HIPAA-Compliant IT & Data Security Support

The contract requires the provision of IT and data security services fully aligned with HIPAA regulations to ensure the secure handling of protected health information. This includes implementing and maintaining robust access controls to restrict PHI access to authorized personnel only, establishing comprehensive audit logging to track all data interactions, and applying strong encryption standards both at rest and in transit. The contractor must also develop and sustain an incident response plan capable of rapidly detecting, containing, and reporting any data breaches or security incidents involving PHI, with strict adherence to federal compliance deadlines and reporting protocols. The scope emphasizes ongoing technical support and proactive security measures to safeguard sensitive health data throughout its lifecycle. The opportunity is structured as a subcontract under NAICS code 541512 for computer systems design services, posted by the State of Utah on July 6, 2026, with responses due by July 28, 2026. While no specific location or point of contact is provided, performance is expected to support Utah’s agency operations. The solicitation does not specify a set-aside classification, indicating it is open to all qualified vendors. Interested parties must demonstrate proven experience in healthcare data security, HIPAA compliance, and the ability to deliver scalable, audit-ready security infrastructure without relying on third-party documentation or references during the submission process.