--- title: "IG Support and Data Protection Officer Service to the Norfolk and Waveney GP Practices" ocid: "ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f" markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f.md" json_url: "https://d3tenders.com/contract/ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f.json" source: "Contracts Finder" current_stage: "Tender" buyer: "NHS ARDEN AND GREATER EAST MIDLANDS COMMISSIONING SUPPORT UNIT" published: "2023-03-22" --- # IG Support and Data Protection Officer Service to the Norfolk and Waveney GP Practices Buyer: NHS ARDEN AND GREATER EAST MIDLANDS COMMISSIONING SUPPORT UNIT Current stage: Tender OCID: ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f) [Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f.json) ## Summary The NHS Arden and Greater East Midlands Commissioning Support Unit has initiated a tender titled "IG Support and Data Protection Officer Service to the Norfolk and Waveney GP Practices" for data services. The tender aims to procure information governance advice and guidance support, along with a Data Protection Officer service, with a contract value of £360,000. The procurement method is through an open procedure, with a tender period ending on April 14, 2023, and a contract period from July 3, 2023, to June 30, 2025, providing opportunities for SMEs and VCSEs to participate. This tender presents an opportunity for businesses to provide crucial support in information governance and data protection to GP practices in Norfolk and Waveney. Businesses well-suited for this tender are those with expertise in data services and compliance, especially in providing advice, support, and guidance on information governance policies, procedures, and GDPR matters. The location of the service delivery is in NR1 2DH, England, United Kingdom, aligning with the main procurement category of services. ## Notice NHS NORFOLK & WAVENEY ICB invite bids from suitably qualified suppliers to provide information governance advice and guidance support service, together with a named Data Protection Officer. The requirement will include: Data breaches * The provision of advice and/or support to practices on the investigation of possible information security breaches and incidents. * Advice on incident/breach assessment and reporting via the incident reporting tool within the DSPT to NHS England and reporting to the ICO (dependent upon severity of incident). * Advice on assessment and reporting via the incident reporting tool within the DSPT to NHS England and ICO (dependent upon nature and severity of the breach). * Advice on post-incident reviews and recommended actions for practice implementation. To lead or direct data breach reviews and investigations where highly specialist knowledge is required or complex multi-party issues are involved. Service Provider as data processor will: * To take action immediately following a data breach or a near miss, alerting promptly the practice as data controller and with a report made to the senior management within the ICB and the practice within 12 (working) hours of detection. * Report data breaches in line with NHS guidance (using the incident reporting tool within the DSPT) and legal requirements immediately following detection. * Provide a Lessons Learned Report (with relevant action plan as appropriate) to the ICB within 2 weeks of the recorded resolution of the incident. IG Policy Support * Support for the production and maintenance of local information governance policies and procedures for practices. Provision of advice and support to practices on approval, ratification and adoption of the policies for their organisation. Support for the Data Security and Protection Toolkit compliance * Provide advice and guidance to practices on how to complete the DSPT, including the collection and collation of evidence in support of DSPT submissions. Provide practices with evidence required for DSPT where this is held by the ICB or its commissioned IT providers. * Monitor DSPT compliance of practices and provide the ICB with details of any non-compliance with practice action plans. IG consultancy and support * Provision of advice, guidance and support on IG related issues, including existing operational processes and procedures or new business initiatives. Advice and guidance on personal data access (but not extending to legal advice). Data Protection Officer (DPO) Support Provision of advice, guidance and support on IG related issues including existing operational processes and procedures or new business initiatives to support practice designated Data Protection Officers including existing operational processes and procedures or new business initiatives. To include * Access for Practices during normal service hours to specialist qualified advice on GDPR matter. Additional information: To register your interest and access the Documents, supporting information and express your interest the Contracting Authority will be using an eTendering system for this procurement exercise. Further information and the ITT documentation can be found via the 'Live Opportunities' list on the e-procurement system at the following link: https://health-family-contract-search.secure.force.com/?searchtype=Projects. You can also register your interest via this page. You can search for the opportunity by entering the following contract reference: ID number C151681 - Expression of Interest IG and Data Protection Officer Service. Please answer all the questions and submit your response by 10:00 on the 14th of April 2023. ## Key Details | Field | Value | | --- | --- | | Publication source | Contracts Finder | | Latest notice | https://www.contractsfinder.service.gov.uk/Notice/990edc91-f242-46df-96df-d214e5d633c2 | | Notice type | Tender Notice | | Procurement type | Standard | | Procurement category | Services | | Procurement method | Open | | Procurement method details | Open procedure (above threshold) | | Tender suitability | SME, VCSE | | Awardee scale | Not specified | | All stages | Tender | ## Dates | Field | Value | | --- | --- | | Publication date | 22 Mar 2023 | | Submission deadline | 14 Apr 2023 | | Future notice date | Not specified | | Award date | Not specified | | Contract period | 2 Jul 2023 - 30 Jun 2025 | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | £360,000 | | Lots value | Not specified | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Active | | Lots status | Not specified | | Awards status | Not specified | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | NHS ARDEN AND GREATER EAST MIDLANDS COMMISSIONING SUPPORT UNIT | | Locality | NORWICH | | Post town | Norwich | | Postcode | NR1 2DH | | Country | England | | ITL 1 | TLH East (England) | | ITL 2 | TLH5 Norfolk | | ITL 3 | TLH51 Norwich and East Norfolk | | Local authority | Norwich | | Electoral ward | Lakenham | | Westminster constituency | Norwich South | | Delivery location | TLC North East (England), TLD North West (England), TLF East Midlands (England), TLG West Midlands (England), TLH East (England), TLJ South East (England), TLK South West (England) | ## CPV Codes ### Divisions - 72 - IT services: consulting, software development, Internet and support ### Codes - 72300000 - Data services ## Release History - 22 Mar 2023 at 10:41 - Tender - Tender Notice - https://www.contractsfinder.service.gov.uk/Notice/990edc91-f242-46df-96df-d214e5d633c2 - 15 Mar 2023 at 11:31 - Tender - Tender Notice - https://www.contractsfinder.service.gov.uk/Notice/2d7eaafb-8f72-4735-986c-21b8ade70446 ## Documents - https://www.contractsfinder.service.gov.uk/Notice/990edc91-f242-46df-96df-d214e5d633c2 22nd March 2023 - Opportunity notice on Contracts Finder - https://www.contractsfinder.service.gov.uk/Notice/2d7eaafb-8f72-4735-986c-21b8ade70446 15th March 2023 - Opportunity notice on Contracts Finder ## Notice URLs - https://health-family-contract-search.secure.force.com/?searchtype=Projects ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-82f6c432-4dd5-4180-ae48-3e7196033a6f.json.