6640--KIT, 10-TEST, MRSA NXG, IVD, GX

The West Palm Beach VA Healthcare System is seeking a vendor to provide PCR testing services under a lease/reagent rental agreement covering equipment, maintenance, reagents, and consumables for real-time nucleic acid analysis of critical infectious agents. The contract mandates ongoing testing for Clostridium difficile including the epidemic 027 strain, Methicillin-Resistant Staphylococcus aureus, SARS-CoV-2, Influenza A&B, Respiratory Syncytial Virus, and Chlamydia trachomatis/Neisseria gonorrhoeae using stool, nasal, urine, and swab specimens. Estimated annual volumes total approximately 7,500 tests, with specific kit requirements outlined for each pathogen, though volumes are not guaranteed. Performance begins on April 1, 2025, with a six-month base period and up to four one-year option periods extending through September 30, 2029. The vendor must ensure all tests remain available throughout the contract term and reimburse the VA for any additional costs incurred if a test becomes unavailable on the approved list. All service, repairs, and routine maintenance beyond user-level tasks must be performed by the vendor within two hours of notification during business hours, with no added expense to the government, and all maintenance activities must be scheduled in advance. The contract imposes stringent information security, privacy, and data handling requirements aligned with federal laws and VA directives. Contractors are bound by the same obligations as VA personnel regarding the protection of sensitive health and personally identifiable information under the Privacy Act, HIPAA, FISMA, and NIST standards. All VA data must be encrypted using FIPS 140-2 validated tools, must not be co-mingled with non-VA systems unless necessary and properly separated, and must be destroyed or sanitized per VA Handbook 6500.1 before contract termination or equipment return. The contractor must complete annual Contractor Security Control Assessments, submit training certifications for all personnel on cybersecurity and privacy rules, and immediately report any security incident or potential data breach to the VA’s Contracting Officer, Information Security Officer, and Privacy Officer. In the event of a certified data breach involving sensitive personal information, the contractor is liable for liquidated damages of $37.50 per affected individual to cover credit monitoring, identity theft insurance, fraud resolution, and legal expenses. Equipment with embedded storage media containing VA data cannot be returned to the vendor unless the media is removed and replaced by VA-pro