Enterprise Interface Engine and Universal Enterprise Master Person Index (U-EMPI)

New York City Health and Hospitals Corporation (NYC Health + Hospitals) has issued a solicitation (RFP 2813, Solicitation Number 20250116018) seeking qualified vendors to implement and support an upgraded Enterprise Interface Engine and a Universal Enterprise Master Person Index (U-EMPI). The existing enterprise interface engine currently manages around 1,100 system interfaces. The goal is to replace this with a more scalable, modern solution supporting the creation and migration of new and existing interfaces across NYC Health + Hospitals' vast health system, as well as its external partners. The U-EMPI component will provide a unified master patient and provider index featuring accurate medical record number matching, integration of diverse clinical data (including behavioral health), and support for complex patient scenarios. This initiative aims to improve data interoperability, enhance patient care continuity, and enable effective individual and population health management. All work must be performed within the U.S. and comply with applicable healthcare data standards such as HL7, FHIR, XML, SOAP, and DICOM. The solicitation outlines a two-part scope encompassing (1) the Enterprise Interface Engine, including interface migration, error handling, monitoring, and data conversion capabilities; and (2) the U-EMPI system focused on identifier management, duplication prevention, and master list coordination via Health Information Exchange standards. Vendors must submit separate cost proposals for each scope and address detailed technical and operational criteria. Evaluation factors emphasize vendor experience and support (weighted 40%), ability to meet the Statement of Work (20%), cost (20%), and migration/implementation planning. The contract term is three years with two one-year renewal options. Compliance with NYC/NYS Minority and Women-owned Business Enterprise (M/WBE) participation goals is mandatory, with associated utilization plans or waiver requests required during proposal submission. Security requirements are rigorous, mandating vendors sign NYC Health + Hospitals’ Business Associate Agreement (BAA), and adhere to detailed vendor security controls focusing on ePHI protection, encryption standards (TLS 1.2 with PFS), audit logging, and application security best practices consistent with HIPAA and ISO 27001. Proposals are due by March 7, 2025, via a designated Google Forms portal. The solicitation specifies comprehensive administrative and technical proposal instructions including a maximum of 15 pages for the substantive response, separate pricing tables per scope, and mandatory MWBE documentation. Contract terms provided include FOB-Destination delivery, inspection and acceptance at the project site, and NYC Health + Hospitals’ rights to terminate without cause with 30 days’