CONTRACT NOTICE – NATIONAL

1 Authority Details

1.1

Authority Name and Address

1.2

Address from which documentation may be obtained

1.3

Completed documents must be returned to:

2 Contract Details

2.1

Title

Data Protection Audit Services

2.2

Description of the goods or services required

Tai Tarian is seeking to engage the services of a Service Provider to undertake a data protection compliance review against the requirements of the Data Protection Act 2018/UK GDPR and Privacy and Electronic Communications Regulations 2003.

The review will assess the effectiveness of our information processing activities and data protection compliance management arrangements, to identify information-related risks and to define any required action to mitigate the risks. The review will also provide an action plan for Tai Tarian to enhance its data protection and information governance processes as required.

The Service Provider will have a proven record of the knowledge and expertise in undertaking data protection compliance reviews.

Tenderers are invited to submit a fee proposal against the specification below.

The review will consider the following:

- Assess the level of compliance with the Data Protection Act 2018/GDPR and PECR 2003;

- Assess the level of compliance with the organisation’s own data protection system/arrangements and data handling practices and identify potential gaps;

- To provide information for an on-going, monitoring and review of the data protection system and the management of data processing operations review;

- To check that sufficient evidence is accumulating of compliance for accountability purposes;

- Reviewing data protection knowledge and awareness.

The anticipated timetable for deliverables of the audit following award are as follows:

- W/C 29th January 2024 meet with Tai Tarian Staff and commence audit

- W/C 26th February 2024 Final Report and Action Plan

Outcome

Production of a report with an action plan, to include the scope detailed above with further details on:

- Privacy Information

- Evidence of accountability

- Lawfulness of processing in particular consent and Legitimate interests

- Identification of processing activities outside of the EEA

- CCTV

- Accountability Framework

- DPIA compliance

- Upholding individual Rights

NOTE: To register your interest in this notice and obtain any additional information please visit the Sell2Wales Web Site at https://www.sell2wales.gov.wales/Search/Search_Switch.aspx?ID=136799.

The buyer has indicated that it will accept electronic responses to this notice via the Postbox facility. A user guide is available at https://www.sell2wales.gov.wales/sitehelp/help_guides.aspx.

Suppliers are advised to allow adequate time for uploading documents and to dispatch the electronic response well in advance of the closing time to avoid any last minute problems.

2.3

Notice Coding and Classification

2.4

Total quantity or scope of tender

Duration:

The Contract will be awarded for the initial period of a month and will commence until the completion of the audit services.

Estimated Value:

The estimated value of the contract is expected to be in the region of 6,000GBP to 10,000GBP including VAT (this figure includes travelling and other expenses).

3 Conditions for Participation

3.1

Minimum standards and qualification required

Minimum standards and qualification required

4 Administrative Information

4.1

Type of Procedure

Single stage

4.2

Reference number attributed to the notice by the contracting authority

00972

4.3

Time Limits

4.5

Language or languages in which tenders or requests to participate can be drawn up

4.6

Tender Submission Postbox

5 Other Information

5.1

Additional Information

(WA Ref:136799)

Under the terms of this contract the successful supplier(s) will be required to deliver Community Benefits in support of the authority’s economic and social objectives. Accordingly, contract performance conditions may relate in particular to social and environmental considerations. The Community Benefits included in this contract are:

It’s Tai Tarian’s intention that the delivery of the Contract assists in the achievement of their commitment towards community benefits as outlined in Tai Tarian’s Community Benefits Policy. Therefore, as a minimum requirement, Tenderers will have to agree that community benefits will become part of the Contract, if a Tenderer does not agree to this, then the Tenderer will be rejected.

It is a contract condition that the Service Provider delivers community benefits as part of this Contract.

There are a variety of community benefit obligations outlined in the Contract and the Service Provider must agree to deliver one or more.

Tenderers must not outline the community benefit’s they are currently delivering for existing Clients. Tenderers must outline what they propose to offer for Tai Tarian if awarded the Contract.

Delivery of community benefits through all spend is aligned with the Well-being of Future Generations Act Wales and delivers against its goals.

All community benefit activities must take place within the Neath Port Talbot County Borough.

The buyer considers that this contract is suitable for consortia bidding.

5.2

Additional Documentation

5.3

Publication date of this notice