Data Protection Officer Management and GP Information Governance Management Services to GP Practices for NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland ICBs

NHS LEICESTER, LEICESTERSHIRE AND RUTLAND INTEGRATED CARE BOARD

This public procurement record has 2 releases in its history.

Tender

21 May 2026 at 15:56

Planning

05 May 2026 at 14:59

Summary of the contracting process

The procurement process, managed by NHS Leicester, Leicestershire and Rutland Integrated Care Board in collaboration with NHS Northamptonshire Integrated Care Board, is currently at the tender stage. The tender is titled "Data Protection Officer Management and GP Information Governance Management Services to GP Practices for NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland ICBs." It focuses on providing business services related to law, marketing, consulting, recruitment, printing, and security. The procurement is occurring across the UKF2 region, specifically targeting GP practices within Leicestershire and Northamptonshire. The procurement method is an open competition, with bids required via the Atamis e-tendering portal by 5th June 2026. The contract value is set to a maximum of £132,000 per annum including VAT, and the contract duration is one year, with an option to extend for an additional six months starting 1st July 2026.

This tender offers significant growth opportunities for businesses specialising in data protection, information governance consultancy, and compliance services, particularly those experienced in handling General Data Protection Regulation (GDPR) compliance and incident management. Small and medium enterprises (SMEs), as well as voluntary, community, and social enterprises (VCSEs), are encouraged to participate, given the procurement's suitability and support for such organisations. The focus on technical service delivery and quality, as well as competitive pricing, emphasises the importance of expertise in GP information governance and adeptness in offering reliable and responsive advisory roles. Competing for this contract would particularly benefit businesses wishing to extend their services to public healthcare sectors and establish enduring relationships with NHS entities in the region.

How relevant is this notice?

Notice Title

Data Protection Officer Management and GP Information Governance Management Services to GP Practices for NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland ICBs

Notice Description

NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland (LLR) cluster ICBs (LNR ICBs) are looking for an organisation to provide Data Protection Officer (DPO) Management and GP Information Governance (IG) Management Services across the LNR cluster. There are currently 64 GP practices in Northamptonshire ICB and 126 GP practices in LLR ICB. Scope of Work and Requirements: - Data Protection Officer - Provide a contact point to act as DPO and provide remote specialist advice and guidance. - Advice and Support for the Data Security and Protection Toolkit (DSPT) - Advice and guidance to practices on how to investigate, manage, report, and review incidents. - Advice and support to providers to manage the reporting of the incident and advice on remedies. - Support for the production and maintenance of local IG policies and procedures. - Provide direct response to the GP Practice within 72 hours via email or telephone. - Provide independent and highly developed specialist knowledge and advice across the GP practices to ensure they remain compliant with changing legal requirements, including the UK General Data Protection Regulation (UK GDPR) The contract will be for a period of 1 year with the option to extend for up to a further 6 months commencing 1st July 2026. The maximum annual contract value is PS132,000 per annum including VAT. No bids over is PS132,000 per annum (including VAT) will be accepted. Further details can be found within the procurement documentation. Please note, this notice relates to a service/contract in scope of the Procurement Act 2023. Bids are to be submitted via the Atamis e-tendering portal by following the link below, and search for the project reference as detailed: https://health-family.force.com/s/Welcome Project Reference: C448349 Project Name: DPO and GP IG Management Services Across the NHS LNR Cluster

Lot Information

Lot 1

Options: The contract period is for 12 months with the option to extend for a further 6 months

Renewal: The contract period is for 12 months with the option to extend for a further 6 months

Planning Information

NHS Northamptonshire and NHS Leicestershire (LLR) Integrated Care Boards are seeking feedback on the provision of DPO Management and GP IG Management Services to GP Practices. In order to assist the Authority with testing its assumptions and proposed service requirements, interested organisations are requested to provide feedback on the information included within the documents. The draft service specification and supporting documents containing details of the requirement can be found in the attachments area of the project on Atamis. A draft timeframe for a request for quotation (RFQ) is included within the market engagement questionnaire (MEQ). Please note the information provided is indicative and subject to change. Please note, this preliminary market engagement notice relates to a service/contract in scope of the Procurement Act 2023. Any and all information/documents included in this notice, or that are made available as part of this engagement exercise, are draft and subject to change. All timeframes are indicative and also subject to change. Please complete and return the completed MEQ template via the Atamis e-tendering portal by 5PM on 15th May 2026 by following the link below, and search for the project reference as detailed: https://health-family.force.com/s/Welcome Project Reference: C444177 Project Name: DPO Management and GP IG Management Services across the LNR cluster.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-0691c5
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/047385-2026
Current Stage
Tender
All Stages
Planning, Tender

