City of Edinburgh Council
Photo by Kirsty S. Ross on Wikimedia Commons, CC BY 4.0

Rules and ethics

Selling to Scottish public bodies, procurement and data rules for Edinburgh suppliers

Lead generation software for Scotland must follow Public Contracts Scotland notices, Scottish procurement legislation and PECR rules on public-body prospecting.

What to take away

  • Lead generation software aimed at Scotland has to track Public Contracts Scotland notices, not just England and Wales portals.
  • Scottish public bodies buy under Scottish legislation, the Procurement Reform (Scotland) Act 2014 and the Procurement (Scotland) Regulations 2016; the UK Procurement Act 2023 treats devolved Scottish authorities as excluded authorities.
  • Edinburgh suppliers face UK GDPR and Data Protection Act 2018 duties, with ICO accountability obligations, over any prospect database.
  • PECR restricts electronic marketing to named individuals at public bodies, so corporate subscriber exemptions need care.
  • Frameworks, hubs and buying routes such as Scotland Excel and Crown Commercial Service shape which contracts are worth tracking.
  • Documentation, including a lawful basis record and a data retention policy, must exist before bidding.

How Scottish procurement law differs from the rest of the UK

Scottish public procurement runs on its own legislation. The Procurement Reform (Scotland) Act 2014 sets rules for how Scottish public bodies advertise and award contracts, and it applies to bodies such as councils, health boards and the Scottish Government. The UK-wide Procurement Act 2023 lists devolved Scottish authorities as excluded authorities, so it does not set the rules for most Scottish public bodies; the detailed procedures are in the Procurement (Scotland) Regulations 2016, made under the 2014 Act.

Scottish vs UK procurement

Scotland

Main law
Procurement Reform Act 2014
Notices portal
Public Contracts Scotland
Thresholds
Scottish-specific
Remedies
Scottish courts

Rest of UK

Main law
Procurement Act 2023
Notices portal
Find a Tender
Thresholds
UK-wide
Remedies
English courts

That means a supplier in Edinburgh cannot assume an England-only workflow. Scottish bodies often publish their own contract notices, use their own thresholds and apply Scottish-specific selection criteria. The practical effect for prospecting is that a Scottish public body may not appear in the same places as an English council.

Scotland also has a distinct set of public bodies. There are 32 councils, NHS boards, Police Scotland, the Scottish Fire and Rescue Service, the Scottish Government and a large group of non-departmental public bodies and agencies. Each is a separate prospect with its own buying habits.

Spend controls add another layer. Under the 2014 Act's contract thresholds, its regulated procurement rules apply to a public contract worth £50,000 or more and to a public works contract worth £2,000,000 or more, and Public Contracts Scotland carries the notices. A lead generation software build for this market should treat Scottish bodies as a separate segment, not a filter on a UK-wide list.

One more difference is the remedies regime. Scottish courts handle procurement challenges under Scottish rules, so the risk profile of a bid differs from England and Wales. Before any campaign, compliance rules must be set around which notices you track and how you store the contact data behind them.

For market sizing, the Office for National Statistics publishes government and public sector statistics that help you rank Scottish bodies by budget and headcount rather than guesswork.

What the Scottish rules cover

  • Procurement Reform (Scotland) Act 2014 duties on advertising and award
  • Procurement (Scotland) Regulations 2016, made under the 2014 Act
  • Scottish Government procurement policy notes and thresholds
  • Sustainable procurement duties on larger contracts
  • Community benefit requirements on contracts above the relevant threshold

Public Contracts Scotland and where notices appear

Public Contracts Scotland is the national advertising portal for Scottish public sector contracts. It is where most Scottish bodies publish notices, including contract opportunities, contract awards and prior information notices. If you sell to Scotland, this portal is the first place your lead generation software should be reading.

From notice to sales lead

  1. Pull notices from Public Contracts Scotland
  2. Enrich with buyer organisational data
  3. Route to the right salesperson
  4. Keep source URL and capture date

It is not the only source. Find a Tender, the UK-wide post-Brexit service, carries higher-value notices. Some Scottish bodies also publish on their own websites, in local press or through sector-specific channels. A single-portal strategy will miss contracts.

Edinburgh is a good example. The City of Edinburgh Council uses Public Contracts Scotland as the main portal to advertise its contract opportunities, works with Scotland Excel and Scottish Procurement on framework agreements, and publishes an annual report on its regulated procurement activities under section 18 of the 2014 Act.

