Award

FTS050 Data Protection Services Framework

HIGHLANDS AND ISLANDS ENTERPRISE

This public procurement record has 2 releases in its history.

Award

08 Apr 2026 at 12:59

Tender

19 Dec 2025 at 16:00

Summary of the contracting process

The Highlands and Islands Enterprise (HIE) has initiated an "FTS050 Data Protection Services Framework" tender, classified under business and management consultancy services. The procurement aims to appoint a suitably experienced supplier to offer data protection services in compliance with the General Data Protection Regulation and the Data Protection Act 2018. This framework is established on behalf of HIE and associated organisations like Wave Energy Scotland and Orkney Research Innovation Campus, spanning from 8 April 2026 to 7 April 2029, with an optional one-year extension. The procurement process, conducted through an open procedure, is currently in the award stage, having been initiated on 19th December 2025, and aims for a structured, compliant delivery in the UK regions, particularly within Inverness. The estimated framework value over four years is GBP 287,000.

This tender presents extensive opportunities for growth, particularly for businesses specialising in consultancy, legislative, and data services. Organisations equipped with a strong understanding of data protection legislation, and equipped to provide thorough compliance support, risk assessments, and training would find this framework advantageous. Small to medium-sized enterprises (SMEs) experienced in data security and management would be well-suited to leverage their expertise to fulfil the detailed objectives set out within this framework, thus expanding their business in the public sector domain. Businesses can benefit from engaging with HIE and its affiliates, facilitating enhanced regional development and public service enhancements.

Find more tenders on our Open Data Platform.
How relevant is this notice?

Notice Title

FTS050 Data Protection Services Framework

Notice Description

HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training. This Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE). The framework is live from 8 April 2026 until 7 April 2029, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term (until 7 April 2030).

Lot Information

Lot 1

Objective 1 - Role of Data Protection Officer (DPO) as specified in the General Data Protection Regulations and in support of Data Protection Act 2018 Objective 2 - Monitor and remedy noncompliance and support personal data breach resolution Objective 3 - Organisational Compliance with Data Protection Legislation Objective 4 - Data Protection Impact Assessment (DPIA) process including advice and support Objective 5 - Reporting and monitoring Additional information: Economic operators may be excluded from this competition if they are in any of the situations referred to in Regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Options: HIE reserves the right, on giving reasonable written notice from time to time, to require changes to the Services (whether by way of the removal of Services, the addition of new Services, or increasing or decreasing the Services or specifying the order in which the Services are to be performed or the locations where the Services are to be provided). HIE shall not require any such change other than where it is permitted by Regulation 72 of the Public Contracts (Scotland) Regulations 2015. The Framework/Call-off Contracts may be modified for reasons including but not limited to: -Changes to budget availability -Organisation/s bringing the services in-house fully or partially and so the services are no longer required / reduced services are required -The addition of similar services -Increasing the volume of the services -Change in legislative requirements resulting in increased or reduced service In these situations, for the call-off contracts, HIE will agree a price variation based on the pricing submitted as part of your bid, for example, using the hourly rate to increase/reduce the services by a number of hours. Other framework users may also modify their relevant call-off contracts.

Renewal: The contract will be awarded for an initial period of 3 years, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-05fac3
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/031962-2026
Current Stage
Award
All Stages
Tender, Award

Procurement Classification

Notice Type
Tender Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure
Tender Suitability
Not specified
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

75 - Administration, defence and social security services

79 - Business services: law, marketing, consulting, recruitment, printing and security


CPV Codes

72300000 - Data services

75111200 - Legislative services

79212000 - Auditing services

79410000 - Business and management consultancy services

79411100 - Business development consultancy services

Notice Value(s)

Tender Value
£287,000 £100K-£500K
Lots Value
£287,000 £100K-£500K
Awards Value
Not specified
Contracts Value
£287,000 £100K-£500K

Notice Dates

Publication Date
8 Apr 20262 weeks ago
Submission Deadline
9 Feb 2026Expired
Future Notice Date
Not specified
Award Date
5 Apr 20262 weeks ago
Contract Period
Not specified - Not specified
Recurrence
HIE reserves the right to re-tender for these services upon termination or at the end of the contract, including any extension period.

