UK GDPR / data protection

The demand curve

Notices demanding it per 10,000 published, by year — rate-normalised so corpus growth never masquerades as demand. Complete years only.

The pale bars are 2025 onward. The Procurement Act went live on 24 February 2025 and changed how notices are written, so the step across that date is partly a change in convention and not only a change in demand. We have not measured how much of it is which, so please do not read this as a trend.

The receipts

Notices that demand it, and the sentence each demand was found in. Nothing is counted here without one.

• WAR - Digital Strategic Solutions Delivery Partnermandatory

  Warwickshire County Council

  The engagement must comply with UK GDPR and all relevant laws and align with the UK Government's AI Playbook principles (e.g.

• CCM1379 - OHU Softwaremandatory

  The Police and Crime Commissioner for Lincolnshire

  The system must be GDPR compactable and record consent to share data.

• Cleaning Services for Populo Livingmandatory

  Populo Living Limited

  Contractors must provide high-quality, resident-focused services, undertake regular inspections, report defects, hazards and anti-social behaviour, safely manage waste and sharps, and comply with strict health and safety, safeguarding, GDPR and performance requirements.

• Security Services for YMCA London City & Northmandatory

  YMCA London City and North

  The contractor must comply with safeguarding requirements, including enhanced DBS checks, health and safety legislation, GDPR obligations, and YMCA policies.

• PHW-STA-63444 GAMBLING HARMS PREVENTION COMPETITIVE GRANTS PROGRAMMEmandatory

  Public Health Wales NHS Trust

  Additionally, all digital infrastructure must strictly comply with UK GDPR.

• The provision of Lone Worker Solution and Related Servicesmandatory

  Royal Berkshire Fire Authority

  All incidents must be recorded and in line with GDPR requirements.

• Perceptions of Practice Placements on Social Work Coursesmandatory

  Social Work England

  The supplier must ensure proportionate but robust research governance, inclusive methods, and compliance with ethical standards and UK GDPR.

• Assets and Facilities Management Softwaremandatory

  Reading Borough Council

  The solution must be delivered as a fully hosted SaaS service within the UK and be compliant with UK GDPR and applicable information governance requirements.

• Active & Passive Fire Works and Fire Door Installationmandatory

  GREENSQUAREACCORD LIMITED

  …e you are there, we would strongly urge you to update the rest of your supplier profile with your current contact details, address, insurances, data protection/GDPR and the mandatory forms to ensure these are up to date as we shall shortly be conducting a supplier compliance exercise where outdated or incomplete detail…

• Asset Management Systemmandatory

  PROGRESS HOUSING GROUP LIMITED

  All data must be stored and processed within the UK or a country aligned to UK GDPR guidelines.

• Provision of Planning Pipeline Datamandatory

  Ministry of Housing, Communities & Local Government

  The supplier must also demonstrate robust data management practices, including secure storage, GDPR compliance, and appropriate use of IT systems.

• CWC26045MW - Microsoft 365 Backupmandatory

  Wolverhampton City Council

  All storage of data must be carried out in accordance with current GDPR and Data Protection 2018 rules.

See it live

7 open tenders demand UK GDPR / data protection right now.