Notice Information
Notice Title
Provision of Data Protection Officer Services
Notice Description
To retain on contract for 12 hours a month a suitably qualified and experienced person to act as the Data Protection Officer (DPO) for Skills Development Scotland (SDS), as required by UK GDPR.
Lot Information
Lot 1
In the absence of appropriate internal staff resource within SDS with the requisite skills and expertise, independence (i.e. is not conflicted) and capacity to undertake the role of Data protection Officer (DPO) SDS is seeking to retain a company to provide DPO-as-a-service, which must adequately fulfil the requirements for the role set out in guidance by the Information Commissioner's Office (ICO). Specific Objectives of this Commission. - Up to 12 hours of data protection services to be provided per calendar month. Additional hours may be requested as required and may include emergency situations, out with office hours and at weekends. - Work with the information provided by the SDS DP Team in a way that maintains its confidentiality. - Services to include weekly engagement and close liaison with the SDS DP team and Legal team and ad-hoc engagement, as required, in order to: 1. Monitor compliance with applicable data protection laws and with SDS priorities in relation to the protection of personal data; 2. Support reporting and provide expert DP advice to SDS senior management and governance groups where required on an ad-hoc basis for our internal governance requirements, and would also include participation / advising in managing cyber incidents / data breaches, data protection compliance; 3. Support investigations as required into personal data breaches, breaches of legislation and/or SDS's DP Policy, including remedial action where needed. This could include advice on direction and completeness of action taken by DP team and participation in lesson learned reviews to identify any potential improvements to policy & process; 4. Provide expert advisory input on DPIAs, Privacy Notices, Data Sharing Agreements/Data Processing Agreements, to ensure that SDS's personal data processing and data sharing with partners is lawful and appropriately documented; 5. Support timely responses to any complaints relating to the Data 6. Protection and Data Subject Requests (DSRs) within 2 working days, in particular advising as needed on complex DSRs; 6. Support timely and informed engagement with the ICO in line with our requirements to report breaches to ICO within 72hrs; 7. Contribute to the review of DP guidance and training material and support any improvement action arising; 8. Support ongoing maintenance of SDS's Record of Processing Activity (ROPA), identifying and supporting implementation of improvement activity as appropriate; 9. Ensure SDS are kept up to date with any developing requirements or changes in relevant legislation 10. Delivery of any other data protection tasks as may be required of the role of the DPO. 11. Monitor the DP team mailbox on the rare occasion when the substantive team is absent 12. Provide training to the organisation annually to raise awareness of data protection issues and responsibilities 13. Quarterly reviews of ICO rulings and guidance 14. Ensure cover/contingency for external resource and expertise to fulfil the formal role of DPO.. N/A
Renewal: The option to extend for 12 months on two separate occasions at the sole discretion of SDS.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-r6ebe6-0000814569
- Publication Source
- Public Contracts Scotland
- Latest Notice
- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=FEB549135
- Current Stage
- Award
- All Stages
- Tender, Award
Procurement Classification
- Notice Type
- PCS Notice - Website Contract Award Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Open
- Procurement Method Details
- Open procedure
- Tender Suitability
- Not specified
- Awardee Scale
- SME
Common Procurement Vocabulary (CPV)
- CPV Divisions
72 - IT services: consulting, software development, Internet and support
-
