---
title: "Data Privacy Impact Assessment System"
ocid: "ocds-r6ebe6-0000544454"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000544454"
markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000544454.md"
json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000544454.json"
source: "Public Contracts Scotland"
current_stage: "Award"
buyer: "UNIVERSITY OF EDINBURGH"
published: "2019-01-17"
---

# Data Privacy Impact Assessment System

Buyer: UNIVERSITY OF EDINBURGH  
Current stage: Award  
OCID: ocds-r6ebe6-0000544454

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000544454)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000544454.json)

## Summary

The University of Edinburgh is conducting a procurement process for the establishment of a Data Privacy Impact Assessment System, crucial for compliance with the Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR). This tender process has been initiated using an open procurement method, enabling multiple bidders to participate and submit proposals before the submission deadline on 20th July 2018. Located in Edinburgh, the procurement is primarily categorized under services within the education industry. The project aims to enhance privacy assessment capabilities across the university which is needed to ensure effective compliance and is expected to draw interest from various suppliers in the relevant sectors.

This contract presents an excellent opportunity for businesses, particularly those specialising in data protection software, compliance solutions, and related services. Companies that offer Software as a Service (SaaS) products or have expertise in GDPR compliance would be particularly well-suited to compete for this contract. As the system will need to be user-friendly and accessible, suppliers demonstrating strong accessibility standards and capabilities in software development may have an advantage in winning the bid while contributing to the university's commitment to safeguarding data privacy.

## Notice

A Data Privacy Impact Assessment tool was required to meet the requirements of the Data Protection Act 2018. The new EU GDPR regulation was adopted on 27 April 2016. It applies in the UK from 25 May 2018 after a two-year transition period. The university is aiming to have an effective way for staff across the University to assess the privacy impact of proposals involving the use of personal data. Under the new Act the University needs to evidence its compliance with data protection legislation. The University of Edinburgh has elected to carry out this project as an EU tender to reach the widest possible market rather than because the expected value will be over the OJEU threshold for public procurement.

### Lot Information

Lot 1

The introduction of a Data Privacy Impact Assessment tool is a core part of the University's strategy to meet the requirements of the Data Protection Act 2018. It will become compulsory for staff across the University to routinely carry these out when using personal data, for example when: A Data Privacy Impact Assessment tool is required to meet the requirements of the Data Protection Act. The new EU GDPR regulation was adopted on 27 April 2016. It applies in the UK from 25 May 2018 after a two-year transition period. The university is aiming to have an effective way for staff across the University to assess the privacy impact of proposals involving the use of personal data. Under the new GDPR the University needs to evidence its compliance with data protection legislation. The tool is required to help staff across the University ensure their projects, strategies and initiatives are data protection compliant from the outset. The objective is to implement a process based solution to record all Privacy Impact Assessment documentation to meet the requirements of the Data Protection Act. Due to the Act for each business area retaining/moving/sharing personal info they need to complete a Privacy Impact Assessment). It is generally approved that this is delivered as a software as a service or licence/s, so each business area can call this off, complete record and it is maintained or published centrally. The introduction of a Privacy Impact Assessment tool is a core part of the University's strategy to meet the requirements of the Data Protection Act. It will become compulsory for staff across the University to routinely carry these out when using personal data, for example when: - building new IT systems for storing or accessing personal data; - developing legislation, policy or strategies that have privacy implications; - embarking on a data sharing initiative; or using personal data for new purposes.

Options: Renewals will be subject to budget and performance and are covered by Regulation 72 (1) (b) by Public Contracts Scotland Regulations 2015

Renewal: Renewals will be subject to budget and performance and are covered by Regulation 72 (1)(b) Public Contracts (Scotland) Regulations 2015

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Public Contracts Scotland |
| Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JAN342474 |
| Notice type | OJEU - F3 - Contract Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Tender, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 17 Jan 2019 |
| Submission deadline | 20 Jul 2018 |
| Future notice date | Not specified |
| Award date | 8 Jan 2019 |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £1 |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £1 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Not specified |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | UNIVERSITY OF EDINBURGH |
| Locality | EDINBURGH |
| Post town | Edinburgh |
| Postcode | EH1 1HT |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM1 East Central Scotland |
| ITL 3 | TLM13 City of Edinburgh |
| Local authority | City of Edinburgh |
| Electoral ward | City Centre |
| Westminster constituency | Edinburgh East and Musselburgh |
| Delivery location | TLM75 City of Edinburgh |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | ONETRUST TECHNOLOGIES |

## CPV Codes

### Divisions

- 48 - Software package and information systems

### Codes

- 48000000 - Software package and information systems

## Release History

- 17 Jan 2019 at 00:00 - Award - OJEU - F3 - Contract Award Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JAN342474
- 4 Jun 2018 at 00:00 - Tender - OJEU - F2 - Contract Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUN321248

## Documents

- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUN321248
  Data Privacy Impact Assessment System - A Data Privacy Impact Assessment tool is required to meet the requirements of the Data Protection Act 2018. The new EU GDPR regulation was adopted on 27 April 2016. It applies in the UK from 25 May 2018 after a two-year transition period. The university is aiming to have an effective way for staff across the University to assess the privacy impact of proposals involving the use of personal data. Under the new Act the University needs to evidence its compliance with data protection legislation. The University of Edinburgh has elected to carry out this project as an EU tender to reach the widest possible market rather than because the expected value will be over the OJEU threshold for public procurement.
- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JAN342474
  Data Privacy Impact Assessment System - A Data Privacy Impact Assessment tool was required to meet the requirements of the Data Protection Act 2018. The new EU GDPR regulation was adopted on 27 April 2016. It applies in the UK from 25 May 2018 after a two-year transition period. The university is aiming to have an effective way for staff across the University to assess the privacy impact of proposals involving the use of personal data. Under the new Act the University needs to evidence its compliance with data protection legislation. The University of Edinburgh has elected to carry out this project as an EU tender to reach the widest possible market rather than because the expected value will be over the OJEU threshold for public procurement.

## Notice URLs

- http://
- http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32014L0024&from=EN
- http://www.ed.ac.uk/schools-departments/procurement/supplying
- http://www.legislation.gov.ukpga/2015/30/contents/enacted
- http://www.legislationn.gov.uk/uksi/2010/493/contents/made
- http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343
- http://www.publiccontractsscotland.gov.uk/infoCentre.aspx?ID=2
- http://www.publictendersscotland.gov.uk
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000544454
- https://www.legislationn.gov.uk/upga/2010/15/contents
- https://www.onetrust.com/
- https://www.publictendersscotland.publiccontractsscotland.gov.uk/esop/pts-host/public/pts/web/login.html
- https://www.w3.org/WAI/intro/wcag.php

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000544454. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000544454.json.