Introduction

Data Protection for suppliers

Gloucestershire County Council (GCC) has a legal requirement to only engage with suppliers who can provide products/services on behalf of the council with appropriate safeguards in place to protect personal data.  The information on this webpage informs Contractors what will be expected from them to meet the requirements of GCC.

If providing a product or service involves the processing of personal data you will need to:

• Work with GCC to complete a review of your security measures,
• Sign up to GCC policies,
• Sign a contract upholding those standards.

You may also be asked to:

• Assist in the completion of a Data Protection Impact Assessment (DPIA),
• Assist in the completion of a data processing schedule,
• Provide a privacy notice.