TfL - Privacy and Data Protection Design Principles and Recommendations

Tender description

Why the Work is Being Done On 25th May 2018, the new EU 'General Data Protection Regulation' (GDPR) comes into force. TfL wants to make the most of this opportunity to empower customers in relation to the personal data they share with TfL as they make use of online services. TfL aim to not only meet the regulation but go above and beyond for customers, making it easy to access and maintain their personal data and fully understand what data TfL hold, how we use it and what value we deliver back to the customer as a result. Problem to Be Solved Ensure GDPR compliance. Make the most of the opportunities GDPR offers, particularly in terms of building trust with customers. Ensure the relevant information on the website and other digital channels is clear, easy to digest and follows a consistent approach and tone that feels right for TfL. Consider digital tools and mechanisms that take the ‘privacy by design and default’ approach advocated by the ICO, that would help achieve our goal. Who Are the Users As a TfL customer, who accesses services that require me to share information about myself (online), I need to be aware of my rights relating to my personal data and be able to exercise those rights easily. This will allow me to feel safe and confident when sharing information about myself and allow me to trust TfL to use it in a way that enables me to make the most of travelling in London. Early Market Engagement Using the filters from the list of suppliers has identified the following suppliers who may be able to supply the services required: Ernst & Young LLP Frazer-Nash Consultancy Numiko Ltd Experienced Management Consultants Limited Amberlight Change 4OC Ltd EY-Seren Limited MWK SOLUTIONS IF Ethical Healthcare Consulting C.I.C. DISRUPTIVE-AGILE LTD Professional Programme Management Limited Integral Enterprise Solutions Ltd KDI Consultancy Limited Watermelon Chang Lindley ltd (User Research) MACI Innovations Work Already Done Existing Team The supplier will be working with members of TfL's Technology and Data (Digital) team. The supplier will be engaging with and managing key stakeholders from this department. The Technology and Data Digital team are responsible for user experience and design of customer facing digital products. The team want to explore the opportunity that GDPR presents through improved design and UX, creating principles and applying them to a range of customer interactions. Current Phase Discovery Work Location 14 Pier Walk North Greenwich London SE10 0ES Working Arrangments Work alongside TfL team members in groups, including Product team, UX and Design, Customer Information and Privacy to fact-find and contextualise the work and produce outputs of the overall task. Run 2 half-day workshops with stakeholder groups to gather ideas, requirements and collectively generate approaches and solutions. 20 work days are required, half of which, staff are required at TfL's office in North Greenwich. Collaborative work is required to capitalise on the supplier’s GDPR expertise, and broad experience applying the topic, to lead thought and discussion amongst stakeholders to provide robust recommendations and assistance. TfL can not cover expenses. Security Clearance Staff must sign in at front desk and request visitor passes, these must be displayed at all times. Additional T&Cs Skills & Experience Be General Data Protection Regulation (GDPR) subject matter experts Be Ethical Design and User Experience Specialists Demonstrate strategy and planning experience Demonstrate a good understanding of working in a Product-led environment, based on Aglie principles Have a proven track record in delivering similar work for large organisations Nice to Haves Demonstrate their experience of working with large public sector organisations Demonstrate their experience of working closely with their clients UX team (rather than just operating as an external service) Provide examples of managing diverse stakeholders with differing view points No. of Suppliers to Evaluate 3 Proposal Criteria Technical Solution Approach and Methodology How the approach or solution meets user needs How the approach or solution meets TfL's policy or goal Estimated timeframes for completion How they've identified risks and dependencies and offered approaches to manage them Team Structure Value for Money Cultural Fit Criteria Work as a team with TfL and the relevant stakeholders Be transparent and collaborative when making decisions Have a no-blame culture and encourage people to learn from their mistakes Take responsibility for their work Share knowledge and experience with other team members Challenge the status quo Be comfortable standing up for their discipline Can work with clients with low technical expertise Payment Approach Capped time and materials Assessment Method Written proposal Evaluation Weighting Technical competence 65% Cultural fit 5% Price 30% Questions from Suppliers Budget range £40,000 - £70,000