Ends Jan 2027
UKRI OneTrust
UK Shared Business Services (UK SBS) · South West · 3-year contract
Held by CDW
GDPR compliance software tenders and contracts
UK public sector, covering 600+ buyer sites
67 GDPR compliance software tenders and contracts, 17 this year.
Updated 4 November 2026 · compiled by BidSkim Limited · How we count
- Awarded a month£84k
- Contracts a month1
- Won by SMEs56%
- Renewing in 6 months3
- Live now2See them →
GDPR compliance software contracts
Tap a region to see its contracts. Pick as many as you like.
23 contracts across the UK, of any size
Live now
2 GDPR compliance software opportunities are open now
- Pre-market2 Nov 2026Data Privacy, Information Governance and Risk Management PlatformScience Museum Group · LondonEst.£160k
- Pre-market11 Aug 2026RFI - Privacy and AI Governance PlatformBBC (British Broadcasting Corporation)
- Awarded27 Oct 2026Data Discovery and ComplianceBritish Transport Police · LondonWon by Castlepoint Systems£574k
- Awarded23 Sep 2026App Consent Management PlatformMet Office · South WestWon by Barrier Networks£67k
- Awarded12 Jun 2026OneTrust RenewalLondon Borough of Redbridge · LondonWon by Oyster IMS£41k
- Awarded8 Apr 2026Asset Register SolutionLondon Borough of Hammersmith and Fulham · LondonWon by Oyster IMS£120k
- Awarded31 Mar 2026Provision of Electronic Information Asset Management SolutionCounty Durham and Darlington NHS Foundation Trust · North EastWon by Core Stream Ltd£60k
- Awarded24 Mar 2026CoreStream GDPR Information Asset ManagerNHS Staffordshire and Stoke-on-Trent Integrated Care Board · West MidlandsWon by Core Stream Ltd£82k
- Awarded27 Feb 2026GDPR Compliance TechnologyHM Revenue & CustomsWon by CDW£201k
- Awarded23 Feb 2026RBGKEW1507 - Replacement Cookie Consent Banner software for RBG Kew websitesRoyal Botanic Gardens, Kew · LondonWon by Usercentrics Inc£30k
- Awarded30 Nov 2025GDPR Preference System (Cassie)The Open University · South EastWon by Syrenis Limited£482k
- Awarded27 Nov 2025Cookie Consent & Preference ManagementBritish Council · LondonWon by Onetrust Technology Limited£149k
- Awarded4 Nov 2025One Trust SystemAnchor Hanover Group · Yorkshire and the HumberWon by Onetrust Technology Limited£45k
- Awarded27 Aug 2025DPIA Processing ToolMetropolitan Police Service · LondonWon by Coalescent Limited£27k
- Awarded22 Jul 2025NHS GDPR Compliance ToolPublic Services Delivery Scotland · ScotlandWon by AWTG Ltd£512k
- Awarded22 Jul 2025NHS GDPR Compliance ToolPublic Services Delivery Scotland · ScotlandWon by AWTG Ltd£512k
- Awarded31 May 2025CST182 - Supply of a GDPR Solution for SchoolsDerbyshire County Council · East MidlandsWon by ParentPay£500k
- Awarded22 May 2025PS/25/36 - Provision of OneTrust SolutionDriver and Vehicle Licensing Agency · WalesWon by Barrier Networks£75k
- Awarded1 May 2025Data Mapping and Data AssessmentsPublic Services Delivery Scotland · ScotlandWon by Specialist Computer Centres (SCC)£50k
- Awarded1 May 2025Data Mapping and Data AssessmentsPublic Services Delivery Scotland · ScotlandWon by Specialist Computer Centres (SCC)£50k
- Awarded13 Mar 2025OneTrust Privacy SoftwareDepartment for Business and Trade · LondonWon by Oyster IMS£184k
- Awarded12 Mar 2025Data Protection Impact Assessment ToolUniversity of Edinburgh · ScotlandWon by Razorthorn Security£70k
Oyster IMS won the most GDPR compliance software contracts
Castlepoint Systems won the most by value. Each dot is one contract, coloured by who bought it.
