Data Privacy, Information Governance and Risk Management Platform

Science Museum Group
London
1 March 2027 to 28 February 2030

Configurable platform covering information asset and ROPA registers, DPIAs, LIAs, data processing agreements, AI register management, FOI, EIR and SAR case management, breach and near-miss logging, statutory deadline tracking, information and cyber risk registers, supplier risk assessments and executive dashboards. Requires Microsoft Entra ID or Active Directory integration, migration from existing systems and workflow automation. This is a market research exercise only; no tender has been issued.

See where to bid

Closes in 25 days· 30 November 2026

Estimated value: £160k; Buyer estimate
Published: 2 November 2026
Deadline: 30 November 2026; 25 days left
Contract length: 36 months; Ends 28 February 2030

What the contract covers

Services contract

Provision of a data privacy, information governance and risk management software platform for a national museum organisation.

Information Governance & Compliance - Information Asset Register (IAR) - Record of Processing Activities (ROPA) - Data Protection Impact Assessments (DPIA) - Legitimate Interests Assessments (LIA) - Data Processing Agreements - Privacy compliance reporting - AI governance and AI Register management
Case Management - Freedom of Information (FOI) Requests - Environmental Information Regulations (EIR) Requests - Subject Access Requests (SAR) and other Data Subject Rights Requests - Data breach and near-miss management - Statutory deadline and SLA tracking - Public-facing document sharing capabilities
Risk & Supplier Management - Information and cyber risk registers - Supplier and third-party risk assessments - Vendor management and annual review workflows - Contract and digital asset tracking - Reporting and executive dashboards

Terms and requirements

Contract type: Services contract
Initial term: 36 months
Contract dates: 1 March 2027 to 28 February 2030
Certifications asked for: None stated
Lots: 1
Suitable for SMEs: Not stated
Category: Services
CPV codes: 72322000

Services in this tender

Data protection compliance softwareMain service£75k typicalReplacement data privacy, information governance and risk platform

Lifecycle

Published
2 November 2026
Deadline for bids25 days left
30 November 2026
Contract awardedUsually published within a few months
Contract starts
1 March 2027

The buyer

Science Museum Group

Type: Locked
Contracts, 24 months: Locked
Recorded value: Locked
Typical contract: Locked

Buys most

Contact details

Email: Locked
Address: Locked

See everything Science Museum Group buys

Similar GDPR compliance software contracts and prices

7 GDPR compliance software contracts were awarded in London in the last 24 months. See who won them and what they went for, next to this one.

See who won them →

Cite this tender

Link: https://bidskim.com/tender/3902045/data-privacy-information-governance-and-risk-management-platform
Buyer reference: Not published
Open contracting ID: ocds-h6vhtk-079528
Last checked: 5 November 2026

Science Museum Group. Data Privacy, Information Governance and Risk Management Platform. Tender, 2 November 2026. BidSkim, https://bidskim.com/tender/3902045/data-privacy-information-governance-and-risk-management-platform (accessed 5 November 2026).