The portal supports free registration as a supplier. Registration lets you set up email alerts by category and keyword, which is useful but blunt. Most suppliers eventually need structured data: notice reference, buyer, value band, deadline, CPV codes and contact details.

That is where a prospecting workflow earns its place. Pull notices, enrich them with the buyer's organisational data, then route them to the right person on your sales team. Keep the source URL and the date you captured it, because buyers can amend or withdraw notices.

Public Contracts Scotland also hosts quick quotes, a lower-value route used by many Scottish bodies. Quick quotes are easy to overlook and often suit smaller suppliers. A prospecting software market entry checklist is a sensible way to decide which notice types justify automated tracking.

Where notices appear

SourceWhat it carriesWho uses it
Public Contracts ScotlandMost Scottish public sector notices, quick quotes, awardsCouncils, health boards, agencies
Find a TenderHigher-value UK notices above thresholdAll UK contracting authorities
Buyer websitesRe-tenders, early market engagementIndividual bodies
Sector channelsHealth, education, transport noticesNHS boards, universities, transport bodies

Data protection duties for Edinburgh suppliers

Any prospect database you build for Scottish public bodies is personal data if it identifies a living individual. That brings the UK GDPR and the Data Protection Act 2018 into play. The Data Protection Act 2018 sets the framework your processing must fit.

Data protection duties

  • Record lawful basis for processing
  • Complete legitimate interests assessment
  • Minimise data collected
  • Write down retention rules
  • Honour objections promptly

The ICO expects accountability, not just compliance. You need to show how you decided a lawful basis, how long you keep prospect records and who can access them. The ICO's guide to accountability and governance sets out those expectations in detail.

For most B2B prospecting, legitimate interests is the usual lawful basis. That is not a free pass. You must complete a legitimate interests assessment, record it and be ready to honour objections. Public-body contacts often have less expectation of marketing email than private-sector buyers.

Data minimisation matters more than volume. Collect the work email, role and organisation, and avoid personal mobile numbers or home addresses unless you have a clear reason. Public sector staff move roles often, so stale records create both accuracy and deliverability problems.

Retention rules should be written down. A common approach is to keep prospect records for a set period, then suppress or delete them, with the period reviewed annually.

If you buy data from a third party, you inherit the duty to check its provenance. Before scaling, check prospecting software UK regulations that apply to your data sources and transfers.

Records an Edinburgh supplier should hold

  • Lawful basis for each prospect category
  • Legitimate interests assessment where relied on
  • Retention schedule with review dates
  • Data source and provenance notes
  • Access log for the prospect database
  • Processor contracts for any tool in the chain

Prospecting to Scottish public bodies without breaching PECR

PECR governs electronic marketing: email, phone and text. It applies to public-body prospecting in Scotland just as it does elsewhere in the UK. The ICO's guidance on business-to-business marketing explains how the rules treat corporate subscribers.

The corporate subscriber exemption is narrower than many sales teams assume. It covers some corporate bodies, but sole traders and some partnerships count as individual subscribers, and those need consent or an existing relationship. A generic council email address is not automatically a safe target.

Phone marketing adds another constraint. Calls must not mislead, must identify the caller and must respect any objection. TPS and CTPS checks are part of the routine, and a public body can object at any point.

Practical steps for a Scottish public-body campaign:

PECR-safe campaign steps

  1. Segment contacts by role and body type
  2. Check corporate or individual subscriber
  3. Record lawful basis and consent
  4. Suppress and log objectors
  5. Review data against retention schedule

Use a prospecting software selection checklist to confirm the tool can store lawful basis and suppression flags, not just names and emails. A tool that cannot record consent or objections will put the campaign at risk.

Common PECR pitfalls in public sector prospecting

Common PECR pitfalls

  • Treating every council email as a corporate subscriber
  • Buying lists without checking provenance
  • Ignoring objections because the contact is a public body
  • Failing to identify the caller on outbound calls
  • Keeping prospect data beyond the stated retention period

Frameworks, hubs and buying routes worth tracking

Many Scottish public contracts are awarded through frameworks rather than open tenders. Frameworks let buyers call off pre-approved suppliers, which shortens procurement and often decides who gets the work. Tracking them is a core part of prospecting Scottish public bodies.

