Public procurement notice: Contract Notice
Published: 2020-04-03
Buyer: HM Land Registry
Country: UK
Contract type: Services
Procedure: Competitive procedure with negotiation
CPV classification: 79999000
Estimated value: 10000000 GBP
Submission deadline: 2020-04-29
Award criteria: The most economic tender

Technical requirements: This requirement is to procure a replacement contract for scanning, processing and data extraction services which are located off HM Land Registry premises. To access the procurement documents for this contract please sign up at https://hmlandregistry.force.com and register for project C0591. You should use the same link to submit your selection questionnaire response.
HM Land Registry plan to procure a replacement contract for scanning, processing and data extraction services. The contract period will be for an initial period of 42 months, plus 2 x 12 month extension options, with an indicative value of between GBP 7 000 000 and GBP 10 000 000 across the whole contract period, including extension options. We expect that the scope of the services will cover the following:
• receipt and processing of items of mail addressed to HM Land Registry, which may include opening, re-directing, returning and/or scanning;
• mail items may be of varying size for example letters and packets and are currently delivered by Royal Mail and DX;
• preparation and scanning of HM Land Registry application forms, plans and documents, of varying size, age and quality, which may be coloured or black and white;
• the extraction, capture and electronic submission of accurate data from HM Land Registry paper and scanned images of application forms (electronic data extraction) and documents;
This procurement offering does not guarantee any minimum spend and there will be no form of exclusivity or volume guarantee under this contract. This is the first stage of the procurement where suppliers are asked to download and complete the selection questionnaire document. To access the procurement documents for this contract please sign up at https://hmlandregistry.force.com and register for project C0591. If you have already registered for this procurement via the supplier day you do not need to re-register. You should use the same link to submit your selection questionnaire response. The selection questionnaire will be accompanied by the draft tender documents, including the statement of requirements, invitation to negotiate, method statement, pricing schedule and the contract. All communications should be via HM Land Registry's tender portal https://hmlandregistry.force.com and register for project C0591. The deadline for submitting selection questionnaire responses is 12.00 on Wednesday 29 April 2020.
Chapter V of the General Data Protection Regulation (GDPR) restricts the transfer of personal data from the EU to ‘third countries’. If the UK leaves the EU without a deal it will be classed as a third country by the EU. In the event of the UK leaving the EU without having reached agreement on data transfers during the transitional period there is a risk that the transfer of personal data from an EU based processor to HM Land Registry in the UK may be restricted under the GDPR. The statement of requirements requires personal data to be only stored in, processed in and accessed from the EU or UK and bidders are required to state the specific geographical location where data will be stored, processed and managed. If the successful supplier for this procurement processes personal data from a location within the EU (but outside of the UK)  in their role as data processor, the successful supplier agrees, at the request of HM Land Registry, to repatriate (according to the cost and approach outlined in their tender submission) personal data processed under the contract to the UK and to cease the transfer of personal data from the EU to the UK (and to cooperate with HM Land Registry in the event of appropriate safeguards for the transfer of personal data becoming available). HM Land Registry expects bidders to take steps to ensure they are aware of this risk and understand whether services could be restricted in the circumstances outlined above, and that they are prepared to address any actual or reasonably suspected legal or regulatory claim, demand, action or proceeding that may arise in relation to this risk. As part of the submissions bidders are therefore asked to provide two different pricing options:
(2) Option B – ‘UK based storage, processing and access’ – based upon the requirement in section 9. Data Protection and Brexit – risk of no agreement during the transition period’ of the Invitation to negotiate. Bidders are asked to provide a breakdown of what their cost offer would be if they were required to store, process and access data only in the UK if requested by HM Land Registry.
HM Land Registry will have certain technical requirements for this contract that will be mandatory in order to meet the necessary UK Government security standards.
(i) Bidders will be asked to self-certify that their organisation either is already certified to ‘ISO 27001:2017 Information Security Management' or equivalent level, or would ensure that it is accredited in accordance with the outline implementation plan timescale requirements and will maintain this certification throughout the contract period.
(ii) Bidders will be asked to self-certify that their organisation either is already certified to ‘Penetration of systems by a CHECK, CREST, or TIGER approved’ or equivalent standard, or would ensure that it is accredited in accordance with the outline implementation plan timescale requirements and will maintain this certification throughout the contract period.
(iii) Bidders will be asked to self-certify that their organisation either is already operating to UK government cloud security principles in terms of official data holding and management of personal information, or can provide assurance that the required services will be implemented and managed in accordance to these principles. This includes assurance that controls will be implemented as part of a security risk management process within the outline implementation plan timescale requirements, and risk management maintained throughout the contract period. Please see the following link: https://www.ncsc.gov.uk/guidance/cloud-security-collection.
The needs of the contracting authority cannot be met without adaptation of ready available solutions.
There is no right of appeal in this procurement. If you have a complaint or seek to challenge the outcome, please follow the guidance on procedure contained in the previous section.

Eligibility requirements: HM Land Registry will have certain technical requirements for this contract that will be mandatory in order to meet the necessary UK Government security standards. (i) Bidders will be asked to self-certify that their organisation either is already certified to ‘ISO 27001:2017 Information Security Management' or equivalent level, or would ensure that it is accredited in accordance with the outline implementation plan timescale requirements and will maintain this certification throughout the contract period. (ii) Bidders will be asked to self-certify that their organisation either is already certified to ‘Penetration of systems by a CHECK, CREST, or TIGER approved’ or equivalent standard, or would ensure that it is accredited in accordance with the outline implementation plan timescale requirements and will maintain this certification throughout the contract period. (iii) Bidders will be asked to self-certify that their organisation either is already operating to UK government cloud security principles in terms of official data holding and management of personal information, or can provide assurance that the required services will be implemented and managed in accordance to these principles. This includes assurance that controls will be implemented as part of a security risk management process within the outline implementation plan timescale requirements, and risk management maintained throughout the contract period. Please see the following link: https://www.ncsc.gov.uk/guidance/cloud-security-collection.

Award value: 10000000