Business Associate Agreement (BAA) Execution & Management

The contract requires immediate execution and ongoing management of Business Associate Agreements with all Medicare Part D plan sponsors within fifteen days of being awarded, ensuring full alignment with HIPAA privacy and security standards as well as Centers for Medicare & Medicaid Services regulations. Compliance is not optional and must be consistently maintained throughout the duration of the agreement to safeguard protected health information and meet federal mandates tied to Medicare Part D operations. The work is classified as a subcontract under NAICS code 541611 and is being managed by the Office of Acquisition and Grants Management within the Department of Health and Human Services, with performance expected to be centered in Baltimore. All activities must be completed prior to the response deadline of May 17, 2026, and ongoing adherence to regulatory frameworks is a core obligation of the contractor.