Framework buying routes

Route

Scotland Excel
Local government goods
National Procurement
Health supplies, digital
Crown Commercial Service
Technology, services
APUC
University procurement

Scope

Scotland Excel
Councils
National Procurement
NHS boards
Crown Commercial Service
UK-wide bodies
APUC
Universities

Who calls off

Scotland Excel
National Procurement
Crown Commercial Service
APUC

Scotland Excel is the centre of procurement expertise for local government. It runs frameworks for councils across areas such as construction, social care, ICT and fleet. A place on a Scotland Excel framework can open dozens of call-off opportunities.

National Procurement, part of NHS National Services Scotland, handles frameworks for health. It covers medical supplies, digital services and professional services. Health boards then call off from those arrangements.

Crown Commercial Service frameworks are UK-wide and used by Scottish bodies too. They cover technology, professional services and facilities management. A supplier accredited on a CCS framework can sell into Scotland without a separate Scottish award.

Other routes worth tracking include the Scottish Government's dynamic purchasing systems, university procurement consortia such as APUC, and the Scottish Futures Trust for infrastructure work. Each has its own notice pattern and timescales.

Buying routes at a glance

Typical scope

Scotland Excel
Local government goods and services
National Procurement
NHS and health services
Crown Commercial Service
UK-wide technology and services
APUC
Higher and further education
Dynamic purchasing systems
Repeat, defined categories

Who can call off

Scotland Excel
Scottish councils
National Procurement
Health boards
Crown Commercial Service
Scottish public bodies
APUC
Universities and colleges
Dynamic purchasing systems
Bodies named in the DPS

What Edinburgh suppliers should document before bidding

Documentation is where most first-time Scottish bidders lose points. Buyers assess whether you can deliver, and they want evidence rather than assurances. Build the file before a notice appears, not after.

Pre-bid documentation

  • Companies House registration and accounts
  • HMRC tax status confirmation
  • Employer and public liability insurance
  • Health and safety policy and record
  • Equality and environmental policies
  • Privacy notice and retention policy
  • Legitimate interests assessment and processing record

Start with the basics: company registration, insurance certificates, accounts and tax status. Companies House records and HMRC tax status are routinely checked. Any gap here can disqualify a bid before it is scored.

Then the procurement-specific documents. Most Scottish bodies ask for a completed single procurement document, references, health and safety records, and equality or environmental policies where relevant. Some frameworks add financial standing tests and cyber security questionnaires.

For data-driven sales, add your privacy documentation: privacy notice, retention policy, legitimate interests assessment and a record of processing. These show a buyer that your prospect data handling is governed.

Finally, keep evidence of past delivery. Case studies with named clients, contract values and outcomes carry more weight than generic capability statements. If your work has public sector relevance, say so plainly.

Pre-bid documentation checklist

  • Companies House registration and current accounts filed
  • HMRC tax status confirmation
  • Employer and public liability insurance certificates
  • Health and safety policy and incident record
  • Equality and environmental policies where required
  • Single procurement document completed and saved
  • Privacy notice and retention policy for prospect data
  • Legitimate interests assessment on file
  • Two or more client references with contact details
  • Case studies with contract values and outcomes

Work through this before the next Public Contracts Scotland alert lands. A prepared file turns a two-week scramble into a same-day submission.

Common questions

Do Scottish public bodies use the same portals as English ones?
Most Scottish notices appear on Public Contracts Scotland, while higher-value ones also appear on Find a Tender. English councils mostly use their own portals and Find a Tender, so a Scottish campaign needs both sources.
Can I email a council procurement officer without consent?
It depends on whether the address belongs to a corporate subscriber. Some public-body addresses fall under the corporate subscriber exemption, but sole traders and some partnerships do not. Record your reasoning either way.
What is the lawful basis for prospect data on public-body contacts?
Legitimate interests is the usual basis for B2B prospecting. You must complete a legitimate interests assessment, record it and honour any objection promptly.
How long can I keep prospect records for Scottish public bodies?
There is no single fixed period. Set a retention schedule, review it annually and delete or suppress records once the purpose ends. Document the decision.
Do I need to be on a framework to sell to Scottish councils?
Not always. Many lower-value contracts and quick quotes are open to any registered supplier. Frameworks matter most for repeat, higher-value work.
What happens if a public body objects to my marketing?
You must stop marketing to that contact and log the objection. Continuing after an objection risks an ICO complaint and undermines any future bid credibility.

More in Rules and ethics