FOI 464-2025 / Apr 2025 / Data protection
FREEDOM OF INFORMATION REQUEST REFERENCE NO: 464-2025
I write in connection with your request for information which was received on 23rd April 2025. Please find your questions and the Warwickshire Police response set out below:
Under the Freedom of Information Act 2000, please provide the following information about your procurement of any (i) external Data Protection Officer (DPO), (ii) Data protection GDPR compliance services for the period FY2022-23 to FY2024-25:
1. Current DPO arrangements
1.1 Is the organisation’s DPO and other staff that work on data protection
compliance:
(a) An internal employee
(b) A DPO provided by an external service provider
(c) Hybrid (internal staff with external service provider support)
Q1.1 response: (a) An internal employee
1.2 Where services are provided by external providers, please share the following information:
(a) The Company name(s)
(b) Annual spend by your organisation (FY2022/2023 through to
FY2024/2025)
(c) The highest day rate paid
(d) Contract dates (start/end/renewal terms)
(e) A brief description of the project or services provided (for instance, project title or internal reference)
(f) Services covered (e.g., audits, breach management, SAR management, delivery of DPIAs) • Please indicate what deliverables were produced • Procurement method (e.g., open competition, framework agreement, direct
award) and name of the procurement framework, if applicable.
Q1.1 response: Not applicable
2. Consultancy Spend
2.1 What is the organisation’s, total annual expenditure on data protection/GDPR consultancy services?
Q2.1 response: No information held
2.2 For SoW/projects which have a spend of more than £5k), please share the following information:
- Supplier company name
- The scope of the Project (e.g., 'ICO investigation support';, DPIA support, Internal Audit recommendation support) • Spend • Procurement method
Q2.1 response: Not applicable
3. Data Protection Compliance staffing
3.1 The Number of in-house data protection staff in the organisation?
(FTE)
Q3.1 response: 3FTE
3.2 Are there any vacant roles? (Yes/No)
Q3.2 response: No, our response is therefore ‘no information held’.
3.3 Where there any ICO investigations, audits, or enforcement actions for the period from FY2022/2023 to FY 2024/2025?
Q3.3 response: On 6th October 2023 the Chief Constables of Warwickshire and West Mercia Police received a joint ICO reprimand in relation to data loss. Further detail is available on the ICO website at the following link:
Chief Constable West Mercia Police and Chief Constable Warwickshire Police | ICO
4. Future Plans
4.1 Is your organisation planning to put out to tender for any DPO/GDPR services in the current financial year?
Q4.1 response: No information held
4.2 If yes please provide the following:
Expected timeline
Budget range
Key service requirements
Procurement method
Q4.2 response: Not applicable
Every effort has been made to ensure that the information provided is as accurate as possible.
Your attention is drawn to the below which details your right of complaint.
Should you have any further enquiries concerning this matter, please write or email the Freedom of Information Unit quoting the reference number above.
Yours sincerely
Freedom of Information Officer
Freedom of Information Unit
Warwickshire Police
PO Box 4
Leek Wootton
Warwickshire
CV35 7QB