Invitation to Tender: GDPR Process

By northandeast
Thursday, 16th November 2017
Filed under:

North & East invites tenders from suitably qualified providers for the provision of a programme for the management of all activities relating to the preparation for, and achievement of compliance with, the General Data Protection Regulation (GDPR) which will apply from 25th May


  1. Audit & Assessment of records and record keeping practices of the Association against GDPR requirements to identify any weaknesses and enable us to achieve best practice in this area.
  2. Develop Data Protection Policy for the Association
  3. Development and delivery of training programme for staff.
  4. Development of Workplan that will enable the Association to track and measure any improvements and identify any risk areas

Tender Process

The final appointment will be made based on the quality of the approach taken, the experience/qualification of the consultant/s and price. Prior to a final decision some applicants may be invited to present their proposal to selection panel.

Expressions of Interest should include:

  1. Qualifications/experience of principles proposed
  2. Proposed timescale of programme
  3. Proposed approach/key milestones
  4. Price including rates per hour for any additional hours required

Completed tenders should be returned to by Friday 8th December

Outline to Tender Document.