← Back to opportunities

FTS050 Data Protection Services Framework

Highlands and Islands Enterprise

Buyer Contact Info

Buyer Name: Highlands and Islands Enterprise

Buyer Address: An Lòchran, 10 Inverness Campus, Inverness, UKM6, IV2 5NA, United Kingdom

Contact Email: hieprocurement@hient.co.uk

Contact Telephone: +44 1463245245

Buyer Name: Wave Energy Scotland Limited

Buyer Address: An Lòchran, 10 Inverness Campus, Inverness, UKM, IV2 5NA, United Kingdom

Contact Email: wesprocurement@hient.co.uk

Show 5 more buyers

Buyer Name: Orkney Research and Innovation Campus LLP

Buyer Address: The Robert Rendall Building, Franklin Road, Stromness, UK, KW16 3AN, United Kingdom

Contact Email: enquiries@orkneycampus.co.uk

Buyer Name: Cairngorm Mountain (Scotland) Ltd

Buyer Address: Cairngorm Mountain, Cairngorm Ski Area, Aviemore, UKM62, PH22 1RB, United Kingdom

Contact Email: info@caingormmountain.co.uk

Contact Telephone: +44 1479861261

Buyer Name: South of Scotland Enterprise

Buyer Address: Carmont House, The Crichton, Bankend Road, Dumfries, UK, DG1 4TA, United Kingdom

Contact Email: Finance@sose.scot

Contact Telephone: +44 1750535901

Buyer Name: HIE Ventures Ltd.

Buyer Address: Ord House Cradlehall Business Park,Caulfield Road North, Inverness, UKM, IV2 5GH, United Kingdom

Contact Email: enquiries@hient.co.uk

Contact Telephone: +44 463713755

Buyer Name: HIE Orkney

Buyer Address: An Lochran, 10 Inverness Campus, Inverness, UKM, Iv12 5BU, United Kingdom

Status
active
Procedure
open
Value
287000.0 GBP
Published
19 Dec 2025, 16:00
Deadline
09 Feb 2026, 12:00
Contract Start
n/a
Contract End
n/a
Category
services
CPV
79411100 - Business development consultancy services
Region
n/a
Awarded To
n/a
Official Source
Open Find a Tender

Description

HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training. This Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE). It is expected that these services will be required from 8 April 2026 for an initial period of 3 years, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term. The 3-year budget currently available to deliver this service is between GBP 171,000 and GBP 216,000 (excluding VAT).

Linked Documents

No linked documents found for this notice.

Opportunity Context

Lots

Lot Description: Objective 1 - Role of Data Protection Officer (DPO) as specified in the General Data Protection Regulations and in support of Data Protection Act 2018 Objective 2 - Monitor and remedy noncompliance and support personal data breach resolution Objective 3 - Organisational Compliance with Data Protection Legislation Objective 4 - Data Protection Impact Assessment (DPIA) process including advice and support Objective 5 - Reporting and monitoring Additional information: Economic operators may be excluded from this competition if they are in any of the situations referred to in Regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Lot 1 Status: active

Lot 1 Has Options: Yes

Lot 1 Options: HIE reserves the right, on giving reasonable written notice from time to time, to require changes to the Services (whether by way of the removal of Services, the addition of new Services, or increasing or decreasing the Services or specifying the order in which the Services are to be performed or the locations where the Services are to be provided). HIE shall not require any such change other than where it is permitted by Regulation 72 of the Public Contracts (Scotland) Regulations 2015. The Framework/Call-off Contracts may be modified for reasons including but not limited to: -Changes to budget availability -Organisation/s bringing the services in-house fully or partially and so the services are no longer required / reduced services are required -The addition of similar services -Increasing the volume of the services -Change in legislative requirements resulting in increased or reduced service In these situations, for the call-off contracts, HIE will agree a price variation based on the pricing submitted as part of your bid, for example, using the hourly rate to increase/reduce the services by a number of hours. Other framework users may also modify their relevant call-off contracts.

