← Back to opportunities

NHS GDPR Compliance Tool

The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

Buyer Contact Info

Buyer Name: The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

Buyer Address: 1 South Gyle Crescent, Edinburgh, UKM, EH12 9EB

Contact Name: Ross Glen

Contact Email: ross.glen3@nhs.scot

Status
complete
Procedure
open
Value
512000.0 GBP
Published
11 Aug 2025, 00:00
Deadline
n/a
Contract Start
n/a
Contract End
n/a
Category
services
CPV
72000000
Region
n/a
Awarded To
AWTG LTD
Official Source
Open Public Contracts Scotland

Description

Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

Linked Documents

Some PCS documents require login and recording interest on the source portal before download links are available.

No linked documents found for this notice.

Opportunity Context

More Information Links

External Link: https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG536763

Link Title: NHS GDPR Compliance Tool

Link Description: Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

Lots

Lot Description: Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

Lot 1 Status: complete

Lot 1 Has Options: No

Lot 1 Award Criterion (quality): Functional Requirements

Documents

Document Title: NHS GDPR Compliance Tool

Document Description: Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

Raw Notice JSON

Expand raw payload
{
  "awards": [
    {
      "id": "NP610424",
      "relatedLots": [
        "1"
      ],
      "suppliers": [
        {
          "id": "org-243",
          "name": "AWTG LTD"
        }
      ]
    }
  ],
  "bids": {
    "statistics": [
      {
        "id": "586",
        "measure": "bids",
        "relatedLot": "1",
        "value": 4.0
      },
      {
        "id": "587",
        "measure": "smeBids",
        "relatedLot": "1",
        "value": 3.0
      },
      {
        "id": "588",
        "measure": "foreignBidsFromEU",
        "relatedLot": "1",
        "value": 0.0
      },
      {
        "id": "589",
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "1",
        "value": 4.0
      },
      {
        "id": "590",
        "measure": "electronicBids",
        "relatedLot": "1",
        "value": 4.0
      }
    ]
  },
  "buyer": {
    "id": "org-3",
    "name": "The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)"
  },
  "contracts": [
    {
      "awardID": "NP610424",
      "dateSigned": "2025-07-22T00:00:00Z",
      "id": "NP610424",
      "status": "active",
      "value": {
        "amount": 512000.0,
        "currency": "GBP"
      }
    }
  ],
  "date": "2025-08-11T00:00:00Z",
  "description": "Estimated Value:\r\n The estimated value provided in sections II.1.7 and V.2.4 includes the initial 36 month contract period and the two optional extension periods of 12 months each.\r\n (SC Ref:807004)",
  "id": "rls-70-AUG536763",
  "initiationType": "tender",
  "language": "EN",
  "links": [
    {
      "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000784857",
      "rel": "canonical"
    }
  ],
  "ocid": "ocds-r6ebe6-0000784857",
  "parties": [
    {
      "address": {
        "locality": "Edinburgh",
        "postalCode": "EH12 9EB",
        "region": "UKM",
        "streetAddress": "1 South Gyle Crescent"
      },
      "contactPoint": {
        "email": "ross.glen3@nhs.scot",
        "name": "Ross Glen",
        "url": "http://"
      },
      "details": {
        "classifications": [
          {
            "id": "Body governed by public law",
            "scheme": "TED_CA_TYPE"
          },
          {
            "description": "Health",
            "id": "07",
            "scheme": "COFOG"
          }
        ],
        "url": "http://www.nss.nhs.scot/browse/procurement-and-logistics"
      },
      "id": "org-3",
      "identifier": {
        "legalName": "The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)"
      },
      "name": "The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)",
      "roles": [
        "buyer",
        "centralPurchasingBody"
      ]
    },
    {
      "address": {
        "locality": "London",
        "postalCode": "W37SR",
        "region": "UKI",
        "streetAddress": "8 Canham Mews, Canham Road"
      },
      "contactPoint": {
        "telephone": "+44 02035155151"
      },
      "details": {
        "scale": "sme",
        "url": "http://"
      },
      "id": "org-243",
      "identifier": {
        "legalName": "AWTG LTD"
      },
      "name": "AWTG LTD",
      "roles": [
        "supplier"
      ]
    },
    {
      "address": {
        "locality": "Edinburgh",
        "postalCode": "EH1 1LB",
        "streetAddress": "27 Chambers Street"
      },
      "contactPoint": {
        "telephone": "+44 1312252525",
        "url": "https://scotcourts.gov.uk/the-courts/sheriff-court/about-sheriff-courts"
      },
      "id": "org-11",
      "identifier": {
        "legalName": "Sheriff Court House"
      },
      "name": "Sheriff Court House",
      "roles": [
        "reviewBody"
      ]
    }
  ],
  "relatedProcesses": [
    {
      "id": "1",
      "identifier": "2024/S 000-040058",
      "relationship": [
        "planning"
      ],
      "scheme": "EU-OJ"
    }
  ],
  "tag": [
    "award",
    "contract"
  ],
  "tender": {
    "classification": {
      "id": "72000000",
      "scheme": "CPV"
    },
    "coveredBy": [
      "GPA"
    ],
    "description": "Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.",
    "documents": [
      {
        "description": "Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.",
        "documentType": "awardNotice",
        "format": "text/html",
        "id": "AUG536763",
        "title": "NHS GDPR Compliance Tool",
        "url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG536763"
      }
    ],
    "id": "ocds-r6ebe6-0000784857",
    "items": [
      {
        "deliveryAddresses": [
          {
            "region": "UKM"
          }
        ],
        "deliveryLocation": {
          "description": "Scotland"
        },
        "id": "1",
        "relatedLot": "1"
      }
    ],
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "lots": [
      {
        "awardCriteria": {
          "criteria": [
            {
              "description": "40",
              "name": "Functional Requirements",
              "type": "quality"
            },
            {
              "description": "30",
              "type": "price"
            }
          ]
        },
        "description": "Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.",
        "hasOptions": false,
        "id": "1",
        "status": "complete"
      }
    ],
    "mainProcurementCategory": "services",
    "procurementMethod": "open",
    "procurementMethodDetails": "Open procedure",
    "reviewDetails": "Economic operators should approach the contracting authority in the first instance. However, the only formal remedy is to apply to the courts:\r\n An economic operator that suffers, or is at risk of suffering, loss or damage attributable to a breach of duty under the Public Contracts (Scotland) Regulations 2015 or the Procurement Reform (Scotland) Act 2014, may bring proceedings in the Sheriff Court or the Court of Session.",
    "status": "complete",
    "title": "NHS GDPR Compliance Tool"
  }
}