Ambulance Transport Billing and Collection Services

Hillsborough County is soliciting competitive sealed proposals for a five-year contract to provide comprehensive ambulance transport billing and collection services for the Hillsborough County Fire Rescue Department, with an estimated project value of $9,360,000. The work involves implementing and maintaining a fully automated billing system, delivering training, and offering ongoing technical and administrative support to ensure efficient revenue cycle management. The contract, issued under solicitation number RFP-26-00324, is open to qualified contractors with demonstrated experience in healthcare billing and data management, and responses must be submitted by August 4, 2026. Performance is required to occur entirely within the state of Florida, with all data handling, processing, and storage restricted to U.S. geographic boundaries unless otherwise authorized in writing. Vendors must comply with stringent cybersecurity and data protection standards, including NIST CSF, NIST SP 800-53 v5, CIS Controls v8, HIPAA, CJIS, PCI DSS, and Florida state privacy laws. Contracts require implementation of encryption protocols such as AES-256 and TLS 1.2+, adherence to NIST SP 800-88 for media sanitization, and ongoing compliance reporting through SOC 2 Type II audits, penetration test results, and cybersecurity questionnaires. All personnel with access to sensitive county data must undergo background checks, and subcontractors require prior written approval, with restrictions on data use prohibiting any application for AI/ML training, marketing, or product development without explicit consent. The vendor must designate an Information Security Officer to oversee compliance and is obligated to report any suspected security incidents within 24 hours and confirmed breaches immediately. Upon contract termination or county request, all county data must be permanently deleted within 30 days with a formal Certificate of Destruction provided. Insurance requirements include automobile liability with business use endorsement, workers’ compensation as mandated by Florida law, cyber liability coverage including data breach response and business interruption, and aviation liability with a combined single limit of either $300,000 or $1,000,000. The county retains full ownership of all data and the right to audit vendor systems and practices at any time.