Data Privacy and Governance Platform Procurement Research

The Science Museum Group (SMG) is conducting market research to inform the procurement of a new Data Privacy, Information Governance and Risk Management platform to replace their current solution before March 2027. SMG seeks suppliers offering solutions that support some or all of the following: Information Governance & Compliance (Information Asset Register, Record of Processing Activities, Data Protection Impact Assessments, Legitimate Interests Assessments, Data Processing Agreements, privacy compliance reporting, and AI governance); Case Management (Freedom of Information requests, Environmental Information Regulations requests, Subject Access Requests, data breach management, and deadline tracking); and Risk & Supplier Management (information and cyber risk registers, supplier risk assessments, vendor management, and reporting dashboards). Priority requirements include workflow automation to reduce administrative effort, configurable forms and approval processes, Microsoft Entra ID/Active Directory integration, network-independent operation, strong reporting and audit capabilities, migration support from existing systems, UK GDPR and information security standards compliance, and cost-effectiveness for UK public sector organisations. This market research phase aims to understand the supplier marketplace, review available solutions, gather indicative pricing and implementation information, and inform procurement strategy. Interested suppliers should provide product overviews, public sector experience, indicative pricing models, implementation approaches, and demonstration details. This is not a formal call for competition or tender invitation.