Contract

NHS GDPR Compliance Tool

  • The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

F03: Contract award notice

Notice identifier: 2025/S 000-047760

Procurement identifier (OCID): ocds-h6vhtk-046f75 (view related notices)

Published 11 August 2025, 4:33pm



Section one: Contracting authority

one.1) Name and addresses

The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

1 South Gyle Crescent

Edinburgh

EH12 9EB

Email

michael.walker3@nhs.scot

Telephone

+44 1312756000

Country

United Kingdom

NUTS code

UKM - Scotland

Internet address(es)

Main address

http://www.nss.nhs.scot/browse/procurement-and-logistics

Buyer's address

https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA11883

one.2) Information about joint procurement

The contract is awarded by a central purchasing body

one.4) Type of the contracting authority

Body governed by public law

one.5) Main activity

Health


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

NHS GDPR Compliance Tool

two.1.2) Main CPV code

  • 72000000 - IT services: consulting, software development, Internet and support

two.1.3) Type of contract

Services

two.1.4) Short description

Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

two.1.6) Information about lots

This contract is divided into lots: No

two.1.7) Total value of the procurement (excluding VAT)

Value excluding VAT: £512,000

two.2) Description

two.2.3) Place of performance

NUTS codes
  • UKM - Scotland
Main site or place of performance

Scotland

two.2.4) Description of the procurement

Procurement of a GDPR Compliance Tool to support NHS Scotland Information Governance with the delivery of their core compliance activities which include completion and review of Data Protection Impact Assessments, maintenance of Information Asset Registers and Records of Processing.

two.2.5) Award criteria

Quality criterion - Name: Functional Requirements / Weighting: 40

Quality criterion - Name: Non-Functional Requirements / Weighting: 30

Price - Weighting: 30

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No


Section four. Procedure

four.1) Description

four.1.1) Type of procedure

Open procedure

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: Yes

four.2) Administrative information

four.2.1) Previous publication concerning this procedure

Notice number: 2024/S 000-040058


Section five. Award of contract

Contract No

NP610424

A contract/lot is awarded: Yes

five.2) Award of contract

five.2.1) Date of conclusion of the contract

22 July 2025

five.2.2) Information about tenders

Number of tenders received: 4

Number of tenders received from SMEs: 3

Number of tenders received from tenderers from other EU Member States: 0

Number of tenders received from tenderers from non-EU Member States: 4

Number of tenders received by electronic means: 4

The contract has been awarded to a group of economic operators: No

five.2.3) Name and address of the contractor

AWTG LTD

8 Canham Mews, Canham Road

London

W37SR

Telephone

+44 02035155151

Country

United Kingdom

NUTS code
  • UKI - London
The contractor is an SME

Yes

five.2.4) Information on value of contract/lot (excluding VAT)

Total value of the contract/lot: £512,000


Section six. Complementary information

six.3) Additional information

Estimated Value:

The estimated value provided in sections II.1.7 and V.2.4 includes the initial 36 month contract period and the two optional extension periods of 12 months each.

(SC Ref:807004)

six.4) Procedures for review

six.4.1) Review body

Sheriff Court House

27 Chambers Street

Edinburgh

EH1 1LB

Country

United Kingdom

six.4.3) Review procedure

Precise information on deadline(s) for review procedures

Economic operators should approach the contracting authority in the first instance. However, the only formal remedy is to apply to the courts:

An economic operator that suffers, or is at risk of suffering, loss or damage attributable to a breach of duty under the Public Contracts (Scotland) Regulations 2015 or the Procurement Reform (Scotland) Act 2014, may bring proceedings in the Sheriff Court or the Court of Session.