Data Protection Officer (DPO) Services
The Nederlandse Organisatie voor Wetenschappelijk Onderzoek (NWO) wishes to engage an external party to perform the role of Data Protection Officer (DPO) for both NWO-D and NWO-I. The contractor is responsible for all tasks as described in Article 39 of the General Data Protection Regulation (GDPR), including advising on and monitoring compliance with the GDPR, training employees, maintaining contact with the Autoriteit Persoonsgegevens, and reporting to the management. Additionally, the DPO must prepare an annual plan and an annual report each year and consult with the relevant NWO departments. The procedure is public, ensuring transparency and competition. The assignment requires a high level of expertise in privacy legislation, experience with scientific research, and a proven track record in providing similar services.
Services · Open · European procedure
01What is being requested
The Nederlandse Organisatie voor Wetenschappelijk Onderzoek (NWO) wishes to engage an external party to perform the role of Data Protection Officer (DPO) for both NWO-D and NWO-I. The contractor is responsible for all tasks as described in Article 39 of the General Data Protection Regulation (GDPR), including advising on and monitoring compliance with the GDPR, training employees, maintaining contact with the Autoriteit Persoonsgegevens, and reporting to the management. Additionally, the DPO must prepare an annual plan and an annual report each year and consult with the relevant NWO departments. The procedure is public, ensuring transparency and competition. The assignment requires a high level of expertise in privacy legislation, experience with scientific research, and a proven track record in providing similar services.
NWO is looking for a party to whom it can outsource the DPO function for both NWO-D and NWO-I, whereby the tasks as described in Article 39 of the GDPR will be performed by the contractor. In addition to these tasks, the DPO function must deliver an annual DPO plan and an annual DPO report for both NWO-D and NWO-I.
02Exclusion grounds
- No specific exclusion grounds were extracted. In a European tender, the mandatory and discretionary grounds of art. 2.86/2.87 of the Dutch Procurement Act almost always apply — check the European Single Procurement Document (ESPD).
03Value in context
The contracting authority did not publish an estimated value — common for a large share of contracts. The EU threshold for diensten is € 221.000, for reference.
04Likely competitors
05Legal themes that may be relevant here
06Frequently asked questions
What does the assignment for the Data Protection Officer entail?
What annual reporting obligations are part of this assignment?
What is the expected workload and duration of the assignment?
Automatically compiled from the official tender data and documents.
07Estimated value versus the market
€ 200K
€ 640K
€ 3,0 mln
Gegunde waarden in CPV 79 · diensten n=4949