Provision of Services to produce Record of Processing Activities and Information flow chart in line with the GDPR together with Retention Schedule

Tender description

The Council wishes to commission external providers to carry out the following work: • create a Register of Assets listing the information collected and processed by each directorates/service area/department within SBC. An organisational structure table is set out in the attached document marked “Appendix 2”. The Register should include content under the heads of information contained in the attached table “Appendix 3” and any other information necessary to ensure SBC has the information it need to be compliant with the new requirements under the GDPR. The preference is for the table to be in Excel format. • prepare an Information Flow Chart for each department within each service area of SBC illustrating how information is received, used and shared, stored and disposed of. • prepare a retention and disposal schedule as required by the Freedom of information Act 2000 relating to all the records held by SBC including personal records covered by the GDPR. Keywords: GDPR