Data Privacy and Security Policy Development

The contract requires the development and ongoing maintenance of comprehensive data privacy policies, security frameworks, and compliance controls that align with the University of North Carolina at Chapel Hill’s Data Privacy Addendum and the Payment Card Industry Data Security Standard. The scope focuses on ensuring that all systems and processes handling sensitive data meet strict regulatory and institutional requirements, with particular attention to safeguarding personally identifiable information and cardholder data. The contractor must possess expertise in integrating industry best practices with institutional policies to establish scalable, enforceable controls that mitigate risk and ensure continual compliance. This is a subcontract opportunity posted by the University of North Carolina at Chapel Hill under the NAICS code 541618, which pertains to other management consulting services. The solicitation was posted on June 29, 2026, with a response deadline of August 31, 2026. The work is expected to be performed at the agency’s designated location without specific geographic constraints noted. Proposals must demonstrate proven experience in data privacy governance and PCI DSS implementation, along with the ability to collaborate effectively within a public university environment. The contract does not specify a set-aside category, and no point of contact information has been provided in the solicitation details.