Outsourced Data Protection Officer (DPO) Services (LSHW.006.2025)

Life Sciences Hub Wales seeks to procure the services of a suitably qualified and capable outsourced Data Protection Officer (DPO) services to ensure continued compliant with current and future data protection legislation, and to ensure that all organisational data continues to be processed in accordance with conforming and best practice information governance principles.

The successful supplier, in providing dedicated DPO services to Life Sciences Hub Wales, will:

- Assist with monitoring internal compliance.

- Inform and advise on data protection obligations and emerging issues.

- Provide advice regarding Data Protection Impact Assessments (DPIAs) and act as a contact point for data subjects and the Information Commissioner’s Office (ICO) as required.

As well as providing the above, the successful supplier will assume all other responsibilities expected of a DPO.

The successful supplier, as dedicated DPO to Life Sciences Hub Wales, must be independent, an expert in data protection and adequately resourced to provide the required, necessary services.

The successful supplier must act as an extension to the wider Life Sciences Hub Wales team, providing advice and guidance from the perspective of Life Sciences Hub Wales. Advice and guidance (etc) is to be provided directly on behalf of Life Sciences Hub Wales, including the editing of documentation at request.

Life Sciences Hub Wales envisions the need for circa x18 days of DPO services per annum, principally to be retained as x1.5 days service provision per calendar month for use as needed, with unused days to be ‘banked’ for use later in the term as needed.