PS23147 Data Protection Service

***** THIS IS AN AWARD NOTICE, NOT A CALL FOR COMPETITION *****

This procurement is being concluded following a mini competition under CCS Cyber Security Services 3 DPS RM3764.3

Brief Description of Requirement

The Post Office Horizon IT Inquiry is looking to appoint a dedicated Data Protection practitioner to lead work with a junior practitioner to provide compliance and advisory services in order to ensure that the Post Office Horizon IT Inquiry has the relevant data protection policies in place and that the practices of the Inquiry are compliant and in line with data protection regulations.

The data protection Services Provider is required to be available from May 2023 until September 2024.

The data protection services provider function is to support the Inquiry's compliance with relevant data protection obligations and to proactively manage any risks of inappropriate data handling. The expected support will cover advice to the Inquiry on data protection matters including breach response and recovery procedures, and provide education and consultancy services. This will involve reviewing current policies and practices in the Inquiry team, identifying any gaps in process or procedures and designing a plan for improvements. Advice on data storage and archiving is also required to support the Inquiry's preparation for archiving when the Inquiry comes to an end.