Freedom of Information in Scotland is entering a pressure-test year. Reform proposals are live in Parliament. The question being asked is not only whether the law should change, but whether day-to-day FOI practice is keeping pace with how modern public services are delivered – through arms-length bodies, contracted provision and increasingly complex partnerships.
At the same time, FOI’s credibility depends on something very basic. Information has to exist, be searchable and be retrievable. High-profile scrutiny of records management – especially the governance of mobile messaging and mixed-device working – has sharpened expectations of the meaning of held information in digital workplaces.
There is also an additional and newer frontier which the public increasingly wants to understand. They want to know how decisions are shaped by automated tools, analytics and AI-adjacent systems – from triage and prioritisation to risk scoring and service targeting. FOI teams themselves are increasingly drawn into questions about model documentation, procurement, Data Protection Impact Assessments (DPIAs), auditability and explainability – often at speed and often with suppliers involved.
This conference is designed for FOI practitioners, information governance leads, policy teams, comms, legal advisers and senior leaders. In three sessions, the conference will focus on:
Topics to be discussed
Who should attend
This conference is intended for all those working in the FOI, data protection/management and information governance fields and is intended for both organisations and individuals. It is relevant to all organisations subject to FOI law and is for FOI officers and compliance practitioners, data professionals, data protection officers and also for those in executive and non-executive roles with a responsibilty for legal compliance, reputation management, corporate accountability or strategic leadership.
Examples of the types of individuals and organisations who have previously attended include Service Managers, Information Governance, Compliance and Regulatory Managers, Legal Advisers and Solicitors, Policy and Public Affairs Managers, Case Investigators, Data Protection Officers and Case Investigators. These come from across local government, non-departmental public bodies, housing associations, further and higher education, the third sector and industry bodies.
Director
Deciding Matters
Chief Officer, Campaign for Freedom of Information in Scotland and Public Policy and Human Rights Consultant, Ewart Communications
Data Protection Officer and Freedom of Information Adviser
RGDP (Really Good Data Protection)
Partner
Thorntons
Director
RiSiO Solutions Ltd
AI Senior Policy Officer
Scottish Government
Senior Lecturer
University of Otago
09:25 Chair's opening remarks
Annie Cook, Director, Deciding Matters
LinkedIn
Session 1: Reform and reach – what is FOI going to look like next?
09:30 Keynote speaker: FOI in Scotland 2026 – reform, resilience and the right to know
Dr Sean Whittaker, Senior Lecturer, University of Otago
LinkedIn
09:45 The FOI Reform (Scotland) Bill – what may change in practice and how to prepare
Carole Ewart, Chief Officer, Campaign for Freedom of Information in Scotland and Public Policy and Human Rights Consultant
EwartHumanRight
10:00 Question and answer session
10:15 Comfort break
Session 2: Defensible decisions and beyond the FoI core
10:30 FOI beyond the core – outsourcing, arms-length delivery and the public service boundary
Trish Knight, Data Protection Officer and Freedom of Information Adviser, RGDP (Really Good Data Protection)
10:45 Hard calls under FOISA/EIRs – public interest, privilege, vexatiousness and review quality
Rachel Mitchell, Director, RiSiO Solutions Ltd
LinkedIn
11:00 Question and answer session
11:15 Comfort break
Session 3: The next frontier – AI transparency and environmental information at speed
11:30 AI transparency for FOI teams – procurement, documentation and explainability
Loretta Maxfield, Partner, Thorntons
LinkedIn
11:45 Understanding FOI obligations in the context of AI
Carolyne Thomson, AI Senior Policy Officer, Scottish Government
scotgov
12:00 Question and answer session
12:15 Chair's closing remarks
Annie Cook, Director, Deciding Matters
LinkedIn
Annie Cook
Director
Deciding Matters
Annie is an experienced project manager, engagement design specialist and facilitator with a background in delivering deliberative democratic processes and events, research, policy and advocacy based work.
She has managed both large and small scale projects across Europe and Scotland, including a Horizon 2020 project and has coordinated international citizen participation events with local and academic partners. Skilled in participatory design, community engagement, budgeting, events management, public speaking, communications and organisational development.
LinkedIn
Carole Ewart
Chief Officer, Campaign for Freedom of Information in Scotland and Public Policy and Human Rights Consultant, Ewart Communications
Carole Ewart is Director of the Campaign for Freedom of Information in Scotland and works to ensure that the enforceable right to access information in Scotland is strong and accessible.
Carole is also an independent consultant who has worked on human rights, social justice and public policy issues for 31 years, primarily in the 'not for profit' sector. She has broad experience of working with CEOs and staff at all levels and in over 100 organisations, large and small.
Her specialies cover: Equality and disability, independent living, health, stopping violence, children and families, justice. She advises on drafting and applying a Human Rights Based Approach (HRBA), using Human Rights Impact Assessments (HRIA), access to information, consultation, engagement, accountability in public services, delivery of UN ratified Treaties in UK /Scottish law and practice, legal reform, building networks and influencing.
