agnieszkapiotrowska.co.ukRelational AI Diaries PodcastBuilding Trustworthy AI Systems PodcastAI BlogsPhaselawSend us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.

If your organisation is being overloaded with AI generated Freedom of Information requests or GDPR Subject Access Requests (SARs) this podcast episode is for you.  Some would say AI has democratised and powered access to information. Large Language Models, like ChatGPT and Claude, can produce ‘perfectly written’ FOI requests and SARs at the touch of a button. But these are causing problems for over worked information governance departments. Not only are more requests coming through; they are often longer, broader and difficult to interpret. In this episode we guide you on how to manage and lawfully respond to AI generated information requests. Our guest is Saara Idelbi from 39 Essex Chambers. Saara is recognised by the Legal 500 as a ‘leading junior’ barrister. She practises in administrative law, human rights, data protection and information rights. Saara is a recognised voice on AI and the law and is the co-founder of Advocatr, an AI legal training platform.Listen now for practical guidance on dealing with AI generated information requests whilst respecting the key principles of information rights legislation; openness, transparency and accountability. You can also listen to episode 13 where information lawyer, Andrew Latham, gives his tips on AI generated subject access requests. More useful resources below:ICO GuidanceBuilding Trustworthy AI Systems PodcastAI BlogsFOI BlogsPhaselawSend us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.

The biggest data protection challenges facing organisations do not stem solely from cyber-attacks or AI deployment; they also arise from employees. Sometimes it’s from an innocent mistake; an email sent to the wrong person, confidential information shared inadvertently or a document uploaded to the wrong system. In other cases, the issues are more serious; employees accessing information they have no business looking at, taking confidential data when they leave, or deliberately misusing personal information.When those situations arise, employers need to investigate what has happened, decide whether a breach needs to be reported to the ICO and manage employment law issues such as disciplinary action; all the while protect the rights of the individuals whose data is involved, including employees. And then there's the inevitable employee Data Subject Access Request, or DSAR to deal with. Often made alongside a grievance or before Employment Tribunal proceedings, DSARs can present significant legal and practical challenges for employers trying to balance transparency with confidentiality and legal privilege.In episode 13 of the Guardians of Data podcast we explore:what happens when employees are involved in personal data breaches;the legal and practical issues arising when employees misuse personal data;how employers should approach workplace investigations involving personal data; andhow to respond effectively to employee Data Subject Access Requests.Our guest is Andrew Latham, a partner in the Public Law team at Capsticks, who specialises in data protection and privacy law. Click the play button to jump in.---------------------------------------------Useful LinksPhaselawCapsticksICO Employment Practices Code: Supplementary GuidanceEmployee DPA ProsecutionsThe Morrisons Vicarious Liability CaseSend us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.

In this episode we discuss something that sounds like science fiction, but is already part of everyday policing in the UK; predictive policing. These are tools that use data and algorithms to help the police forecast crime, where it might happen and sometimes who might be involved. The idea is to use resources efficiently and cut crime. And there are reports that councils are also starting to use these systems (The Think Family Database.)But a recent report by Amnesty International, “Automated Racism” argues that predictive policing tools aren’t neutral; they may be reinforcing and scaling existing inequalities. The report argues that the data they use is biased, particularly against black and racialised communities in deprived areas. In this conversation, we unpack what these tools actually are, how they’re being used, whether they work, and what the risks are, especially when combined with other technologies like facial recognition.Our guest is Ilyas Nagdee who is a human rights campaigner and the Racial Justice Director at Amnesty International UK. He has also written for The Guardian and is the co-author of a book entitled, Race to the Bottom: Reclaiming Antiracism, a critical study of anti-racist politics in the UK.Useful LinksPhaselawAmnesty InternationalAutomated Racism ReportThe Think Family DatabaseSend us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.

In this episode we discuss how AI is reshaping trust, identity, cybersecurity, and organisational accountability. In recent weeks, governments, regulators and cyber security professionals have been gripped by the emergence of Mythos, the powerful AI model developed by Anthropic. Touted as capable of identifying software vulnerabilities at a level that rivals some of the world's most skilled human researchers, the model has generated excitement, concern and intense debate.   Against this backdrop, our guest on this podcast is an internationally renowned cybersecurity leader, educator and technology strategist. Caroline Wong is Chief Strategy Officer at Axari and the author of The AI Cybersecurity Handbook.  In this conversation, Caroline explains how cybercriminals are using AI to launch sophisticate cyber-attacks. We also discuss how organisations can use the same technology to strengthen their cyber defences.  But this conversation goes beyond the technical. We discuss why trust is becoming the central battleground in cybersecurity, how deepfakes and AI-generated content are reshaping the way we verify information, and why human judgment remains critical despite rapid advances in automation. We also take a closer look at Mythos itself and what it means for the future of cybersecurity.   Useful LinksLinkedIn Learning Cybersecurity CoursesWake Up Podcast SeriesPhaselawSend us Fan Mail This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.