Data Protection 466/2025

FOI Reference: 466/2025

Request:

Under the Freedom of Information Act 2000, please provide the following information about your procurement of any

(i) external Data Protection Officer (DPO),

(ii) Data protection GDPR compliance services for the period FY2022-23 to FY2024-25: 

1.⁠ ⁠Current DPO arrangements

1.1 Is the organisation’s DPO and other staff that work on data protection compliance:

(a) An internal employee

(b) A DPO provided by an external service provider

(c) Hybrid (internal staff with external service provider support)

1.2 Where services are provided by external providers, please share the following information:

(a) The Company name(s)

(b) Annual spend by your organisation (FY2022/2023 through to FY2024/2025)

(c) The highest day rate paid

(d) Contract dates (start/end/renewal terms)

(e) A brief description of the project or services provided (for instance, project title or internal reference)

(f) Services covered (e.g., audits, breach management, SAR management, delivery of DPIAs)

•⁠ ⁠Please indicate what deliverables were produced

•⁠ ⁠Procurement method (e.g., open competition, framework agreement, direct award) and name of the procurement framework, if applicable.

2.⁠ ⁠Consultancy Spend

2.1 What is the organisation’s, total annual expenditure on data protection/GDPR consultancy services?

Response:

I can confirm that Dyfed-Powys Police does hold the information requested, as outlined below.

1.1    (a) Yes

(b) No

(c) No

1.2   (a-f) n/a

2.1   FY2324 - £48,331 & FY2425 - £89,760

(please note these figures relate to the combined salaries of the Data Protection staff who are all internal employees of Dyfed-Powys Police).                                               

(This is a response under the Freedom of Information Act 2000 and disclosed on 21/05/2025)