Procurement Act: PPN 020: Guidance on data protection legislation

This Procurement Policy Note (PPN) covers data protection requirements under UK GDPR, and the UK International Data Transfer Agreement (IDTA) governing the export of personal data from the UK.

This PPN replaces PPN 03/22 as part of the Procurement Act 2023 suite of republished PPNs. PPN 03/22 replaced PPN 02/18 and contained streamlined
guidance, and updated legal clauses to take into account the UK’s exit from the EU. It also includes guidance on international transfers of personal data. More information on this PPN can be found by clicking here.