---
title: "Provision of Data Protection Officer Services"
ocid: "ocds-r6ebe6-0000814569"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000814569"
markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000814569.md"
json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000814569.json"
source: "Public Contracts Scotland"
current_stage: "Award"
buyer: "SKILLS DEVELOPMENT SCOTLAND LTD"
published: "2026-02-09"
---

# Provision of Data Protection Officer Services

Buyer: SKILLS DEVELOPMENT SCOTLAND LTD  
Current stage: Award  
OCID: ocds-r6ebe6-0000814569

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000814569)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000814569.json)

## Summary

Skills Development Scotland Ltd has concluded a public procurement process for the "Provision of Data Protection Officer Services," which falls under the services industry category. The open procedure was initiated with the aim of contracting a Data Protection Officer for 12 hours a month to ensure compliance with UK GDPR. The tender process was actively managed from the organisation's office located at Monteith House, 11 George Square, Glasgow. The procurement stage progressed from tendering, initiated on 6th November 2025, to the award stage, with Tkm Consulting being the successful supplier. The contract period starts on 2nd February 2026 and is expected to conclude by 1st February 2028, with potential extension options available.

This procurement opens up significant opportunities for businesses, particularly service providers in data protection and compliance services. Companies with experience in providing Data Protection Officer services, especially those equipped to manage complex Data Subject Requests and compliance with the Information Commissioner's Office guidelines, will find this tender aligns well with their expertise. The contract's value, estimated at £72,000, and the potential for extensions make it a lucrative opportunity for small and medium-sized enterprises (SMEs) looking to expand their involvement in public sector projects. The tender also highlights the importance of having a robust compliance framework, presenting growth potential for consultancies offering data protection advisory services.

## Notice

To retain on contract for 12 hours a month a suitably qualified and experienced person to act as the Data Protection Officer (DPO) for Skills Development Scotland (SDS), as required by UK GDPR.

### Lot Information

Lot 1

In the absence of appropriate internal staff resource within SDS with the requisite skills and expertise, independence (i.e. is not conflicted) and capacity to undertake the role of Data protection Officer (DPO) SDS is seeking to retain a company to provide DPO-as-a-service, which must adequately fulfil the requirements for the role set out in guidance by the Information Commissioner's Office (ICO). Specific Objectives of this Commission. - Up to 12 hours of data protection services to be provided per calendar month. Additional hours may be requested as required and may include emergency situations, out with office hours and at weekends. - Work with the information provided by the SDS DP Team in a way that maintains its confidentiality. - Services to include weekly engagement and close liaison with the SDS DP team and Legal team and ad-hoc engagement, as required, in order to: 1. Monitor compliance with applicable data protection laws and with SDS priorities in relation to the protection of personal data; 2. Support reporting and provide expert DP advice to SDS senior management and governance groups where required on an ad-hoc basis for our internal governance requirements, and would also include participation / advising in managing cyber incidents / data breaches, data protection compliance; 3. Support investigations as required into personal data breaches, breaches of legislation and/or SDS's DP Policy, including remedial action where needed. This could include advice on direction and completeness of action taken by DP team and participation in lesson learned reviews to identify any potential improvements to policy & process; 4. Provide expert advisory input on DPIAs, Privacy Notices, Data Sharing Agreements/Data Processing Agreements, to ensure that SDS's personal data processing and data sharing with partners is lawful and appropriately documented; 5. Support timely responses to any complaints relating to the Data 6. Protection and Data Subject Requests (DSRs) within 2 working days, in particular advising as needed on complex DSRs; 6. Support timely and informed engagement with the ICO in line with our requirements to report breaches to ICO within 72hrs; 7. Contribute to the review of DP guidance and training material and support any improvement action arising; 8. Support ongoing maintenance of SDS's Record of Processing Activity (ROPA), identifying and supporting implementation of improvement activity as appropriate; 9. Ensure SDS are kept up to date with any developing requirements or changes in relevant legislation 10. Delivery of any other data protection tasks as may be required of the role of the DPO. 11. Monitor the DP team mailbox on the rare occasion when the substantive team is absent 12. Provide training to the organisation annually to raise awareness of data protection issues and responsibilities 13. Quarterly reviews of ICO rulings and guidance 14. Ensure cover/contingency for external resource and expertise to fulfil the formal role of DPO.. N/A

Renewal: The option to extend for 12 months on two separate occasions at the sole discretion of SDS.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Public Contracts Scotland |
| Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=FEB549135 |
| Notice type | PCS Notice - Website Contract Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Tender, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 9 Feb 2026 |
| Submission deadline | 8 Dec 2025 |
| Future notice date | Not specified |
| Award date | 23 Jan 2026 |
| Contract period | 2 Feb 2026 - 1 Feb 2028 |
| Recurrence | 2, 3 or 4 years |

## Values

| Field | Value |
| --- | --- |
| Tender value | £72,000 |
| Lots value | £72,000 |
| Awards value | Not specified |
| Contracts value | £72,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Not specified |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | SKILLS DEVELOPMENT SCOTLAND LTD |
| Locality | GLASGOW |
| Post town | Glasgow |
| Postcode | G2 1DY |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM3 West Central Scotland |
| ITL 3 | TLM32 Glasgow City |
| Local authority | Glasgow City |
| Electoral ward | Anderston/City/Yorkhill |
| Westminster constituency | Glasgow East |
| Delivery location | TLM Scotland |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | TKM CONSULTING |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72300000 - Data services

## Release History

- 9 Feb 2026 at 00:00 - Award - PCS Notice - Website Contract Award Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=FEB549135
- 6 Nov 2025 at 00:00 - Tender - PCS Notice - Website Contract Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=NOV542893

## Documents

- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=10
  21st November 2025 - Response to questions submitted via PCS
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=12
  21st November 2025 - Response to questions submitted via PCS - updated 21/11
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=9
  20th November 2025 - Appendix 3 - Pricing Schedule
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=11
  20th November 2025 - Appendix 3 - Pricing Schedule - updated
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=3
  6th November 2025 - Appendix 3 - Pricing Schedule
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=1
  6th November 2025 - P25-033 Data Protection Officer ITT
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=2
  6th November 2025 - Appendix 2 - Bidder Response Form
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=4
  6th November 2025 - Appendix 4 - SDS Ts and Cs Above 50k
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=5
  6th November 2025 - Appendix 6 Data Protection Policy
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=6
  6th November 2025 - Appendix 7 Using SDS IT Equipment & Systems Policy
- https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=NOV542893&idx=7
  6th November 2025 - Appendix 5 - Certificates
- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=NOV542893
  Provision of Data Protection Officer Services - To retain on contract for 12 hours a month a suitably qualified and experienced person to act as the Data Protection Officer (DPO) for Skills Development Scotland (SDS), as required by UK GDPR.
- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=FEB549135
  Provision of Data Protection Officer Services - To retain on contract for 12 hours a month a suitably qualified and experienced person to act as the Data Protection Officer (DPO) for Skills Development Scotland (SDS), as required by UK GDPR.

## Notice URLs

- http://
- http://www.publiccontractsscotland.gov.uk
- http://www.skillsdevelopmentscotland.co.uk
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000814569
- https://skillsdevelopmentscotland.co.uk

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000814569. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000814569.json.