Notice Status

Tender Status
Complete
Lots Status
Cancelled
Awards Status
Active
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
HIGHLANDS AND ISLANDS ENTERPRISE
Additional Buyers

CAIRNGORM MOUNTAIN (SCOTLAND) LTD

HIE ORKNEY

HIE VENTURES LTD.

ORKNEY RESEARCH AND INNOVATION CAMPUS LLP

SOUTH OF SCOTLAND ENTERPRISE

WAVE ENERGY SCOTLAND LIMITED

Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
INVERNESS
Postcode
IV2 5NA
Post Town
Inverness
Country
Scotland

Major Region (ITL 1)
TLM Scotland
Basic Region (ITL 2)
TLM2 Highlands and Islands
Small Region (ITL 3)
TLM20 Highlands and Islands
Delivery Location
TLM Scotland

Local Authority
Highland
Electoral Ward
Nairn and Cawdor
Westminster Constituency
Moray West, Nairn and Strathspey

Supplier Information

Number of Suppliers
1
Supplier Name

TKM CONSULTING

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-05fac3-2026-04-08T13:59:42+01:00",
    "date": "2026-04-08T13:59:42+01:00",
    "ocid": "ocds-h6vhtk-05fac3",
    "description": "The figure stated in section II.1.7 and V.2.4 refers to the maximum framework value including the optional extension period. (SC Ref:827694)",
    "initiationType": "tender",
    "tender": {
        "id": "FTS 050",
        "legalBasis": {
            "id": "32014L0024",
            "scheme": "CELEX"
        },
        "title": "FTS050 Data Protection Services Framework",
        "status": "complete",
        "classification": {
            "scheme": "CPV",
            "id": "79410000",
            "description": "Business and management consultancy services"
        },
        "mainProcurementCategory": "services",
        "description": "HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training. This Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE). The framework is live from 8 April 2026 until 7 April 2029, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term (until 7 April 2030).",
        "value": {
            "amount": 287000,
            "currency": "GBP"
        },
        "lots": [
            {
                "id": "1",
                "description": "Objective 1 - Role of Data Protection Officer (DPO) as specified in the General Data Protection Regulations and in support of Data Protection Act 2018 Objective 2 - Monitor and remedy noncompliance and support personal data breach resolution Objective 3 - Organisational Compliance with Data Protection Legislation Objective 4 - Data Protection Impact Assessment (DPIA) process including advice and support Objective 5 - Reporting and monitoring Additional information: Economic operators may be excluded from this competition if they are in any of the situations referred to in Regulation 58 of the Public Contracts (Scotland) Regulations 2015.",
                "awardCriteria": {
                    "criteria": [
                        {
                            "name": "Prompt Payment Standard Clause",
                            "type": "quality",
                            "description": "pass/fail"
                        },
                        {
                            "name": "Cyber Security",
                            "type": "quality",
                            "description": "pass/fail"
                        },
                        {
                            "name": "Payment of the Real Living Wage",
                            "type": "quality",
                            "description": "pass/fail"
                        },
                        {
                            "name": "Management and Delivery Methodology",
                            "type": "quality",
                            "description": "20%"
                        },
                        {
                            "name": "Responsiveness and Business Continuity",
                            "type": "quality",
                            "description": "13%"
                        },
                        {
                            "name": "Management and Delivery Team",
                            "type": "quality",
                            "description": "20%"
                        },
                        {
                            "name": "Monitoring and Reporting of Community Benefits",
                            "type": "quality",
                            "description": "2%"
                        },
                        {
                            "name": "Fair Work Practices",
                            "type": "quality",
                            "description": "5%"
                        },
                        {
                            "type": "price",
                            "description": "40%"
                        },
                        {
                            "name": "Prompt Payment Standard Clause",
                            "type": "quality",
                            "description": "pass/fail"
                        },
                        {
                            "name": "Cyber Security",
                            "type": "quality",
                            "description": "pass/fail"
                        },
                        {
                            "name": "Payment of the Real Living Wage",