Central governmentNHS and healthCouncilsEducationHousingOther buyers
| Rank | Contractor | Contracts won, by buyer | Contracts | Value won | Buyers | Share |
|---|---|---|---|---|---|---|
| 1 | Oyster IMS London · SME · See every contract | 4 | £363k | 4 | ||
| 2 | Core Stream Ltd North East · SME · See every contract | 3 | £282k | 3 | ||
| 3joint | AWTG Ltd Scotland · SME · See every contract | 2 | £512k | 1 | ||
| 3joint | CDW | 2 | £226k | 2 | ||
| 3joint | Onetrust Technology Limited Yorkshire and the Humber · SME · See every contract | 2 | £194k | 2 | ||
| 3joint | Barrier Networks South West · SME · See every contract | 2 | £142k | 2 | ||
| 3joint | Specialist Computer Centres (SCC) Scotland · See every contract | 2 | £50k | 1 | ||
| 8joint | Castlepoint Systems London · SME · See every contract | 1 | £574k | 1 | ||
| 8joint | ParentPay East Midlands · See every contract | 1 | £500k | 1 | ||
| 8joint | Syrenis Limited South East · SME · See every contract | 1 | £482k | 1 |
3 more GDPR compliance software contractors ranked. See the full ranking →
Win GDPR compliance software contracts? Share your ranking.
Who buys
Central government bodies award 35% of GDPR compliance software contracts
Contracts with a published value in the last 2 years, from the type of buyer to the size of the contract.
1 buyer bought GDPR compliance software more than once in the last 2 years
Each dot is a buyer, by how many GDPR compliance software contracts it awarded in the last 2 years.
See who they are and when they usually buy →
Few and big, or many and small
Each dot is a buyer: how many GDPR compliance software contracts it awarded against what they were worth. The busiest and biggest are named.
Central governmentNHS and healthCouncilsEducationHousingOther buyers
Top buyers by contracts awarded
| Rank | Buyer | Contracts | Value |
|---|---|---|---|
| 1 | Public Services Delivery Scotland | 4 | £1.1m |
| 2 | British Transport Police | 1 | £574k |
| 3 | Derbyshire County Council | 1 | £500k |
| 4 | The Open University | 1 | £482k |
| 5 | HM Revenue & Customs | 1 | £201k |
| 6 | Department for Business and Trade | 1 | £184k |
| 7 | British Council | 1 | £149k |
| 8 | Homes England | 1 | £140k |
| 9 | London Borough of Hammersmith and Fulham | 1 | £120k |
| 10 | NHS Staffordshire and Stoke-on-Trent Integrated Care Board | 1 | £82k |
52 GDPR compliance software contracts awarded since 2021
- 72021
- 42022
- 52023
- 152024
- 132025
- 82026 so far
Prices
Half of GDPR compliance software contracts are worth less than £75k
Central governmentNHS and healthCouncilsEducationHousingOther buyers
The 10 biggest GDPR compliance software contracts
- British Transport PoliceCastlepoint Systems · 27 Oct 2026
- Public Services Delivery ScotlandAWTG Ltd · 22 Jul 2025
- Public Services Delivery ScotlandAWTG Ltd · 22 Jul 2025
- Derbyshire County CouncilParentPay · 31 May 2025
- The Open UniversitySyrenis Limited · 30 Nov 2025
- HM Revenue & CustomsCDW · 27 Feb 2026
- Department for Business and TradeOyster IMS · 13 Mar 2025
- British CouncilOnetrust Technology Limited · 27 Nov 2025
- Housing bodyUK-wide or not stated · September 2025
- London Borough of Hammersmith and FulhamOyster IMS · 8 Apr 2026
Renewing contracts
8 GDPR compliance software contracts come up for renewal in the next 12 months
3 in the next 6 months. The 3 ending soonest are shown in full.
