Code development platform for open source projects from the European Union institutions 🔵 EU Login authentication by SMS has been phased out. To see alternatives please check here

Skip to content

Awarded supplier information - GPDR - annex IV of the Directive 2014/24

When looking at CAN data 2023, 2024 and 2025 from FI we have very many CAN that have awarded suppliers personnels' personal data in organisation's contact details.

It gets even worse if the supplier is a micro organisation: even the street address, city, post code can be his / hers home address AND the contact point, e-mail address and telephone number have his/hers personal details. Snapshot from our system so that you get the picture what I am talking about:

Näyttökuva_2025-01-31_092521

In my view this information according to GDPR should not be there. It has not helped and will not help that CAs are told not to provide GDPR information in these fields. Micro and even small awarded suppliers do not always have "a functional mail address" or webpages.

In addex IV to the Directive the following information is required in CANs: For each award, name, address including NUTS code, telephone, fax number, email address and internet address of the successful tenderer(s)

Can we find a way for not having to give this information as mandatory?

Isn't the suppliers name, country and ID enought to identify the supplier?

I believe in all EU countries there is some kind of business register where there is more information on the company that what can be / need to be provided in CANs. Same kind of registers must exist outside of EU as well - how else the rating companies (Moody's and the likes) could provide therve very compehensive service? By connecting to national registers we could get more valuable data of the company than by just relying on CAn info. Also, in these registers there is no always a telephone or fax number, nor e-mail address or internet address but there is often much more valuable info on the size of the company, turnover, number of years in operation, etc. Please check what the statistical offices are required to provide.

HENCE, my question and proposal:

Because the measures already take have not proven successful, we need to do something to the personal data in CANs.

For supplier information can the following fields be made voluntary on the bases of GDPR (if not already):

TED BT-510: Organisation Street TED BT-513: Organisation City TED BT-512: Organisation Post Code TED BT-505: Organisation Internet Address TED BT-502: Organisation Contact Point TED BT-506: Organisation Contact Email Address TED BT-503: Organisation Contact Telephone Number

Talking about simplification...

For some background: the decision from our Supreme Admistrative Court published just today. As this is Supreme Court decision it will be applicable in other FI cases and areas (other than fur farming as well). This is AI translation.

GDPR_and_micro_organisations_-_FI.docx

Edited by Timo Rantanen