This opportunity is closed for applications

The deadline was Wednesday 24 February 2021
The Information Commissioner’s Office (ICO)

Age Appropriate Design Code

10 Incomplete applications

7 SME, 3 large

10 Completed applications

9 SME, 1 large

Important dates

Published
Wednesday 10 February 2021
Deadline for asking questions
Wednesday 17 February 2021 at 11:59pm GMT
Closing date for applications
Wednesday 24 February 2021 at 11:59pm GMT

Overview

Summary of the work
1. A set of practical design resources that provide guidance and worked examples. We expect these could consist of written guidance, design patterns, illustrated examples and metrics.
2. We are looking for a partner to facilitate a series of online events focused on specific standards.
Latest start date
Monday 26 April 2021
Expected contract length
16 Weeks approximately
Location
North West England
Organisation the work is for
The Information Commissioner’s Office (ICO)
Budget range
Approximately £200K

About the work

Why the work is being done
1. We are commissioning a set of practical design resources that provide guidance and worked examples, so that practitioners can make meaningful change to their products and services. We expect these could consist of written guidance, design patterns, illustrated examples and metrics.
2. We are looking for a partner to facilitate a series of online events focused on specific standards. The aim is to further understand the needs of practitioners in relation to the code, and to help practitioners better understand the code. We hope that these events could start to build a design community of practice around the code.
The ICO would like to ensure that digital practitioners can:
● understand the aspects of the code that need consideration when designing experiences for children based on their personal data
● translate the code into meaningful change to their products and services
● confidently test for and demonstrate their conformance with the code i.e., that proposed changes to their products and services will result in conformance with the code
Help achieve the objectives outlined above through the delivery of two key deliverables:
1) Illustrated design guidance for digital practitioners
2) Online events and community building
Problem to be solved
1) Illustrated design guidance for digital practitioners
● translating existing published content including the Children’s code and Children’s Code Harms Framework , into more accessible resources for designers, engineers and other digital professionals
● creation of reference designs that support designers in making changes to their products and services to facilitate them in conforming with the code. The reference designs should be focused on some or all of the following standards: transparency, geolocation, profiling, default settings and nudge techniques
● testing the effectiveness of the reference designs and resources with users and experts e.g. child development/risk specialists, children (the ICO can facilitate access to some child development/risk experts)
● development of metrics to assess conformance with the design-related aspects of the code (the ICO will provide assistance in identifying the type of metrics that maybe appropriate)
2) Online events and community building
● identifying 7 standards from the code that would benefit from individual events (e.g. transparency, default settings, data minimisation, geolocation, parental controls, profiling and nudge techniques)
● identifying the types of participants who would most benefit from the events
● inviting participants to the events
● designing the format of the events
● facilitating the events
Who the users are and what they need to do
We are looking for a design agency to help us deliver
● you have significant experience of using a content design approach to communicate complex non-design oriented requirements
● you have significant experience of co-designing resources for designers, engineers and other digital professionals e.g. design systems, service recipes or design patterns
● you have significant experience of designing resources intended for digital services that are likely to be accessed by a child
● you have significant understanding of the risk children face through online services use of their personal data, and what the code is trying to achieve
● you have significant experience of delivering at speed through agile working practices, delivering value throughout the course of your work
● you have experience in facilitating effective remote events and building communities
What your bid will need to include
1. Confirm capacity to commence work immediately upon confirmation of procurement
2. Provide itemised costs and approach to each deliverable
3. Provide short case studies and examples of how you have previously delivered on similar requirements – including published materials that demonstrate visual design capabilities
4. A description of your approach to running the project over 16 weeks as an agile project
Early market engagement
Any work that’s already been done
Existing team
ICO Head of Technology
ICO Principal Technology Advisor
ICO Head of Regulatory Strategy
Current phase
Not applicable

Work setup

Address where the work will take place
Remotely but occasionally at ICO head office:
Information Commissioner’s Office,
Wycliffe House,
Water Lane, Wilmslow,
Cheshire SK9 5AF
Working arrangements
1. Confirm capacity to commence work immediately upon confirmation of procurement
2. Provide itemised costs and approach to each deliverable
3. Provide short case studies and examples of how you have previously delivered on similar requirements – including published materials that demonstrate visual design capabilities
4. A description of your approach to running the project over 16 weeks as an agile project
Security clearance

