R614--DATA/DOCUMENT SHREDDING

The U.S. Department of Veterans Affairs, through the Network Contracting Office 21 in Mather, California, intends to award a sole-source, firm-fixed-price contract to Stericycle, Inc. for continued data and document destruction services across the VA Central California Health Care System and its five outpatient clinics in Fresno, Visalia, Merced, and Oakhurst. This action is justified under FAR 13.106(b)(1)(i) and 41 U.S.C. §1901, based on the determination that only one source is reasonably available to meet the stringent security, compliance, and operational requirements. The services include the secure collection, transportation, and destruction of confidential and protected health information (PHI) using locked containers, secured vehicles, and trained personnel who have undergone background checks and VA-mandated training. All destruction must occur onsite at VA facilities, with final materials rendered irrecoverable through pulping in compliance with NAID AAA standards and VA Directive 6371. A Business Associate Agreement (BAA) is mandatory for handling PHI under HIPAA, and each job must be documented with a Certificate of Destruction containing date, location, method, and responsible party. Contractors are required to possess NAID certification, comply with OSHA safety regulations, implement monitored alarm systems and CCTV at all service locations, and maintain a chain of custody tracked through barcode-labeled containers. Monthly service reports and quarterly compliance sampling by the Contracting Officer’s Representative are required, along with contingency plans to ensure uninterrupted service during equipment failures. All personnel must be U.S. citizens, pass drug screening and background investigations, and complete VA cybersecurity and privacy training. Electronic media must be destroyed using FIPS 140-2 and NIST 800-52 compliant methods, with no return of storage devices without explicit VA authorization. Responses to this sources-sought notice must include the Unique Entity ID, small business status, and evidence of capability to meet all requirements and must be submitted electronically by August 13, 2026, to Kulvinder Brar at kulvinder.brar@va.gov. No formal solicitation will be issued unless responses from other capable vendors compel a competitive procurement, which remains at the sole discretion of the government. The government will not compensate responders, and no contract value or pricing details are publicly available at this stage.