Data Protection Officer (DPO) as a Service

Tender description

Life Sciences Hub Wales is seeking to procure an outsourced data protection service to ensure that the Company remains compliant with current and future data protection legislation, and that it processes data in accordance with conforming and best practice information governance principles. The Data Protection Act 2018 (Chapter 2) (UK GDPR) introduced a duty for organisations such as Life Sciences Hub Wales to appoint a data protection officer (DPO). This legal requirement helps public sector bodies demonstrate compliance as part of an enhanced focus on accountability. The successful Supplier, in providing dedicated DPO services to the Company, will assist Life Sciences Hub Wales to monitor internal compliance, inform and advise on data protection obligations and emerging issues, provide advice regarding Data Protection Impact Assessments (DPIAs) and act as a contact point for data subjects and the Information Commissioner’s Office (ICO) as required, amongst providing other, similar responsibilities expected of a DPO. The successful Supplier, as dedicated DPO to Life Sciences Hub Wales, must be independent, an expert in data protection and adequately resourced to provide the required, necessary services. Life Sciences Hub Wales envisions the need for 1.5 days DPO services per calendar month, for a total of 18 days (or equivalent) per annum.