PGN 01/18 - Actions Required on Contracts as a Result of the General Data Protection Regulation (GDPR)

The purpose of this Procurement Guidance Note (PGN) is to explain how the EU General Data Protection Regulation (GDPR), which applies to any public body or private organisation processing personal data, will affect commercial arrangements (contracts), between Departments and their suppliers.  

The guidance also explains the roles and responsibilities of Departments in applying the legislation to their contracts. The guidance does not provide advice on in-house personal data processing activities (e.g. those carried out by NICS HR or on other wider aspects of the GDPR).