Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, July 22 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

HIPAA Compliance and Data Security Implementation

Active

State & Local

Response Deadline08/19/2026, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the implementation of comprehensive administrative, physical, and technical safeguards to protect protected health information in full alignment with the HIPAA Security Rule. This includes conducting regular security evaluations to assess and mitigate risks, as well as managing all aspects of breach notification procedures to ensure timely and compliant responses to any data security incidents. The scope demands strict adherence to federal privacy standards and the establishment of robust, ongoing security protocols within the healthcare environment. This subcontract is issued by the Travis County Healthcare District in Texas and is classified under NAICS code 541612, indicating it pertains to management consulting services related to health and safety compliance. The solicitation was posted on July 20, 2026, with a response deadline of August 19, 2026. Performance location details are not specified, but the work is expected to support the district's obligations under HIPAA. Interested parties must submit responses through the designated Texas SmartBuy portal before the deadline to be considered for award.

General Info

Implement HIPAA-compliant safeguards, security evaluations, and breach protocols for Travis County Healthcare District by August 19, 2026.

Agency

Texas → TRAVIS COUNTY HEALTHCARE DISTRICT

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

TX, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 20

subcontract

Response DeadlineAug 19

Submission deadline

Response Deadline

08/19/2026, 08:00:00 PM UTCin 29 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyTexas → TRAVIS COUNTY HEALTHCARE DISTRICT

ContactsNo contacts available

OfficeN/A

Organization / Agency

Texas → TRAVIS COUNTY HEALTHCARE DISTRICT

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implement administrative, physical, and technical safeguards for PHI in compliance with HIPAA Security Rule. Conduct security evaluations and manage breach notification procedures.

Similar Contracts

Same NAICS industry code

Employee Assistance Program ProviderThe Port of Seattle’s Employee Assistance Program (EAP) is a vital component of its Total Rewards Package, designed to support the wellbeing of employees and their families through confidential, 24/7 access to assessment, counseling, and referral services. The program offers comprehensive resources covering lifestyle and daily living needs, family support, crisis intervention, and financial and legal assistance, all accessible via phone or a dedicated online platform. These services are available not only upon employee request but also when requested by Human Resources to ensure organizational wellbeing and productivity. By addressing personal and professional challenges proactively, the EAP enhances employee engagement and effectiveness, contributing directly to the Port’s broader Century Agenda goal of becoming a highly effective public agency. The program is managed under Human Resources and seeks a qualified provider through a forecasted solicitation with a NAICS code of 541612, indicating a focus on management consulting services. Primary point of contact is Mazarine Ebengho Kyalumba, with Kecia Reichstein serving as Project Manager, both reachable through the Port of Seattle’s internal communications. The solicitation was posted on July 21, 2026, and the opportunity is intended to secure a capable partner to deliver these critical services across the Port’s workforce, reinforcing employee retention and attraction by demonstrating a commitment to holistic support and workplace wellbeing.

