SME Data Essentials LMS

Description

Pre-market engagement We invited all suppliers on DOS6 and RM6219 to review our provisional requirements and indicate their capability and interest to provide the requirements. We received strong interest via DOS6 and decided to run the procurement via this route. Work done so far We have already completed a Discovery and Alpha (pilot) phase. Discovery was used to research and understand user needs, and explore the technologies that might be suitable for delivering the solution. This was followed by a pilot where we built a prototype and gathered feedback from users. The evaluation report from the pilot / Alpha phase is available here: https://ico.org.uk/media2/migrated/4024375/sme-data-essentials-final-evaluation-report.pdf Which phase the project is in Beta Existing team The ICO has a team set up that includes the following job titles and roles: Project manager to ensure the project happens and is properly managed; Website product owner to ensure the solution meets user needs and meets ICO standards; User centred design manager to set the standards of usability and accessibility; Business representatives: This team will provide the raw content via scripts in word or excel documents to be transformed into engaging, easy to use and understand, interactive learning materials. We need a supplier to supply and build the solution, including the population of content to take us through the public Beta stage, and provide training to ICO staff to support, maintain, manage and continuously improve the service ready for the Live phase. By go-live, in addition to being able to administer the system themselves, they must also be able to confidently create, upload and amend learning content independently. Address where the work will be done N/A Working arrangements Remote delivery. Key supplier staff should be contactable during standard UK working week. Expenses not applicable. Provide more information about your security requirements: Baseline Personnel Security Standard (BPSS) Latest start date 2025-09-11 Enter the expected contract length: 2 years Extension period: 1 year Write the term or acronym: ICO Write the term or acronym: LMS Write the term or acronym: SLA Write the term or acronym: SME Write the term or acronym: WCAG Write the term or acronym: DP Are you prepared to show your budget details?: No Confirm if you require a contracted out service or supply of resource Contracted out service: the off-payroll rules do not apply Summary of work The objective is to implement an e-learning solution which provides Small and Medium Sized Enterprises (SMEs) with a learning and self-assessment tool and enables them to demonstrate their commitment to data protection. It is anticipated that this requirement can be met with an off-the-shelf solution, with configuration and perhaps some customisation. Where the supplied staff will work No specific location (for example they can work remotely) Why the work is being done All businesses have a legal obligation to comply with data protection laws. We know that unlike their larger counterparts, Small and Medium Sized Enterprises (SMEs) do not typically have in-house expertise to help them maximise their use of personal data in a responsible way. The ICO is committed to supporting UK SMEs and making data protection as easy as possible. We have already produced and published a host of online resources aimed specifically at SMEs; but we need a stronger offering. The Information Commissioner has made a public commitment to Government to launch the SME Data Essentials scheme during 2025/26. This commitment can be viewed here: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2025/01/ico-response-to-government-on-economic-growth/ The Data Essentials scheme will help SMEs to: understand, meet, and keep up to date with the rules; self-assess their compliance with DP law;   publicly demonstrate a commitment to protecting personal information;    provide reassurance that minimum requirements are in place;  support them to build beyond the basic requirements and; bring down the cost of compliance. The business problem you need to solve We require a solution to deliver data protection training and compliance self-assessment to SMEs, that allows business to easily keep up to date with the rules, self-assess their compliance, publicly demonstrate a commitment to protecting personal information and their completion of the training, that is engaging and accessible, and reduces the cost of compliance for those businesses. We require support to deploy, host, and maintain the solution. We require support to produce engaging learning materials from the raw content already produced internally. We require knowledge transfer to enable our staff to administer the system and become self-sufficient in future creation/amendment of learning materials. We consider the key challenges to be: Provision of a solution that is aimed at users that are EXTERNAL to the ICO, ie customers, not staff. The ability for customers to complete training as an individual, then complete a self assessment and gain a certificate for their business. Achieving compliance with WCAG 2.2 to AA level, so that the service is accessible to all who might use it, and so that the ICO complies with its obligations to accessibility. Making the training materials simple and engaging, so that customers want to complete the training to the end and refresh it each year, so that they understand it, and so that they put their learning in to practice, improving their data protection practices and achieving our goal of reducing the cost of compliance. Making the logged-in account area re-usable, so that customers logging in for SME Data Essentials will be able to use the same login to access services that we plan to add in the future. First user type: As a small to medium-sized business First user type: As a small to medium-sized business First user type: As a small to medium-sized business First user type: As a small to medium-sized business First user type: As an ICO administrator