HIPAA and 42 CFR Part 2 Compliance for Voice Systems

The contract mandates strict adherence to HIPAA, 42 CFR Part 2, and the Privacy Act for all systems and support activities involving protected health information and substance use disorder records, ensuring robust confidentiality and data security protocols are implemented across voice-based technologies. All operations must be designed and maintained to meet federal compliance standards, with emphasis on safeguarding sensitive patient data throughout its lifecycle, from collection and storage to transmission and disposal. This is a subcontract under a Buy Indian Set-Aside, specifically targeted for the Department of Health and Human Services’ Indian Health Services, with performance centered in Gallup, New Mexico, and classified under NAICS code 541611 for administrative management and general management consulting services. Responses are due by May 14, 2026, and the contract is solicited by the Omas Strategic Buying Center—Information Technology, with the intent to support tribal health infrastructure through compliant, secure technology solutions tailored to the unique needs of Native communities.