                            "type": "quality",
                            "description": "pass/fail"
                        },
                        {
                            "name": "Management and Delivery Methodology",
                            "type": "quality",
                            "description": "20%"
                        },
                        {
                            "name": "Responsiveness and Business Continuity",
                            "type": "quality",
                            "description": "13%"
                        },
                        {
                            "name": "Management and Delivery Team",
                            "type": "quality",
                            "description": "20%"
                        },
                        {
                            "name": "Monitoring and Reporting of Community Benefits",
                            "type": "quality",
                            "description": "2%"
                        },
                        {
                            "name": "Fair Work Practices",
                            "type": "quality",
                            "description": "5%"
                        },
                        {
                            "type": "price",
                            "description": "40%"
                        }
                    ]
                },
                "value": {
                    "amount": 287000,
                    "currency": "GBP"
                },
                "contractPeriod": {
                    "durationInDays": 1440
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "The contract will be awarded for an initial period of 3 years, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term."
                },
                "submissionTerms": {
                    "variantPolicy": "notAllowed"
                },
                "hasOptions": true,
                "options": {
                    "description": "HIE reserves the right, on giving reasonable written notice from time to time, to require changes to the Services (whether by way of the removal of Services, the addition of new Services, or increasing or decreasing the Services or specifying the order in which the Services are to be performed or the locations where the Services are to be provided). HIE shall not require any such change other than where it is permitted by Regulation 72 of the Public Contracts (Scotland) Regulations 2015. The Framework/Call-off Contracts may be modified for reasons including but not limited to: -Changes to budget availability -Organisation/s bringing the services in-house fully or partially and so the services are no longer required / reduced services are required -The addition of similar services -Increasing the volume of the services -Change in legislative requirements resulting in increased or reduced service In these situations, for the call-off contracts, HIE will agree a price variation based on the pricing submitted as part of your bid, for example, using the hourly rate to increase/reduce the services by a number of hours. Other framework users may also modify their relevant call-off contracts."
                },
                "status": "cancelled"
            }
        ],
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "79411100",
                        "description": "Business development consultancy services"
                    },
                    {
                        "scheme": "CPV",
                        "id": "75111200",
                        "description": "Legislative services"
                    },
                    {
                        "scheme": "CPV",
                        "id": "79212000",
                        "description": "Auditing services"
                    },
                    {
                        "scheme": "CPV",
                        "id": "72300000",
                        "description": "Data services"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKM"
                    },
                    {
                        "region": "UKM"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "submissionMethod": [
            "electronicSubmission"
        ],
        "submissionMethodDetails": "http://www.publiccontractsscotland.gov.uk",
        "selectionCriteria": {
            "criteria": [
                {
                    "type": "suitability",
                    "description": "4A2A Bidders must provide, or commit to provide prior to the commencement of the framework agreement, an up-to-date Level 1 disclosure from Disclosure Scotland for the DPO, the DPO's deputy/ies and all personnel with access to Framework User systems or business information. (Information on how to apply for a Level 1 disclosure is available online at https://www.mygov.scot/apply-for-level-1-disclosure.)",
                    "appliesTo": [
                        "supplier"
                    ]
                },
                {
