Enterprise Privacy Policy Engine (EPPE) Recompete

The Enterprise Privacy Policy Engine (EPPE) is a critical system managed by the Data and Information Dissemination Group within the Centers for Medicare and Medicaid Services Office of Enterprise Data and Analytics, tasked with tracking all disclosures of CMS data. A contractor is required to comprehensively manage all facets of EPPE’s lifecycle, including research, development, ongoing maintenance, and support. This encompasses developing new features, providing DevOps and incident response, conducting user research, maintaining documentation, operating a helpdesk, supporting infrastructure, and transitioning the system to a new cloud environment, as well as any additional responsibilities determined necessary by CMS to ensure the system’s continued functionality and compliance. The procurement is designated as a Total Small Business Set-Aside under NAICS code 541512, emphasizing participation by small businesses. The contract is forecasted under the title Enterprise Privacy Policy Engine (EPPE) Recompete, with key points of contact being Rebecca Dorman as the Program Point of Contact and Walker Hare as the Contracting Officer, both affiliated with CMS. The work will be performed at an unspecified location, and while no solicitation number or posted date is available, the opportunity is intended for small business entities capable of delivering end-to-end technical and operational support for a high-impact privacy compliance system serving a major federal health agency.