FTS050 Data Protection Services Framework

Location

Inverness

Description

HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training. This Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE). The framework is live from 8 April 2026 until 7 April 2029, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term (until 7 April 2030).

Total Quantity or Scope

Objective 1 - Role of Data Protection Officer (DPO) as specified in the General Data Protection Regulations and in support of Data Protection Act 2018 Objective 2 - Monitor and remedy noncompliance and support personal data breach resolution Objective 3 - Organisational Compliance with Data Protection Legislation Objective 4 - Data Protection Impact Assessment (DPIA) process including advice and support Objective 5 - Reporting and monitoring

Award Detail

Renewal Options

HIE reserves the right, on giving reasonable written notice from time to time, to require changes to the Services (whether by way of the removal of Services, the addition of new Services, or increasing or decreasing the Services or specifying the order in which the Services are to be performed or the locations where the Services are to be provided). HIE shall not require any such change other than where it is permitted by Regulation 72 of the Public Contracts (Scotland) Regulations 2015. The Framework/Call-off Contracts may be modified for reasons including but not limited to: -Changes to budget availability -Organisation/s bringing the services in-house fully or partially and so the services are no longer required / reduced services are required -The addition of similar services -Increasing the volume of the services -Change in legislative requirements resulting in increased or reduced service In these situations, for the call-off contracts, HIE will agree a price variation based on the pricing submitted as part of your bid, for example, using the hourly rate to increase/reduce the services by a number of hours. Other framework users may also modify their relevant call-off contracts.

Award Criteria

CPV Codes

• 79410000 - Business and management consultancy services
• 79411100 - Business development consultancy services
• 75111200 - Legislative services
• 79212000 - Auditing services
• 72300000 - Data services

Indicators

• Options are available.
• Award on basis of price.

Other Information

Economic operators may be excluded from this competition if they are in any of the situations referred to in Regulation 58 of the Public Contracts (Scotland) Regulations 2015. The figure stated in section II.1.7 and V.2.4 refers to the maximum framework value including the optional extension period. (SC Ref:827694)