Lot 1 Value: GBP 287,000

Lot 1 Award Criterion (quality): Prompt Payment Standard Clause

Lot 1 Award Criterion (quality): Cyber Security

Lot 1 Award Criterion (quality): Payment of the Real Living Wage

Lot 1 Award Criterion (quality): Management and Delivery Methodology

Lot 1 Award Criterion (quality): Responsiveness and Business Continuity

Lot 1 Award Criterion (quality): Management and Delivery Team

Lot 1 Award Criterion (quality): Monitoring and Reporting of Community Benefits

Lot 1 Award Criterion (quality): Fair Work Practices

Raw Notice JSON

Expand raw payload
{
  "buyer": {
    "id": "GB-FTS-1479",
    "name": "Highlands and Islands Enterprise"
  },
  "date": "2025-12-19T16:00:44Z",
  "description": "SPD Q 2D1: Bidders are required to state, in so far as they are known, the subcontractors they propose to use. Such subcontractors are required to complete the relevant parts of the SPD (Sections A and B of Part II and Part III only) - the lead bidder is to collate and submit the SPD responses as part of their tender response. Copies of the SPD for completion by subcontractors can be downloaded by the lead bidder from the online SPD module in Part II.\nIt is estimated that the total value of the framework over the maximum duration of 4 years will be GBP 287,000 (excluding VAT). This is the figure which has been used in II.1.5 \u0026 II.2.6.\nWhere bidders rely on the capacity of other entities in order to meet selection criteria they are required to provide information relating to these entities with the relevant supporting SPD documentation being submitted.\nSPD 3D.12 Bidders should refer to the \"Conflict of Interest\" Section within the Scope of Requirements when completing this question.\nThe Award criteria (Questions 4-8) will be marked according to the following criteria - refer to the tender documents for the evaluation criteria for Questions 1-3 and the minimum threshold score for Questions 4-6:\n0 - Unacceptable - Nil or inadequate response which fails to demonstrate an ability to meet the requirement.\n1 - Poor - Response is partially relevant but generally poor. It addresses some elements of the requirement but contains insufficient/limited detail or explanation to demonstrate how the requirement will be fulfilled.\n2 - Acceptable - Response is relevant and acceptable. It addresses a broad understanding of the requirement but may lack details on how the requirement will be fulfilled in certain areas.\n3 - Good - Response is relevant and good. It is sufficiently detailed to demonstrate a good understanding and provides details on how the requirements will be fulfilled.\n4 - Excellent - Response is completely relevant and excellent overall. It is comprehensive, unambiguous and demonstrate a thorough understanding of the requirement and provides details of how the requirement will be met in full.\nTenders must be submitted via the PCS postbox and must be received by the published deadline. Late tenders will not be accepted and HIE will reject any submissions received after the deadline. Email or hard copy responses will not be accepted.\nNOTE: To register your interest in this notice and obtain any additional information please visit the Public Contracts Scotland Web Site at https://www.publiccontractsscotland.gov.uk/Search/Search_Switch.aspx?ID=816177.\nThe buyer has indicated that it will accept electronic responses to this notice via the Postbox facility. A user guide is available at https://www.publiccontractsscotland.gov.uk/sitehelp/help_guides.aspx.\nSuppliers are advised to allow adequate time for uploading documents and to dispatch the electronic response well in advance of the closing time to avoid any last minute problems.\nCommunity benefits are included in this requirement. For more information see: https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/\nA summary of the expected community benefits has been provided as follows:\nsee tender documents\n(SC Ref:816177)\nDownload the ESPD document here: https://www.publiccontractsscotland.gov.uk/ESPD/ESPD_Download.aspx?id=816177",
  "id": "085069-2025",
  "initiationType": "tender",
  "language": "en",
  "links": [
    {
      "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000816177",
      "rel": "canonical"
    }
  ],
  "ocid": "ocds-h6vhtk-05fac3",
  "parties": [
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Inverness",
        "postalCode": "IV2 5NA",
        "region": "UKM6",
