Data Protection Services

AI-generated analysis of the documents. Check the official notice and any amendments for current submission details.

1. At a glance

2. Scope of Work

The tender seeks a contractor to provide comprehensive Data Protection Services for the Irish Human Rights and Equality Commission. The contract is initially for 12 months, with the possibility of three 12-month extensions. The estimated expenditure is approximately €150,000, excluding VAT, over the term and any extensions.

• Data Protection Advice: Provide expert advice on data protection matters, ensuring compliance with applicable laws and regulations.
• Policy Development: Assist in the development and implementation of data protection policies and procedures.
• Training: Conduct training sessions for staff on data protection best practices and compliance requirements.
• Audit and Compliance: Perform regular audits to ensure compliance with data protection regulations and identify areas for improvement.
• Incident Management: Develop and implement incident management procedures to handle data breaches effectively.
• Documentation: Maintain comprehensive records of data processing activities and ensure documentation is up-to-date.
• Reporting: Prepare and submit regular reports on data protection activities and compliance status.
• Liaison: Act as the point of contact with the Data Protection Commission and other relevant authorities.
• Support: Provide ongoing support and guidance to the Commission's staff on data protection issues.

3. Background & buyer context

The Irish Human Rights and Equality Commission, established under the Irish Human Rights and Equality Commission Act 2014, is procuring these services to ensure robust data protection compliance. This procurement aligns with the Commission's strategic objective to uphold human rights and equality standards. The services are critical to maintaining the integrity and confidentiality of sensitive data handled by the Commission. There is no mention of an incumbent provider, indicating an open opportunity for new entrants.

4. Eligibility & selection criteria

• Turnover requirement: Minimum annual turnover of €500,000 for each of the last three financial years.
• Insurance:
• Employer’s Liability: €13 million per claim.
• Public Liability: €6.5 million per claim.
• Professional Indemnity: €1 million per claim.
• Certifications: Not specified for this tender.
• Past experience: Minimum of 2 comparable projects within the last 2 years.
• Personnel: Not specified for this tender.
• Geographic / facility constraints: Not specified for this tender.

5. Award criteria & scoring

The price/quality split is 60/40 (MEAT).

6. Submission requirements

• Method statement / response document: Use named template, no page limits specified.
• CVs: Required for key personnel, no page count specified.
• Pricing schedule: Must use the format in Appendix 2.
• Case studies: Two required, demonstrating relevant experience.
• Declarations: ESPD, Bona Fides, Tax clearance, Conflict of Interest.
• Mandatory site visit: Not specified.
• Submission portal: eTenders, with specific format rules.

7. Key dates & process

8. Contract terms that matter

The contract is for 12 months, with up to three 12-month extensions. Payment terms are not explicitly detailed, but prices are valid for 90 days post-tender deadline. Key SLAs/KPIs are not specified. Liquidated damages or penalty regimes are not mentioned. Termination clauses include a 14-day notice period. IP ownership and sub-contracting rules are not detailed. No parent-company guarantee or bond requirements are specified.

9. Risks, red flags & unusuals

The turnover requirement of €500,000 may limit smaller firms. The insurance requirements are substantial, potentially excluding smaller entities without existing coverage. The contract's estimated value of €150,000 suggests a significant portion of the turnover requirement, possibly favoring larger firms or incumbents. The lack of specified personnel requirements may lead to ambiguity in evaluating team capabilities.

10. SME fit assessment

This tender is suitable for firms with a strong background in data protection services, capable of meeting the €500,000 turnover requirement and holding substantial insurance coverage. SMEs may consider forming consortia or subcontracting to meet these criteria. Bid preparation is likely to require several days, given the need for detailed method statements and case studies. The absence of an incumbent or named past winners suggests an open field, though the financial thresholds may favor larger entities.

11. Where to dig deeper

• Source RFT filename: "RFT for Data Protection Services.pdf"
• eTenders CFT ID: Not specified
• Contact email or clarification portal: eTenders messaging facility
• Important attachments:
• Appendix 1: Requirements and Specifications
• Appendix 2: Pricing Schedule
• Appendix 3: Tenderer’s Statement