Procurement Classification

Notice Type
UK4 - Tender Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Below threshold - open competition
Tender Suitability
SME, VCSE
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

79 - Business services: law, marketing, consulting, recruitment, printing and security


CPV Codes

79000000 - Business services: law, marketing, consulting, recruitment, printing and security

79140000 - Legal advisory and information services

Notice Value(s)

Tender Value
£158,400 £100K-£500K
Lots Value
£158,400 £100K-£500K
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
21 May 20261 months ago
Submission Deadline
5 Jun 2026Expired
Future Notice Date
19 May 2026Expired
Award Date
Not specified
Contract Period
30 Jun 2026 - 30 Jun 2027 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Contracting Authority (Buyer)

Main Buyer
NHS LEICESTER, LEICESTERSHIRE AND RUTLAND INTEGRATED CARE BOARD
Additional Buyers

NHS NORTHAMPTONSHIRE INTEGRATED CARE BOARD

Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LEICESTER
Postcode
LE3 8TB
Post Town
Leicester
Country
England

Major Region (ITL 1)
TLF East Midlands (England)
Basic Region (ITL 2)
TLF2 Leicestershire, Rutland and Northamptonshire
Small Region (ITL 3)
TLF25 North Northamptonshire
Delivery Location
TLF2 Leicestershire, Rutland and Northamptonshire

Local Authority
North Northamptonshire
Electoral Ward
Wicksteed
Westminster Constituency
Kettering

