Freedom of information response

Past, present and future suppliers of the following services:  Email encryption and E-signatures

Publication date: 
Thursday 7 December 2023
Request: 

 Email encryption
•    Do you have a product or supplier for email encryption? 
•    If so, please can you supply details of the contractual arrangements in place including date of award, details of any Framework used or link to the advertisement, contract value and duration. 
•    If so, please can you indicate the plans for future procurement of this product?
•    If not, please can you indicate what evaluation of the requirement for email encryption has been undertaken?  
•    Please can you confirm the individual responsible for managing your email encryption contract or wider cyber security contracts and provide their contact details and role title? 
E-signatures
•    Do you use a specific product or solution for electronic signatures?
•    If so, please can you confirm the name of the supplier from which this solution is purchased  
•    If so, please can you supply details of the contractual arrangements in place including date of award, details of any Framework used or link to the advertisement, contract value and duration. 
•    If so, please can you indicate the plans for future procurement of this product?
•    If not, please can you indicate what evaluation of the requirement for email encryption has been undertaken?  
•    Please can you confirm the individual responsible for managing your e-signature solution contract or wider cyber security and provide their contact details and role title?

Response: 
  • Do you have a product or supplier for email encryption? We utilise azure Email encryption via sensitivity labels as part of our M365 licences.
  • If so, please can you supply details of the contractual arrangements in place including date of award, details of any Framework used or link to the advertisement, contract value and duration. KCS Professional Services framework ref: Y17038 - Software Products and Associated Services. 3+3 agreement, Awarded under Mini Comp.   Contract expires March 2025 and value is £3,044,820
  • If so, please can you indicate the plans for future procurement of this product? No plans to change what we use
  • If not, please can you indicate what evaluation of the requirement for email encryption has been undertaken?  NA
  • Please can you confirm the individual responsible for managing your email encryption contract or wider cyber security contracts and provide their contact details and role title? 

Unfortunately we are unable to provide in full the information you have requested.  We do hold the information but an absolute exemption applies. Personal Information (Section 40,2)

Personal data of any other person (third party data) is exempt under section 40(2) if disclosure would breach of the data protection principles.  This aspect of Section 40 is an Absolute Exemption and is therefore not subject to the Public Interest Test. 

This means we have balanced the legitimate interests of the public in having access to the information (under FOI a disclosure is a publication to the world at large) against the interests of the individual under the first principle of the Data Protection Act.

The addresses requested are personal data specific to the occupiers.  It is therefore subject to the provisions of the Data Protection Act.  Information can be withheld if its disclosure would be likely to breach one or more of the Principles of the Data Protection Act.  There is no prior expectation that their addresses would be published into the wider public domain under FOI.  A disclosure made under FOI constitutes a publication to the world at large.

Request reference:
FOI 13230