Data Protection Officer Management and GP Information Governance Management Services to GP Practices for NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland ICBs

NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland (LLR) cluster ICBs (LNR ICBs) are looking for an organisation to provide Data Protection Officer (DPO) Management and GP Information Governance (IG) Management Services across the LNR cluster. There are currently 64 GP practices in Northamptonshire ICB and 126 GP practices in LLR ICB. Scope of Work and Requirements: - Data Protection Officer - Provide a contact point to act as DPO and provide remote specialist advice and guidance. - Advice and Support for the Data Security and Protection Toolkit (DSPT) - Advice and guidance to practices on how to investigate, manage, report, and review incidents. - Advice and support to providers to manage the reporting of the incident and advice on remedies. - Support for the production and maintenance of local IG policies and procedures. - Provide direct response to the GP Practice within 72 hours via email or telephone. - Provide independent and highly developed specialist knowledge and advice across the GP practices to ensure they remain compliant with changing legal requirements, including the UK General Data Protection Regulation (UK GDPR) The contract will be for a period of 1 year with the option to extend for up to a further 6 months commencing 1st July 2026. The maximum annual contract value is £132,000 per annum including VAT. No bids over is £132,000 per annum (including VAT) will be accepted. Further details can be found within the procurement documentation. Please note, this notice relates to a service/contract in scope of the Procurement Act 2023. Bids are to be submitted via the Atamis e-tendering portal by following the link below, and search for the project reference as detailed: https://health-family.force.com/s/Welcome Project Reference: C448349 Project Name: DPO and GP IG Management Services Across the NHS LNR Cluster