We are passionate about good data governance. Our consultants all have a hands-on practical approach, backed up by strong academic qualifications and accreditations.

Our team includes subject matter experts in information law, privacy and regulatory policy in the health and social care sector.


David Stone BA(Hons), DipM, MBA

Founder and Associate

David Stone is an expert in information governance for the health and social care sector.
From 2007, David led national information governance programmes for the NHS in England. In 2010 he joined Apira, where he established the information governance practice. For Apira, David led many national and regional information governance projects, before leaving in 2012 to establish Kaleidoscope Consultants.
Since 2012, Kaleidoscope has grown to become the leading information governance consultancy in health and social care in the UK. Kaleidoscope has helped governments, developed national policy initiatives, regional and organisational level projects. Kaleidoscope partners with major management consultancies as their subject matter experts. Kaleidoscope works extensively in Europe for technology and pharmaceutical companies from the USA and Middle East in Europe.


MBA, Sheffield Hallam University (2011)

Postgraduate Diploma in Marketing (DipM), Dearne Valley Business School (2006)

BA (Hons), Business Studies, Sheffield Hallam University (2005)


Amy Ford HND, LLM

Managing Director

Amy is a highly skilled and experienced information governance practitioner. She is passionate about using new, innovative digital solutions to make the best use of Big Data in a lawful and secure manner.

Before joining Kaleidoscope, Amy held a number of information governance roles in the health sector. Most recently, she was the Head of Information Governance for NHS NEL Commissioning Support Unit.

Since April 2023 Amy has been the owner of Kaleidoscope.


LLM, Corporate Governance and Law, University of Portsmouth (2015)

HND (Distinction) Business, Highbury College, Portsmouth (2012)

Professional Diploma at Law, Fareham College (2006)


Joe Stock LLM

Managing Consultant

Joe is a qualified Data Protection Practitioner, with an in-depth knowledge of the Data Protection Act (2018) (DPA), General Data Protection Regulation (GDPR) and the common law duty of confidence with nearly a decade’s experience in data protection across the public and private sector in health and care.

Taking a special interest in the implementation of digital health technology, Joe has successfully supported both NHS and digital health organisations meet the complex data protection requirements of both the creators and adopters of such technologies. This experience includes being the Information Governance Subject Matter Expert for four NHS Clinical Commissioning Groups and supporting a variety of digital health companies into the NHS with new and emerging technologies such as AI. Joe took the learning and challenges of this complex area when completing his Masters dissertation on the topic of data protection challenges in the implementation of digital health technologies, to which he earned a distinction.


LLM (Distinction), Information Rights Law and Practice, Northumbria University (2021)

PGDip, Information Rights Law and Practice, Northumbria University (2017)

PGCert, Information Rights Law and Practice, Northumbria University (2016)

Data Protection Practitioner, British Computing Society (2015)


David Birkinshaw LLM

Senior Consultant

David has been a privacy professional for over 15 years. He has filled several high-level roles including as a Senior Data Protection Manager and Interim Data Protection Officer. Past roles have included helping organisations prepare for new privacy laws, and, through appropriate strategy and planning, translating that work into strong business as usual policies and procedures. David completed his Masters in Information Rights Law and Practice at Northumbria University.



Northumbria University, Masters at Law in Information Rights Law and Practice (2016)

IAPP, CIPP/E (2020)

IAPP, CIPM (2021)


Dr Mark Dornan PhD BSc BD MA RN ATCL

Head of Clinical Safety and Clinical Safety Officer

Mark has completed the NHS Digital Clinical Risk-Management Foundation and the Assuring AI in Healthcare course delivered by University of York. He is a certificated clinician with two years experience as a Registered Nurse and more than ten years’ experience working in healthcare. As well as working as a CSO for Kaleidoscope, Mark is completing his PhD in healthcare communication and complex intervention design. Mark has a keen interest in supporting health-tech companies to effectively manage digital clinical risk and enable clients to demonstrate assurance with the information standards.


Registered Adult Nurse, Nursing and Midwifery Council (NMC PIN: 19I0625N – Revalidation November 2022)  (2019)

Doctor of Philosophy (PhD),  Ulster University (September 2019 – September 2023)

BSc Adult Nursing, Queen’s University Belfast (2019)

MA Intellectual and Developmental Disabilities, University of Kent (2015)

Bachelor of Divinity, Queen’s University Belfast (2014)



Clinical Safety Officer & Senior Consultant

David Lyness is a doctor with almost ten years of hospital practice and fifteen years of NHS experience before commencing General Practice training in 2022. He has full GMC registration with a license to practice. David has completed postgraduate medical examinations in anaesthesia and psychiatry as well as education. He has been awarded posts in the Belfast Health and Social Care Trust and Queen’s University Belfast as a trust appraiser and training coordinator. David’s NHS work is highly technology-dependent and he has extensive experience in systems safety. David is the author of academic work on technology-enhanced communications, most recently “The use of social media and online communications in times of pandemic” (Journal of the Intensive Care Society) as well as having his work published within a major Pain Management textbook in the USA. David has a qualifying First-Class Honours law degree and a Master of Science degree (with merit) that uniquely blends healthcare, professional development, law and education. He was awarded the prestigious Fellowship of the Royal Society of Biology in 2022 and is also a Member of the Faculty of Clinical Informatics of the United Kingdom. He undertakes clinical risk analysis and consultancy for major international healthcare companies that span from New Zealand, the USA, France and the United Kingdom.


