External Data Protection Officer Services, Data Protection Advice and Document Management

Summary

The City of Logroño is seeking an external Data Protection Officer service for an initial two-year term, with two possible one-year extensions. The work covers advice on and monitoring of the city’s compliance with data-protection requirements, an initial compliance audit, handling consultations, and updating and maintaining data-protection records, including the processing activities register and impact assessments. It also includes staff training, drafting a general data-protection policy and protocols, and quarterly reporting. The bidder must provide a Data Protection Officer with the required legal education, certification and experience, demonstrate experience with similar services, maintain professional liability insurance of at least EUR 400,000, and provide at least 500 working hours per year for the combined services. Bids are assessed on price, employment of a person in a vulnerable situation, and methodology, work plan and team. Subcontracting is not permitted.