Medical Records Management System

Tender description

Wales and West Utilities (WWU) are tendering for a medical records management system for use by our Occupational Health team. Secure records management is required because: • WWU has a duty to manage special category data under UK GDPR Arts 6&9 • Occupational Health is a data controller and data processor under UK GDPR • Medical records must be stored and retained in a confidential system Art 9(2)(h) by a professional with a legal or ethical duty of professional secrecy Art 9(3) • Under common law, a health professional must obtain consent before a medical report is released to management. The records must be stored securely in the interim • Health professionals have an ethical duty to protect confidentiality. Data protection is of paramount importance and all data is considered sensitive, so it's important that you can demonstrate your ability to meet the following requirements - • Your solution must be a SAAS solution, • It must be hosted on a UK based server, • Data must be backed up and encrypted while at rest and in transit, • Multi Factor Authentication (MFA) sign on, • You must be ISO27001 accredited, • Adequate controls must be in place to monitor and prevent records editing, • You must be registered with the ICO, • Appropriate password controls must be in place which include forced password changes and an acceptable level of complexity, Lot 1: Expression of Interest Participants wanting to participate in this sourcing activity must confirm their expression of interest and ability to provide the service required by e-mailing: Bec.Jones@wwutilities.co.uk Please include the following information in your email: 1) Full company name; 2) Main contact details (name, job title, email address, and telephone numbers). Please note the tender will be run via our procurement portal Bravo which requires suppliers to be registered to participate, failure to register will result in the supplier not being able to participate in the sourcing event. You can register for Bravo here - sourcing4wwu.bravosolution.co.uk. In your expression of interest, please also include - 3) Bravo registered email address and contact name.