Compliance & Data Security Support (Subcontractor Oversight)

The contract requires subcontractors to adhere strictly to HIPAA and HITECH regulations when handling protected health information, mandating the execution of business associate agreements to formalize privacy and security obligations. Subcontractors must implement data minimization practices to limit PHI access solely to what is necessary for service delivery and maintain robust breach notification protocols to ensure timely reporting of any data incidents. Ongoing IT security monitoring is required for all systems processing PHI, with continuous oversight to detect, prevent, and respond to potential threats. Compliance is non-negotiable and forms the foundation of the subcontractor’s performance obligations under this agreement. The solicitation is issued by the Travis County Healthcare District under NAICS code 541512 for compliance and data security support services, with submissions due by August 18, 2026. The work is tied to systems that handle sensitive health data, requiring subcontractors to demonstrate proven capability in healthcare data governance and cybersecurity. There is no set-aside designation, and the contract is open to any qualified entity capable of meeting the stringent regulatory and technical requirements. All performance must align with federal health information privacy standards and operationalize security controls without compromise.