FTS050 Data Protection Services Framework

HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training. This Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE).

The framework is live from 8 April 2026 until 7 April 2029, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term (until 7 April 2030). Objective 1 - Role of Data Protection Officer (DPO) as specified in the General Data Protection Regulations and in support of Data Protection Act 2018 Objective 2 - Monitor and remedy noncompliance and support personal data breach resolution Objective 3 - Organisational Compliance with Data Protection Legislation Objective 4 - Data Protection Impact Assessment (DPIA) process including advice and support Objective 5 - Reporting and monitoring Additional information: Economic operators may be excluded from this competition if they are in any of the situations referred to in Regulation 58 of the Public Contracts (Scotland) Regulations 2015.