Jon Baines

Data protection specialist at Mishcon de Reya LLP. Only tweeting my personal views. Personal blog at

[Jon Baines @jonbainesdata]

On my personal blog: FTT rather dismantles @ICOnews on both the facts and the law in this remarkable FOI judgment. Will the ICO have to rewrite their section 40 NCND guidance? https://t.co/K8uQnLd6Sx

[Jon Baines @jonbainesdata]

I’ve written on my personal blog about an extraordinary CoA judgment in which the Chief Constable of Northants Police has been found in contempt over egregious BWV disclosure failings https://t.co/RlE4xNchCo

[Jon Baines @jonbainesdata]

The MoD has said it cannot say whether it has had any spreadsheet-based data breaches following the catastrophic Afghan citizen one, because it would take >237 hours to find out. On my personal blog https://t.co/wrnkNs5tA0

[Jon Baines @jonbainesdata]

@neiljeffares Do keep me informed Neil - very interesting!

[Neil Jeffares @neiljeffares]

Letter: Unpicking the threads of Bayeux Tapestry accord https://t.co/GELObOAm40 via @ft

[Jon Baines @jonbainesdata]

@PrivacyMatters I’m ahead of you Pat! https://t.co/VNsXnn5c9k

[Jon Baines @jonbainesdata]

I’ve written on my personal blog on the still-unclear question of why one very large charity received “public sector” lenience from @ICOnews - and a 97.5% reduction in proposed fine - while a few months later a tiny charity didn’t https://t.co/GeEvN53D14

[Jon Baines @jonbainesdata]

I’ve written up my thoughts for the @Mishcon_de_Reya website, on the baffling decision by @ICOnews to take no action in response to the most catastrophic data breach in UK history, which exposed many thousands of people to immediate risk to their lives.

https://t.co/IcunsNFG24

[Jon Baines @jonbainesdata]

Today we heard about the most catastrophic data breach in UK history. And the ICO’s response? No need for any action.

Not. Good. Enough.

https://t.co/JygDrw8qm4

[Jon Baines @jonbainesdata]

A largely overlooked but significant change wrought by the Data (Use and Access) Act 2025 means that, in principle, it will be *much* easier for the ICO to issue fines for cookies contravention I've written about this for the @Mishcon_de_Reya website https://t.co/rvqZFI8wYX

[Jon Baines @jonbainesdata]

I’ve written for the Mishcon de Reya website on the Data (Use and Access) Act 2025 and the changes it will make to the UK’s data protection laws

https://t.co/3xSWLQ0G3n

[Jon Baines @jonbainesdata]

A man on remand for assaulting his ex-partner duped former employer, JD Wetherspoon, into orally disclosing her mother’s mobile phone number, which he then used to continue his abuse. I’ve written on my personal blog about the case which has resulted https://t.co/qhbdougzEl

[Jon Baines @jonbainesdata]

The Data (Use and Access) Act 2025 has now been published. NB that most of the operative data protection provisions still need secondary legislation to commence them https://t.co/BdKgaYa0Cp

[Jon Baines @jonbainesdata]

A blogpost on what the Data (Use and Access) Act 2025 will do. It’s essentially an amending statute: practitioners should look mostly to how it changes UK GDPR, DPA 2018 and PECR https://t.co/77emrO9LRr

[Jon Baines @jonbainesdata]

The Data (Use and Access) Bill is due to receive Royal Assent on 19 June:

https://t.co/l3gQmWnau7

[Jon Baines @jonbainesdata]

For the want of a nail the shoe was lost.

For the want of a signature the €4.3m GDPR fine against VW was lost.

https://t.co/HBTCsLnmO0

[Jon Baines @jonbainesdata]

Next week the Court of Appeal will hear the claimants’ appeal in the case of Farley and Others v. Paymaster (1836) Limited (trading as Equiniti) [2024] EWHC 383 (KB). See my short primer on the issues https://t.co/1mznwUCO1D

[Jon Baines @jonbainesdata]

To what extent do rules in defamation carry over to data protection claims about publication of personal data? There’s some interesting analysis in a recent judgment, striking out a claim by Dale Vince against Associated Newspapers. On my personal blog:

https://t.co/0dC1LzyFsZ

[Jon Baines @jonbainesdata]

@PrivacyMatters Wonderful! My grandmother always told him they sang “A little bit of bread and no cheese”

[Jon Baines @jonbainesdata]

The @GoodLawProject is suing @reformparty_uk as a representative body (the first such case brought under Article 80(1) of the UK GDPR. GLP have published both its particulars of claim and Reform’s defence. I’ve written about it on my personal blog https://t.co/W3pLXuDbAr