OXFAM- PREQUALIFICATION OF DATA PROTECTION COMPLIANCE ORGANIZATIONS (DPCOS) FOR DATA PROTECTION AUDIT AND FILING SERVICES

The purpose of this call is to ensure compliance with data protection regulations, strengthen governance, and mitigate risks associated with data management.

Scope of Work:

1. Prequalified DPCOs will be expected to:

• Conduct Data Protection Impact Assessments (DPIAs) and risk assessments.
• Ensure compliance with applicable data protection laws and regulations.
• Prepare and submit annual returns and process compliance certificates.[VW1.1]
• Provide advisory services and training on data protection best practices.
• Support incident response and data breach management.

2. Deliverables include:

• Comprehensive data protection and risk assessments.
• Development and implementation of compliance policies.
• Filing of annual returns and obtaining compliance certificates.
• Staff training and awareness sessions.
• Recommend any required changes in control, policy and procedure.
• Test adequacy of controls in place
• Ongoing advisory support and regulatory updates.

The deadline for submission of proposals is 22nd February 2026 at 23:59 (WAT) upon conditions in the Terms of Reference and Evaluation Criteria.

Oxfam does not bind itself to award the proposal to the lowest offer and reserves the right to accept the whole or part of the proposal.

We look forward to receiving a proposal from you and thank you for your interest in our account.

Download the RFP documents