Data Masking & PHI Protection Services

The contract seeks to implement secure data masking, de-identification, and tokenization solutions specifically designed to safeguard Protected Health Information (PHI) in non-production environments such as development and analytics systems. The goal is to ensure that sensitive health data remains protected while still enabling accurate and compliant use for testing, research, and analytics purposes, without exposing real patient identifiers. The solution must adhere to strict privacy and security standards to prevent unauthorized access, re-identification, or data breaches, and must be scalable to handle large volumes of PHI efficiently across various systems and workflows. This subcontract is posted by the State of West Virginia under NAICS code 541990, which covers other scientific and technical consulting services, and is targeted for performance in Charleston. The solicitation opened on July 14, 2026, with responses due by July 21, 2026, at 2:30 PM. While no specific set-aside or organization type is indicated, the procurement is designed for vendors with specialized expertise in healthcare data security technologies. The contractor will be expected to deliver robust, compliant, and auditable masking mechanisms that align with industry best practices and regulatory requirements for handling PHI, ensuring continuity of safe data usage without compromising patient privacy.