General Data Protection Regulations - Consultancy

Descriptions

Tunbridge Wells Borough Council wishes to commission consultants to carry out work to create a Retention Schedule and Record of Processing, to ensure the authority is compliant with the new requirements under the General Data Protection Regulations (GDPR). Both documents will need to cover all services across the authority, and all aspects of information flows, data retention, asset ownership, security and safeguards, conditions for processing and eventual disposal or destruction in line with the Council's Records Management Policy. The Record of Processing will need to comply with the requirements of Article 30 of the GDPR. Whilst the consultants will be working to create these documents for Tunbridge Wells Borough Council, it is likely that they will have to liaise with relevant other authorities where the Council shares the provision of services, in particular the other Mid Kent Services authorities: Ashford Borough Council, Maidstone Borough Council and Swale Borough Council. It is expected that the quoted fees within the Tenderer's submission will be available to any of the named partner authorities above should they decide to commission work of this nature within 6 months of the tender submission deadline. This should be provided without obligation and with no associated fee for appointment.