Subject Access Request Support Services

Description

Hampshire County Council (the Authority) invites applications from suitably experienced organisations who wish to tender for a position on the Dynamic Purchasing System (DPS) for the processing of Subject Access Requests (SAR) in the event of a backlog of requests. The requirement involves handling and processing data of Children's Services SARs disclosures under the laws of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act(2018).The service required from providers would be to redact Children's Services documents provided by Hampshire County Council (HCC) in line with exemptions specified in the UK GDPR. The DPS will be procured using the restricted procedure under 34(5) of the Public Contract Regulations 2015 (PCRs). Lot 1: The DPS will be established in accordance with Regulation34(5) of the PCRs with a DPS start date of March 2025. The Authority is establishing this mechanism as a way to deal with any backlog of SARs in a timely manner and within the designated timescales as prescribed by legislation.  The following aims and objectives have been established by the Authority for providers to deliver against: - Successful providers will provide Subject Access Request disclosures within statutory timeframes stipulated in the UK GDPR. These timeframes will be given to the provider by the Authority when the package of work is advertised. - Successful providers will ensure that responses provided to the Authority are accurate and that all information that is exempt from disclosure has been removed or marked for removal. - Successful providers will ensure that all information is secured to the appropriate security standards (as defined by the Authority) in transit and whilst being held in the provider's host system. No personal or special category data will leave the provider's system as part of this process unless it is agreed by the Authority.