Official UK procurement notice
Data Privacy, Information Governance and Risk Management Platform
Authority: Science Museum Group (Central government)
The Science Museum Group (SMG) is undertaking market research in advance of a potential procurement exercise for a replacement Data Privacy, Information Governance and Risk Management platform. SMG is interested in engaging with suppliers that provide solutions supporting some or all of the following capabilities:
What is being bought
Published requirement descriptionThe Science Museum Group (SMG) is undertaking market research in advance of a potential procurement exercise for a replacement Data Privacy, Information Governance and Risk Management platform.
SMG is interested in engaging with suppliers that provide solutions supporting some or all of the following capabilities:
Information Governance & Compliance
- Information Asset Register (IAR)
- Record of Processing Activities (ROPA)
- Data Protection Impact Assessments (DPIA)
- Legitimate Interests Assessments (LIA)
- Data Processing Agreements
- Privacy compliance reporting
- AI governance and AI Register management
Case Management
- Freedom of Information (FOI) Requests
- Environmental Information Regulations (EIR) Requests
- Subject Access Requests (SAR) and other Data Subject Rights Requests
- Data breach and near-miss management
- Statutory deadline and SLA tracking
- Public-facing document sharing capabilities
Risk & Supplier Management
- Information and cyber risk registers
- Supplier and third-party risk assessments
- Vendor management and annual review workflows
- Contract and digital asset tracking
- Reporting and executive dashboards
General Requirements
SMG is particularly interested in solutions which:
- Reduce administrative effort through workflow automation
- Provide configurable forms, reports and approval processes
- Support Microsoft Entra ID / Active Directory integration
- Can operate independently of the main corporate network where appropriate
- Offer strong reporting and audit capabilities
- Support migration from existing systems
- Demonstrate compliance with UK GDPR and relevant information security standards
- Are cost effective and suitable for a UK public sector organisation
The anticipated implementation timescale would require a replacement service to be operational before the expiry of the current contract in March 2027.
Supplier Engagement
At this stage this is not a procurement exercise and does not constitute a call for competition or invitation to tender.
The purpose of this engagement is to:
- Understand the supplier marketplace
- Review available solutions and approaches
- Gain indicative cost and implementation information
- Understand available deployment and licensing models
- Inform the procurement strategy and business case
Suppliers interested in participating are invited to provide:
- Product overview and key capabilities
- Relevant public sector experience
- Indicative pricing models
- Typical implementation approach and timescales
- Details of any available demonstrations
CPV: Data management services
The lotProcurement structure
single lot · no lot value publishedPipeline intelligence · planning stage: how this market runs before the tender is published
How Science Museum Group buys Database services (CPV 7232), and who usually turns up
Science Museum Group’s published record next to the market for the same work. Frameworks and DPS are left out: they draw different bid counts. Whole-market view: Database services (CPV 7232) →
How the contest usually goes
Winner shares use published awards; bid and price charts use contested lots.
i
How often small and medium firms win.
Share of awards where the winner’s size is known.
The counts under this question show how many awards have a known supplier size.
Small firms have won here. Neither number says whether you qualify; it describes who has been winning.
i
How often local firms win similar work.
Winners with a registered address in the delivery region, out of awards with a known address.
Local means the winner is registered in the region where that award was delivered. The market figure counts awards delivered in Greater London (authority’s region).
A local branch does not count if the registered address is elsewhere.
Most of this buyer’s recorded winners were registered in the region where that award was delivered.
i
How long buyers here take to decide after bids close.
Middle value in days from the bid deadline to the award date, on competitions that published both.
Only decided tenders count, so slow ones still waiting are not in.
Half of these awards have an award date within 33 days of the bid deadline.
i
How often work is awarded with no recorded rival.
Direct awards and tenders where every published lot count shows one bid.
Both shares are minimums: some awards have no bid count.
Thin markets produce this too; it is not proof of a tailored specification.
Missing bid counts may hide more single-bid awards. This share is a minimum.
How many bids did past lots attract?
i
How many bids past lots received.
Each colour is a bid-count range. Only competed lots with a published count are included.
Past bids do not predict this tender.
1 bid11% / 8%
2–319% / 33%
4–622% / 38%
7+48% / 21%
How did awards compare with estimates?
i
Where winning prices landed against estimates.
Each colour shows awards below, close to or above the published estimate, one lot at a time.
Past prices are a guide, not a bid price.
Below estimate46% / 58%
Within ±2%28% / 21%
Above estimate25% / 21%
Assess each lot i
What past awards tell you about each lot.
See the forecast, this buyer’s earlier suppliers and firms with relevant wins.
No supplier is confirmed as a bidder.
i
What past awards tell you about each lot.
See the forecast, this buyer’s earlier suppliers and firms with relevant wins.
No supplier is confirmed as a bidder.
Open a lot for its forecast, this buyer’s previous supplier and possible competitors, from published award history, not a bid list
Lot #1CPV 7232Published estimate£160k
i
How many bids this lot may attract.
