Tender

IG Support and Data Protection Officer Service to the Norfolk and Waveney GP Practices

NHS ARDEN AND GREATER EAST MIDLANDS COMMISSIONING SUPPORT UNIT

This public procurement record has 2 releases in its history.

Tender

22 Mar 2023 at 10:41

Tender Notice
Tender

15 Mar 2023 at 11:31

Tender Notice
Summary of the contracting process

The NHS Arden and Greater East Midlands Commissioning Support Unit has initiated a tender titled "IG Support and Data Protection Officer Service to the Norfolk and Waveney GP Practices" for data services. The tender aims to procure information governance advice and guidance support, along with a Data Protection Officer service, with a contract value of £360,000. The procurement method is through an open procedure, with a tender period ending on April 14, 2023, and a contract period from July 3, 2023, to June 30, 2025, providing opportunities for SMEs and VCSEs to participate.

This tender presents an opportunity for businesses to provide crucial support in information governance and data protection to GP practices in Norfolk and Waveney. Businesses well-suited for this tender are those with expertise in data services and compliance, especially in providing advice, support, and guidance on information governance policies, procedures, and GDPR matters. The location of the service delivery is in NR1 2DH, England, United Kingdom, aligning with the main procurement category of services.

Find more tenders on our Open Data Platform.
How relevant is this notice?

D3 Tenders Premium

Win More Public Sector Contracts

AI-powered tender discovery, pipeline management, and market intelligence — everything you need to grow your public sector business.

Start Free Trial Book a Demo
All Features Pricing

Notice Information

Notice Title

IG Support and Data Protection Officer Service to the Norfolk and Waveney GP Practices

Notice Description

NHS NORFOLK & WAVENEY ICB invite bids from suitably qualified suppliers to provide information governance advice and guidance support service, together with a named Data Protection Officer. The requirement will include: Data breaches * The provision of advice and/or support to practices on the investigation of possible information security breaches and incidents. * Advice on incident/breach assessment and reporting via the incident reporting tool within the DSPT to NHS England and reporting to the ICO (dependent upon severity of incident). * Advice on assessment and reporting via the incident reporting tool within the DSPT to NHS England and ICO (dependent upon nature and severity of the breach). * Advice on post-incident reviews and recommended actions for practice implementation. To lead or direct data breach reviews and investigations where highly specialist knowledge is required or complex multi-party issues are involved. Service Provider as data processor will: * To take action immediately following a data breach or a near miss, alerting promptly the practice as data controller and with a report made to the senior management within the ICB and the practice within 12 (working) hours of detection. * Report data breaches in line with NHS guidance (using the incident reporting tool within the DSPT) and legal requirements immediately following detection. * Provide a Lessons Learned Report (with relevant action plan as appropriate) to the ICB within 2 weeks of the recorded resolution of the incident. IG Policy Support * Support for the production and maintenance of local information governance policies and procedures for practices. Provision of advice and support to practices on approval, ratification and adoption of the policies for their organisation. Support for the Data Security and Protection Toolkit compliance * Provide advice and guidance to practices on how to complete the DSPT, including the collection and collation of evidence in support of DSPT submissions. Provide practices with evidence required for DSPT where this is held by the ICB or its commissioned IT providers. * Monitor DSPT compliance of practices and provide the ICB with details of any non-compliance with practice action plans. IG consultancy and support * Provision of advice, guidance and support on IG related issues, including existing operational processes and procedures or new business initiatives. Advice and guidance on personal data access (but not extending to legal advice). Data Protection Officer (DPO) Support Provision of advice, guidance and support on IG related issues including existing operational processes and procedures or new business initiatives to support practice designated Data Protection Officers including existing operational processes and procedures or new business initiatives. To include * Access for Practices during normal service hours to specialist qualified advice on GDPR matter. Additional information: To register your interest and access the Documents, supporting information and express your interest the Contracting Authority will be using an eTendering system for this procurement exercise. Further information and the ITT documentation can be found via the 'Live Opportunities' list on the e-procurement system at the following link: https://health-family-contract-search.secure.force.com/?searchtype=Projects. You can also register your interest via this page. You can search for the opportunity by entering the following contract reference: ID number C151681 - Expression of Interest IG and Data Protection Officer Service. Please answer all the questions and submit your response by 10:00 on the 14th of April 2023.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/990edc91-f242-46df-96df-d214e5d633c2
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
Tender Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure (above threshold)
Tender Suitability
SME, VCSE
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72300000 - Data services

Notice Value(s)

Tender Value
£360,000 £100K-£500K
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
22 Mar 20232 years ago
Submission Deadline
14 Apr 2023Expired
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
2 Jul 2023 - 30 Jun 2025 1-2 years
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Not Specified
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
NHS ARDEN AND GREATER EAST MIDLANDS COMMISSIONING SUPPORT UNIT
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
NORWICH
Postcode
NR1 2DH
Post Town
Norwich
Country
England
Major Region (ITL 1)
TLH East (England)
Basic Region (ITL 2)
TLH5 Norfolk
Small Region (ITL 3)
TLH51 Norwich and East Norfolk
Delivery Location
TLC North East (England), TLD North West (England), TLF East Midlands (England), TLG West Midlands (England), TLH East (England), TLJ South East (England), TLK South West (England)
Local Authority
Norwich
Electoral Ward
Lakenham
Westminster Constituency
Norwich South

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts. 