Trish Knight
Data Protection Officer and Freedom of Information Adviser
RGDP (Really Good Data Protection)
Trish has worked in a wide range of public, private sector blue chip and smaller companies and has over 10 years’ experience information governance and information security. She has a Masters in Business Administration, is a Fellow of the Chartered Institute of Management, and is a certified Data Protection practitioner. Her blend of experience and strong communication skills means she is able to quickly get to know a business and give excellent support for data protection needs.
Loretta Maxfield
Partner
Thorntons
A Partner in our IP, Data Protection and Information Governance Team, Loretta is qualified in both Scots and English law and has over 12 years post-qualified experience. Loretta is recognised by Chambers and Partners in Data Protection and Information, and in Legal500 as a Recommended Lawyer in Education, Intellectual Property (including data protection and FOI), and IT & Telecoms sectors. She is experienced with advising and managing relationships with a range of clients from individuals, small start-ups, public bodies, large educational institutions to large multinational companies (turning over in excess of £800M). Loretta has enjoyed being seconded to several organisations including one of the UK's top companies for online innovation and separately, one of the UK's top research institutions. She also enjoyed a nine month secondment to the Business Development Office of a leading University, where she assisted the University by way of contract management with a view to maximising its intellectual property portfolio through various mediums including research contracts, collaborations and governance.
Loretta’s key area of expertise is in relation to data protection and freedom of information including the General Data Protection Regulation (GDPR), Data Protection Act 2018, e-Privacy Regulation and Freedom of Information (Scotland) Act 2002. In particular, Loretta has assisted many organisation prepare for and continue to comply with GDPR and related data protection and information governance legislation and also leads our outsourced Data Protection Officer service. This experience includes advising on mitigating risk when handling personal data, marketing, delivering audits, liaising with key stakeholders and management, preparing and monitoring implementation of improvement plans, delivering training, drafting privacy related documentation, advising on projects involving personal data, assisting with data security breaches, reporting to and attending board meetings, handling complex data requests, advising on complex data sharing arrangements, liaising with the Information Commissioner and undertaking Privacy Impact Assessments.
Rachel Mitchell
Director
RiSiO Solutions Ltd
Rachel Mitchell is an experienced practitioner in freedom of information, records governance and transparency, with a strong track record of navigating complex and high risk requests in a rapidly evolving public service landscape. Her work focuses on the practical realities of FOI in Scotland—particularly the challenges of defensible decision making, digital recordkeeping, and the interpretation of “held information” across modern communication channels.
Rachel brings a systems level perspective to FOI practice, drawing on extensive experience of handling sensitive cases, advising on compliance and risk, and supporting organisations to adapt to increasing scrutiny and reform. She has a particular interest in how sound records management underpins public trust and accountability, and in how FOI teams respond to the growing demands of digital working, outsourced delivery models, and emerging technologies.
Now working as an independent consultant, Rachel supports organisations across the public and wider public sector to strengthen FOI practice, improve records and information governance, and build defensible, audit ready approaches to transparency in complex operating environments.
Carolyne Thomson
AI Senior Policy Officer
Scottish Government
With over 20 years of experience working in the Scottish public sector my role as senior AI Policy Officer in the Scottish Government allows me to bring together my passions for IT, innovation and the delivery of high quality public services.
As a member of the Scottish AI Alliance, a partnership between the Scottish Government and the Data Lab within Edinburgh University, I had responsibility for delivering the Scottish AI Register, a tool designed to ensure that Scottish public sector AI use is open and transparent for all our citizens.
When not building my robot army I am usually crocheting or watching the famous Heart of Midlothian Football Club.
Sean Whittaker (Dr)
Senior Lecturer
University of Otago
Sean graduated with a First Class LLB (Hons) in Scots Law and an LLM in Environmental Law (with Distinction) at the University of Dundee in Scotland, supported by the Carnegie Trust for the Universities of Scotland. He was then awarded his PhD in Environmental Law at University College Cork in Ireland, supervised by Professor Áine Ryall and funded by the Irish Research Council Postgraduate Scholarship Programme.
Before being appointed as a Senior Lecturer at the University of Otago, Sean lectured at the University of Dundee. He was also the Executive Director of the Centre for Freedom of Information, based at the University of Dundee.
This conference takes place online.
How to book
You can book to attend in 3 ways:
Conference fees
Please note
It is not permissible to share the recording. Please contact us if you wish to share it. See our terms and conditions for further information.
Any individual who may have attended the event but, for whatever reason, is unable to do so on the day can request a full recording of the event. The delegate fee above will apply.
Payment
We do not currently accept payments online and will send you an invoice.
You have the option to pay by bank transfer or card.
Bank details will be included on the invoice.
If you wish to pay by card, please tick the appropriate box on the booking form and a member of our staff will contact you by telephone to take the payment. Alternatively you may call 07377 147271.
Terms and conditions
By placing this booking, you agree to the full terms and conditions found via the link at the foot of our website.
Book delegate places or purchase video recording.
