PHI Breach Response & Incident Reporting

The PHI Breach Response and Incident Reporting subcontract is issued by the Navajo Area Indian Health Service under the Department of Health and Human Services. The selected provider will be responsible for managing incident responses to protected health information breaches, which includes conducting investigations, maintaining documentation, and handling all notification and reporting requirements in accordance with the HIPAA Breach Notification Rule. This opportunity is designated as an ISBEE set-aside for Indian Small Business Economic Enterprises and falls under NAICS code 541611. The place of performance is located in Shiprock, Arizona. Interested parties must submit their responses by the deadline of August 24, 2026.