        "streetAddress": "An L\u00f2chran, 10 Inverness Campus"
      },
      "contactPoint": {
        "email": "hieprocurement@hient.co.uk",
        "telephone": "+44 1463245245",
        "url": "http://www.publiccontractsscotland.gov.uk"
      },
      "details": {
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00313",
        "classifications": [
          {
            "description": "Regional or local agency/office",
            "id": "REGIONAL_AGENCY",
            "scheme": "TED_CA_TYPE"
          },
          {
            "description": "Economic affairs",
            "id": "04",
            "scheme": "COFOG"
          }
        ],
        "url": "http://www.hie.co.uk"
      },
      "id": "GB-FTS-1479",
      "identifier": {
        "legalName": "Highlands and Islands Enterprise"
      },
      "name": "Highlands and Islands Enterprise",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Inverness",
        "postalCode": "IV2 5NA",
        "region": "UKM",
        "streetAddress": "An L\u00f2chran, 10 Inverness Campus"
      },
      "contactPoint": {
        "email": "wesprocurement@hient.co.uk",
        "telephone": "+44 1463245245"
      },
      "details": {
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA24283",
        "url": "http://www.waveenergyscotland.co.uk"
      },
      "id": "GB-FTS-6933",
      "identifier": {
        "legalName": "Wave Energy Scotland Limited"
      },
      "name": "Wave Energy Scotland Limited",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Stromness",
        "postalCode": "KW16 3AN",
        "region": "UK",
        "streetAddress": "The Robert Rendall Building, Franklin Road"
      },
      "contactPoint": {
        "email": "enquiries@orkneycampus.co.uk",
        "telephone": "+44 1463245245"
      },
      "details": {
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30475",
        "url": "https://www.orkneycampus.co.uk/"
      },
      "id": "GB-FTS-65704",
      "identifier": {
        "legalName": "Orkney Research and Innovation Campus LLP"
      },
      "name": "Orkney Research and Innovation Campus LLP",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Aviemore",
        "postalCode": "PH22 1RB",
        "region": "UKM62",
        "streetAddress": "Cairngorm Mountain, Cairngorm Ski Area"
      },
      "contactPoint": {
        "email": "info@caingormmountain.co.uk",
        "telephone": "+44 1479861261"
      },
      "details": {
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30513",
        "url": "https://www.cairngormmountain.co.uk/"
      },
      "id": "GB-FTS-65703",
      "identifier": {
        "legalName": "Cairngorm Mountain (Scotland) Ltd"
      },
      "name": "Cairngorm Mountain (Scotland) Ltd",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Dumfries",
        "postalCode": "DG1 4TA",
        "region": "UK",
        "streetAddress": "Carmont House, The Crichton, Bankend Road"
      },
      "contactPoint": {
        "email": "Finance@sose.scot",
        "telephone": "+44 1750535901"
      },
      "details": {
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30448",
        "url": "http://www.southofscotlandenterprise.com"
      },
      "id": "GB-FTS-169805",
      "identifier": {
        "legalName": "South of Scotland Enterprise"
      },
      "name": "South of Scotland Enterprise",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Inverness",
        "postalCode": "IV2 5GH",
        "region": "UKM",
        "streetAddress": "Ord House Cradlehall Business Park,Caulfield Road North"
      },
      "contactPoint": {
        "email": "enquiries@hient.co.uk",
        "telephone": "+44 463713755"
      },
      "details": {
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30448",
        "url": "http://www.hie.co.uk"
      },
      "id": "GB-FTS-169806",
      "identifier": {
        "legalName": "HIE Ventures Ltd."
      },
      "name": "HIE Ventures Ltd.",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Inverness",
        "postalCode": "Iv12 5BU",
        "region": "UKM",
        "streetAddress": "An Lochran, 10 Inverness Campus"
      },
      "contactPoint": {
        "email": "enquiries@hient.co.uk",
        "telephone": "+44 1463245245"
      },
      "details": {
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30448",
        "url": "http://www.hie.co.uk"
      },
      "id": "GB-FTS-169807",
      "identifier": {
