Data Security & Compliance Legal Support

The contract involves providing legal support to ensure compliance with data security standards through the review, negotiation, and execution of Data Security Agreements and Business Associate Agreements. This work must align with federal regulations including HIPAA for health information privacy, PII protections for personally identifiable information, PCI standards for payment card data, and CMMC requirements for cybersecurity in defense contractor environments. The scope centers on legal verification and documentation processes that safeguard sensitive data and maintain regulatory adherence across all stages of handling and storage. This subcontract is issued by the University of Michigan under NAICS code 541611 for administrative management and general management consulting services, with a response deadline of June 11, 2026. The work is expected to be performed remotely or as otherwise directed, with no specific geographic location identified. Interested parties must submit proposals by the stated deadline to be considered for engagement, with no set-aside designation specified, meaning the opportunity is open to all eligible contractors regardless of business size or status.