Data Protection Services Framework 2022

Tender description

Cardiff Council intends to establish and host a framework for provision of Data Protection advice services to the central Information Governance Team which supports the organisation with their contractual obligations with compliance with the General Data Protection Regulation (GDPR) and Data Protection Act 2018. Additionally, the Council wishes to make the Framework available for use by Flintshire County Council, Monmouthshire County Council and Torfaen County Borough Council (including any successor to any of them in the exercise of their statutory or public functions) who are identified as “Potential Customers”. Lot 1: Data Protection Support Services Provision of service which include: - Providing professional legislative advice on data protection enquiries - Providing advice on third party systems in relation to technical safeguards in place in respect of the security of processing of personal data. - Providing legislative opinions in respect of data protection/security incidents Providing a risk assessment, including potential controls which could be implemented, in respect of Data Protection Impact Assessments - Conducting assurance audits to measure compliance with data protection - Providing statutory advice and acting as the contracted Data Protection Officer in accordance with the duties set out in Article 39 of the General Data Protection Regulation if requested Lot 2: Information Request Redaction Support Provision of service which include: -Providing redaction support in relation to Individual Rights or Freedom of Information Request disclosures