We are passionate about good data governance. Our consultants all have a hands-on practical approach, backed up by strong academic qualifications and accreditations.

Our team includes subject matter experts in information law, privacy and regulatory policy in the health and social care sector.


David Stone BA(Hons), DipM, MBA

Managing Director

David Stone is an expert in information governance for the health and social care sector.
From 2007, David led national information governance programmes for the NHS in England. In 2010 he joined Apira, where he established the information governance practice. For Apira, David led many national and regional information governance projects, before leaving in 2012 to establish Kaleidoscope Consultants.
Since 2012, Kaleidoscope has grown to become the leading information governance consultancy in health and social care in the UK. Kaleidoscope has helped governments, developed national policy initiatives, regional and organisational level projects. Kaleidoscope partners with major management consultancies as their subject matter experts. Kaleidoscope works extensively in Europe for technology and pharmaceutical companies from the USA and Middle East in Europe.


MBA, Sheffield Hallam University (2011)

Postgraduate Diploma in Marketing (DipM), Dearne Valley Business School (2006)

BA (Hons), Business Studies, Sheffield Hallam University (2005)


Amy Ford HND, LLM

Managing Consultant

Amy is a highly skilled and experienced information governance practitioner. She is passionate about using new, innovative digital solutions to make the best use of Big Data in a lawful and secure manner.

Before joining Kaleidoscope, Amy held a number of information governance roles in the health sector. Most recently, she was the Head of Information Governance for NHS NEL Commissioning Support Unit.

Amy leads the team to ensure delivery and project management of consultancy services are running smoothly and she deputises for the managing director.


LLM, Corporate Governance and Law, University of Portsmouth (2015)

HND (Distinction) Business, Highbury College, Portsmouth (2012)

Professional Diploma at Law, Fareham College (2006)


Joe Stock LLM

Senior Consultant

Joe is a qualified Data Protection Practitioner, with an in-depth knowledge of the Data Protection Act (2018) (DPA), General Data Protection Regulation (GDPR) and the common law duty of confidence with nearly a decade’s experience in data protection across the public and private sector in health and care.

Taking a special interest in the implementation of digital health technology, Joe has successfully supported both NHS and digital health organisations meet the complex data protection requirements of both the creators and adopters of such technologies. This experience includes being the Information Governance Subject Matter Expert for four NHS Clinical Commissioning Groups and supporting a variety of digital health companies into the NHS with new and emerging technologies such as AI. Joe took the learning and challenges of this complex area when completing his Masters dissertation on the topic of data protection challenges in the implementation of digital health technologies, to which he earned a distinction.


LLM (Distinction), Information Rights Law and Practice, Northumbria University (2021)

PGDip, Information Rights Law and Practice, Northumbria University (2017)

PGCert, Information Rights Law and Practice, Northumbria University (2016)

Data Protection Practitioner, British Computing Society (2015)


David Birkinshaw LLM

Senior Consultant

David has been a privacy professional for over 15 years. He has filled several high-level roles including as a Senior Data Protection Manager and Interim Data Protection Officer. Past roles have included helping organisations prepare for new privacy laws, and, through appropriate strategy and planning, translating that work into strong business as usual policies and procedures. David completed his Masters in Information Rights Law and Practice at Northumbria University.



Northumbria University, Masters at Law in Information Rights Law and Practice (2016)

IAPP, CIPP/E (2020)

IAPP, CIPM (2021)


Benjamin Daley LLB (Hons), LLM, CIPP/E


Benjamin (Ben) is a certified information privacy professional for UK and European data protection laws. He produces Data Protection Impact Assessments, Information Governance gap analyses, and Data Protection Officer activities across diverse medical technology, pharmaceutical, and clinical trial organisations.

Ben was awarded an LLM in Innovation, Technology and Law with Merit from The University of Edinburgh and received first class honours in Law LLB from Northumbria University, with a study abroad exchange year in the USA. His undergraduate and postgraduate dissertations critically analysed multiple international technology issues and contexts, focusing on machine learning algorithms and corresponding governance methods.


Certified Information Privacy Professional Europe (CIPP/E), IAPP, 2022

Innovation, Technology and the Law LLM, University of Edinburgh, 2021

Law LLB (Hons), Northumbria University, 2020


Mark Dornan PhD BSc BD MA RN ATCL

Clinical Safety Officer & Senior Consultant

Mark has completed the NHS Digital Clinical Risk-Management Foundation and the Assuring AI in Healthcare course delivered by University of York. He is a certificated clinician with two years experience as a Registered Nurse and more than ten years’ experience working in healthcare. As well as working as a CSO for Kaleidoscope, Mark is completing his PhD in healthcare communication and complex intervention design. Mark has a keen interest in supporting health-tech companies to effectively manage digital clinical risk and enable clients to demonstrate assurance with the information standards.


