Information Security & Data Privacy Compliance

The contract requires the implementation and maintenance of comprehensive data security controls in alignment with CDPH Exhibit F, focusing on workforce training, detailed access logging, robust incident response protocols, and strict adherence to California state privacy regulations. All activities must ensure the protection of sensitive health information and reinforce a culture of compliance throughout the organization’s operations. This subcontract, issued by the California Department of Public Health, is open for responses until July 17, 2026, and falls under NAICS code 541611 for management consulting services. While specific performance locations and contact details are not provided, the work is tied to the agency’s operations within California and involves ensuring ongoing regulatory alignment with state-mandated privacy and security standards. Contractors must demonstrate proven experience in executing similar compliance initiatives in public health contexts.