Ends Mar 2027
GDPR Compliance Technology
HM Revenue & Customs · 1-year contract
Held by CDW
Ends Mar 2027
OneTrust Privacy Software
Department for Business and Trade · London · 2-year contract
Held by Oyster IMS
GDPR compliance software contract for a central government bodyWalesUnder £100kEnds May 2027
GDPR compliance software contract for a councilLondonUnder £100kEnds Jun 2027
GDPR compliance software contract for a central government bodyUK-wide or not stated£100k to £1mEnds Jul 2027
GDPR compliance software contract for a central government bodySouth WestUnder £100kEnds Sep 2027
GDPR compliance software contract for a housing associationUK-wide or not stated£100k to £1mEnds Oct 2027
Where and when
London awards the most GDPR compliance software contracts
Contracts by region and by month awarded. Click a region to filter the page.
FewerMore contracts
The regions as a table
| Region | Open now | Contracts | Value | Typical contract | Won the most | Bought the most | Renewing in 12 months |
|---|---|---|---|---|---|---|---|
| London | 1 | 7 | £1.1m | £120k | Oyster IMS (3) | – | 2 |
| Scotland | 0 | 5 | £1.2m | £70k | AWTG Ltd and Specialist Computer Centres (SCC) (2 each) | Public Services Delivery Scotland (4) | 0 |
| North East | 0 | 1 | £60k | – | – | – | 0 |
| Yorkshire and the Humber | 0 | 1 | £45k | – | – | – | 0 |
| East Midlands | 0 | 1 | £500k | – | – | – | 0 |
| West Midlands | 0 | 1 | £82k | – | – | – | 0 |
| South East | 0 | 1 | £482k | – | – | – | 0 |
| South West | 0 | 1 | £67k | – | – | – | 2 |
| Wales | 0 | 1 | £75k | – | – | – | 1 |
| North West | 0 | 0 | Not published | – | – | – | 0 |
| East of England | 0 | 0 | Not published | – | – | – | 0 |
| Northern Ireland | 0 | 0 | Not published | – | – | – | 0 |
Often bought with GDPR compliance software
Related services
Key findings
- £84k a month
of GDPR compliance software contracts awarded.
Typical contract £101k x 0.8 contracts a month, last 12 months. - 3
GDPR compliance software contracts come up for renewal in the next 6 months.
Recurring contracts with a named supplier and a published end date before 4 May 2027. - 56%
of GDPR compliance software contracts are won by SMEs.
As recorded by the buyer, on 18 award notices.
How many GDPR compliance software tenders and contracts are there?
| Last 12 months | Since November 2021 | |
|---|---|---|
| Notices published | 17 | 67 |
| Contracts awarded | 11 | 45 |
9 GDPR compliance software contracts and frameworks end in the next 12 months, 9 of them recurring services. In the last two years, 20 buyers awarded GDPR compliance software contracts to 13 suppliers.
Source: Find a Tender, Contracts Finder, Public Contracts Scotland, Sell2Wales and eTendersNI, to 4 November 2026. By Seamus White. How we count
Questions
How many GDPR compliance software contracts does the UK public sector award?
23 in the 2 years to 4 November 2026, from 20 public buyers.
How much is a typical public sector GDPR compliance software contract worth?
The median is £75k, and 78% are worth less than £250k.
Who wins the most public sector GDPR compliance software contracts?
Oyster IMS won the most (4). Castlepoint Systems won the most by value (£574k).
Which buyers award the most GDPR compliance software contracts?
Central government bodies award 35% of them.
Which part of the UK awards the most GDPR compliance software contracts?
London: 7 of 23 in the 2 years to 4 November 2026, then Scotland (5) and the North East (1).
How many GDPR compliance software contracts come up for renewal in the next 12 months?
8 contracts end and are likely to be re-let, the first on 30 January 2027.
What is included
Software that data protection and information governance teams use to manage GDPR compliance: records of processing, data protection impact assessments, privacy risk tracking and compliance evidence.
- GDPR compliance management tools
- DPIA workflow and privacy risk tools
- Records of processing activities
What is not included
- Data protection officer and legal advice
- Subject access and FOI request case tracking (see Complaints, FOI and correspondence casework system)
- Redaction software (see Redaction software)
- Information security risk and ISO 27001 compliance (see Governance, risk, compliance and audit software)