Data Protection Officer (DPO) Management and GP Information Governance (IG) Management Services to GP Practices in NHS Northamptonshire and NHS Leicestershire (LLR) Integrated Care Boards

NHS Northamptonshire Integrated Care BoardcontractFind a TenderRef ocds-h6vhtk-0691c5Procurement Act 2023SME suitableVCSE suitableplanning
View buyer

Estimated value

£106k

services

Awarded value

Suppliers

0

Lots

1

0 awarded

Published

05 May 2026

This is a preliminary market engagement notice

Map the supplier landscape and document your shortlist before opening the tender. The market simulation produces a defensible audit record you can attach to your procurement file.

Run market simulation

Description

NHS Northamptonshire and NHS Leicestershire (LLR) ICBs are looking for an organisation to provide Data Protection Officer (DPO) Management and GP Information Governance (IG) Management Services across the LNR cluster. There are currently 64 GP practices in Northamptonshire ICB and 126 GP practices in LLR ICB. Scope of Work and Requirements: - Data Protection Officer - Provide a named individual to act as DPO and will provide remote specialist advice and guidance. - Advice and Support for the Data Security and Protection Toolkit (DSPT) - Advice and guidance to practices on how to investigate, manage, report, and review incidents. - Advice and support to providers to manage the reporting of the incident and advice on remedies. - Support for the production and maintenance of local IG policies and procedures. - Provide direct response to the GP Practice within 72 hours via email or telephone. - Provide independent and highly developed specialist knowledge and advice across the GP practices to ensure they remain compliant with changing legal requirements, including the General Data Protection Regulation (GDPR)

Scope

Reference
ocds-h6vhtk-0691c5
Total value
£105,600 excluding VAT
£132,000 including VAT
Below the relevant threshold
Commercial tool
Standalone contract
Contract dates
30 Jun 2026 to 30 Jun 2027
Possible extension to 31 Dec 2027

The contract period is for 12 months with the option to extend for a further 6 months

Main category
services
CPV classifications
79000000
Contract locations
East Midlands, United Kingdom
Particular suitability
Small and medium-sized enterprises (SME)Voluntary, community and social enterprises (VCSE)