Data Privacy & Cybersecurity Compliance Support

The contract requires adherence to GDPR and federal data protection standards across all project data handling activities, emphasizing the implementation of robust technical and organizational safeguards to secure sensitive information. Providers must establish and maintain comprehensive data security protocols, including access controls, encryption, and monitoring systems, to prevent unauthorized access, breaches, or data loss. Ongoing support for incident response is mandatory, with expectations to promptly detect, contain, report, and remediate security incidents while maintaining detailed documentation for regulatory review. The scope also includes active participation in internal and external audits, ensuring consistent compliance through accurate recordkeeping, policy alignment, and continuous improvement of privacy practices. This subcontract is issued under NAICS code 541512 and is open for response until August 13, 2026, with the posting date listed as July 28, 2026. The contracting entity is the state of Utah, though no specific office address or point of contact details are provided. The place of performance and organizational type are unspecified, and the opportunity is available through the Utah BonfireHub portal. The nature of the work demands expertise in cross-jurisdictional data compliance, cybersecurity operations, and audit readiness, suitable for vendors experienced in supporting government data governance frameworks.