Fellow of the Royal Society of Biology
Fellow of the Royal Society of the Arts
Fellow of the Royal Society for Public Health
Member of the Institute of Leadership and Management
Postgraduate Diploma in Mental Health, Queen’s University, UK
Postgraduate Certificate in Online and Distance Education
Master of Science (Merit), The Open University, UK
University of York, Bachelor of Medicine & Surgery, 2013
Bachelor of Laws, LL.B(Hons) (Qualifying Law Degree), 2022 (First Class Honours), The Open University, UK


Jonathon (Jonny) Agnew

Clinical Safety Project Consultant and trainee CSO

Jonny joined Kaleidoscope as an associate in 2023 and is training with us to be a Clinical Safety Officer. He is a qualified physiotherapist and has HCPC and CSP registration. Jonny expects to gain his PhD from University of Ulster during 2023 with his thesis: ‘Investigation into the use of an exercise app for patients with shoulder pain’.


PhD, Ulster University (2023)

BSc (Hons) Physiotherapy, Ulster University (2019)


Agnew JMR, Hanratty CE, McVeigh JG, Nugent C, Kerr DP. An investigation into the use of mHealth in Musculoskeletal Physiotherapy: Scoping Review. JMIR Rehabilitation and Assistive Technologies. 2022;9(1):e33609. Doi: 10.2196/33609. PMID:35275089.

Agnew JMR, Nugent C, Hanratty CE, Martin E, Kerr DP, McVeigh JG. Rating the quality of smartphone apps related to shoulder pain: Systematic search and evaluation using the Mobile App Rating Scale. JMIR Form Res. 2022;6(5):e34339. Doi: 10.2196/34339. PMID: 35617008.

Conference contributions/presentations:

VR4REHAB – It’s the patient, stupid! (23-24th June 2022): Oral presentation – An investigation into the use of mHealth in musculoskeletal physiotherapy: A Scoping Review.

CSP NI Event – Returning to Strength (13th October 2022): Oral presentation – Exploring the effectiveness of exercise prescription and mHealth for Subacromial Pain Syndrome (SAPS).


Ria Delahunty-James RN

Clinical Safety Officer

Ria has completed the Clinical Risk-Management Foundation (e-learning and face-to-face training). She is a certificated clinician with seven years experience as a registered nurse. As well as working as a CSO for Kaleidoscope, she is a palliative care clinical nurse specialist at Isabel Hospice. Ria has a keen interest in supporting health-tech companies to effectively manage digital clinical risk and enable clients to demonstrate assurance with the information standards.


Registered Nurse – Adult, Nursing & Midwifery Council (2014)

Adult Health Nurse, University of Southampton (2014)


Anna Codognotto Master’s Degree in Law, LLM

Data Protection Project Consultant

Anna completed with distinction an LLM focused on Data Protection and Legal Technology at The University of Law (London). She also holds a Master’s Degree in Law awarded cum laude at the University of Padua (Italy). In both her dissertations she undertook an in-depth multidisciplinary research with regard to Data Protection and Artificial Intelligence. In her Master’s dissertation, she explored the possibility to exploit Artificial Intelligence tools in order to automate rights balancing; and in her LLM dissertation, she critically evaluated the tensions between Data Protection and Artificial Intelligence.


Anna has targeted her expertise in supporting DPO services related to health-tech companies in order to ensure GDPR compliance.



The University of Law, LLM Master of Laws, 2022

The University of Padua, Master’s Degree in Law, 2021


Lois Willey IQA, L 5 L&M, TAQA L4

PMO Manager and Project Consultant

Lois Willey works with both the data protection and the clinical safety team making sure that all project procedures are followed and ensuring clients receive what they need be it trackers, agendas, actions points and other support tasks in a timely manner. Lois has healthcare qualifications and has experience working with the NHS. Before joining Kaleidoscope Lois worked in training and development sector for a private training organisation. She has knowledge of  health and social care, and how health and social care law and practice interacts with data protection laws.


Katie Stone BA (Hons), DMS, MCIPD

Head of Business Services and Compliance

Katie joined Kaleidoscope in 2016 and leads the business and compliance parts of the business, including quality management and ISO9001:2015 certification.

Katie runs all aspects of Kaleidoscope’s operations (recruitment, people policies, training and competencies, billing, supplier management, payroll, etc. ). She is an expert administrator and senior human resources professional who also offers project management, consultancy and secretariat support direct to clients.

Katie has over 30 years of experience in administration, secretariat and committee services, human resources and project management roles.


Practitioner Certificate in Data Protection, BCS Chartered Institute for IT (2017 and conversion 2021)

Chartered MCIPD, Civil Service College, Sunningdale (2006)

Diploma in Management Studies, University of North London (2000)

BA (Hons), Politics and Education, University of York (1989)