- CPV Codes
72300000 - Data services
Notice Value(s)
- Tender Value
- £72,000 Under £100K
- Lots Value
- £72,000 Under £100K
- Awards Value
- Not specified
- Contracts Value
- £72,000 Under £100K
Notice Dates
- Publication Date
- 9 Feb 20262 weeks ago
- Submission Deadline
- 8 Dec 2025Expired
- Future Notice Date
- Not specified
- Award Date
- 23 Jan 20261 months ago
- Contract Period
- 2 Feb 2026 - 1 Feb 2028 1-2 years
- Recurrence
- 2, 3 or 4 years
Notice Status
- Tender Status
- Complete
- Lots Status
- Complete
- Awards Status
- Not Specified
- Contracts Status
- Active
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- SKILLS DEVELOPMENT SCOTLAND LTD
- Contact Name
- Not specified
- Contact Email
- procurement@sds.co.uk
- Contact Phone
- +44 1698688824
Buyer Location
- Locality
- GLASGOW
- Postcode
- G2 1DY
- Post Town
- Glasgow
- Country
- Scotland
-
- Major Region (ITL 1)
- TLM Scotland
- Basic Region (ITL 2)
- TLM3 West Central Scotland
- Small Region (ITL 3)
- TLM32 Glasgow City
- Delivery Location
- TLM Scotland
-
- Local Authority
- Glasgow City
- Electoral Ward
- Anderston/City/Yorkhill
- Westminster Constituency
- Glasgow East
Further Information
Notice Documents
-
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=10
21st November 2025 - Response to questions submitted via PCS -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=12
21st November 2025 - Response to questions submitted via PCS - updated 21/11 -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=9
20th November 2025 - Appendix 3 - Pricing Schedule -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=11
20th November 2025 - Appendix 3 - Pricing Schedule - updated -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=3
6th November 2025 - Appendix 3 - Pricing Schedule -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=1
6th November 2025 - P25-033 Data Protection Officer ITT -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=2
6th November 2025 - Appendix 2 - Bidder Response Form -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=4
6th November 2025 - Appendix 4 - SDS Ts and Cs Above 50k -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=5
6th November 2025 - Appendix 6 Data Protection Policy -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=6
6th November 2025 - Appendix 7 Using SDS IT Equipment & Systems Policy -
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=7
6th November 2025 - Appendix 5 - Certificates -
https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=NOV542893
Provision of Data Protection Officer Services - To retain on contract for 12 hours a month a suitably qualified and experienced person to act as the Data Protection Officer (DPO) for Skills Development Scotland (SDS), as required by UK GDPR. -
https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=FEB549135
Provision of Data Protection Officer Services - To retain on contract for 12 hours a month a suitably qualified and experienced person to act as the Data Protection Officer (DPO) for Skills Development Scotland (SDS), as required by UK GDPR.
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-r6ebe6-0000814569-2026-02-09T00:00:00Z",
"date": "2026-02-09T00:00:00Z",
"ocid": "ocds-r6ebe6-0000814569",
"initiationType": "tender",
"parties": [
{
"id": "org-125",
"name": "Skills Development Scotland Ltd",
"identifier": {
"legalName": "Skills Development Scotland Ltd"
},
"address": {
"streetAddress": "Monteith House, 11 George Square",
"locality": "Glasgow",
"region": "UKM",
"postalCode": "G2 1DY"
},
"contactPoint": {
"email": "procurement@sds.co.uk",
"url": "http://www.publiccontractsscotland.gov.uk"
},
"roles": [
"buyer"
],
"details": {
"classifications": [
{
"id": "Non-Departmental Public Body",
"scheme": "TED_CA_TYPE"
},
{
"id": "National Skills Body",
"scheme": "COFOG"
}
],
"url": "http://www.skillsdevelopmentscotland.co.uk"
}
},
{
"id": "org-28",
"name": "Glasgow Sheriff Court and Justice of the Peace Court",
"identifier": {
"legalName": "Glasgow Sheriff Court and Justice of the Peace Court"