Human Resources

POSTED

about 14 hours ago

DEADLINE

Cybersecurity Compliance Assessment & SPRS ReportingThe contract requires a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 standards to ensure adherence to DFARS 252.204-7012 requirements. The scope includes evaluating existing security controls, documenting implementation status, and preparing a formal submission to the Supplier Performance Risk System (SPRS) to demonstrate compliance. All activities must be completed by the response deadline of July 23, 2026, with performance centered in San Diego, California, under the oversight of the ASC Commodities Division within the Department of Defense. The work is classified as a subcontract under NAICS code 541612, which pertains to management consulting services, indicating the engagement involves expert guidance rather than direct operational execution. The deliverables must be accurate, complete, and submitted in a manner that satisfies federal defense contracting obligations regarding the protection of controlled unclassified information.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance for Third-Party AssessorsThe contract seeks qualified third-party assessors to conduct or support Cybersecurity Maturity Model Certification (CMMC) Level 2 assessments for organizations within the defense supply chain that handle controlled unclassified information. These assessments are critical for ensuring compliance with Department of Defense cybersecurity requirements and validating that contractors implement appropriate safeguards to protect sensitive data. The work is tied to a subcontracting opportunity under the ASC Commodities Division of the Department of Defense, with performance required at a designated location in Mechanicsburg, Pennsylvania, 17050-2411. Assessments must align with CMMC Level 2 standards, which encompass a comprehensive set of security practices and processes designed to mitigate cyber threats targeting information systems in the defense industrial base. Interested parties must submit responses by the deadline of July 28, 2026, with the solicitation posted on July 20, 2026. The North American Industry Classification System code 541612 identifies this as an information technology consulting service, indicating the need for specialized technical expertise in cybersecurity evaluation and compliance auditing. This opportunity does not specify a set-aside designation, so all eligible entities may respond, though the nature of the work demands proven experience in CMMC assessments and familiarity with defense-sector security protocols. The requirement will be managed through the DIBBS platform, and proposers are expected to demonstrate capability in performing objective, accredited evaluations across multiple subcontractor environments within the defense supply chain.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2)The contract requires a third-party assessment and certification for Cybersecurity Maturity Model Certification (CMMC) Level 2 to ensure compliance with NIST SP 800-171 standards for handling Controlled Unclassified Information. This subcontract is tied to the Department of Defense’s ASC Commodities Division and specifically applies to operations at the Tracy location with ZIP code 95304-5000. The assessment must validate the contractor’s ability to implement and maintain the security controls outlined in NIST SP 800-171, ensuring proper protection of sensitive but unclassified data. The solicitation was posted on July 20, 2026, and responses are due by July 28, 2026, under the NAICS code 541612 for management consulting services. The contract is not subject to any set-aside provisions and is intended to secure an independent, accredited assessment to meet federal cybersecurity requirements.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2 Assessment Support)This contract provides third-party support to achieve Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance for a Department of Defense contractor, focusing on guidance through the full certification process. The scope includes conducting a detailed gap analysis to identify current cybersecurity deficiencies relative to CMMC Level 2 requirements, developing and organizing the necessary documentation to demonstrate compliance, and coordinating directly with an accredited C3PAO to facilitate the official assessment. The support is tailored to ensure the contractor meets all technical and procedural criteria under the CMMC framework without internal expertise to manage the complexity of the certification process. The work is being performed under a subcontract tied to the Defense Logistics Agency within the Department of Defense and is categorized under NAICS code 541612, which corresponds to management consulting services. The solicitation was posted in July 2026, suggesting a forward-looking procurement aimed at preparing for upcoming compliance deadlines. There is no set-aside designation specified, indicating the contract is open to eligible small or large businesses, and performance is expected to occur wherever the contractor’s operations are located, as no specific place of performance is defined. The contract is accessible through the DIBBS platform for further procurement details.

Defense Logistics Agency

POSTED

DEADLINE

Defense Telecommunications Equipment Prohibition ComplianceThis contract mandates strict adherence to DFARS 252.204-7018 to ensure no prohibited telecommunications and video surveillance equipment, including products from Huawei and ZTE, are present within the defense supply chain. Compliance is enforced through systematic audits and mandatory vendor attestations, requiring suppliers to certify the absence of specified high-risk equipment in all delivered goods and services. The obligation extends to all tiers of the subcontracting network, placing responsibility on the prime contractor to verify and document ongoing compliance across their network of vendors. The contract is classified as a subcontract under the North American Industry Classification System code 541612, administered by the Defense Logistics Agency within the Department of Defense. It was posted on July 20, 2026, and applies to performance across the entire defense supply chain without geographic limitation. While specific performance locations and points of contact are not detailed, the contract’s enforceability is tied to the DIBBS system under award number SPE4A526P6813, ensuring all participants are held to federal cybersecurity and procurement integrity standards. Failure to comply may result in contract termination, financial penalties, or debarment from future defense contracting opportunities.

