As the capacity to generate, store, aggregate and combine ever greater volumes and types of data about individuals, behaviours and interactions continues to expand apace, so too does the challenge of ensuring suitable and appropriate governance of that data. In broad terms, the challenge is simple; how to ensure the (public) benefits of data, such as improvements in service delivery or individual and collective well-being, while avoiding harms such as discrimination, injustice or placing undue burdens on individuals and groups. The difficulty, as ever, lies in the details. As Nicol et al