Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Privacy Impact and Security Assessment Services

Active

Federal

Response Deadline10/22/2026, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Privacy Impact and Security Assessment Services subcontract, issued by the CDC Office of Acquisition Services under the Department of Health and Human Services, focuses on providing critical privacy and security oversight for prime contractors on CDC/NCHS projects. The scope of work includes performing privacy threshold analyses and security audits, delivering PTA and PIA reports in accordance with CDC SA&A SOP and OMB Circular A-130, and managing SSN Bimination requests. Additionally, the contractor is responsible for updating the Boundary System Inventory annually and coordinating forensic analysis and security assessments. Based in Atlanta, this engagement falls under NAICS code 541690. The primary deliverables consist of comprehensive PTA/PIA reports, updated BSI documentation, and detailed security assessment records to ensure regulatory compliance and system integrity.

General Info

CDC subcontract for privacy impact and security assessment services ensuring regulatory compliance in Atlanta.

Agency

Department Of Health And Human Services → CDC Office Of Acquisition Services

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Atlanta, GA, USA

Set-Aside

NONE

Documents

This scope was carved out of CDC-NCHS-2027-10162026.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

NCHS/Division of Vital Statistics Coding of the Vital Statistics Data

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 16

subcontract

Response DeadlineOct 22

Submission deadline

Response Deadline

10/22/2026, 06:00:00 PM UTCin 5 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Health And Human Services → CDC Office Of Acquisition Services

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Health And Human Services → CDC Office Of Acquisition Services

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs privacy threshold analyses and security audits for prime contractors on CDC/NCHS projects. Provides PTA and PIA per CDC SA&A SOP and OMB Circular A-130, handles SSN Bimination requests, and updates the Boundary System Inventory annually. Coordinates security assessments and forensic analysis. Delivers PTA/PIA reports, BSI updates, and security assessment documentation.

Similar Contracts

Same NAICS industry code

Traffic Data Processing & Reporting

California Department of Transportation

POSTED

about 10 hours ago

DEADLINE

IT Accessibility Compliance & VPAT TestingThis subcontract for IT Accessibility Compliance and VPAT Testing involves performing accessibility auditing for prime contractors on University of Washington IRB/HSD projects. The selected provider will conduct comprehensive UI/UX assessments using tools such as JAWS, NVDA, or Axe to ensure full compliance with ADA mandates and WCAG 2.2 AA standards, specifically focusing on keyboard navigation and screen reader compatibility. The primary deliverables for this engagement include a completed Voluntary Product Accessibility Template or Accessibility Conformance Report, along with a detailed remediation roadmap. Interested parties should note the response deadline of November 21, 2026, for this opportunity associated with NAICS code 541690.

University of Washington

POSTED

about 11 hours ago

DEADLINE

in about 1 month

Survey Design & Data Analysis

Government & Public Affairs

POSTED

about 14 hours ago

DEADLINE

in about 1 month

SmartStart Application Training ServicesThe SmartStart Application Training Services subcontract involves providing technical and operational training for laboratory staff supporting prime contractors on Tarrant County projects in Texas. The primary objective is to deliver SmartStart training focused on the operation, maintenance, and software usage of the QuantStudio 5 Dx instrument to ensure laboratory personnel are fully certified to operate the equipment. To fulfill these requirements, the contractor must provide a manufacturer-trained Application Scientist. This opportunity is categorized under NAICS code 541690, with a response deadline set for November 5, 2026.

POSTED

about 21 hours ago

DEADLINE

Mass-Casualty Science and Simulation ServicesThe Mass-Casualty Science and Simulation Services subcontract supports the Defense Advanced Research Projects Agency within the Department of Defense. The primary objective is to perform scientific research and develop simulation models for prime contractors working on DARPA Biological Technologies Office projects. The scope of work focuses on the creation of mass-casualty simulation software and the execution of operational research regarding casualty flow. To achieve these goals, the contractor will utilize data modeling tools and VR/AR simulation software. The final deliverables include comprehensive mass-casualty simulation models and operational frameworks. This opportunity is categorized under NAICS code 541690, with a response deadline set for November 15, 2026.

