Tender: Data Protection Officer and GP Information Governance Management Services for NHS Northamptonshire (64 GP practices) and Leicester, Leicestershire & Rutland (126 GP practices) ICBs

About

NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland (LLR) integrated care boards are seeking an organisation to provide Data Protection Officer (DPO) management and GP information governance (IG) management services across the LLR cluster, covering 64 GP practices in Northamptonshire and 126 GP practices in LLR. Required services include acting as a DPO contact and providing remote specialist advice and guidance; support for the Data Security and Protection Toolkit (DSPT); advice and guidance on investigating, managing, reporting and reviewing incidents and managing incident reporting and remedies; production and maintenance of local IG policies and procedures; and providing a direct response to GP practices within 72 hours while ensuring compliance with UK GDPR. The contract is for one year commencing 1 July 2026 with an option to extend for up to six months, the maximum annual contract value is £132,000 including VAT and bids over this amount will not be accepted. This notice relates to a service/contract in scope of the Procurement Act 2023.