Jasper Gold

Data, Information & Technology

Jasper is instructed by claimants/applicants and defendants/respondents in data protection, privacy and information cases (including in the FTT (Information Rights)). He also accepts instructions for advisory work related to data protection and in public law and judicial review matters which raise data protection issues and privacy. He has a particular interest in the overlap between data protection, privacy and healthcare, an issue he writes about for the QMLR, and regularly advises on data protection issues (including subject access requests) relating to sensitive medical data.

Jasper has developed particular experience in ‘data injury’ cases, where breach of the GDPR (or other information-related wrongs) have caused psychiatric injury. He is frequently instructed to appear in court, draft pleadings, and to advise on liability, quantum and strategy in such cases. In a recent episode of Law Pod UK, Small Data: damage, distress and the development of a new type of claim, Jasper discussed the intersection between data protection and personal injury, including practical issues for Claimants and Defendants and valuing such claims.

Jasper was a panel speaker at the Data Protection Forum’s December 2022 conference on children and data protection, where he spoke on age verification law and the Online Safety Bill (now the Online Safety Act 2023).

As a judicial assistant in the High Court in 2024-5, Jasper assisted with legal research and drafting in a number of matters related to data protection and information law, including:

• RTM v Bonne Terre Ltd [2025] EWHC 111 (KB), a challenge under data protection law by a former problem gambler to the use of his personal data in targeted marketing, raising issues of the nature of consent in data protection law.
• Wei & Ors v Long & Ors [2025] EWHC 912 (KB), a wide ranging claim including allegations of harassment, malicious falsehood, defamation and data protection breaches, cited in the White Book for the proper approach to assessing damages after default judgment.

Selected Cases

Damages claims

• Acted for claimant adoptive parents whose names and address were disclosed to birth parents.
• Acted for a claimant who was photographed without her consent during surgery. The photographs were used in promotional material by the defendant, and the claimant suffered psychiatric harm.
• Defended a company that conducts investigations for use in litigation in a claim by the subject of an investigation alleging breach of the GDPR. The claim was struck out and certified as totally without merit.
• Advised on settlement for a child claimant whose sensitive medical information was accidentally made public by a local authority.
• Represented a claimant whose personal data had been disclosed in a mass data breach at a trial on quantum.

Freedom of Information

• Acting for the Department for Work and Pension in a challenge in the FTT to the ICO’s decision in freedom of information appeal.
• Acted for HMRC in a challenge to the refusal to disclose confidential information and personal data in response to a freedom of information request.

Data & Healthcare 

• Jasper regularly advises clinicians and medical businesses on data protection matters including access to medical records and subject access requests in sensitive cases (such as where the context involves  abuse allegations or minors, and has experience of applications under the Access to Health Records Act 1990).
• Settled detailed grounds of resistance for an NHS Trust in a judicial review concerning challenges to decisions about access and changes to health data.
• Advised  government department in relation to a in a judicial review concerning a challenge to a policy raising data protection and healthcare issues led by Amy Mannion.
• Advised in several cases where access to sensitive medical data was sought by subject access request, including on behalf of children and in cases where there are allegations of abuse.

Other

• Advised a multi-national manufacturer of internet-of-things products on compliance with new domestic regulatory requirements pertaining to cyber-security under the Product Security and Telecommunications Infrastructure Act 2022.
• Advised the a police force on the prospects of obtaining an injunction for the removal from the internet of a pornographic video depicting a non-consenting party.