FOI_26-282 Contract register

Date of response: 10 November 2026

We have now considered your request of 15 October 2026 for the following information:

I am writing to submit a request under the Freedom of Information Act 2000 in relation to your organisation’s contract register, procurement strategy, and relevant points of contact.

1. Contract Register Extract

Please provide the most complete and current extract of your organisation’s contract register or equivalent system, as it exists on the date this request is processed or the date of the decision to release the data.

We have already reviewed the contract register published on your organisation’s website, but we do not believe this represents the complete, unedited contract dataset held by your organisation.

This request relates to existing recorded information only. I am not asking for new information to be created, nor for missing fields to be populated. In most cases, this will be a straightforward system export (e.g., from a contract management system or spreadsheet).

Where available, the register should include (but is not limited to) the following fields:

Contract Title,

Supplier Name,

Estimated Spend (annual or total),

Contract Duration and Total Term (including extensions),

Contract Start and Expiry Dates,

Review Date,

Contract Description,

Contract Owner (role or name, as held in the system),

Managing Department,

Award Date,

Procurement Category,

Framework or Tender Reference,

Participating Organisations,

Central Purchasing Body, and Classification Codes (e.g., CPV).

Please do not spend time amending, enriching, or redacting fields that are not readily available. I am content to receive the register in its raw exported form, exactly as held.

Question 2. Website Publication & Data Disparity

While we have reviewed the contract register currently published on your website, we require the full raw contracts register from your internal systems. If your response directs me back to the online portal, please confirm that the accessible dataset is fully up to date as of the date this request is processed or the decision to release the data is made.

Question 3. Completeness & Redactions Please confirm whether the register provided constitutes the full, unedited dataset. If any information, columns, or specific fields have been removed or withheld from sharing, please simply list the headings of the data columns that are missing from the provided register. If spend values are withheld, please note this request seeks indicative or total contract values only, not detailed financial breakdowns.

Question 4. System Capabilities If your organisation uses a specific contract management system, please confirm the name of the software or platform currently in use.

Format and Delivery Please provide the contract register data electronically in Excel or CSV format. For any accompanying documents, policies, or written responses, PDF format is preferred

Our response:

Please see accompanying document, our ref: FOI_26-282 Appendix A. This is an extract of our procurement system 'Source2Contract’ (S2C)' but is not a raw unedited extract of all current contracts, and the following columns have been removed from disclosure:

Savings columns

Process savings

Spectators

Approval activated

Approval completed

Status for approval

General comments – use of UEA only

Details

Participants

Suppliers

Stakeholders

Project references (Project name)

Project references (Project number)

Event references

Contract references

Charge codes – no relevance and for UEA use only

Data Protection Impact Assessment Required

Data Protection Impact Assessment Completion

Contract Risk Analyses

API Key

Department owners

Stakeholder/Customer lead

Stakeholder/Customer lead position

Onedrive Link

Attached Files

On this occasion, it is not possible to provide all the requested information. The Act contains a number of exemptions that allow public authorities to withhold certain information from release. We have applied the following exemption(s) to part of your request.

When a request is made under FOIA for information that includes personal data we are required to consider whether disclosing those data would breach the data protection principles contained within Article 5(1) of the UK General Data Protection Regulation (GDPR).

In considering a disclosure under FOIA, the University must also take into account that any information released under the Act will be placed in the public domain, through our own disclosure log or by other means.

We believe that disclosure of some of the requested information, specifically names of University employed individuals would be contrary to the requirements of Article 5(1)(a) of the GDPR; namely that information must be processed lawfully, fairly and in a transparent manner in relation to the data subject.

We have followed the Information Commissioner’s guidance in assessing whether it is fair to disclose this information under FOIA. This involves considering the nature of the information, the expectations of and potential harm (of disclosure) to the data subjects, and how any legitimate public interest in this information is balanced against the rights and freedoms of the data subjects.

The data subjects would not have had a reasonable expectation that this information would be made public, either now or at the time the information was created. Additionally, we have not identified a lawful basis that would allow or require us to disclose this information. We have therefore concluded that disclosure of this information would be in contravention of the GDPR.