HIPAA Subcontractor Compliance Management

The contract requires the management of subcontractors who have access to protected health information by ensuring all such parties are legally bound through written agreements that enforce HIPAA compliance standards. This includes the drafting, negotiation, and execution of business associate agreements to establish clear obligations regarding the use, disclosure, and safeguarding of PHI. The contractor must implement a systematic process for ongoing monitoring and auditing of subcontractor activities to verify adherence to HIPAA requirements and maintain rigorous documentation of all compliance efforts, including audit results, corrective actions, and training records. All activities under this contract must align with federal health information privacy regulations and be executed in coordination with the Sheriff’s Office in California. The contractor is responsible for sustaining a robust compliance program that mitigates risk, ensures accountability among third parties, and responds to evolving regulatory expectations. The opportunity is categorized under NAICS code 541611 and has a submission deadline of August 7, 2026, with no set-aside specifications indicated. All work must be performed in accordance with HIPAA’s administrative, physical, and technical safeguards, with full accountability resting with the contractor for any breaches or noncompliance by subcontractors.