},
"address": {
"streetAddress": "PO Box 23 1 Carlton Place",
"locality": "Glasgow",
"postalCode": "G5 9DA"
},
"contactPoint": {
"email": "glasgow@scotcourts.gov.uk",
"telephone": "+44 1414298888",
"url": "http://"
},
"roles": [
"reviewBody"
]
},
{
"id": "org-126",
"name": "Skills Development Scotland",
"identifier": {
"legalName": "Skills Development Scotland"
},
"address": {
"streetAddress": "Monteith House, 11 George Square",
"locality": "Glasgow",
"postalCode": "G2 1DY"
},
"contactPoint": {
"email": "procurement@sds.co.uk",
"url": "https://skillsdevelopmentscotland.co.uk"
},
"roles": [
"mediationBody"
]
},
{
"id": "org-81",
"name": "Skills Development Scotland Ltd",
"identifier": {
"legalName": "Skills Development Scotland Ltd"
},
"address": {
"streetAddress": "Monteith House, 11 George Square",
"locality": "Glasgow",
"region": "UKM",
"postalCode": "G2 1DY"
},
"contactPoint": {
"email": "procurement@sds.co.uk",
"telephone": "+44 1698688824",
"url": "http://"
},
"roles": [
"buyer",
"centralPurchasingBody"
],
"details": {
"classifications": [
{
"id": "Non departmental public body",
"scheme": "TED_CA_TYPE"
},
{
"id": "09",
"description": "Education",
"scheme": "COFOG"
},
{
"id": "Non-Departmental Public Body",
"scheme": "TED_CA_TYPE"
},
{
"id": "National Skills Body",
"scheme": "COFOG"
}
],
"url": "http://www.skillsdevelopmentscotland.co.uk"
}
},
{
"id": "org-149",
"name": "Tkm Consulting",
"identifier": {
"legalName": "Tkm Consulting"
},
"address": {
"streetAddress": "Craigellachie, Ratagan",
"locality": "Glenshiel",
"region": "UK",
"postalCode": "IV40 8HP"
},
"roles": [
"supplier"
],
"details": {
"scale": "sme",
"url": "http://"
}
},
{
"id": "org-45",
"name": "Glasgow Sheriff Court and Justice of the Peace Court",
"identifier": {
"legalName": "Glasgow Sheriff Court and Justice of the Peace Court"
},
"address": {
"streetAddress": "PO Box 23 1 Carlton Place",
"locality": "Glasgow",
"postalCode": "G5 9DA"
},
"contactPoint": {
"email": "glasgow@scotcourts.gov.uk",
"telephone": "+44 7774156005",
"url": "http://"
},
"roles": [
"reviewBody"
]
},
{
"id": "org-84",
"name": "Skills Development Scotland",
"identifier": {
"legalName": "Skills Development Scotland"
},
"address": {
"streetAddress": "Monteith House, First Floor, 11 George Square",
"locality": "Glasgow",
"postalCode": "G2 1DY"
},
"contactPoint": {
"email": "procurement@sds.co.uk",
"telephone": "+44 1414291999",
"url": "https://skillsdevelopmentscotland.co.uk"
},
"roles": [
"mediationBody"
]
}
],
"buyer": {
"name": "Skills Development Scotland Ltd",
"id": "org-81"
},
"tender": {
"id": "P25-033",
"title": "Provision of Data Protection Officer Services",
"description": "To retain on contract for 12 hours a month a suitably qualified and experienced person to act as the Data Protection Officer (DPO) for Skills Development Scotland (SDS), as required by UK GDPR.",
"status": "complete",
"items": [
{
"id": "1",
"deliveryAddresses": [
{
"region": "UKM"
},
{
"region": "UKM"
}
],
"relatedLot": "1"
}
],
"value": {
"amount": 72000,
"currency": "GBP"
},
"procurementMethod": "open",
"procurementMethodDetails": "Open procedure",
"mainProcurementCategory": "services",
"submissionMethod": [
"electronicSubmission"
],
"submissionMethodDetails": "http://www.publiccontractsscotland.gov.uk",
"tenderPeriod": {
"endDate": "2025-12-08T12:00:00Z"
},
"awardPeriod": {
"startDate": "2025-12-08T12:00:00Z"
},
"documents": [
{
"id": "NOV542893",
"documentType": "contractNotice",
"title": "Provision of Data Protection Officer Services",
"description": "To retain on contract for 12 hours a month a suitably qualified and experienced person to act as the Data Protection Officer (DPO) for Skills Development Scotland (SDS), as required by UK GDPR.",
"url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=NOV542893",
"format": "text/html"
},
{
"id": "economic",
"documentType": "economicSelectionCriteria"
},
{
"id": "technical",
"documentType": "technicalSelectionCriteria"
},
{
"id": "NOV542893-1",
"title": "P25-033 Data Protection Officer ITT",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=1",