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f-2023-03-22T10:41:21Z",
    "date": "2023-03-22T10:41:21Z",
    "ocid": "ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f",
    "language": "en",
    "initiationType": "tender",
    "tender": {
        "id": "CF-1414200D0O000000rwimUAA",
        "title": "IG Support and Data Protection Officer Service to the Norfolk and Waveney GP Practices",
        "description": "NHS NORFOLK & WAVENEY ICB invite bids from suitably qualified suppliers to provide information governance advice and guidance support service, together with a named Data Protection Officer. The requirement will include: Data breaches * The provision of advice and/or support to practices on the investigation of possible information security breaches and incidents. * Advice on incident/breach assessment and reporting via the incident reporting tool within the DSPT to NHS England and reporting to the ICO (dependent upon severity of incident). * Advice on assessment and reporting via the incident reporting tool within the DSPT to NHS England and ICO (dependent upon nature and severity of the breach). * Advice on post-incident reviews and recommended actions for practice implementation. To lead or direct data breach reviews and investigations where highly specialist knowledge is required or complex multi-party issues are involved. Service Provider as data processor will: * To take action immediately following a data breach or a near miss, alerting promptly the practice as data controller and with a report made to the senior management within the ICB and the practice within 12 (working) hours of detection. * Report data breaches in line with NHS guidance (using the incident reporting tool within the DSPT) and legal requirements immediately following detection. * Provide a Lessons Learned Report (with relevant action plan as appropriate) to the ICB within 2 weeks of the recorded resolution of the incident. IG Policy Support * Support for the production and maintenance of local information governance policies and procedures for practices. Provision of advice and support to practices on approval, ratification and adoption of the policies for their organisation. Support for the Data Security and Protection Toolkit compliance * Provide advice and guidance to practices on how to complete the DSPT, including the collection and collation of evidence in support of DSPT submissions. Provide practices with evidence required for DSPT where this is held by the ICB or its commissioned IT providers. * Monitor DSPT compliance of practices and provide the ICB with details of any non-compliance with practice action plans. IG consultancy and support * Provision of advice, guidance and support on IG related issues, including existing operational processes and procedures or new business initiatives. Advice and guidance on personal data access (but not extending to legal advice). Data Protection Officer (DPO) Support Provision of advice, guidance and support on IG related issues including existing operational processes and procedures or new business initiatives to support practice designated Data Protection Officers including existing operational processes and procedures or new business initiatives. To include * Access for Practices during normal service hours to specialist qualified advice on GDPR matter. Additional information: To register your interest and access the Documents, supporting information and express your interest the Contracting Authority will be using an eTendering system for this procurement exercise. Further information and the ITT documentation can be found via the 'Live Opportunities' list on the e-procurement system at the following link: https://health-family-contract-search.secure.force.com/?searchtype=Projects. You can also register your interest via this page. You can search for the opportunity by entering the following contract reference: ID number C151681 - Expression of Interest IG and Data Protection Officer Service. Please answer all the questions and submit your response by 10:00 on the 14th of April 2023.",
        "datePublished": "2023-03-15T11:31:08Z",
        "status": "active",
        "classification": {
            "scheme": "CPV",
            "id": "72300000",
            "description": "Data services"
        },
        "items": [
            {
                "id": "1",
                "deliveryAddresses": [
                    {
                        "postalCode": "NR1 2DH"
                    },
                    {
                        "region": "England",
                        "countryName": "United Kingdom"
                    },
                    {
                        "postalCode": "NR1 2DH"
                    },
                    {
                        "region": "England",
                        "countryName": "United Kingdom"
                    }
                ]
            }
        ],
        "value": {
            "amount": 360000,
            "currency": "GBP"
        },
        "procurementMethod": "open",
        "procurementMethodDetails": "Open procedure (above threshold)",
        "tenderPeriod": {
            "endDate": "2023-04-14T10:00:00+01:00"
        },
        "contractPeriod": {
            "startDate": "2023-07-03T00:00:00+01:00",
            "endDate": "2025-06-30T23:59:59+01:00"
        },
        "suitability": {
            "sme": true,
            "vcse": true
        },
        "mainProcurementCategory": "services",
        "documents": [
            {
                "id": "1",
                "documentType": "tenderNotice",
                "description": "Opportunity notice on Contracts Finder",
                "url": "https://www.contractsfinder.service.gov.uk/Notice/2d7eaafb-8f72-4735-986c-21b8ade70446",
                "datePublished": "2023-03-15T11:31:08Z",
                "format": "text/html",
                "language": "en"
            },
            {
                "id": "2",
                "documentType": "tenderNotice",
                "description": "Opportunity notice on Contracts Finder",
                "url": "https://www.contractsfinder.service.gov.uk/Notice/990edc91-f242-46df-96df-d214e5d633c2",
                "datePublished": "2023-03-15T11:31:08Z",
                "dateModified": "2023-03-22T10:41:21Z",
                "format": "text/html",
                "language": "en"
            }
        ]
    },
    "parties": [
        {
            "id": "GB-CFS-238770",
            "name": "NHS Arden and Greater East Midlands Commissioning Support Unit",
            "identifier": {
                "legalName": "NHS Arden and Greater East Midlands Commissioning Support Unit"
            },
            "address": {
                "streetAddress": "County Hall, Martineau Ln",
                "locality": "Norwich",
                "postalCode": "NR1 2DH",
                "countryName": "GB"
            },
            "contactPoint": {
                "name": "Karen Martin",
                "email": "karen.martin31@nhs.net"
            },
            "roles": [
                "buyer"
            ]
        }
    ],
    "buyer": {
        "id": "GB-CFS-238770",
        "name": "NHS Arden and Greater East Midlands Commissioning Support Unit"
    }
}