Outsourced Data Protection Service

Tender description

QQI wishes to secure the provision of a Data Protection Service (DPS) to assist QQI in complying with its obligations under General Data Protection Regulation (GDPR)(EU 2016/679) and the National Data Protection Act 2018. Principally, the DPS will be required to 1. Act as the primary contact for all data protection matters for both internal and external stakeholders. 2. Ensure compliance with GDPR and other relevant data protection laws. 3. Maintain independence in decision-making and reports directly to the highest management level. 4. Advise on Data Protection Impact Assessments (DPIAs) and monitor their execution. 5. Manage Subject Access Requests (SARs) and data breach notifications. 6. Provide training and awareness to staff on data protection policies and procedures 7. Provide advice, as requested, on general data protection matters.