Compliance and Reporting Services (HIPAA & Section 504)

The contract requires the contractor to act as a Business Associate under HIPAA, ensuring full compliance with all associated privacy and security rules, including the implementation of administrative, physical, and technical safeguards to protect protected health information. It mandates timely breach reporting, maintenance of comprehensive documentation, and ongoing monitoring to meet federal standards. Additionally, the contractor must comply with Section 504 of the Rehabilitation Act, guaranteeing accessibility and nondiscrimination for individuals with disabilities in all services and systems provided. Both regulatory frameworks demand rigorous adherence, with clear protocols for incident response, recordkeeping, and staff training to ensure continuous alignment with legal obligations. The agreement is structured as a subcontract under the Public Works - Facilities Services - FMO agency in California, with a North American Industry Classification System code of 541611, indicating professional, scientific, and technical services related to administrative management. The solicitation was posted on May 4, 2026, with responses due by May 20, 2026. The place of performance and point of contact details are unspecified, and no set-aside classification is designated. All work must be performed in accordance with federal compliance requirements, and the contractor is expected to operate with a high degree of accountability, transparency, and diligence in fulfilling these dual regulatory obligations.