Defense Advanced Research Projects Agcy

POSTED

about 22 hours ago

DEADLINE

Lightning Data Analysis & InterpretationThis subcontract, titled Lightning Data Analysis and Interpretation, involves providing expert analysis and interpretation of complex lightning data sets for prime contractors supporting the NASA Shared Services Center. The scope of work focuses specifically on the Orion Lightning Instrumentation and Monitoring Systems, the Mobile Launcher, and Launch Complex 39B. The selected provider will be responsible for delivering detailed technical summaries and data analysis reports to ensure operational safety and system integrity. The project is categorized under NAICS code 541690 and will be performed in Orlando, Florida. Interested parties should note the tight response window, with the opportunity posted on October 16, 2026, and a response deadline of October 20, 2026.

NASA Shared Services Center

POSTED

about 22 hours ago

DEADLINE

Security Due Diligence and Compliance AuditorThis subcontract opportunity is for a Security Due Diligence and Compliance Auditor to perform independent security assessments for prime contractors working on digital evidence projects for the Iowa Department of Public Safety. The selected provider will be responsible for conducting security due diligence, validating hashing practices to ensure court admissibility, and testing the immutability of audit trails. Additionally, the scope of work includes performing vulnerability assessments and penetration testing specifically targeting intake portals. Qualified candidates must hold CISSP or CISA certifications to ensure the technical rigor of the assessments. The primary deliverables for this engagement are comprehensive security assessment reports and formal compliance certifications. Interested parties should note that the response deadline for this requirement is November 19, 2026.

POSTED

about 22 hours ago

DEADLINE

in about 1 month

Campaign Analysis and Scenario DevelopmentThis subcontract opportunity, titled Campaign Analysis and Scenario Development, supports Department of the Air Force projects through high-level military campaign analysis and scenario modeling. The selected provider will develop CONOPS and mission scenarios that integrate joint warfare domains, including air, space, maritime, ground, and cyberspace. A primary technical requirement involves executing the Synthetic Theater Operations Research Model for pre-production, production, and post-production runs to deliver detailed analytic studies and reports. The contract is issued under NAICS code 541690 for the Department of Defense. Due to the sensitive nature of the work, personnel must possess TS/SCI and NATO Secret clearances. The solicitation was posted on October 16, 2026, with a response deadline of November 16, 2026. Performance is centered in the 20330 zip code area.

POSTED

about 22 hours ago

DEADLINE

in about 1 month

Coding Quality Assurance and System ValidationThe Coding Quality Assurance and System Validation subcontract, issued by the CDC Office of Acquisition Services under the Department of Health and Human Services, focuses on quality control and automated-system validation for prime contractors on CDC/NCHS projects. The scope of work involves conducting system validation according to NCHS Research Triangle Park procedures and performing validation coding to ensure an average quality control error rate remains below 2 percent. To achieve these standards, the contract requires high-level nosologists to monitor coder performance and implement necessary corrective actions. The primary deliverables include comprehensive quality control reports and validated coding datasets. This project is based in Atlanta and falls under NAICS code 541690.

CDC Office Of Acquisition Services

POSTED

about 22 hours ago

DEADLINE

Occupational Health and Safety (OHS) Policy DevelopmentThis subcontract for Occupational Health and Safety Policy Development supports prime contractors working on San Diego County Water Authority projects. The selected provider will be responsible for developing and reviewing safety programs and policies, which includes conducting site visits to draft and update safety manuals and standard operating procedures. Key focus areas include Confined Space Entry, Lockout/Tagout, Fall Protection, and Job Hazard Analysis, all of which must comply with Cal/OSHA and OSHA regulations. The scope of work culminates in the delivery of comprehensive written safety programs, policy manuals, and documentation for audit responses. This opportunity is based in San Diego, California, under NAICS code 541690. Interested parties must submit their responses by the deadline of November 13, 2026.

