Software solutions for World Bank Group Personal Data Privacy Program

Item Description:

The World Bank Group, hereinafter referred to as “WBG”, includes the International Bank for Reconstruction and Development (IBRD), the International Finance Corporation (IFC), the International Development Association (IDA), International Center for the Settlement of Investment Disputes (ICSID) and the Multilateral Investment Guarantee Agency (MIGA). The WBG Data Privacy Program includes teams from across the five institutions of the World Bank Group (IBRD, IDA, IFC, MIGA and ICSID).

The WBG is working to develop its Personal Data Privacy Program, to strengthen WBG’s protection of personal data via three work streams. (#1) New and Revised Directives and Procedures; (#2) Technology Solutions and Controls; and, (#3) Change management and Training. This RFP is conducted by the work stream # 2 (Technology Solutions and Controls) to address the gaps in the current WBG infrastructure and controls to deliver the technology solutions required for the Personal Data Privacy program.

We are seeking two software solutions to address the gaps in the current WBG infrastructure and controls to deliver the technology required for the Personal Data Privacy program.

Lot 1) Privacy Management Tool:

A Privacy Management tool to facilitate the documentation and workflow processes required for

• Records of Processing Activity (ROPA),
• Privacy Impact Assessment (PIA),
• Privacy Breach Response,
• Third-Party Privacy Assessment and
• Data Subject Access Request (DSAR).

Lot 2) Data Discovery and Masking

A Data Discovery and Masking tool for discovery of Personal Data and persistent masking of the sensitive personal data in the non-production environments.

The solicitation may be obtained by sending an email to the designated Category Manager, referencing the following information:

1. Solicitation Number
2. Company Name
3. Contact Person Name and Title
4. Address
5. Telephone Number
6. Fax Number
7. Contact’s Email Address

A copy of the solicitation will be sent to organizations that have replied to and are eligible to receive this advertisement. All requests and questions regarding this solicitation shall be directed to the following designated Corporate Procurement Category Manager(s): pmillion@worldbank.org and smesipam@worldbank.org

The WBG reserves the right to publicly disclose contract award information, including but not limited to, name of company receiving the award, brief description of services, and contract award amount, for any contract award valued over US$250,000.  Offeror’s proposal and contractual documents will remain confidential and therefore not subject to disclosure.

The World Bank reserves the right to reject any or all responses without recourse.