Healthcare Data Registry System Development & Integration

The contract calls for the design, development, and deployment of a secure, cloud-based registry system to manage sensitive donor and recipient data for the Agency for Health Care Administration in Florida. The system must adhere to HIPAA-compliant data handling standards to ensure the confidentiality, integrity, and availability of protected health information. Integration with AHCA’s Identity and Access Management infrastructure is mandatory, requiring authentication and authorization via SAML 2.0 or OIDC protocols. Attribute-based access control must be implemented to enforce granular, role-specific permissions based on user attributes and data sensitivity. The solution must be scalable, resilient, and built with security as a foundational principle throughout the development lifecycle, with a focus on minimizing exposure and maintaining auditability of all data interactions. The project is structured as a subcontract with a NAICS code of 518210, indicating it relates to data processing, hosting, and related information services. Proposals must be submitted no later than October 1, 2026, and the work will be performed under the jurisdiction of the Florida Agency for Health Care Administration. Although no specific place of performance or set-aside details are provided, the technical requirements demand proven expertise in healthcare data systems, cloud architecture, and federal compliance standards. Successful bidders will be expected to deliver not only a fully functional system but also documentation, training, and ongoing support to ensure smooth adoption and sustained compliance with state and federal regulations.