The forecast uses similar past competitions. The bar shows either that forecast or past bid counts; the line below says which.
Each lot shows its own forecast based on its own category; forecasts for different lots of the same notice are not comparative. The bar shows 103 past lots.
A forecast, not a list of bidders.
1 bid8%
2–332%
4–631%
7+29%
i
Where the award price may land.
The forecast uses similar awards and the buyer’s estimate. The band covers the middle half of likely prices.
No comparable awards for this lot yet.
A statistical guide from past awards, not a price to bid.
Who has supplied this buyer on similar work? i
Who has done similar work for this buyer.
Past contracts are matched by buyer, title and type of work.
A past supplier may not bid again.
i
Who has done similar work for this buyer.
Past contracts are matched by buyer, title and type of work.
A past supplier may not bid again.
No earlier contract of this buyer matches this lot on the published record.
Who could compete for this lot? i
Who could compete for this lot?
Firms with relevant past wins. On a framework, we show firms on that agreement.
None is confirmed as a bidder.
i
Who could compete for this lot?
Firms with relevant past wins. On a framework, we show firms on that agreement.
None is confirmed as a bidder.
Candidate suppliers for this notice have not been worked out yet, so this is not a verdict that nobody fits.
About this data
- Source. Official UK public procurement notices (Find a Tender), reused under the Open Government Licence v3.0. New notices arrive through the day; the figures are rebuilt nightly.
- Two views, kept apart. The authority’s own track record and the wider market for the same kind of work sit side by side and are never mixed. Where the local picture is too thin, a figure widens to a broader market and says which one it used.
- Forecasts are labelled. The price forecast and its range, possible competitors and the earlier-work matches are our estimates from past awards: not published facts, not win chances and not price advice. Official notices do not say who is bidding.
- Every figure shows what it rests on. Not every notice publishes a bid count, a value or a delivery region, so each figure carries the number of records behind it, and one built on few records is marked as such. The on a figure explains it; the counting rules are in the methodology. Spotted something wrong? Tell us.
Procedure terms & legal framework
From the official record- Legal basis
- UKPGA · 2023/54 Procurement Act 2023
- Procurement category
- Services
- Notice status
- Planned procurement
- Procurement threshold
- Unspecified in notice
- Regulatory regime
- Standard
- Commercial structure
- Stand-alone contract (no framework)
- Competition type
- Competitive procedure
- GPA / WTO covered
- Unspecified in notice
- Recurring procurement
- Unspecified in notice
- First published
- 2 Nov 2026, 09:33 GMT
- Last source update
- 2 Nov 2026, 10:03 GMT
- FTS notice number
2026/S 000-103570- Latest notice
- Preliminary market engagement notice (UK2)
- Classification (CPV)
- Delivery area
- Not published
- Official registry OCID
ocds-h6vhtk-079528Find a Tender
How it was run
Official notice- Submission deadline
- —
Timeline
2 Nov 2026 → 1 Mar 2027 · 3 dates- Planning notice published21h ago2 Nov 2026, 09:33 GMT
- Today3 Nov 2026
- Market engagementin 27 days30 Nov 2026, 23:59 GMT
Interested suppliers should register their interest via email:
data.protection@sciencemuseum.ac.uk
Subject: Market Research Response – Data Privacy & Risk Management Platform
Please include:
- Organisation name
- Contact name
- Email address
- Website
- Brief description of your platform
- Any supporting brochures, case studies or links
Alternatively, SMG may publish and manage supplier responses through an online registration form if appropriate during the engagement period.
Optional Supplier Q&A Session
SMG is considering holding a supplier market engagement and question-and-answer session via Microsoft Teams to provide interested suppliers with an opportunity to ask questions about the scope, objectives and anticipated procurement approach.
Suppliers responding to this market research exercise are invited to indicate whether they would be interested in attending such a session should it be arranged. At this stage, no date has been confirmed; however, suppliers expressing an interest will be notified of further details if the session proceeds.
Please indicate within your response:
- Whether you would be interested in attending a supplier Q&A session
- The name and role of proposed attendees
- Any initial topics or areas of interest you would like SMG to address
This information will help SMG assess demand and shape any future market engagement activities.
- Contract startsin 117 days1 Mar 2027
Notice history
3 events · 2 releases on Find a Tender · since 2 Nov 2026- Preliminary market engagement notice published2 Nov 2026, 09:33 GMTUK2
- Preliminary market engagement notice published2 Nov 2026, 10:03 GMTUK2
- Published value published: £160,0002 Nov 2026, 10:03 GMT
Commercial outcome & contract awards
Pipeline notice- Awards (0)
- No award published
- Contracts (0)
- No contract published
- Bid statistics
- No aggregate bid statistics published
Contracting authority & participating public bodies
Official documents & specifications (2)
Official links; attachments are not copiedNotices published for this procedure
- Preliminary market engagement notice Preliminary market engagement notice on Find a Tender
- Preliminary market engagement notice Preliminary market engagement notice on Find a Tender