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-0691c5-2026-05-21T16:56:41+01:00",
    "date": "2026-05-21T16:56:41+01:00",
    "ocid": "ocds-h6vhtk-0691c5",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-PPON-PCLY-6219-YPTV",
            "name": "NHS Leicester, Leicestershire and Rutland Integrated Care Board",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PCLY-6219-YPTV"
            },
            "address": {
                "streetAddress": "Room G30, Pen Lloyd Building, County Hall Glenfield",
                "locality": "Leicester",
                "postalCode": "LE3 8TB",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKF22"
            },
            "contactPoint": {
                "email": "northantsicb.procurementnorthants@nhs.net"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://www.leicesterleicestershireandrutland.icb.nhs.uk/",
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    }
                ]
            }
        },
        {
            "id": "GB-PPON-PWCM-9262-VJDY",
            "name": "NHS Northamptonshire Integrated Care Board",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PWCM-9262-VJDY"
            },
            "address": {
                "streetAddress": "Haylock House Kettering Parkway Venture Park",
                "locality": "Kettering",
                "postalCode": "NN15 6EY",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKF25"
            },
            "contactPoint": {
                "email": "northantsicb.procurementnorthants@nhs.net"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://www.icnorthamptonshire.org.uk/icb",
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    }
                ]
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PCLY-6219-YPTV",
        "name": "NHS Leicester, Leicestershire and Rutland Integrated Care Board"
    },
    "planning": {
        "milestones": [
            {
                "id": "engagement",
                "type": "engagement",
                "description": "NHS Northamptonshire and NHS Leicestershire (LLR) Integrated Care Boards are seeking feedback on the provision of DPO Management and GP IG Management Services to GP Practices. In order to assist the Authority with testing its assumptions and proposed service requirements, interested organisations are requested to provide feedback on the information included within the documents. The draft service specification and supporting documents containing details of the requirement can be found in the attachments area of the project on Atamis. A draft timeframe for a request for quotation (RFQ) is included within the market engagement questionnaire (MEQ). Please note the information provided is indicative and subject to change. Please note, this preliminary market engagement notice relates to a service/contract in scope of the Procurement Act 2023. Any and all information/documents included in this notice, or that are made available as part of this engagement exercise, are draft and subject to change. All timeframes are indicative and also subject to change. Please complete and return the completed MEQ template via the Atamis e-tendering portal by 5PM on 15th May 2026 by following the link below, and search for the project reference as detailed: https://health-family.force.com/s/Welcome Project Reference: C444177 Project Name: DPO Management and GP IG Management Services across the LNR cluster.",
                "dueDate": "2026-05-15T23:59:59+01:00",
                "status": "scheduled"
            }
        ],
        "documents": [
            {
                "id": "041181-2026",
                "documentType": "marketEngagementNotice",
                "noticeType": "UK2",
                "description": "Preliminary market engagement notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/041181-2026",
                "datePublished": "2026-05-05T15:59:44+01:00",
                "format": "text/html"
            }
        ]
    },
    "tender": {
        "id": "ocds-h6vhtk-0691c5",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Data Protection Officer Management and GP Information Governance Management Services to GP Practices for NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland ICBs",
        "description": "NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland (LLR) cluster ICBs (LNR ICBs) are looking for an organisation to provide Data Protection Officer (DPO) Management and GP Information Governance (IG) Management Services across the LNR cluster. There are currently 64 GP practices in Northamptonshire ICB and 126 GP practices in LLR ICB. Scope of Work and Requirements: - Data Protection Officer - Provide a contact point to act as DPO and provide remote specialist advice and guidance. - Advice and Support for the Data Security and Protection Toolkit (DSPT) - Advice and guidance to practices on how to investigate, manage, report, and review incidents. - Advice and support to providers to manage the reporting of the incident and advice on remedies. - Support for the production and maintenance of local IG policies and procedures. - Provide direct response to the GP Practice within 72 hours via email or telephone. - Provide independent and highly developed specialist knowledge and advice across the GP practices to ensure they remain compliant with changing legal requirements, including the UK General Data Protection Regulation (UK GDPR) The contract will be for a period of 1 year with the option to extend for up to a further 6 months commencing 1st July 2026. The maximum annual contract value is PS132,000 per annum including VAT. No bids over is PS132,000 per annum (including VAT) will be accepted. Further details can be found within the procurement documentation. Please note, this notice relates to a service/contract in scope of the Procurement Act 2023. Bids are to be submitted via the Atamis e-tendering portal by following the link below, and search for the project reference as detailed: https://health-family.force.com/s/Welcome Project Reference: C448349 Project Name: DPO and GP IG Management Services Across the NHS LNR Cluster",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "79000000",
                        "description": "Business services: law, marketing, consulting, recruitment, printing and security"
                    },
                    {
                        "scheme": "CPV",
                        "id": "79140000",
                        "description": "Legal advisory and information services"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKF2",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    },
                    {
                        "region": "UKF2",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amountGross": 198000,
            "amount": 158400,
            "currency": "GBP"
        },
        "mainProcurementCategory": "services",
        "aboveThreshold": false,
        "lots": [
            {
                "id": "1",
                "suitability": {
                    "sme": true,
                    "vcse": true
                },
                "contractPeriod": {
                    "startDate": "2026-07-01T00:00:00+01:00",
                    "endDate": "2027-06-30T23:59:59+01:00",
                    "maxExtentDate": "2027-12-31T23:59:59Z"
                },
                "hasRenewal": true,
                "status": "active",
                "value": {
                    "amountGross": 198000,
                    "amount": 158400,
                    "currency": "GBP"
                },
                "renewal": {
                    "description": "The contract period is for 12 months with the option to extend for a further 6 months"
                },
                "hasOptions": true,
                "options": {
                    "description": "The contract period is for 12 months with the option to extend for a further 6 months"
                },
                "awardCriteria": {
                    "description": "The set criteria is weighted at: Technical (Service Delivery / Quality) - 70% Price (Cost / Commercial) - 30%"
                }
            }
        ],
        "communication": {
            "futureNoticeDate": "2026-05-19T23:59:59+01:00"
        },
        "status": "active",
        "procurementMethod": "open",
        "procurementMethodDetails": "Below threshold - open competition",
        "submissionMethodDetails": "Bids are to be submitted via the Atamis e-tendering portal by following the link below, and search for the project reference as detailed: https://health-family.force.com/s/Welcome Project Reference: C448349 Project Name: DPO and GP IG Management Services Across the NHS LNR Cluster",
        "submissionTerms": {
            "electronicSubmissionPolicy": "allowed"
        },
        "tenderPeriod": {
            "endDate": "2026-06-05T17:00:00+01:00"
        },
        "enquiryPeriod": {
            "endDate": "2026-06-04T17:00:00+01:00"
        },
        "documents": [
            {
                "id": "047385-2026",
                "documentType": "tenderNotice",
                "noticeType": "UK4",
                "description": "Tender notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/047385-2026",
                "datePublished": "2026-05-21T16:56:41+01:00",
                "format": "text/html"
            }
        ]
    },
    "language": "en"
}