Data Handling Review and SoPC

This note is intended for use in connection with the preparation of PFI Project Agreements but it should be noted that the Policy Note which is the subject of this note is not limited to PFI projects.

We refer to the OGC Procurement Policy Note of 1 July 2008 entitled “Data Handling Review – Mandatory application of security procedures in contracts” and the OGC Procurement Policy Note of 26 November 2008 (Information Note 13/08) (the “Policy Note”) which adopts material from and replaces the Note of I July 2008. This is accessible through OGC’s website at http://www.ogc.gov.uk/documents/PPN13_08_Data_Handling.pdf

The Policy Note sets out mandatory minimum measures to protect information across central government and requires all Departments to appoint a Senior Information Risk Officer to be responsible for them. It also contains OGC ICT Services Model Agreement Security Provisions. 

Tracking Number: DataHandlingReviewSoPC_2010_EN