San Diego County Water Authority

POSTED

DEADLINE

As-Needed Safety Consulting Services

Solicitation # 20261015043

The San Diego County Water Authority is soliciting proposals for as-needed safety consulting services to support its Risk and Safety Division in addressing findings from a September 2023 comprehensive audit. The selected consultant will provide expertise in occupational safety and health compliance, specifically focusing on industrial hygiene services under a Certified Industrial Hygienist and the development and review of safety programs such as Chromium, Confined Space Entry, Electrical Safety, and Fall Protection. The contract is designed for a two-year term with a not-to-exceed value of $90,000, and the Water Authority maintains a sole option to extend the agreement for one additional year. The anticipated notice to proceed is scheduled for the week of January 18, 2027. Proposals are due by November 13, 2026, via BidNet and will be evaluated by a Selection Panel using a weighted scoring system: Technical Competence (30%), Organization and Schedule (20%), Past Performance (10%), Cost Proposal (10%), and Subcontractors (5%). Awarded contractors must adhere to strict insurance requirements, including $4,000,000 in general aggregate liability and $1,000,000 in automobile and workers compensation limits. Additionally, the contractor must comply with the Small Contractor Outreach and Opportunities Program (SCOOP) and obtain explicit approval for any use of artificial intelligence. Payments are processed monthly within 30 days of receipt, and all work products remain the property of the Water Authority.

San Diego County Water Authority

POSTED

DEADLINE

International Emergency Response & Crisis ManagementThis subcontract for Arizona State University focuses on providing comprehensive international emergency response and crisis management services. The selected provider will operate a 24/7/365 Security Operations Center to manage crisis escalation paths and coordinate critical actions, including emergency evacuations and medical extractions, for prime contractors involved in the university's international activities. The contract requires the establishment of rigorous emergency response protocols to ensure constant availability and effective crisis resolution. Interested parties must submit their responses by December 14, 2026, under NAICS code 541690.

Arizona State University

POSTED

DEADLINE

in about 2 months

More opportunities from Department Of Health And Human Services → CDC Office Of Acquisition Services

Same awarding agency

Secure Information System Development and DocumentationThis subcontract, titled Secure Information System Development and Documentation, is issued by the CDC Office of Acquisition Services under the Department of Health and Human Services. The project focuses on providing system development and technical documentation for prime contractors supporting CDC/NCHS initiatives. Work is performed in Atlanta and falls under NAICS code 541511. The scope of work requires the development of systems adhering to NIST SP 800-64 guidelines and the implementation of secure coding practices based on US-CERT and OWASP standards. Key technical responsibilities include performing patching and vulnerability remediation according to the OCIO Framework and ensuring boundary protection through Trusted Internet Connection protocols. The final deliverables consist of securely developed software and comprehensive system documentation artifacts.

Custom Computer Programming Services

POSTED

about 22 hours ago

DEADLINE

Mortality and Fetal Death Record Coding ServicesThis subcontract for Mortality and Fetal Death Record Coding Services supports the CDC/NCHS National Vital Statistics System by providing manual coding for records that cannot be processed electronically. The selected provider will utilize ICD-based procedures and NCHS Research Triangle Park standards to deliver coded mortality and fetal death records, ensuring a production error rate remains below 4 percent. The project is managed by the CDC Office of Acquisition Services under the Department of Health and Human Services and will be performed in Atlanta. Qualified candidates must provide coders who are either medically trained or NCHS-certified. The solicitation was posted on October 16, 2026, with a response deadline of October 22, 2026, falling under NAICS code 621512.

