GB-London: Data Protection Officer Services

The V&A is quite far along in its analysis of the consequences of the General Data Protection Regulation (GDPR). An audit is underway and appropriate structures, policies and procedures will be in place by the May 2018 deadline. The V&A is a public sector body (or hybrid body) for the purposes of the GDPR and we are therefore required to have a Data Protection Officer (DPO). We are considering our options and one option is to outsource our DPO function to an external supplier.

If you offer this sort of outsourced DPO service could you please email us at procurement@vam.ac.uk. Please include details of what sort of arrangement you could put in place for the V&A and give some indication of cost. Please note that since we are currently in the midst of a detailed data protection audit and GDPR implementation process we do not need advice or support on GDPR compliance.

Please note this is not a tender exercise, but a call to establish interest.

Additional information: The contracting authority considers that this contract may be suitable for economic operators that are small or medium enterprises (SMEs). However, any selection of tenderers will be based solely on the criteria set out for the procurement.