Based on growing case law and supervisory requirements as well as specific institutional particularities, the list of the tasks to be performed by a Joint Undertaking in the data protection field is expanding. For this reason, the contracting authorities intend to procure operational and legal support for the performance of these tasks to ensure, demonstrate and verify compliance (accountability) with the applicable law.
These services may consist in providing: Legal assistance to data protection in the application of the relevant legal framework; Support services in the management of the exercise of rights and complaints from data subjects, risk, cybersecurity and impact assessments; Maintenance services of the systems of records and privacy notices; Audits services or performing benchmarking exercises as well as support services for the preparation of audits from the EDPS or other auditing body; Training of staff and other stakeholders.