Defense Logistics Agency

POSTED

DEADLINE

CMMC Level 2 Third-Party Assessment (C3PAO) ServicesThe contract entails a third-party CMMC Level 2 assessment to be conducted by a Certified Third-Party Assessment Organization for a prime contractor operating under Department of Defense guidelines. The assessment is required to validate compliance with the Defense Federal Acquisition Regulation Supplement cybersecurity controls, ensuring the contractor meets the minimum standards for protecting controlled unclassified information within its systems. The work falls under NAICS code 541612, classifying it as management consulting services with a focus on cybersecurity compliance, and is structured as a subcontract to support broader DoD acquisition objectives. The solicitation is managed by the Defense Logistics Agency under the Department of Defense, with the performance location and point of contact unspecified, indicating that the assessment may be conducted remotely or on-site depending on the prime contractor’s infrastructure. The contract was posted for potential engagement in July 2026 and is accessible through the DIBBS system, suggesting it is part of the DoD’s broader effort to enforce CMMC readiness across its supply chain. The subcontractor must be fully accredited to perform CMMC Level 2 assessments and deliver documentation that satisfies DoD audit and compliance requirements without additional oversight.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance and NIST SP 800-171 Assessment SupportThis contract supports the implementation of NIST SP 800-171 cybersecurity controls to safeguard covered defense information within a DoD contractor environment, with a primary focus on achieving compliance readiness for official Department of Defense assessments. The work will involve identifying gaps in current security practices, applying required controls, documenting procedures, and preparing evidence to demonstrate adherence to the standard, all in alignment with DoD requirements for handling sensitive unclassified information. The performance location is specified as Camp Lejeune with a zip code of 28542-0127, indicating the physical or operational site where compliance activities must be conducted. The contract is categorized as a subcontract under NAICS code 541612, which corresponds to management consulting services, suggesting the effort involves advisory, implementation, and readiness support rather than direct systems development. The solicitation window is extremely short, with responses due just three days after posting, signaling an urgent need for immediate contractor support. The awarding agency is the Defense Logistics Agency under the Department of Defense, reinforcing the mission-critical nature of securing defense-related data in a high-priority operational context.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance & SPRS Assessment SupportThe contract requires comprehensive cybersecurity compliance services to ensure subcontractors meet Department of Defense requirements under NIST SP 800-171 standards. Services include conducting detailed assessments of subcontractor systems, identifying gaps in security controls, and providing guidance to remediate deficiencies. The provider will support the accurate calculation and submission of Supplier Performance Risk System scores to demonstrate compliance with federal cybersecurity mandates. This effort is critical for maintaining the integrity of the defense supply chain and ensuring all subcontractors adhere to standardized security protocols established by the DoD. The work is performed under a subcontract relationship, with the overarching obligation falling under the Defense Logistics Agency, and is aligned with NAICS code 541612 for management, scientific, and technical consulting services.

Defense Logistics Agency

POSTED

DEADLINE

Subcontractor Cybersecurity Flow-Down ManagementThis contract mandates the effective flow-down of DFARS 252.204-7014 to all subcontracts that involve the handling of covered defense information, ensuring that subcontractors are held to the same cybersecurity standards as the prime contractor. Compliance with the regulation requires the implementation of safeguarding measures for covered defense information and the reporting of cyber incidents to the Department of Defense, with all obligations fully inherited by downstream vendors. The prime contractor is responsible for verifying and documenting that every relevant subcontract includes this clause and that subcontractors have the capacity to meet the required cybersecurity protocols. The contract operates under the NAICS code 541612, indicating a focus on management consulting services, and is administered by the Defense Logistics Agency, a branch of the Department of Defense. Although specific performance location and point of contact details are not provided, the contractual obligations are tied to the transmission, storage, or processing of sensitive defense data across the supply chain. Ensuring full compliance with the regulation is critical to maintaining contract eligibility, avoiding penalties, and upholding the security posture of the defense industrial base. All subcontractor engagements must include mechanisms for ongoing monitoring, reporting, and enforcement of cybersecurity requirements as defined by DFARS 252.204-7014.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance and Incident ReportingThe contract requires full implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to protect controlled unclassified information within federal systems. It mandates prompt reporting of any cyber incidents to the appropriate government authorities within 72 hours of discovery, ensuring timely response and mitigation. The contractor must also provide full support for forensic analysis when requested, including preservation of evidence, access to systems, and collaboration with investigative teams to determine the scope and impact of security breaches. These obligations are driven by the requirements of DFARS 252.204-7012 and 7014, aligning the contractor’s cybersecurity practices with Department of Defense standards. The contract is classified as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541612, indicating it involves computer systems design and related services. Performance is expected to support DLA’s mission-critical operations, though the precise location of performance is not specified. The solicitation was posted in July 2026 and links to a DIBBS award record, suggesting it is part of a broader procurement effort. Compliance with these cybersecurity mandates is essential for contract fulfillment and may impact eligibility for future work with DoD entities.

Defense Logistics Agency

POSTED

DEADLINE

NIST SP 800-171 Cybersecurity Compliance SupportThe contract supports the prime contractor in achieving NIST SP 800-171 Revision 1 cybersecurity compliance through a comprehensive set of activities including System Security Plan (SSP) assessment, gap analysis, Plan of Action and Milestones (POA&M) development, and submission of the Security Rating Score (SPRS) score. The scope is focused on identifying vulnerabilities and implementing corrective measures to meet federal cybersecurity requirements for protecting controlled unclassified information. The work is performed in New Cumberland, Pennsylvania, with a zip code of 17070-5002, under a subcontract arrangement classified under NAICS code 541612 for management consulting services. The solicitation was posted on July 20, 2026, and responses are due by July 23, 2026, with the contracting activity tied to the Department of Defense’s ASC Commodities Division. All deliverables must align precisely with NIST SP 800-171 standards to ensure full compliance and successful SPRS scoring.

ASC COMMODITIES DIVISION

POSTED

DEADLINE