"datePublished": "2025-11-06T09:25:09Z",
"dateModified": "2025-11-06T09:25:09Z",
"format": "application/pdf"
},
{
"id": "NOV542893-2",
"title": "Appendix 2 - Bidder Response Form",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=2",
"datePublished": "2025-11-06T09:25:09Z",
"dateModified": "2025-11-06T09:25:09Z",
"format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
},
{
"id": "NOV542893-3",
"title": "Appendix 3 - Pricing Schedule",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=3",
"datePublished": "2025-11-06T09:25:09Z",
"dateModified": "2025-11-06T10:27:37Z",
"format": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
},
{
"id": "NOV542893-4",
"title": "Appendix 4 - SDS Ts and Cs Above 50k",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=4",
"datePublished": "2025-11-06T09:25:09Z",
"dateModified": "2025-11-06T09:25:09Z",
"format": "application/pdf"
},
{
"id": "NOV542893-5",
"title": "Appendix 6 Data Protection Policy",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=5",
"datePublished": "2025-11-06T09:25:09Z",
"dateModified": "2025-11-06T09:25:09Z",
"format": "application/pdf"
},
{
"id": "NOV542893-6",
"title": "Appendix 7 Using SDS IT Equipment & Systems Policy",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=6",
"datePublished": "2025-11-06T09:25:09Z",
"dateModified": "2025-11-06T09:25:09Z",
"format": "application/pdf"
},
{
"id": "NOV542893-7",
"title": "Appendix 5 - Certificates",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=7",
"datePublished": "2025-11-06T09:25:09Z",
"dateModified": "2025-11-06T09:25:09Z",
"format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
},
{
"id": "NOV542893-9",
"title": "Appendix 3 - Pricing Schedule",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=9",
"datePublished": "2025-11-06T10:27:37Z",
"dateModified": "2025-11-20T16:25:38Z",
"format": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
},
{
"id": "NOV542893-10",
"title": "Response to questions submitted via PCS",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=10",
"datePublished": "2025-11-19T12:31:30Z",
"dateModified": "2025-11-21T13:54:55Z",
"format": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
},
{
"id": "NOV542893-11",
"title": "Appendix 3 - Pricing Schedule - updated",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=11",
"datePublished": "2025-11-20T16:25:38Z",
"dateModified": "2025-11-20T16:25:38Z",
"format": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
},
{
"id": "NOV542893-12",
"title": "Response to questions submitted via PCS - updated 21/11",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=12",
"datePublished": "2025-11-21T13:54:55Z",
"dateModified": "2025-11-21T13:54:55Z",
"format": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
},
{
"id": "FEB549135",
"documentType": "awardNotice",
"title": "Provision of Data Protection Officer Services",
"description": "To retain on contract for 12 hours a month a suitably qualified and experienced person to act as the Data Protection Officer (DPO) for Skills Development Scotland (SDS), as required by UK GDPR.",
"url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=FEB549135",
"format": "text/html"
}
],
"lots": [
{
"id": "1",
"description": "In the absence of appropriate internal staff resource within SDS with the requisite skills and expertise, independence (i.e. is not conflicted) and capacity to undertake the role of Data protection Officer (DPO) SDS is seeking to retain a company to provide DPO-as-a-service, which must adequately fulfil the requirements for the role set out in guidance by the Information Commissioner's Office (ICO). Specific Objectives of this Commission. - Up to 12 hours of data protection services to be provided per calendar month. Additional hours may be requested as required and may include emergency situations, out with office hours and at weekends. - Work with the information provided by the SDS DP Team in a way that maintains its confidentiality. - Services to include weekly