ProcuraAxisBeta
Sign inCreate Free Account
Home / Opportunities / Opportunity
PROCUREMENT OPPORTUNITY

NHS GDPR Compliance Tool

The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS) · compiled

Tender information last checkedLast checked 29 Sept 2026, 19:22.

Opportunity overview

Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

Awarded to

Amounts belong to published awards or contracts. Where several suppliers share one value, it is labelled as shared and is not a supplier-specific allocation.

AWTG LTD

Match pending…
Contract value
£512k
Awarded
Not supplied
Contract signed
21 Jul 2025
Award ID
047760-2025-NP610424-1
Status
active
Location
London, UKI, W37SR, United Kingdom

Classification

  • CPV72000000 — IT services: consulting, software development, Internet and support

Lots

  • Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.£900k

Published notice details

Additional information from the published procurement release. Fields appear only when supplied by the source; check the original notice and tender documents before acting.

Scope, procedure and submissions

Id
ocds-h6vhtk-046f75
Status
complete
Has Recurrence
No
Review Details
Economic operators should approach the contracting authority in the first instance. However, the only formal remedy is to apply to the courts: An economic operator that suffers, or is at risk of suffering, loss or damage attributable to a breach of duty under the Public Contracts (Scotland) Regulations 2015 or the Procurement Reform (Scotland) Act 2014, may bring proceedings in the Sheriff Court or the Court of Session.
Procurement Method
open
Main Procurement Category
services
Procurement Method Details
Open procedure

Covered By

GPA

Bid Opening

Date
27 Jan 2025, 12:00

Legal basis

Id
32014L0024
Scheme
CELEX

Expected award period

Starts
27 Jan 2025, 12:00

Tender Period

Ends
27 Jan 2025, 12:00

Communication

Future Notice Date
1 Oct 2024, 00:00

Contract terms

Has Electronic Payment
Yes
Has Electronic Ordering
Yes
Electronic Invoicing Policy
allowed

Classification

Id
72000000
Scheme
CPV
Description
IT services: consulting, software development, Internet and support

Submission terms

Languages

en

Submission Method

electronicSubmission

Selection criteria

Criteria

Criterion 1
Type
economic
Description
SPD Q.4B.1.1: Bidders are required to provide statement of accounts or extracts relating to their business for the previous 3 years. Where any are risks identified by NSS as part of the due diligence carried out on the above information NSS may require Bidders to provide additional information to demonstrate financial standing. Additional information can include but not be limited to: - parent company accounts (if applicable) - deeds of guarantee - bankers statements and references - accountants’ references - management accounts - financial projections, including cash flow forecasts - details and evidence of previous contracts, including contract values - capital availability. Bidders who cannot provide suitable evidence of a secure financial standing may be excluded from the procurement. Q.4B.5.1 and Q.4B.5.2: It is a requirement of this contract that bidders hold, or can commit to obtain prior to the commence of any subsequently awarded contract, the types and levels of insurance indicated below: Employers liability insurance: 5 000 000 GBP; Public liability insurance: 1 000 000 GBP; Professional indemnity insurance: 1 000 000 GBP

Applies To

supplier
Criterion 2
Type
technical
Description
4C.1.2 Please provide details of three relevant examples of services carried out during the last three years. 4.C.2 Bidders are required to confirm compliance with standards, such as ISO or equivalent, set by technical bodies, especially those responsible for quality control. Please provide examples such as the following: - Cyber Essentials - ISO 9001 - Quality Management Systems - ISO 27001 - Information Security Management - ISO 27017 - Code of practice for information security controls - ISO 27018 - Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors - UK Government 14 Cloud Security Principles Please state the relevance of any such educational and professional qualifications. 4C.6: Bidders will be required to confirm that they and/or the service provider have relevant educational and professional qualifications such as the following: ISO27001 or equivalent ITIL qualifications [Helpdesk, etc] or equivalent other professional qualifications relevant to the Services outlined in the Contract Notice. And: 4C.6.1: Bidders will be required to confirm that they and/or the service provider's managerial staff have relevant educational and professional qualifications such as the following: ISO27001 or equivalent ITIL qualifications [Helpdesk, etc] or equivalent other professional qualifications relevant to the Services outlined in the Contract Notice. 4C.10: Bidders will be required to confirm whether they intend to subcontract and, if so, for what proportion of the contract

Applies To

supplier

Lots and requirements

Entry 1
Id
1
Status
cancelled
Has Options
No
Has Renewal
Yes
Description
Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

Value

Amount
900,000
Currency
GBP

Renewal

Description
The Agreement includes two optional extension periods of 12 months each.

Award criteria

Criteria

Criterion 1
Name
Functional Requirements
Type
quality
Description
40
Criterion 2
Name
Non-Functional Requirements
Type
quality
Description
30
Criterion 3
Type
price
Description
30

Contract period

Duration In Days
1,080

Submission terms

Variant Policy
notAllowed

Items and delivery

Item 1
Id
1
Related Lot
1

Delivery Location

Description
Scotland

Delivery locations

Entry 1
Region
UKM
Entry 2
Region
UKM
Entry 3
Region
UKM

Buyer, suppliers and contacts

Organisation 1
Id
GB-FTS-115937
Name
The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

Roles

buyer
centralPurchasingBody

Address

Region
UKM
Locality
Edinburgh
Postal Code
EH12 9EB
Country Name
United Kingdom
Street Address
1 South Gyle Crescent

Details

Classifications

Entry 1
Id
BODY_PUBLIC
Scheme
TED_CA_TYPE
Description
Body governed by public law
Entry 2
Id
07
Scheme
COFOG
Description
Health

Identifier

Legal Name
The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

Contact

Telephone
+44 1312756000
Organisation 2
Id
GB-FTS-20205
Name
Sheriff Court House

Roles

reviewBody

Address

Locality
Edinburgh
Postal Code
EH1 1LB
Country Name
United Kingdom

Identifier

Legal Name
Sheriff Court House
Organisation 3
Id
GB-FTS-157636
Name
AWTG LTD

Roles

supplier

Address

Region
UKI
Locality
London
Postal Code
W37SR
Country Name
United Kingdom
Street Address
8 Canham Mews, Canham Road

Details

Scale
sme

Identifier

Legal Name
AWTG LTD

Contact

Telephone
+44 02035155151
Organisation 4
Id
GB-FTS-324
Name
Sheriff Court House

Roles

reviewBody

Address

Locality
Edinburgh
Postal Code
EH1 1LB
Country Name
United Kingdom
Street Address
27 Chambers Street

Identifier

Legal Name
Sheriff Court House

Award information

Award 1
Id
047760-2025-NP610424-1
Status
active

Suppliers

Supplier 1
Id
GB-FTS-157636
Name
AWTG LTD

Related lots

1

Contracts and changes

Entry 1
Id
047760-2025-NP610424-1
Status
active
Award ID
047760-2025-NP610424-1
Date Signed
22 Jul 2025, 00:00

Value

Amount
512,000
Currency
GBP

Recorded locations

  • Buyer location · Edinburgh · UKM · EH12 9EB · United Kingdom
  • Delivery location · UKM

Notice and amendment history

1 published notice version reviewed by ProcuraAxis.

1 VERSION
  1. ocds-h6vhtk-046f75-2025-08-11T16:33:44+01:00compiled ·