Defense Health Agency Data Governance Transforming the Data Landscape: A Strategic Imperative for Modern Healthcare in Support of Military Readiness

The Defense Health Agency (DHA) has issued a Firm-Fixed-Price solicitation (HT001126RE011, amended by 0001) seeking contractor support to enhance enterprise data readiness and governance across the Military Health System. The contract focuses on establishing a comprehensive data governance framework aligned with DoD data strategy and VAULTIS principles, aiming to improve data visibility, accessibility, security, and stewardship to support military healthcare and readiness missions. Key tasks include developing a thorough baseline data inventory encompassing metadata for about 80 DHA systems, implementing an interim centralized metadata repository, conducting an Analysis of Alternatives (AoA) for an enterprise data catalog solution, prototyping automated metadata harvesting tools, and evaluating self-service data access portals. The scope covers multiple objectives such as piloting federated governance models, refining data product lifecycle processes, ensuring compliance with NIST and DoD standards, and delivering workforce training on data governance, privacy, and ethical data use. This solicitation is a Total Small Business Set-Aside under NAICS code 541512, with a 12-month base period starting January 30, 2026, and options extending through January 29, 2027. The place of performance and delivery is Falls Church, Virginia. The contract includes detailed instructions emphasizing strict proposal compliance with FAR and DFARS clauses, requiring offerors to submit three separate volumes covering technical capability, past performance, and pricing. Evaluation follows a Best Value Continuum using technical merit (with a primary focus on the technical approach and statement of work), past performance, and price. Technical capability and past performance collectively outweigh price, with adjectival ratings defining risk and proposal acceptability. The contract mandates robust data privacy and cybersecurity controls complying with HIPAA, Privacy Act, and relevant DoD policies, including handling Protected Health Information. The government reserves the right to award without discussions unless deemed necessary. Inspection and acceptance occur at both origin and destination, with the Government holding final acceptance authority. Organizational Conflict of Interest mitigation plans must be submitted if applicable. Invoicing will be managed through Wide Area WorkFlow (WAWF), and the solicitation explicitly forbids proposal deviations or exceptions to solicitation terms.