FOI 4373-Agreements around General Data Protection Regulation (GDPR)

Date: 18 December 2017 to 18 December 2020

I am interested to know what agreements the organisation has around General Data Protection Regulation (GDPR) compliance services, replaces the 1995 EU directive (Directive 95/46/EC) and was introduced in May 2016 with full enforcement due in May 2018.

If the organisation does have agreement in place, please can you provide me with the information below?

a)  Supplier- name of the supplier
b)  Contract Spend- The total annual spend of the agreement.
c)  Contract Duration- please provide me with the number of years and any potential extensions on the agreement.
d)  Contract Description- Brief description sentence of the service provided under the agreement.
e)  Start Date- When the agreement went like please provide me with the month and year.
f)   Expiry Date- When the agreement is likely to be expired. Month and year.
g)  Review Date- When is it likely the contract will be reviewed? Month and year.
h)  Contact details of the responsible for the contract(s) above. Name, Job Title, Contact Number and Email ID. 

If the organisation does not yet have the GDPR agreement in place please can you provide me with the following information: 

  1. When does the organisation plan to have this agreement in place?
  2. When do you plan to go out to market for GDPR
  3. Who within the organisation will be responsible for this agreement?
  4. Any other notes the organisation can provide in relation to the future procurement of compliance services. 
  • Request ID:
    FOI 4373
  • Category:
    Trust - Copies of reports, minutes, correspondence, certificates etc.
  • Response:

    I am interested to know what agreements the organisation has around General Data Protection Regulation (GDPR) compliance services, replaces the 1995 EU directive (Directive 95/46/EC) and was introduced in May 2016 with full enforcement due in May 2018.

    If the organisation does have agreement in place, please can you provide me with the information below?

    a)       Supplier- name of the supplier
    b)      Contract Spend- The total annual spend of the agreement.
    c)       Contract Duration- please provide me with the number of years and any potential extensions on the agreement.
    d)      Contract Description- Brief description sentence of the service provided under the agreement.
    e)      Start Date- When the agreement went like please provide me with the month and year.
    f)        Expiry Date- When the agreement is likely to be expired. Month and year.
    g)       Review Date- When is it likely the contract will be reviewed? Month and year.
    h)      Contact details of the responsible for the contract(s) above. Name, Job Title, Contact Number and Email ID. 

    If the organisation does not yet have the GDPR agreement in place please can you provide me with the following information: 
    1.  When does the organisation plan to have this agreement in place?
    2.  When do you plan to go out to market for GDPR
    3.  Who within the organisation will be responsible for this agreement?
    4.  Any other notes the organisation can provide in relation to the future procurement of compliance services. 

    Medway NHS Foundation Trust has not contracted with an external supplier nor intends to do so. The Trust is utilising in-house GDPR expertise to progress towards compliance with the incoming  DPA 2017.