        "legalName": "HIE Orkney"
      },
      "name": "HIE Orkney",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Inverness",
        "postalCode": "IV1 1AH",
        "streetAddress": "The Inverness Justice Centre, Longman Road"
      },
      "contactPoint": {
        "email": "inverness@scotcourts.gov.uk",
        "telephone": "+44 1463230782"
      },
      "details": {
        "url": "https://www.scotcourts.gov.uk/the-courts/court-locations/inverness-sheriff-court-and-justice-of-the-peace-court"
      },
      "id": "GB-FTS-1262",
      "identifier": {
        "legalName": "Inverness Sheriff Court and Justice of the Peace Court"
      },
      "name": "Inverness Sheriff Court and Justice of the Peace Court",
      "roles": [
        "reviewBody"
      ]
    }
  ],
  "tag": [
    "tender"
  ],
  "tender": {
    "awardPeriod": {
      "startDate": "2026-02-09T12:00:00Z"
    },
    "bidOpening": {
      "date": "2026-02-09T12:00:00Z"
    },
    "classification": {
      "description": "Business and management consultancy services",
      "id": "79410000",
      "scheme": "CPV"
    },
    "contractTerms": {
      "electronicInvoicingPolicy": "allowed",
      "hasElectronicOrdering": true,
      "hasElectronicPayment": true,
      "performanceTerms": "See Scope of Requirements and Tender Guidance document."
    },
    "coveredBy": [
      "GPA"
    ],
    "description": "HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training.\nThis Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE).\nIt is expected that these services will be required from 8 April 2026 for an initial period of 3 years, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term. The 3-year budget currently available to deliver this service is between GBP 171,000 and GBP 216,000 (excluding VAT).",
    "hasRecurrence": true,
    "id": "FTS 050",
    "items": [
      {
        "additionalClassifications": [
          {
            "description": "Business development consultancy services",
            "id": "79411100",
            "scheme": "CPV"
          },
          {
            "description": "Legislative services",
            "id": "75111200",
            "scheme": "CPV"
          },
          {
            "description": "Auditing services",
            "id": "79212000",
            "scheme": "CPV"
          },
          {
            "description": "Data services",
            "id": "72300000",
            "scheme": "CPV"
          }
        ],
        "deliveryAddresses": [
          {
            "region": "UKM"
          }
        ],
        "id": "1",
        "relatedLot": "1"
      }
    ],
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "lots": [
      {
        "awardCriteria": {
          "criteria": [
            {
              "description": "pass/fail",
              "name": "Prompt Payment Standard Clause",
              "type": "quality"
            },
            {
              "description": "pass/fail",
              "name": "Cyber Security",
              "type": "quality"
            },
            {
              "description": "pass/fail",
              "name": "Payment of the Real Living Wage",
              "type": "quality"
            },
            {
              "description": "20%",
              "name": "Management and Delivery Methodology",
              "type": "quality"
            },
            {
              "description": "13%",
              "name": "Responsiveness and Business Continuity",
              "type": "quality"
            },
            {
              "description": "20%",
              "name": "Management and Delivery Team",
              "type": "quality"
            },
            {
              "description": "2%",
              "name": "Monitoring and Reporting of Community Benefits",
              "type": "quality"
            },
            {
              "description": "5%",
              "name": "Fair Work Practices",
              "type": "quality"
            },
            {
              "description": "40%",
              "type": "price"
            }
          ]
        },
        "contractPeriod": {
          "durationInDays": 1440
        },
