IHREC requires under Article 37 of the General Data Protection Regulations (GDPR) to appoint a designated Data Protection Officer (DPO). The DPO is a critical role in IHREC’s governance structure and must carry out their duties independently. IHREC is seeking to engage data protection services to fulfil the role of DPO from an external provider through this tender.