Data Security and Confidential Records Management

The contract titled Data Security and Confidential Records Management requires the secure handling, storage, and disposal of confidential examination data with strict adherence to NIST SP 800-88 standards for media sanitization to ensure complete and irreversible removal of sensitive information. All processes must align with Florida Statute 501.171, governing the protection of personal information and mandatory breach notification procedures, ensuring that data integrity and confidentiality are maintained throughout the entire lifecycle. The subcontractor must implement rigorous controls to prevent unauthorized access, disclosure, or loss of data during any phase of handling or disposal. The contract is issued by the Florida Department of Financial Services under NAICS code 561450, which pertains to commercial services and facilities management. It is open for responses through July 31, 2026, with no set-aside provisions identified. Performance location details are not specified, but compliance obligations apply regardless of geographic location. Interested parties must fully understand the legal and technical requirements tied to state statutes and federal sanitization guidelines to meet compliance benchmarks and avoid penalties, as failure to adhere to these standards could result in regulatory action and reputational harm.