        "description": "Objective 1 - Role of Data Protection Officer (DPO) as specified in the General Data Protection Regulations and in support of Data Protection Act 2018\nObjective 2 - Monitor and remedy noncompliance and support personal data breach resolution\nObjective 3 - Organisational Compliance with Data Protection Legislation\nObjective 4 - Data Protection Impact Assessment (DPIA) process including advice and support\nObjective 5 - Reporting and monitoring Additional information: Economic operators may be excluded from this competition if they are in any of the situations referred to in Regulation 58 of the Public Contracts (Scotland) Regulations 2015.",
        "hasOptions": true,
        "hasRenewal": true,
        "id": "1",
        "options": {
          "description": "HIE reserves the right, on giving reasonable written notice from time to time, to require changes to the Services (whether by way of the removal of Services, the addition of new Services, or increasing or decreasing the Services or specifying the order in which the Services are to be performed or the locations where the Services are to be provided). HIE shall not require any such change other than where it is permitted by Regulation 72 of the Public Contracts (Scotland) Regulations 2015.\nThe Framework/Call-off Contracts may be modified for reasons including but not limited to:\n-Changes to budget availability\n-Organisation/s bringing the services in-house fully or partially and so the services are no longer required / reduced services are required\n-The addition of similar services\n-Increasing the volume of the services\n-Change in legislative requirements resulting in increased or reduced service\nIn these situations, for the call-off contracts, HIE will agree a price variation based on the pricing submitted as part of your bid, for example, using the hourly rate to increase/reduce the services by a number of hours. Other framework users may also modify their relevant call-off contracts."
        },
        "renewal": {
          "description": "The contract will be awarded for an initial period of 3 years, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term."
        },
        "status": "active",
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        },
        "value": {
          "amount": 287000,
          "currency": "GBP"
        }
      }
    ],
    "mainProcurementCategory": "services",
    "otherRequirements": {
      "requiresStaffNamesAndQualifications": true
    },
    "procurementMethod": "open",
    "procurementMethodDetails": "Open procedure",
    "recurrence": {
      "description": "HIE reserves the right to re-tender for these services upon termination or at the end of the contract, including any extension period."
    },
    "selectionCriteria": {
      "criteria": [
        {
          "appliesTo": [
            "supplier"
          ],
          "description": "4A2A Bidders must provide, or commit to provide prior to the commencement of the framework agreement, an up-to-date Level 1 disclosure from Disclosure Scotland for the DPO, the DPO\u2019s deputy/ies and all personnel with access to Framework User systems or business information.  (Information on how to apply for a Level 1 disclosure is available online at  https://www.mygov.scot/apply-for-level-1-disclosure.)",
          "type": "suitability"
        },
        {
          "minimum": "It is a requirement of this Contract that bidders hold, or can commit to obtain prior to the commencement of any subsequently awarded Contract, the types and levels of insurance indicated below:\n4B5A Professional Risk Indemnity - GBP 3 million for each and every claim\n4B5B Employer\u0027s (Compulsory) Liability Insurance - GBP 5M for each and every claim.\n4B.6 (not scored)\nHIE as a public body must comply with HMRC IR35 provisions. Therefore, where you are bidding as a personal service company (PSC) or will be using a personal service company to provide services under the contract please identify these PSC (s) in your response to 4B6."
        }
      ]
    },
    "status": "active",
    "submissionMethod": [
      "electronicSubmission"
    ],
    "submissionMethodDetails": "http://www.publiccontractsscotland.gov.uk",
    "submissionTerms": {
      "bidValidityPeriod": {
        "durationInDays": 90
      },
      "languages": [
        "en"
      ]
    },
    "techniques": {
      "frameworkAgreement": {
        "maximumParticipants": 1
      },
      "hasFrameworkAgreement": true
    },
    "tenderPeriod": {
      "endDate": "2026-02-09T12:00:00Z"
    },
    "title": "FTS050 Data Protection Services Framework",
    "value": {
      "amount": 287000,
      "currency": "GBP"
    }
  }
}