Award

NHS GDPR Compliance Tool

THE COMMON SERVICES AGENCY (MORE COMMONLY KNOWN AS NHS NATIONAL SERVICES SCOTLAND) (NSS)

This public procurement record has 3 releases in its history.

Award

11 Aug 2025 at 15:33

Tender

12 Dec 2024 at 11:47

Planning

12 Jun 2024 at 13:50

Summary of the contracting process

The procurement process for the NHS GDPR Compliance Tool, conducted by The Common Services Agency, also known as NHS National Services Scotland (NSS), is at the award stage. The contract aims to support NHS Scotland's Information Governance with GDPR compliance through software development and IT services, classified under CPV code 72000000. Located in Scotland (UKM), the procurement follows an open procedure under the Public Contracts (Scotland) Regulations 2015. The contract, awarded to AWTG LTD, was signed on 22nd July 2025, with a value of £512,000. Prior to this, the tender was active with a closing date for submissions on 27th January 2025, following the initiation of the tender stage on 12th December 2024. Key contract delivery includes services enhancing data protection and information governance activities.

This tender provides significant opportunities for businesses specialising in IT services and software development, particularly those adept in GDPR compliance frameworks. Companies with a strong background in delivering information governance solutions or possessing relevant industry certifications like ISO standards will find this opportunity advantageous. Engaging in such contracts not only offers financial benefits but also the chance to collaborate with a prominent public health service, thereby expanding business networks and enhancing industry reputation. Small and medium-sized enterprises (SMEs) are well-positioned to compete, as evidenced by the awarded contract to an SME, indicating openness in the procurement process to diverse suppliers.

Find more tenders on our Open Data Platform.
How relevant is this notice?

D3 Tenders Premium

Win More Public Sector Contracts

AI-powered tender discovery, pipeline management, and market intelligence — everything you need to grow your public sector business.

Notice Title

NHS GDPR Compliance Tool

Notice Description

Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

Lot Information

Lot 1

Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

Renewal: The Agreement includes two optional extension periods of 12 months each.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-046f75
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/047760-2025
Current Stage
Award
All Stages
Planning, Tender, Award

Procurement Classification

Notice Type
Planning Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure
Tender Suitability
Not specified
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
£900,000 £500K-£1M
Lots Value
£900,000 £500K-£1M
Awards Value
Not specified
Contracts Value
£512,000 £500K-£1M

Notice Dates

Publication Date
11 Aug 20256 months ago
Submission Deadline
27 Jan 2025Expired
Future Notice Date
30 Sep 2024Expired
Award Date
21 Jul 20257 months ago
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Cancelled
Awards Status
Active
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
THE COMMON SERVICES AGENCY (MORE COMMONLY KNOWN AS NHS NATIONAL SERVICES SCOTLAND) (NSS)
Contact Name
Not specified
Contact Email
michael.walker3@nhs.scot
Contact Phone
+44 1312756000

Buyer Location

Locality
EDINBURGH
Postcode
EH12 9EB
Post Town
Edinburgh
Country
Scotland

Major Region (ITL 1)
TLM Scotland
Basic Region (ITL 2)
TLM1 East Central Scotland
Small Region (ITL 3)
TLM13 City of Edinburgh
Delivery Location
TLM Scotland

Local Authority
City of Edinburgh
Electoral Ward
Drum Brae/Gyle
Westminster Constituency
Edinburgh South West