                    "minimum": "It is a requirement of this Contract that bidders hold, or can commit to obtain prior to the commencement of any subsequently awarded Contract, the types and levels of insurance indicated below: 4B5A Professional Risk Indemnity - GBP 3 million for each and every claim 4B5B Employer's (Compulsory) Liability Insurance - GBP 5M for each and every claim. 4B.6 (not scored) HIE as a public body must comply with HMRC IR35 provisions. Therefore, where you are bidding as a personal service company (PSC) or will be using a personal service company to provide services under the contract please identify these PSC (s) in your response to 4B6."
                }
            ]
        },
        "contractTerms": {
            "performanceTerms": "See Scope of Requirements and Tender Guidance document.",
            "hasElectronicOrdering": true,
            "electronicInvoicingPolicy": "allowed",
            "hasElectronicPayment": true
        },
        "otherRequirements": {
            "requiresStaffNamesAndQualifications": true
        },
        "procurementMethod": "open",
        "procurementMethodDetails": "Open procedure",
        "techniques": {
            "hasFrameworkAgreement": true,
            "frameworkAgreement": {
                "maximumParticipants": 1
            }
        },
        "coveredBy": [
            "GPA"
        ],
        "tenderPeriod": {
            "endDate": "2026-02-09T12:00:00Z"
        },
        "submissionTerms": {
            "languages": [
                "en"
            ],
            "bidValidityPeriod": {
                "durationInDays": 90
            }
        },
        "awardPeriod": {
            "startDate": "2026-02-09T12:00:00Z"
        },
        "bidOpening": {
            "date": "2026-02-09T12:00:00Z"
        },
        "hasRecurrence": true,
        "recurrence": {
            "description": "HIE reserves the right to re-tender for these services upon termination or at the end of the contract, including any extension period."
        }
    },
    "parties": [
        {
            "id": "GB-FTS-1479",
            "name": "Highlands and Islands Enterprise",
            "identifier": {
                "legalName": "Highlands and Islands Enterprise"
            },
            "address": {
                "streetAddress": "An Lochran, 10 Inverness Campus",
                "locality": "Inverness",
                "region": "UKM6",
                "postalCode": "IV2 5NA",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 1463245245",
                "email": "hieprocurement@hient.co.uk",
                "url": "http://www.publiccontractsscotland.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://www.hie.co.uk",
                "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00313",
                "classifications": [
                    {
                        "id": "REGIONAL_AGENCY",
                        "scheme": "TED_CA_TYPE",
                        "description": "Regional or local agency/office"
                    },
                    {
                        "id": "04",
                        "scheme": "COFOG",
                        "description": "Economic affairs"
                    }
                ]
            }
        },
        {
            "id": "GB-FTS-6933",
            "name": "Wave Energy Scotland Limited",
            "identifier": {
                "legalName": "Wave Energy Scotland Limited"
            },
            "address": {
                "streetAddress": "An Lochran, 10 Inverness Campus",
                "locality": "Inverness",
                "region": "UKM",
                "postalCode": "IV2 5NA",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 1463245245",
                "email": "wesprocurement@hient.co.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://www.waveenergyscotland.co.uk",
                "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA24283"
            }
        },
        {
            "id": "GB-FTS-65704",
            "name": "Orkney Research and Innovation Campus LLP",
            "identifier": {
                "legalName": "Orkney Research and Innovation Campus LLP"
            },
            "address": {
                "streetAddress": "The Robert Rendall Building, Franklin Road",
                "locality": "Stromness",
                "region": "UK",
                "postalCode": "KW16 3AN",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 1463245245",
                "email": "enquiries@orkneycampus.co.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://www.orkneycampus.co.uk/",
                "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30475"
            }
        },
        {
            "id": "GB-FTS-65703",
            "name": "Cairngorm Mountain (Scotland) Ltd",
            "identifier": {
                "legalName": "Cairngorm Mountain (Scotland) Ltd"
            },
            "address": {
                "streetAddress": "Cairngorm Mountain, Cairngorm Ski Area",
                "locality": "Aviemore",
                "region": "UKM62",
                "postalCode": "PH22 1RB",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 1479861261",
                "email": "info@caingormmountain.co.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://www.cairngormmountain.co.uk/",
                "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30513"
            }
        },
        {
            "id": "GB-FTS-169805",
