The Solar Energy Corporation of India Limited (SECI), a Navratna Central Public Sector Enterprise under the Ministry of New and Renewable Energy, has invited bids for a comprehensive Gap Assessment of its compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025.
The tender, issued on August 10, 2026, under Tender Reference Number SECI/C&P/IT/12/004/26-27, seeks an experienced agency to assess SECI’s existing data privacy framework and identify areas that require improvement. The exercise will cover internal processes, digital applications and operational departments of the organisation.
The selected consultant will be responsible for mapping personal data handling activities and preparing data flow diagrams covering the complete data lifecycle. The assessment will also examine the lawful basis for processing personal data and determine whether SECI falls under the category of a Significant Data Fiduciary (SDF).
The scope of work includes reviewing consent management systems, data retention and deletion practices, vendor agreements, grievance redressal mechanisms and safeguards related to children’s personal data. The consultant will also assess existing privacy and data governance practices against the requirements of the DPDP framework.
Key deliverables under the assignment include a detailed Gap Assessment Report, a risk register and a time-bound remediation roadmap covering immediate actions and measures to be implemented over a period of up to 12 months. The agency will also prepare draft privacy notices, develop a structured data governance model and conduct an executive awareness session for designated SECI personnel.
The contract will initially cover a period of 16 weeks from the effective date of the Contract Agreement or Service Order. SECI may extend the engagement for up to two additional years, subject to satisfactory performance. A formal project kick-off meeting must be conducted within seven days of the work order being issued.
The procurement will follow a Single Stage Two Envelope system, consisting of Techno-Commercial and Financial bids, through the Government e-Marketplace (GeM) portal. Bids will remain valid for 180 days from the final bid opening date. While bids are required to be submitted electronically, specified offline compliance documents must reach SECI within two working days after the online submission deadline.
Bidders must pay a non-refundable tender processing fee of ₹5,000, excluding 18% GST, along with an Earnest Money Deposit (EMD) of ₹25,000. The EMD can be submitted through NEFT/RTGS, Demand Draft, Banker’s Cheque or Bank Guarantee. Eligible Micro and Small Enterprises with valid registration certificates are exempt from both the tender processing fee and EMD.
The successful L1 bidder will be awarded the contract and must submit the required Contract Performance Security within 30 days of the Contract Agreement.
Through this initiative, SECI is strengthening its data protection and privacy framework while aligning its operations with India’s evolving digital regulatory requirements.
Discover more from SolarQuarter
Subscribe to get the latest posts sent to your email.