Supplier Information

Number of Suppliers
1
Supplier Name

AWTG

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-046f75-2025-08-11T16:33:44+01:00",
    "date": "2025-08-11T16:33:44+01:00",
    "ocid": "ocds-h6vhtk-046f75",
    "description": "Estimated Value: The estimated value provided in sections II.1.7 and V.2.4 includes the initial 36 month contract period and the two optional extension periods of 12 months each. (SC Ref:807004)",
    "initiationType": "tender",
    "tender": {
        "id": "ocds-h6vhtk-046f75",
        "legalBasis": {
            "id": "32014L0024",
            "scheme": "CELEX"
        },
        "title": "NHS GDPR Compliance Tool",
        "status": "complete",
        "classification": {
            "scheme": "CPV",
            "id": "72000000",
            "description": "IT services: consulting, software development, Internet and support"
        },
        "mainProcurementCategory": "services",
        "description": "Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.",
        "lots": [
            {
                "id": "1",
                "description": "Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.",
                "status": "cancelled",
                "awardCriteria": {
                    "criteria": [
                        {
                            "name": "Functional Requirements",
                            "type": "quality",
                            "description": "40"
                        },
                        {
                            "name": "Non-Functional Requirements",
                            "type": "quality",
                            "description": "30"
                        },
                        {
                            "type": "price",
                            "description": "30"
                        }
                    ]
                },
                "value": {
                    "amount": 900000,
                    "currency": "GBP"
                },
                "contractPeriod": {
                    "durationInDays": 1080
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "The Agreement includes two optional extension periods of 12 months each."
                },
                "submissionTerms": {
                    "variantPolicy": "notAllowed"
                },
                "hasOptions": false
            }
        ],
        "items": [
            {
                "id": "1",
                "deliveryAddresses": [
                    {
                        "region": "UKM"
                    },
                    {
                        "region": "UKM"
                    },
                    {
                        "region": "UKM"
                    }
                ],
                "deliveryLocation": {
                    "description": "Scotland"
                },
                "relatedLot": "1"
            }
        ],
        "communication": {
            "futureNoticeDate": "2024-10-01T00:00:00+01:00"
        },
        "coveredBy": [
            "GPA"
        ],
        "value": {
            "amount": 900000,
            "currency": "GBP"
        },
        "submissionMethod": [
            "electronicSubmission"
        ],
        "submissionMethodDetails": "http://www.publictendersscotland.publiccontractsscotland.gov.uk/",
        "selectionCriteria": {
            "criteria": [
                {
                    "type": "economic",
                    "description": "SPD Q.4B.1.1: Bidders are required to provide statement of accounts or extracts relating to their business for the previous 3 years. Where any are risks identified by NSS as part of the due diligence carried out on the above information NSS may require Bidders to provide additional information to demonstrate financial standing. Additional information can include but not be limited to: - parent company accounts (if applicable) - deeds of guarantee - bankers statements and references - accountants' references - management accounts - financial projections, including cash flow forecasts - details and evidence of previous contracts, including contract values - capital availability. Bidders who cannot provide suitable evidence of a secure financial standing may be excluded from the procurement. Q.4B.5.1 and Q.4B.5.2: It is a requirement of this contract that bidders hold, or can commit to obtain prior to the commence of any subsequently awarded contract, the types and levels of insurance indicated below: Employers liability insurance: 5 000 000 GBP; Public liability insurance: 1 000 000 GBP; Professional indemnity insurance: 1 000 000 GBP",
                    "appliesTo": [
                        "supplier"
                    ]
                },
                {
                    "type": "technical",
                    "description": "4C.1.2 Please provide details of three relevant examples of services carried out during the last three years. 4.C.2 Bidders are required to confirm compliance with standards, such as ISO or equivalent, set by technical bodies, especially those responsible for quality control. Please provide examples such as the following: - Cyber Essentials - ISO 9001 - Quality Management Systems - ISO 27001 - Information Security Management - ISO 27017 - Code of practice for information security controls - ISO 27018 - Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors - UK Government 14 Cloud Security Principles Please state the relevance of any such educational and professional qualifications. 4C.6: Bidders will be required to confirm that they and/or the service provider have relevant educational and professional qualifications such as the following: ISO27001 or equivalent ITIL qualifications [Helpdesk, etc] or equivalent other professional qualifications relevant to the Services outlined in the Contract Notice. And: 4C.6.1: Bidders will be required to confirm that they and/or the service provider's managerial staff have relevant educational and professional qualifications such as the following: ISO27001 or equivalent ITIL qualifications [Helpdesk, etc] or equivalent other professional qualifications relevant to the Services outlined in the Contract Notice. 4C.10: Bidders will be required to confirm whether they intend to subcontract and, if so, for what proportion of the contract",
