HIPAA-Compliant Data Handling

The contract requires the provision of HIPAA-compliant data handling and data privacy services specifically tied to the administration of a meal program where student health information may be accessed or utilized. The scope centers on ensuring all personal health data is managed in full alignment with HIPAA regulations, including secure storage, transmission, access controls, and breach protocols to safeguard the confidentiality and integrity of student records. The work is classified as a subcontract under NAICS code 541990 and is being managed by the Massachusetts Department of Elementary and Secondary Education under the agency identifier DOE02148. Performance is to take place at Santilli Highway in Everett, Massachusetts, with a ZIP code of 02149, and vendors must respond by August 3, 2026 at 5:00 PM. While no specific set-aside designation is indicated, the solicitation is open to qualified subcontractors capable of delivering robust, compliant data privacy infrastructure and operational support. The contract does not specify a point of contact, and all inquiries or submissions must follow the procedural guidelines outlined in the official posting linked through the CommBuys platform.