HRB 2023 DPO Services 2024-28

Tender description

The HRB is a State Agency under auspices of the Department of Health, the remit of the agency is to support and fund health and social care research and provide evidence to inform policy and practice. , we are motivated and inspired by our vision – better health through excellent research, data, and evidence. The HRB’s mission is to support research that improves people’s health, promotes evidence-informed care and creates solutions to societal challenges. An overview of the HRB’s objectives and activities may be found in HRB Strategy 2021-2025: Health research – making an impact (https://www.hrb.ie/strategy-2025/). [The HRB require the following services to be provided from 19 February 2024 to 18 February 2026 , with an option to extend for a period of 1 year twice until 18 February 2028. • Ensure compliance with all regulations. • Manage and monitor the HRB DPO email box and respond to queries in a timely manner (or equivalent). • Work proactively across the organisation. • Prioritise GDPR queries. • Work with ICT in maintaining and enhancing our OneTrust Software. • Ensure all HRB GDPR policies are kept up to date. • Keep HRB staff informed on latest GDPR information. • Collect information to identify processing activities. • Analyse and check compliance of any processing activities. • Inform, advise and issue recommendations. • Data Protection Impact Assessments: - Assist and provide advice in terms of whether or not to carry out an assessment and whether or not it has been carried out accurately and the conclusions comply with the GDPR. • Data Breaches. - Manage the end to end process for any suspected Data Breaches. • Work with Internal audit when needed. • Cooperate with the supervisory authority (DPC) and act as the point of contact for the supervisory authority. • Ensure yearly GDPR training for all staff. • Manage any DSARs. • Work with the internal Data Stewards to ensure the data retention/deletion roadmap is on