Data Security and IT Compliance for Subcontractors

The contract requires subcontractors accessing TxDOT data or systems to implement robust administrative, physical, and technical safeguards to ensure the security and integrity of sensitive information, including work logs and personally identifiable information. All subcontractors must comply with strict data protection protocols aligned with federal and state cybersecurity standards, ensuring that access is limited, monitored, and logged appropriately to mitigate risks of unauthorized exposure or breaches. The requirements are designed to maintain confidentiality, integrity, and availability of TxDOT systems and data throughout the subcontractor’s engagement. This agreement applies to all subcontractors performing work related to TxDOT operations, with a specific focus on activities conducted in Webb County. Compliance is mandatory and ongoing, and subcontractors are expected to maintain documented procedures for incident response, data handling, employee training, and system access controls. The solicitation, posted with a matching response deadline on June 1, 2026, under NAICS code 541512 for computer systems design services, underscores TxDOT’s intent to enforce stringent IT compliance across its extended network, with no set-aside provisions applicable. Failure to meet these security obligations may result in contract termination or legal repercussions.