PHI Data Disposal or Secure Return

The contract requires the secure return or complete destruction of all protected health information upon termination, with a mandate to implement indefinite protective measures if destruction is not technically feasible. This obligation applies to any entity handling PHI under the terms of the subcontract, ensuring compliance with privacy and security standards regardless of the contract’s duration or outcome. The agreement is governed under NAICS code 561990 and is posted by the Kentucky agency located at 275 E. Main Street, with response submissions due by September 15, 2026. The place of performance is designated as “Other,” indicating flexibility in where services may be rendered, but all PHI handling must adhere strictly to the contractual requirements for data disposition. There is no set-aside designation, and the solicitation is open to eligible subcontractors without specific organizational type restrictions.