            "name": "South of Scotland Enterprise",
            "identifier": {
                "legalName": "South of Scotland Enterprise"
            },
            "address": {
                "streetAddress": "Carmont House, The Crichton, Bankend Road",
                "locality": "Dumfries",
                "region": "UK",
                "postalCode": "DG1 4TA",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 1750535901",
                "email": "Finance@sose.scot"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://www.southofscotlandenterprise.com",
                "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30448"
            }
        },
        {
            "id": "GB-FTS-169806",
            "name": "HIE Ventures Ltd.",
            "identifier": {
                "legalName": "HIE Ventures Ltd."
            },
            "address": {
                "streetAddress": "Ord House Cradlehall Business Park,Caulfield Road North",
                "locality": "Inverness",
                "region": "UKM",
                "postalCode": "IV2 5GH",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 463713755",
                "email": "enquiries@hient.co.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://www.hie.co.uk",
                "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30448"
            }
        },
        {
            "id": "GB-FTS-169807",
            "name": "HIE Orkney",
            "identifier": {
                "legalName": "HIE Orkney"
            },
            "address": {
                "streetAddress": "An Lochran, 10 Inverness Campus",
                "locality": "Inverness",
                "region": "UKM",
                "postalCode": "Iv12 5BU",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 1463245245",
                "email": "enquiries@hient.co.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://www.hie.co.uk",
                "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30448"
            }
        },
        {
            "id": "GB-FTS-1262",
            "name": "Inverness Sheriff Court and Justice of the Peace Court",
            "identifier": {
                "legalName": "Inverness Sheriff Court and Justice of the Peace Court"
            },
            "address": {
                "streetAddress": "The Inverness Justice Centre, Longman Road",
                "locality": "Inverness",
                "postalCode": "IV1 1AH",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 1463230782",
                "email": "inverness@scotcourts.gov.uk"
            },
            "roles": [
                "reviewBody"
            ],
            "details": {
                "url": "https://www.scotcourts.gov.uk/the-courts/court-locations/inverness-sheriff-court-and-justice-of-the-peace-court"
            }
        },
        {
            "id": "GB-FTS-179562",
            "name": "Tkm Consulting",
            "identifier": {
                "legalName": "Tkm Consulting"
            },
            "address": {
                "streetAddress": "Craigellachie, Ratagan",
                "locality": "Glenshiel",
                "region": "UK",
                "postalCode": "IV40 8HP",
                "countryName": "United Kingdom"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "sme"
            }
        }
    ],
    "buyer": {
        "id": "GB-FTS-1479",
        "name": "Highlands and Islands Enterprise"
    },
    "links": [
        {
            "rel": "canonical",
            "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000816177"
        },
        {
            "rel": "canonical",
            "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000816177"
        }
    ],
    "language": "en",
    "awards": [
        {
            "id": "031962-2026-FTS 050-1",
            "relatedLots": [
                "1"
            ],
            "status": "active",
            "suppliers": [
                {
                    "id": "GB-FTS-179562",
                    "name": "Tkm Consulting"
                }
            ]
        }
    ],
    "contracts": [
        {
            "id": "031962-2026-FTS 050-1",
            "awardID": "031962-2026-FTS 050-1",
            "status": "active",
            "value": {
                "amount": 287000,
                "currency": "GBP"
            },
            "dateSigned": "2026-04-06T00:00:00+01:00"
        }
    ],
    "bids": {
        "statistics": [
            {
                "id": "1",
                "measure": "bids",
                "relatedLot": "1",
                "value": 12
            },
            {
                "id": "2",
                "measure": "smeBids",
                "relatedLot": "1",
                "value": 11
            },
            {
                "id": "3",
                "measure": "foreignBidsFromEU",
                "relatedLot": "1",
                "value": 0
            },
            {
                "id": "4",
                "measure": "foreignBidsFromNonEU",
                "relatedLot": "1",
                "value": 12
            },
            {
                "id": "5",
                "measure": "electronicBids",
                "relatedLot": "1",
                "value": 12
            }
        ]
    }
}