Data Privacy, Security, and Compliance Support

The contract requires comprehensive HIPAA-compliant data protection services for behavioral health information systems, including the implementation and management of encryption protocols, robust breach response procedures, and ongoing monitoring to ensure regulatory adherence. The contractor must act as the designated Privacy and Security Official, assuming full responsibility for safeguarding sensitive patient data, conducting risk assessments, maintaining compliance documentation, and responding promptly to any security incidents within the behavioral health context. The role demands deep expertise in federal health privacy laws and the technical infrastructure necessary to protect electronic protected health information. This subcontract is issued by San Diego County under NAICS code 541512 for information technology services and is open for response until August 26, 2026. Performance is expected to occur within San Diego, with no specified set-aside type or agency organization details provided. The contractor will be embedded within the county’s behavioral health operations, requiring close coordination with internal teams to maintain continuous compliance, train staff on privacy protocols, and ensure all systems and workflows align with HIPAA requirements without disruption to patient care services.