RFT to Establish a Single Supplier Framework Contract for the Provision of Data Protection Officer Training under the Regulation (EU) 2016/679 (General Data Protection Regulation)

Tender description

The requirement for delivery of training for Data Protection Officers across the Civil and Public Service exists within the context of: • The GDPR, which will enter into force on 25 May 2018, and will strengthen individuals’ control over their own personal data, and the purposes for which that data may be used. It will also set out in detail the responsibilities and obligations on those that collect, use and store personal data. These obligations will include the designation of appropriately qualified data protection officers (DPOs), the carrying out of data protection impact assessments before new types of forms of data processing are undertaken, and the notification of data breaches to the Data Protection Commission and the individuals whose personal data have been disclosed, destroyed or lost. Supervision and enforcement activity will also increase with the conferral of new functions and far-reaching powers of the Data Protection Commission; and • The identification by Government of a ‘best-in–class’ data protection regime as a key economic and social priority. As one of the largest collectors and users of personal data in the State, it is essential that the Civil and Public Service is appropriately trained in relation to the Regulation, in particular the role of the DPO. • The requirement for the provision of training to approximately 350 staff across the Civil and Public Service by means of 5-day training courses within four months of the Contract being awarded.