RFT for the provision of Data Protection Services

IHREC requires under Article 37 of the General Data Protection Regulations (GDPR) to appoint a

RFT for the provision of Data Protection Services

Irish Human Rights and Equality Commission

## Summary The Irish Human Rights and Equality Commission (IHREC) is procuring external Data Protection Officer (DPO) services to comply with GDPR Article 37. This engagement fulfills a statutory requirement for an independent DPO to support IHREC’s governance structure.

## Scope & Deliverables - Provision of DPO services for IHREC. - Ensuring independent oversight of data protection compliance. - Advisory support on data processing and management. - Implementation of green public procurement criteria to reduce environmental impacts.

## Key Requirements - Eligibility: Open procedure; not reserved. Must comply with EU Directive 2014/24/EU and Government Procurement Agreement (GPA). - Qualifications: Expertise in GDPR compliance and data protection governance. - Experience: Proven track record in data management and consultancy services (CPV codes 72310000, 72322000, 79411000). - Documentation: Selection criteria details are in the procurement documents; grounds for exclusion must be addressed.

## Commercials & Timeline - Estimated Value: €150,000 (excluding VAT). - Submission Deadline: Tuesday, June 02, 2026, at 12:00 IST. - Contract Duration: 48 months. - Framework/DPS: No framework agreement or Dynamic Purchasing System applies.

## How to Bid - Submission Method: Electronic submission via the Irish eTenders portal (https://www.etenders.gov.ie/epps/cft/viewTenders.do?resourceId=8003216). - Language: English. - Key Documents: Prepare the procurement document response, evidence of selection criteria compliance, and exclusion grounds declarations. Request additional information by May 26, 2026.

## Bid Considerations - Suitability: Ideal for specialized data protection consultancies or legal firms with strong GDPR expertise and Irish public sector experience. - Opportunities: Stable 4-year contract with a reputable state body; opportunity to influence green procurement standards. - Risks: High regulatory scrutiny due to the statutory nature of the DPO role; strict independence requirements may limit operational flexibility. - Competition: Open to all GPA-compliant suppliers; expect competition from established data privacy firms.

Open procedure. Any interested supplier may submit a tender. There is no shortlisting stage — all compliant bids received by the deadline are evaluated against the published award criteria. It is the most common route for Irish public contracts and is open to SMEs and new entrants.

Irish Human Rights and Equality Commission has 1 tender(s) tracked on TenderScout. On the EU TED record this buyer has awarded 6 contract(s) worth around €350,000.

Recent awarded suppliers include Waystone Compliance Solutions (IE) Limited, Irish Human Rights and Equality Commission, Piquant Media, MCG Facilities Management Ireland Ltd, Kooba_82703.