                    "appliesTo": [
                        "supplier"
                    ]
                }
            ]
        },
        "procurementMethod": "open",
        "procurementMethodDetails": "Open procedure",
        "tenderPeriod": {
            "endDate": "2025-01-27T12:00:00Z"
        },
        "submissionTerms": {
            "languages": [
                "en"
            ]
        },
        "awardPeriod": {
            "startDate": "2025-01-27T12:00:00Z"
        },
        "bidOpening": {
            "date": "2025-01-27T12:00:00Z"
        },
        "hasRecurrence": false,
        "contractTerms": {
            "hasElectronicOrdering": true,
            "electronicInvoicingPolicy": "allowed",
            "hasElectronicPayment": true
        },
        "reviewDetails": "Economic operators should approach the contracting authority in the first instance. However, the only formal remedy is to apply to the courts: An economic operator that suffers, or is at risk of suffering, loss or damage attributable to a breach of duty under the Public Contracts (Scotland) Regulations 2015 or the Procurement Reform (Scotland) Act 2014, may bring proceedings in the Sheriff Court or the Court of Session."
    },
    "parties": [
        {
            "id": "GB-FTS-115937",
            "name": "The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)",
            "identifier": {
                "legalName": "The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)"
            },
            "address": {
                "streetAddress": "1 South Gyle Crescent",
                "locality": "Edinburgh",
                "region": "UKM",
                "postalCode": "EH12 9EB",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 1312756000",
                "email": "michael.walker3@nhs.scot",
                "url": "http://www.publictendersscotland.publiccontractsscotland.gov.uk/"
            },
            "roles": [
                "buyer",
                "centralPurchasingBody"
            ],
            "details": {
                "url": "http://www.nss.nhs.scot/browse/procurement-and-logistics",
                "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA11883",
                "classifications": [
                    {
                        "scheme": "TED_CA_TYPE",
                        "id": "BODY_PUBLIC",
                        "description": "Body governed by public law"
                    },
                    {
                        "scheme": "COFOG",
                        "id": "07",
                        "description": "Health"
                    }
                ]
            }
        },
        {
            "id": "GB-FTS-20205",
            "name": "Sheriff Court House",
            "identifier": {
                "legalName": "Sheriff Court House"
            },
            "address": {
                "locality": "Edinburgh",
                "postalCode": "EH1 1LB",
                "countryName": "United Kingdom"
            },
            "roles": [
                "reviewBody"
            ]
        },
        {
            "id": "GB-FTS-157636",
            "name": "AWTG LTD",
            "identifier": {
                "legalName": "AWTG LTD"
            },
            "address": {
                "streetAddress": "8 Canham Mews, Canham Road",
                "locality": "London",
                "region": "UKI",
                "postalCode": "W37SR",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 02035155151"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "sme"
            }
        },
        {
            "id": "GB-FTS-324",
            "name": "Sheriff Court House",
            "identifier": {
                "legalName": "Sheriff Court House"
            },
            "address": {
                "streetAddress": "27 Chambers Street",
                "locality": "Edinburgh",
                "postalCode": "EH1 1LB",
                "countryName": "United Kingdom"
            },
            "roles": [
                "reviewBody"
            ]
        }
    ],
    "buyer": {
        "id": "GB-FTS-115937",
        "name": "The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)"
    },
    "links": [
        {
            "rel": "canonical",
            "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000784857"
        }
    ],
    "language": "en",
    "awards": [
        {
            "id": "047760-2025-NP610424-1",
            "relatedLots": [
                "1"
            ],
            "status": "active",
            "suppliers": [
                {
                    "id": "GB-FTS-157636",
                    "name": "AWTG LTD"
                }
            ]
        }
    ],
    "contracts": [
        {
            "id": "047760-2025-NP610424-1",
            "awardID": "047760-2025-NP610424-1",
            "status": "active",
            "value": {
                "amount": 512000,
                "currency": "GBP"
            },
            "dateSigned": "2025-07-22T00:00:00+01:00"
        }
    ],
    "bids": {
        "statistics": [
            {
                "id": "1",
                "measure": "bids",
                "relatedLot": "1",
                "value": 4
            },
            {
                "id": "2",
                "measure": "smeBids",
                "relatedLot": "1",
                "value": 3
            },
            {
                "id": "3",
                "measure": "foreignBidsFromEU",
                "relatedLot": "1",
                "value": 0
            },
            {
                "id": "4",
                "measure": "foreignBidsFromNonEU",
                "relatedLot": "1",
                "value": 4
            },
            {
                "id": "5",
                "measure": "electronicBids",
                "relatedLot": "1",
                "value": 4
            }
        ]
    }
}