Source: https://tendernation.io/opportunities/01a13cbf-5327-71e8-a718-b7a201deff39/ig-support-and-data-protection-officer-service-to-the-norfolk-and-waveney-gp-pra closed GB open procedure Suitable for SMEs # IG Support and Data Protection Officer Service to the Norfolk and Waveney GP Practices [NHS Arden and Greater East Midlands Commissioning Support Unit](https://tendernation.io/buyers/nhs-arden-and-greater-east-midlands-commissioning-support-unit) Estimated value £360,000 Published 15 Mar 2023 Deadline Closed 14 Apr 2023 ## Who can bid - Buyer says suitable for SMEs The buyer ticked “suitable for SMEs” on the notice. Anyone can still bid. - Buyer says suitable for VCSEs The buyer ticked “suitable for voluntary, community and social enterprises” on the notice. - Open procedure Anyone can submit a full tender; there is no shortlisting stage. [More contracts for small businesses and VCSEs](https://tendernation.io/opportunities/for-small-businesses) ## About this tender NHS NORFOLK & WAVENEY ICB invite bids from suitably qualified suppliers to provide information governance advice and guidance support service, together with a named Data Protection Officer. The requirement will include: ### Data breaches • The provision of advice and/or support to practices on the investigation of possible information security breaches and incidents. • Advice on incident/breach assessment and reporting via the incident reporting tool within the DSPT to NHS England and reporting to the ICO (dependent upon severity of incident). • Advice on assessment and reporting via the incident reporting tool within the DSPT to NHS England and ICO (dependent upon nature and severity of the breach). • Advice on post-incident reviews and recommended actions for practice implementation. To lead or direct data breach reviews and investigations where highly specialist knowledge is required or complex multi-party issues are involved. Service Provider as data processor will: • To take action immediately following a data breach or a near miss, alerting promptly the practice as data controller and with a report made to the senior management within the ICB and the practice within 12 (working) hours of detection. • Report data breaches in line with NHS guidance (using the incident reporting tool within the DSPT) and legal requirements immediately following detection. • Provide a Lessons Learned Report (with relevant action plan as appropriate) to the ICB within 2 weeks of the recorded resolution of the incident. ### IG Policy Support • Support for the production and maintenance of local information governance policies and procedures for practices. Provision of advice and support to practices on approval, ratification and adoption of the policies for their organisation. Support for the Data Security and Protection Toolkit compliance • Provide advice and guidance to practices on how to complete the DSPT, including the collection and collation of evidence in support of DSPT submissions. Provide practices with evidence required for DSPT where this is held by the ICB or its commissioned IT providers. • Monitor DSPT compliance of practices and provide the ICB with details of any non-compliance with practice action plans. ### IG consultancy and support • Provision of advice, guidance and support on IG related issues, including existing operational processes and procedures or new business initiatives. Advice and guidance on personal data access (but not extending to legal advice). ### Data Protection Officer (DPO) Support Provision of advice, guidance and support on IG related issues including existing operational processes and procedures or new business initiatives to support practice designated Data Protection Officers including existing operational processes and procedures or new business initiatives. To include • Access for Practices during normal service hours to specialist qualified advice on GDPR matter. Additional information: To register your interest and access the Documents, supporting information and express your interest the Contracting Authority will be using an eTendering system for this procurement exercise. Further information and the ITT documentation can be found via the 'Live Opportunities' list on the e-procurement system at the following link: [health-family-contract-search.secure.force.com](https://health-family-contract-search.secure.force.com/?searchtype=Projects). You can also register your interest via this page. You can search for the opportunity by entering the following contract reference: ID number C151681 - Expression of Interest IG and Data Protection Officer Service. Please answer all the questions and submit your response by 10:00 on the 14th of April 2023. Read full description ## CPV classification Data services Source Contracts Finder (UK) [View official notice](https://www.contractsfinder.service.gov.uk/notice/82f6c432-4dd5-4180-ae48-3e7196033a6f) Never miss a tender like this again Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start. [Track tenders free](https://tendernation.io/register) [Buyer profile NHS Arden and Greater East Midlands Commissioning Support Unit: past awards and live tenders](https://tendernation.io/buyers/nhs-arden-and-greater-east-midlands-commissioning-support-unit) [Sector More IT services tenders](https://tendernation.io/sectors/it-services) ## More tenders like this [System and support services – SAP Standard Support + Back Maintenance na obdobie dvoch rokov · Železničná spoločnosť Slovensko, a.s. · 21 days left · 10 Nov 2026](https://tendernation.io/opportunities/01a156a9-954d-73c0-81ac-1f5c5ea830f6/slovakia-system-and-support-services-sap-standard-support-back-maintenance) [IT services: consulting, software development, Internet and support – Servicios de mantenimiento, soporte y desarrollo evolutivo de los sistemas de gestión de subvenciones y de digitalización de los procesos internos de ACCIÓ · Agencia Para la Competitividad de la Empresa · 30 days left · 18 Nov 2026](https://tendernation.io/opportunities/01a156a9-6297-7227-819a-e22aac2c6068/spain-it-services-consulting-software-development-internet-and-support-se) [Wide area network services – Erbringung einer WAN-Infrastruktur sowie weiterer Dienste · LOTTO Hamburg GmbH · 30 days left · 19 Nov 2026](https://tendernation.io/opportunities/01a156a9-abf6-71bd-a863-0c1e01529da6/germany-wide-area-network-services-erbringung-einer-wan-infrastruktur-sowie) [Maintenance of information technology software – Usluga održavanja informacijskog sustava Kaznene evidencije · Ministarstvo Pravosuđa, Uprave I Digitalne Transformacije · 10 days left · 30 Oct 2026](https://tendernation.io/opportunities/01a156a9-ea7b-7106-8a81-051afa7f2539/croatia-maintenance-of-information-technology-software-usluga-odrzavanja-inf) [IT services: consulting, software development, Internet and support – „Осигуряване на възможност за електронно таксуване на пътниците чрез цялостно решение, базирано на пътнически профили, предоставяно като услуга (SaaS), за нуждите на „Тролейбусен транспорт” ЕООД, гр. Плевен“ · ТРОЛЕЙБУСЕН ТРАНСПОРТ ЕООД · 23 days left · 11 Nov 2026](https://tendernation.io/opportunities/01a156a9-752e-72e2-9fcc-3b0ec97760cb/bulgaria-it-services-consulting-software-development-internet-and-support) [IT services: consulting, software development, Internet and support – Utrzymanie w ruchu i rozwój systemu informatycznego SIOEZ w tym prace programistyczne oraz usługi im towarzyszące · Centralna Komisja Egzaminacyjna · 14 days left · 3 Nov 2026](https://tendernation.io/opportunities/01a156a9-6358-70a4-99f9-c3f4d782f582/poland-it-services-consulting-software-development-internet-and-support-u)