HIPAA-Compliant Data & Records Management

The contract requires the management of electronic and physical patient records associated with medical device prescriptions, fittings, and follow-up procedures, ensuring full compliance with HIPAA, HITECH, and all applicable audit standards. This includes maintaining the confidentiality, integrity, and availability of sensitive health information through secure handling practices, access controls, and documentation protocols that meet federal regulatory requirements. The scope encompasses end-to-end record lifecycle management from creation through retention and disposal, with strict adherence to privacy and security safeguards to prevent unauthorized access or data breaches. The work is to be performed at a designated location in Colton, California, with a zip code of 92324-1819, under a subcontract arrangement with Arrowhead Regional Medical Center. The solicitation was posted on February 23, 2026, and responses are due by March 23, 2026. The North American Industry Classification System code 518210 indicates this involves data processing, hosting, and related services, focusing on health information management. Contractors must demonstrate proven experience in healthcare records systems, robust data security measures, and familiarity with federal compliance frameworks to qualify for award.