Diagnostic Imaging Centers

POSTED

about 22 hours ago

DEADLINE

NCHS/Division of Vital Statistics Coding of the Vital Statistics Data

Solicitation # CDC-NCHS-2027-10162026

The Centers for Disease Control and Prevention, through the National Center for Health Statistics Division of Vital Statistics, is conducting market research to identify qualified sources for information management services. The primary objective is the manual coding of causes of death on mortality and fetal death records for the National Vital Statistics System, specifically targeting records that cannot be processed electronically. The scope includes quality control, automated-system validation, and the use of ICD-based procedures. This effort falls under NAICS code 561499 and is currently in the sources sought phase to determine the appropriate acquisition strategy, which may include various small-business set-asides. The requirement demands high-volume coding capacity, with an expected monthly volume of 25,000 to 45,000 records and a strict quality threshold requiring an error rate below four percent per coder. Qualified providers must supply NCHS-certified nosologists or similarly qualified medical coders and demonstrate the ability to begin performance within one week of award. Performance is expected to occur primarily via remote telework during standard weekday business hours. Due to the sensitive nature of the data, contractors must comply with FIPS 199, Executive Order 13556 regarding Controlled Unclassified Information, and the HHS Information Security Program, utilizing government-furnished equipment and PIV cards for secure network access.

All Other Business Support Services

POSTED

about 22 hours ago

DEADLINE

Dose Reconstruction and Related Activities to Support NIOSH's Responsibilities under the Energy Employees Occupational Illness Compensation Act (EEOICPA)

Solicitation # 0000HCCN-2027-99582

The Centers for Disease Control and Prevention, on behalf of the National Institute for Occupational Safety and Health, is seeking offers for a contract to provide dose reconstruction and related activities supporting the Energy Employees Occupational Illness Compensation Act. The selected contractor will support the Division of Compensation Analysis and Support by performing radiation dose reconstructions for Department of Labor claims and evaluating Special Exposure Cohort petitions. Key responsibilities include data identification, claimant communications, dose estimation, technical program management, and the modernization of systems through cloud migration. This unrestricted competitive acquisition is expected to be a Cost Plus Award Fee contract with a base period from March 1, 2027, to February 29, 2028, and four subsequent twelve-month option periods ending February 28, 2032. Work will be performed at the contractor's facility. Personnel must meet strict security requirements, including background investigations for Level 5C Moderate Risk positions and Department of Energy Q clearances for specific staff. The solicitation is anticipated to be issued in November 2026.

All Other Professional, Scientific, and Technical Services

POSTED

DEADLINE

Safety, Prevention, Epidemiology, and Education Development for Health Care and Antimicrobial Resistance - SPEED 2027-2032

Solicitation # 75D301-27-R-73532

The Centers for Disease Control and Prevention intends to establish a new Indefinite-Delivery/Indefinite-Quantity contract vehicle titled Safety, Prevention, Epidemiology, and Education Development for Health Care and Antimicrobial Resistance (SPEED). This vehicle will replace the existing SHEPheRD program to provide as-needed research and technical support in healthcare epidemiology, health behavior, and healthcare-associated infections. The anticipated period of performance is 60 months, running from March 30, 2027, to March 29, 2032, with the solicitation expected to be released by November 16, 2026. The contract is organized into five functional domains: domestic antimicrobial resistance and infection control, healthcare IT and data solutions, global antimicrobial resistance services, emergency preparedness and resilience, and workforce training and message development. Small business set-asides apply across all domains, with Domains 1 through 4 being partial set-asides and Domain 5 being a total set-aside. Relevant NAICS codes include 541690, 541715, and 611430. Offerors may bid on one or more domains and will be evaluated based on their technical approach, staffing, management, experience, price, and past performance.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Dissemination and maintenance of a Medicaid quality measure over a 12 - month performance period with one additional option period for quality measure maintenance only.

Solicitation # 75D30127Q79325

The Centers for Disease Control and Prevention intends to award a sole source purchase order to the University of Pittsburgh's Medicaid Outcomes Distributed Research Network for the dissemination and maintenance of a Medicaid quality measure. The contract covers an initial 12-month performance period, with one additional option period dedicated specifically to quality measure maintenance. This acquisition is being conducted under FAR Part 12.102(a) because the University of Pittsburgh is identified as the only organization with the necessary measure-specific knowledge and access to the proprietary code required to execute the Evaluation of Hepatitis B and C tasks. The procurement is managed by the CDC Office of Acquisition Services under solicitation number 75D30127Q79325. While the government intends to issue a solicitation only to the identified entity, other responsible sources may submit capability statements to the Contracting Officer by October 23, 2026, to contest the sole source determination. All inquiries regarding this opportunity should be directed to Eugene Gutierrez.

