St Christopher’s MAT - Provision of ICT Managed Services

Please confirm that you have in place, or that you will have in place by the award of the contract, the human and technical resources to perform the contract to ensure compliance with the UK General Data Protection Regulation and to ensure the protection of the rights of data subjects. Please provide details of the technical facilities and measures (including systems and processes) you have in place, or will have in place by contract award, to ensure compliance with UK data protection law and to ensure the protection of the rights of data subjects. Your response should include, but should not be limited to facilities and measures: ● to ensure ongoing confidentiality, integrity, availability and resilience of processing systems and services ● to comply with the rights of data subjects in respect of receiving privacy information, and access, rectification, deletion and portability of personal data ● to ensure that any consent based processing meets standards of active, informed consent, and that such consents are recorded and auditable ● to ensure legal safeguards are in place to legitimise transfers of personal data outside the UK (if such transfers will take place) ● to maintain records of personal data processing activities ● to regularly test, assess and evaluate the effectiveness of the above measures

Provide 3 relevant previous contract examples To constitute a pass, the contract examples provided shall be relevant to the requirement, with a sufficient level of detail that provides confidence in the Tenderer’s established past experience in similar and relevant projects/contracts. The contracts must be within the education sector and similar complexity and working on more than one site within the contract.