Additional information

Additional terms and conditions

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • How does your submission demonstrate your organisation's experience in translating non-design oriented requirements into interpretable designs for the technical community?
  • How does your submission demonstrate your experience in designing digital services taking into account the best interests of a child?
  • How does your submission demonstrate your approach to creating a set of practical design resources?
  • How does your submission demonstrate your plan to deliver the project over 16 weeks and deliver value throughout the course of your work?
  • How does your submission demonstrate your approach of delivering at speed through agile working practices?
  • How does your submission demonstrate your organisations ability to meet all of the illustrated design guidance deliverables as set out in the specification?
  • How does your submission demonstrate your organisations approach to user testing, particularly where those users are children?
  • How does your submission demonstrate your organisations experience in facilitating effective remote events and building communities?
  • How does your submission demonstrate your understanding of the risk children face through online services use of personal data?
  • How does your submission demonstrate your understanding of information rights law how it will apply in the context of children using digital services?
Nice-to-have skills and experience

How suppliers will be evaluated

All suppliers will be asked to provide a written proposal.

How many suppliers to evaluate
5
Proposal criteria
  • Estimated Timeframe for the work
  • How the approach or solution meets your organisation’s policy or goal
Cultural fit criteria
Flexibility in working method with the allocated ICO team
Payment approach
Fixed price
Additional assessment methods
  • Reference
  • Presentation
Evaluation weighting

