Tenders/Data Privacy, Information Governance and Risk Management Platform

Data Privacy, Information Governance and Risk Management Platform

Science Museum Group

Published: Nov 2, 2026

Updated: Nov 2, 2026

About This Opportunity

This is a consulting contract in the information and communication technology and governance and public administration sectors, with a focus on Network Infrastructure, Cybersecurity and artificial intelligence. Located in United Kingdom, Europe, this opportunity is open to firms and consortiums.

Published through UK FTS - Find a Tender Service, a national government procurement portal. Public procurement tenders follow the country's national bidding regulations and may have specific eligibility and documentation requirements for consulting in the information and communication technology sector. Consulting assignments are typically evaluated with a strong emphasis on the technical proposal, including the methodology and qualifications of key experts. Shortlisted firms may be invited to submit financial proposals in a second stage. This is an advance notice — the formal tender is expected to be published shortly. Interested parties can use this time to prepare documentation and identify potential partners.

Description

The Science Museum Group (SMG) is undertaking market research in advance of a potential procurement exercise for a replacement Data Privacy, Information Governance and Risk Management platform. SMG is interested in engaging with suppliers that provide solutions supporting some or all of the following capabilities: Information Governance & Compliance - Information Asset Register (IAR) - Record of Processing Activities (ROPA) - Data Protection Impact Assessments (DPIA) - Legitimate Interests Assessments (LIA) - Data Processing Agreements - Privacy compliance reporting - AI governance and AI Register management Case Management - Freedom of Information (FOI) Requests - Environmental Information Regulations (EIR) Requests - Subject Access Requests (SAR) and other Data Subject Rights Requests - Data breach and near-miss management - Statutory deadline and SLA tracking - Public-facing document sharing capabilities Risk & Supplier Management - Information and cyber risk registers - Supplier and third-party risk assessments - Vendor management and annual review workflows - Contract and digital asset tracking - Reporting and executive dashboards General Requirements SMG is particularly interested in solutions which: - Reduce administrative effort through workflow automation - Provide configurable forms, reports and approval processes - Support Microsoft Entra ID / Active Directory integration - Can operate independently of the main corporate network where appropriate - Offer strong reporting and audit capabilities - Support migration from existing systems - Demonstrate compliance with UK GDPR and relevant information security standards - Are cost effective and suitable for a UK public sector organisation The anticipated implementation timescale would require a replacement service to be operational before the expiry of the current contract in March 2027. Supplier Engagement At this stage this is not a procurement exercise and does not constitute a call for competition or invitation to tender. The purpose of this engagement is to: - Understand the supplier marketplace - Review available solutions and approaches - Gain indicative cost and implementation information - Understand available deployment and licensing models - Inform the procurement strategy and business case Suppliers interested in participating are invited to provide: - Product overview and key capabilities - Relevant public sector experience - Indicative pricing models - Typical implementation approach and timescales - Details of any available demonstrations

Data provenance

This notice is sourced from UK FTS - Find a Tender Service and was originally published on November 2, 2026. Last refreshed today. Reference: 103570-2026. BidsFactory mirrors official procurement notices and links back to the source for full legal text.

About Science Museum Group

Science Museum Group has issued 134 procurement notices on BidsFactory, including 9 currently open and 53 awarded contracts. Activity concentrates in Culture, Heritage & Tourism, Governance & Public Administration, and Construction & Civil Works. All notices are published for United Kingdom. Notices are distributed via UK FTS - Find a Tender Service and UK Contracts Finder. Most recent publication: November 2, 2026.

Frequently asked questions about this tender

How can I submit a bid?

Visit UK FTS - Find a Tender Service to access the full notice, required documents, and submission instructions. Quote reference 103570-2026 when communicating with the contracting authority.

Who is the contracting authority?

This notice was issued by Science Museum Group in United Kingdom. The authority is responsible for evaluating bids, awarding the contract, and managing performance.

What type of contract is this?

This is a Consulting contract in the Information & Communication Technology sector. The classification helps bidders match the opportunity to their qualifications and registered scope of supply.

Where will the contract be performed?

The contract is for delivery in United Kingdom. Foreign bidders should review local registration, taxation, and any in-country presence requirements before submitting.