engagement and close liaison with the SDS DP team and Legal team and ad-hoc engagement, as required, in order to: 1. Monitor compliance with applicable data protection laws and with SDS priorities in relation to the protection of personal data; 2. Support reporting and provide expert DP advice to SDS senior management and governance groups where required on an ad-hoc basis for our internal governance requirements, and would also include participation / advising in managing cyber incidents / data breaches, data protection compliance; 3. Support investigations as required into personal data breaches, breaches of legislation and/or SDS's DP Policy, including remedial action where needed. This could include advice on direction and completeness of action taken by DP team and participation in lesson learned reviews to identify any potential improvements to policy & process; 4. Provide expert advisory input on DPIAs, Privacy Notices, Data Sharing Agreements/Data Processing Agreements, to ensure that SDS's personal data processing and data sharing with partners is lawful and appropriately documented; 5. Support timely responses to any complaints relating to the Data 6. Protection and Data Subject Requests (DSRs) within 2 working days, in particular advising as needed on complex DSRs; 6. Support timely and informed engagement with the ICO in line with our requirements to report breaches to ICO within 72hrs; 7. Contribute to the review of DP guidance and training material and support any improvement action arising; 8. Support ongoing maintenance of SDS's Record of Processing Activity (ROPA), identifying and supporting implementation of improvement activity as appropriate; 9. Ensure SDS are kept up to date with any developing requirements or changes in relevant legislation 10. Delivery of any other data protection tasks as may be required of the role of the DPO. 11. Monitor the DP team mailbox on the rare occasion when the substantive team is absent 12. Provide training to the organisation annually to raise awareness of data protection issues and responsibilities 13. Quarterly reviews of ICO rulings and guidance 14. Ensure cover/contingency for external resource and expertise to fulfil the formal role of DPO.. N/A",
"status": "complete",
"value": {
"amount": 72000,
"currency": "GBP"
},
"hasOptions": false,
"submissionTerms": {
"variantPolicy": "notAllowed"
},
"contractPeriod": {
"startDate": "2026-02-02T00:00:00Z",
"endDate": "2028-02-01T00:00:00Z"
},
"hasRenewal": true,
"renewal": {
"description": "The option to extend for 12 months on two separate occasions at the sole discretion of SDS."
}
}
],
"bidOpening": {
"date": "2025-12-08T12:00:00Z"
},
"contractTerms": {
"hasElectronicPayment": true,
"electronicInvoicingPolicy": "allowed",
"performanceTerms": "Detailed within the ITT documentation"
},
"coveredBy": [
"GPA"
],
"submissionTerms": {
"languages": [
"en"
]
},
"classification": {
"id": "72300000",
"scheme": "CPV"
},
"hasRecurrence": true,
"recurrence": {
"description": "2, 3 or 4 years"
}
},
"language": "EN",
"description": "N/A (SC Ref:823149)",
"links": [
{
"rel": "canonical",
"href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000814569"
},
{
"rel": "canonical",
"href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000814569"
}
],
"noticetype": "PCS Notice - Website Contract Award Notice",
"awards": [
{
"id": "P25-033",
"suppliers": [
{
"id": "org-149",
"name": "Tkm Consulting"
}
],
"relatedLots": [
"1"
]
}
],
"contracts": [
{
"id": "P25-033",
"awardID": "P25-033",
"status": "active",
"value": {
"amount": 72000,
"currency": "GBP"
},
"dateSigned": "2026-01-23T00:00:00Z"
}
],
"bids": {
"statistics": [
{
"id": "378",
"measure": "bids",
"value": 8,
"relatedLot": "1"
},
{
"id": "379",
"measure": "smeBids",
"value": 6,
"relatedLot": "1"
},
{
"id": "380",
"measure": "foreignBidsFromEU",
"value": 8,
"relatedLot": "1"
},
{
"id": "381",
"measure": "foreignBidsFromNonEU",
"value": 0,
"relatedLot": "1"
},
{
"id": "382",
"measure": "electronicBids",
"value": 8,
"relatedLot": "1"
}
]
}
}