Technical competence

75%

Cultural fit

5%

Price

20%

Questions asked by suppliers

1. Background
What is the Age Appropriate Design Code?
The Age Appropriate Design Code is a data protection code of practice for digital services — including apps, websites, connected toys, search engines, social media platforms, online games and streaming services — likely to be accessed by children. It is not a new law. It translates the GDPR requirements into design standards for online services, and takes into account the UNCRC that recognises the special safeguards children need in all aspects of their life.
The code consists of 15 standards that digital services need to implement to ensure they appropriately safeguard children’s personal data and process children’s personal data fairly.
2. Do you have an internal or external community of designers and engineers etc? Do you have a community manager?
The ICO has a small number of internal staff with design and engineering background who can contribute. We also have external working relationships with designers and engineers. We also have some staff focused on engaging with organisations to raise awareness of the code.
3. Do you have any community tools? e.g. Slack
The ICO currently uses Microsoft Teams for our community engagement.
4. Should this be delivered on ico.org.uk What CMS does ico.org.uk use and will we have access?
The ICO uses Umbraco as its CMS. Our starting assumption will be that any output produced should be available on the ICO.org.uk website and under the open government licence. The selected provider will be expected to work closely with the ICO's communications teams to ensure that all outputs are compatible with the technical capability of the ICO website. We are open to other mechanisms of delivery outside of the ICO website e.g. a microsite. In this case, the vendor would be responsible for the design and development of this mechanism.
5. Where do you see deliverables being stored? Online / knowledge platform / public etc
Our starting assumption will be that any output produced should be available on the ICO.org.uk website. The selected provider will be expected to work closely with the ICO's communications teams to ensure that all outputs are compatible with the technical capability of the ICO website. We are open to other mechanisms of delivery outside of the ICO website e.g. a microsite. In this case, the vendor would be responsible for the design and development of this mechanism which would need to conform to ICO compliance requirements.
6. Will you accept partnerships?
The ICO welcomes collaborative bids.
7. What’s driving the reason for the duration for delivery of the work over 16 weeks? Are there any key events or dates relevant to this work?
We aim to produce outputs as soon as possible ahead of the end of the transition period (2nd September 2021). There are no specific key dates or events relevant to this work though we would expect the selected provider to produce outputs throughout the project.
8. How much access with the delivery team have to experts?
The selected provider will have access to the ICO's data protection, design and engineering experts. However, there are resource constraints at the ICO, so advice requests would need to be closely managed and with appropriate notice.
9. Will there be a person able to make decisions from the ICO team? How long will project owner be able to spend on project?
There will be people available to make decisions from the ICO. The ICO has not set any specific amount of time for the project owner to dedicate to the project though they will be available as needed by the supplier.
10. What access to people and information will be provided during project- ie ICO Head of Technology ICO Principal Technology Advisor ICO Head of Regulatory Strategy?
Given appropriate notice and clarification around the nature of the guidance needed, the supplier will have access to the ICO Head of Technology, ICO Principal Technology Advisor and ICO Head of Regulatory Strategy.
11. What is your internal structure and do you have any design resource at the ICO?
The ICO has a dedicated design expert resource available for the duration of the project.
12. Do you have a platform to host the events?
The ICO currently uses Microsoft Teams to host events.
13. What research or community exists already that can support the recruitment for and delivery of events?
The ICO has strategic relationships with representative bodies across several industries. The ICO will likely harness its existing relationships to help with recruitment for events. The ICO would expect the selected provider to have existing relationships with the design community.
14. Will there be a team to run events after the duration of this project?
The ICO is not currently able to comment on potential activities after the completion of this project.
15. Who are the user groups?
The focus of all outputs should be with product teams, designers, and engineers.
16. Do you have a budget for recruitment of users or experts?
We do not have further budget for recruitment of experts or users.
17. Do you have someone who can manage recruitment of users or experts?
The ICO can facilitate access to some child development/risk experts.
18. Do you have any examples of what you think a good design resource is?
There are examples of good design resources that address different needs; however, we are seeking to select a supplier who can demonstrate their vision and ability to deliver a package of support for designers and engineers to strengthen their understanding of the children's code.
19. Do you already have any best in class examples of resources and or guidance that represent the code?
We are seeking to select a supplier who can demonstrate their vision and ability to deliver a package of support for designers and engineers to strengthen their understanding of the children's code.
20. Some standards seem higher priority by nature of you calling them out -why is this?
We have called out specific standards as those standards have posed significant UX challenges. Stakeholders have also indicated to the ICO that the highlighted standards are some of the most challenging.
21. When you say illustrated do you mean illustrations? Or examples of designs?
In this context, we did mean example of designs, not solely illustrations.
22. Have you done any prior research to prioritise these standards?
Stakeholders have indicated to the ICO via several engagement events that these standards are some of the most challenging.
23. Are there any planned next phases of this work that these outcomes would inform or shape?
There are currently no planned new phases of work.
24. Does the ICO have any existing research that would help supplement, inform, or create ‘short cuts’ for the work?
Yes, we have existing research in some areas; for example, the harms framework can help inform the work.
25. How many participants does the ICO expect for each online event?
There is no set limit; however, our ambition is to reach many of the design and engineering community.
26. How would the outcome of the work be shared or hosted publicly? Would the vendor be responsible for the design and development of this?
Our starting assumption will be that any output produced should be available on the ICO.org.uk website. The selected provider will be expected to work closely with the ICO's communications teams to ensure that all outputs are compatible with the technical capability of the ICO website. We are open to other mechanisms of delivery outside of the ICO website. In this case, the vendor would be responsible for the design and development of this mechanism which would need to conform to ICO compliance requirements.
27. Would the online events be co-branded with the vendor that wins the work?
It is likely that the online events could be co-branded.
28. You have asked “How does your submission demonstrate your plan to deliver the project over 16 weeks and deliver value throughout the course of your work?” How does the ICO, within the bounds of DOS Stage 1, require that suppliers demonstrate this experience?
Suppliers will be required to show how they have delivered outputs throughout the lifecycle of a project. You can evidence this with examples from similar previous projects.
29. This is a fascinating and important project and calls for assembled expert skillsets. Are you interested in bid from (2) partners who could work together to deliver the arrangement? Or just one supplier (with potential to bring in expert support)? Are there any parameters here?
The ICO welcomes collaborative bids.
30. As the Essentials skills have been phrased differently to the norm, would you want us to follow the normal format (providing one previous example in the format of problem/what we did/result)? Or are you expecting a different format?
The ICO would welcome examples from previous projects that sufficiently demonstrate your approach in tackling similar problems.