Skip to content

General Data Protection Regulation (GDPR)

General Data Protection Regulation (GDPR)

The NPS will be issuing change control notices to existing contractors and embedding GDPR clauses into forthcoming tenders.

To prepare for GDPR coming into force on 25 May 2018, we have taken a risk-based prioritisation approach to implementation with our frameworks.

We are working to ensure that our frameworks (and templates for future call-offs) are amended by early May. We will provide updates for each framework on Sell2Wales (login required).

Customers of NPS frameworks must satisfy themselves that their individual call-offs are compliant with the new GDPR legislation following the advice of your data protection officer or equivalent.

The NPS can only amend its own frameworks, not customer contracts. If you have any queries about what the NPS is doing, please do not hesitate to contact us.

Further advice and guidance is available on GOV.UK.