Registered Adult Nurse, Nursing and Midwifery Council (NMC PIN: 19I0625N – Revalidation November 2022)  (2019)

Doctor of Philosophy (PhD),  Ulster University (September 2019 – September 2023)

BSc Adult Nursing, Queen’s University Belfast (2019)

MA Intellectual and Developmental Disabilities, University of Kent (2015)

Bachelor of Divinity, Queen’s University Belfast (2014)



Clinical Safety Officer & Senior Consultant

David Lyness is a doctor with almost ten years of hospital practice and fifteen years of NHS experience before commencing General Practice training in 2022. He has full GMC registration with a license to practice. David has completed postgraduate medical examinations in anaesthesia and psychiatry as well as education. He has been awarded posts in the Belfast Health and Social Care Trust and Queen’s University Belfast as a trust appraiser and training coordinator. David’s NHS work is highly technology-dependent and he has extensive experience in systems safety. David is the author of academic work on technology-enhanced communications, most recently “The use of social media and online communications in times of pandemic” (Journal of the Intensive Care Society) as well as having his work published within a major Pain Management textbook in the USA. David has a qualifying First-Class Honours law degree and a Master of Science degree (with merit) that uniquely blends healthcare, professional development, law and education. He was awarded the prestigious Fellowship of the Royal Society of Biology in 2022 and is also a Member of the Faculty of Clinical Informatics of the United Kingdom. He undertakes clinical risk analysis and consultancy for major international healthcare companies that span from New Zealand, the USA, France and the United Kingdom.


Fellow of the Royal Society of Biology
Fellow of the Royal Society of the Arts
Fellow of the Royal Society for Public Health
Member of the Institute of Leadership and Management
Postgraduate Diploma in Mental Health, Queen’s University, UK
Postgraduate Certificate in Online and Distance Education
Master of Science (Merit), The Open University, UK
University of York, Bachelor of Medicine & Surgery, 2013
Bachelor of Laws, LL.B(Hons) (Qualifying Law Degree), 2022 (First Class Honours), The Open University, UK


Ria Delahunty-James RN

Clinical Safety Officer

Ria has completed the Clinical Risk-Management Foundation (e-learning and face-to-face training). She is a certificated clinician with seven years experience as a registered nurse. As well as working as a CSO for Kaleidoscope, she is a palliative care clinical nurse specialist at Isabel Hospice. Ria has a keen interest in supporting health-tech companies to effectively manage digital clinical risk and enable clients to demonstrate assurance with the information standards.


Registered Nurse – Adult, Nursing & Midwifery Council (2014)

Adult Health Nurse, University of Southampton (2014)


Anna Codognotto Master’s Degree in Law, LLM

Data Protection Project Consultant

Anna completed with distinction an LLM focused on Data Protection and Legal Technology at The University of Law (London). She also holds a Master’s Degree in Law awarded cum laude at the University of Padua (Italy). In both her dissertations she undertook an in-depth multidisciplinary research with regard to Data Protection and Artificial Intelligence. In her Master’s dissertation, she explored the possibility to exploit Artificial Intelligence tools in order to automate rights balancing; and in her LLM dissertation, she critically evaluated the tensions between Data Protection and Artificial Intelligence.


Anna has targeted her expertise in supporting DPO services related to health-tech companies in order to ensure GDPR compliance.



The University of Law, LLM Master of Laws, 2022

The University of Padua, Master’s Degree in Law, 2021


Lois Willey IQA, L 5 L&M, TAQA L4

Data Protection and Clinical Safety Project Consultant

Lois Willey works with both the data protection and the clinical safety team making sure that all project procedures are followed and ensuring clients receive what they need be it trackers, agendas, actions points and other support tasks in a timely manner. Lois has healthcare qualifications and has experience working with the NHS. Before joining Kaleidoscope Lois worked in training and development sector for a private training organisation. She has knowledge of  health and social care, and how health and social care law and practice interacts with data protection laws.


Katie Stone BA (Hons), DMS, MCIPD

Head of PMO

Katie joined Kaleidoscope in 2016 and leads our PMO function as well as the broader operations, resourcing and business development aspects of the business.

Katie runs all aspects of Kaleidoscope’s operations (project management, proposals, tenders, HR, finance, etc.). She is an expert administrator and senior human resources professional who offers project management, consultancy and secretariat support direct to clients.

Katie has over 30 years of experience in administration, secretariat and committee services, human resources and project management roles.


Practitioner Certificate in Data Protection, BCS Chartered Institute for IT (2017 and conversion 2021)

Chartered MCIPD, Civil Service College, Sunningdale (2006)

Diploma in Management Studies, University of North London (2000)

BA (Hons), Politics and Education, University of York (1989)