Skip to content

GDPR update

GDPR update

The EU General Data Protection Regulations (GDPR) come into force on 25 May 2018.

The regulations introduce tougher fines for non-compliance and data breaches, and will give citizens more say over what organisations can do with their personal data.

In readiness for the GDPR, the National Procurement Service (NPS) has developed a high level plan and undertaken risk assessments on all frameworks currently in place.

NPS will be issuing change control notices to existing contractors and embedding GDPR clauses into forthcoming tenders.

Customers of NPS frameworks must satisfy themselves that their individual call-offs are compliant with the new GDPR legislation. The NPS can only amend its frameworks, not customer contracts. Where template call-off agreements are provided by the NPS for future requirements, these will be updated and added to Sell2Wales.

Further advice and guidance is available on GOV.UK.

A number of supplier training events are being hosted by Business Wales over the next few months. Find out more: Business Wales GDPR supplier events