All Other Professional, Scientific, and Technical Services

POSTED

DEADLINE

Data Governance and Compliance OversightThe Data Governance and Compliance Oversight subcontract, issued by the CDC Office Of Acquisition Services under the Department of Health And Human Services, focuses on maintaining strict adherence to DoD data-sharing agreements, HIPAA, and DoD Instruction 6025.21. The primary objective is to manage security protocols and data access controls for sensitive health information, including the implementation of audit logs and privacy impact assessments. This engagement is categorized under NAICS code 541618 and is centered in Bethesda, Maryland. The contract ensures that all sensitive health data is handled according to federal security standards to maintain privacy and regulatory compliance.

Other Management Consulting Services

POSTED

DEADLINE

Public Health Surveillance and ReportingThis subcontract, managed by the CDC Office of Acquisition Services under the Department of Health and Human Services, focuses on public health surveillance and reporting. The primary objective is to conduct ongoing surveillance of Chronic Kidney Disease and End-Stage Kidney Disease using Medical Data Repository data. The resulting reports will be aligned with Healthy People 2030 indicators to provide critical performance metrics and trend analysis. The scope of work includes developing policy recommendations tailored for stakeholders within the CDC and the Department of Defense. This effort is categorized under NAICS code 541618 and is centered in Bethesda, Maryland. The project ensures that data-driven insights are used to monitor health outcomes and inform strategic public health decisions.

Other Management Consulting Services

POSTED

DEADLINE

Analytical Database Development and MaintenanceThis subcontract through the CDC Office of Acquisition Services involves the design, construction, and maintenance of a secure and scalable analytical database dedicated to longitudinal CKD surveillance. The project focuses on establishing robust data ingestion from the MHS Data Repository, implementing comprehensive ETL processes, developing the database schema, and ensuring rigorous data quality assurance and performance optimization. The work is categorized under NAICS code 541512 and is performed for the Department of Health and Human Services. The designated place of performance for this initiative is located in Bethesda, Maryland.

Computer Systems Design Services

POSTED

DEADLINE

Chronic Kidney Disease (CKD) Epidemiological AnalysisThis subcontract, managed by the CDC Office of Acquisition Services under the Department of Health and Human Services, focuses on conducting comprehensive epidemiological studies regarding Chronic Kidney Disease and End Stage Kidney Disease. The primary objective is to utilize Military Health System electronic health records to analyze disease patterns, risk factors, and treatment outcomes, with a specific emphasis on identifying disparities between military and civilian populations, as well as examining pediatric and rare-cause cases. The project is categorized under NAICS code 541611 and is designated for performance in Bethesda, Maryland. This initiative aims to leverage large-scale health data to improve the understanding of kidney disease progression and management within the military health infrastructure.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Contractor Bonding and Insurance ServicesThe contract requires the provision of surety bonding and liability insurance coverage for contractor personnel who operate within Federal Inspection Services areas to comply with federal access and safety requirements. This subcontract is issued by the CDC Office of Acquisition Services under the Department of Health and Human Services, and the services are to be performed in Atlanta. The NAICS code 524126 identifies this as a business involved in insurance and related activities, specifically focusing on the financial guarantees and risk mitigation necessary for federal operations. The contract ensures that all personnel have the required bonding and insurance to meet federal standards for security and accountability in sensitive environments. This agreement is positioned as a subcontract with no specified set-aside status, and although no solicitation number is provided, the posting date is listed as July 28, 2026, indicating a future procurement timeline. There is no designated point of contact listed, and the office address details are incomplete, but the place of performance is clearly defined as Atlanta. The intent is to enable seamless and compliant access for contractor staff into federally regulated inspection areas by guaranteeing financial responsibility and insurance protection against potential liabilities arising from their operations.

Direct Property and Casualty Insurance Carriers

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS