---
title: "FTS050 Data Protection Services Framework"
ocid: "ocds-r6ebe6-0000816177"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000816177"
markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000816177.md"
json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000816177.json"
source: "Public Contracts Scotland"
current_stage: "Award"
buyer: "HIGHLANDS AND ISLANDS ENTERPRISE"
published: "2026-04-08"
---

# FTS050 Data Protection Services Framework

Buyer: HIGHLANDS AND ISLANDS ENTERPRISE  
Current stage: Award  
OCID: ocds-r6ebe6-0000816177

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000816177)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000816177.json)

## Summary

The recent Data Protection Services Framework, titled "FTS050", is being governed by Highlands and Islands Enterprise (HIE), engaging multiple organisations such as Wave Energy Scotland, Orkney Research Innovation Campus, and others. It primarily focuses on economic affairs in the UK and is located in the administrative region UKM. This open procurement procedure targets data protection services under the GDPR and Data Protection Act 2018. The framework is active from 8 April 2026 to 7 April 2029, with a possible one-year extension until 2030. Previously, the tendering process concluded on 9 February 2026, finalising the award to Tkm Consulting with a contract value of GBP 287,000.

This procurement framework presents a substantial opportunity for businesses, especially those proficient in data protection services, compliance, and risk management. Companies with expertise in providing Data Protection Officer roles, compliance monitoring, and data breach resolutions are positioned well against the tender’s criteria. As the framework encompasses electronic submissions, it is also an attractive prospect for SMEs, allowing businesses to expand their portfolio by aligning with renowned entities like HIE and others under the framework's umbrella. Maintaining robust supply chain and payment practices is critical, enabling participating companies to leverage the framework's optional modifications and extensions.

## Notice

HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training. This Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE). The framework is live from 8 April 2026 until 7 April 2029, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term (until 7 April 2030).

### Lot Information

Lot 1

Objective 1 - Role of Data Protection Officer (DPO) as specified in the General Data Protection Regulations and in support of Data Protection Act 2018 Objective 2 - Monitor and remedy noncompliance and support personal data breach resolution Objective 3 - Organisational Compliance with Data Protection Legislation Objective 4 - Data Protection Impact Assessment (DPIA) process including advice and support Objective 5 - Reporting and monitoring. Economic operators may be excluded from this competition if they are in any of the situations referred to in Regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Options: HIE reserves the right, on giving reasonable written notice from time to time, to require changes to the Services (whether by way of the removal of Services, the addition of new Services, or increasing or decreasing the Services or specifying the order in which the Services are to be performed or the locations where the Services are to be provided). HIE shall not require any such change other than where it is permitted by Regulation 72 of the Public Contracts (Scotland) Regulations 2015. The Framework/Call-off Contracts may be modified for reasons including but not limited to: -Changes to budget availability -Organisation/s bringing the services in-house fully or partially and so the services are no longer required / reduced services are required -The addition of similar services -Increasing the volume of the services -Change in legislative requirements resulting in increased or reduced service In these situations, for the call-off contracts, HIE will agree a price variation based on the pricing submitted as part of your bid, for example, using the hourly rate to increase/reduce the services by a number of hours. Other framework users may also modify their relevant call-off contracts.

Renewal: The contract will be awarded for an initial period of 3 years, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Public Contracts Scotland |
| Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR553467 |
| Notice type | OJEU - F3 - Contract Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Tender, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 8 Apr 2026 |
| Submission deadline | 9 Feb 2026 |
| Future notice date | Not specified |
| Award date | 6 Apr 2026 |
| Contract period | Not specified |
| Recurrence | HIE reserves the right to re-tender for these services upon termination or at the end of the contract, including any extension period. |

## Values

| Field | Value |
| --- | --- |
| Tender value | £287,000 |
| Lots value | £287,000 |
| Awards value | Not specified |
| Contracts value | £287,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Not specified |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | HIGHLANDS AND ISLANDS ENTERPRISE |
| Additional buyers | CAIRNGORM MOUNTAIN (SCOTLAND) LTD; HIE ORKNEY; HIE VENTURES LTD.; ORKNEY RESEARCH AND INNOVATION CAMPUS LLP; SOUTH OF SCOTLAND ENTERPRISE; WAVE ENERGY SCOTLAND LIMITED |
| Locality | INVERNESS |
| Post town | Inverness |
| Postcode | IV2 5NA |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM2 Highlands and Islands |
| ITL 3 | TLM20 Highlands and Islands |
| Local authority | Highland |
| Electoral ward | Nairn and Cawdor |
| Westminster constituency | Moray West, Nairn and Strathspey |
| Delivery location | TLM Scotland |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | TKM CONSULTING |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support
- 75 - Administration, defence and social security services
- 79 - Business services: law, marketing, consulting, recruitment, printing and security

### Codes

- 72300000 - Data services
- 75111200 - Legislative services
- 79212000 - Auditing services
- 79410000 - Business and management consultancy services
- 79411100 - Business development consultancy services

## Release History

- 8 Apr 2026 at 00:00 - Award - OJEU - F3 - Contract Award Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR553467
- 19 Dec 2025 at 00:00 - Tender - OJEU - F2 - Contract Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=DEC546127

## Documents

- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=DEC546127
  FTS050 Data Protection Services Framework - HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training. This Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE). It is expected that these services will be required from 8 April 2026 for an initial period of 3 years, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term. The 3-year budget currently available to deliver this service is between GBP 171,000 and GBP 216,000 (excluding VAT).
- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR553467
  FTS050 Data Protection Services Framework - HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training. This Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE). The framework is live from 8 April 2026 until 7 April 2029, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term (until 7 April 2030).

## Notice URLs

- http://
- http://www.hie.co.uk
- http://www.publiccontractsscotland.gov.uk
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000816177
- https://www.mygov.scot/apply-for-level-1-disclosure
- https://www.scotcourts.gov.uk/the-courts/court-locations/inverness-sheriff-court-and-justice-of-the-peace-court

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000816177. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000816177.json.