Cabinet Office Personal Data Protection Delivery Enhancement

Description

Why the Work is Being Done Delivering the Cabinet Office business strategy places a critical reliance on enhancing the capture, storage, management and use of personal and non-personal data. Recent events, however, have identified weaknesses in the Cabinet Office capabilities for managing personal data privacy. The Data Protection Act 2018 demands stringent obligations on the management of privacy risk and exposes the department to material penalties and regulatory censure in the event that risks are insufficiently managed or mitigated. An independent review (‘Building Trust In Digital Government’: A Review Of Personal Data Handling In The Cabinet Office) was commissioned following a high profile data breach in December 2019. The review identified systemic inconsistencies in data processes, controls and culture across Cabinet Office and that there is a significant risk that further and more impactful breaches will occur as the amount of personal data being handled by the Department increases. The independent review of the Cabinet Office’s personal data handling practices proposed recommendations to enhance the overall risk management of data privacy across the department. The Cabinet Office needs to implement this work prior to end December 2020 Problem to Be Solved The independent review of the Cabinet Office’s personal data handling practices proposed recommendations to enhance the overall risk management of data privacy across the department. Recommendation 1: Enhance accountability and governance Aim: Establish unified leadership for personal data handling supported by extension of existing best practice delivery in Cabinet Office to increase consistency of delivery. Recommendation 2: Reward the right behaviours and recognise skills Aim: Strengthen existing business unit responsibilities through active identification and promotion of personal data handling experts. Recommendation 3: Confirm a new Data Strategy Aim: Define a new Data Strategy aligned to Cabinet Office values and Digital Government ambitions which will inspire current and future Cabinet Office resource. Recommendation 4: Be transparent on progress Aim: Develop the execution oversight and data analysis required to demonstrate progress on maturing data delivery capabilities to all stakeholders. Recommendation 5: Refresh Training and Guidance Aim: Rebuild Training and Guidance to become accessible on a sustained basis by all Cabinet Office resource. Recommendation 6: Establish consistent standards and technology controls Aim: Achieve consistent leading standards and controls across personal data handling processes. Who Are the Users Cabinet Office staff, stakeholders and the wider external community Early Market Engagement Work Already Done Existing Team Existing Cabinet Office Data Protection Office; Digital Knowledge Information Management teams; Security; Information Assurance; 3rd Party Contracts team and the Chief Data Office Current Phase Beta Work Location Ordinarily in various locations across London However during lockdown it is anticipated the majority of the work will be conducted remotely Working Arrangments To respond as a result of this Requirements doc Security Clearance BPSS/CTC For clarity we do not need SC clearance Additional T&Cs Skills & Experience Proven experience of Data Governance in FTSE 100 and / or Government programmes Have experience of implementing regulatory data protection change Have 5 years + experience in data practice Be a good communicator Have experience of process documentation Have experience of developing data policies Nice to Haves No. of Suppliers to Evaluate 3 Proposal Criteria Cultural Fit Criteria How you work : Must work with the Cabinet office BAU workstream owners to approve assets and artefacts must not work in isolation and delivery How you solve problems : Must be open to challenge and be willing and able to think outside the box Must have transparency and collaboration : Along with traceability of progress and demonstrate clear delivery Payment Approach Fixed price Assessment Method Evaluation Weighting Technical competence 65% Cultural fit 10% Price 25% Questions from Suppliers No questions have been answered yet Budget range