Cabinet Office updates PPNs on data protection and payment spot checks
The Cabinet Office has added two new Procurement Policy Notes (PPNs) to the suite of PPNs republished in conjunction with the Procurement Act 2023 (PA 2023) go-live—PPN 020: Guidance on data protection legislation and PPN 021: Payment Spot Checks in Public Sub-Contracts. PPN 020: Guidance on data protection legislation provides updated guidance on relevant data protection requirements under the UK GDPR and the UK International Data Transfer Agreement (IDTA) governing the export of personal data from the UK. PPN 020 applies with immediate effect. It replaces PPN 03/22 which contained streamlined guidance and updated model clauses to take account of the UK’s exit from the EU. It also includes guidance on international transfers of personal data. PPN 020 does not constitute a change in policy, but in-scope organisations should circulate and adhere to the guidance and use the updated model clauses at Annex A for new contracts. PPN 021: Payment Spot Checks in Public Sub-Contracts provides guidance and templates for contracting authorities to spot check public contract supply chains to ensure suppliers meet the payment terms set out in PA 2023. PPN 021 includes additional guidance on how in-scope organisations should conduct spot checks to ensure the correct payment terms are being included and adhered to by suppliers, plus model terms at Annex A which support spot checks being carried out. PPN 021 applies from 1 October 2025. Both PPNs apply to all central government departments, their executive agencies and non-departmental public bodies.