Regulatory Compliance and Business Associate Agreement (BAA) Management

The contract requires management of regulatory compliance obligations under HIPAA and FERPA, focusing on the execution and maintenance of Business Associate Agreements and data sharing agreements to ensure lawful handling of sensitive health and educational information. This includes developing and delivering comprehensive staff training programs to reinforce adherence to privacy standards across all applicable operations, with an emphasis on minimizing risk and maintaining legal compliance. The entity must demonstrate expertise in navigating federal data privacy frameworks and implementing procedural safeguards tailored to the University of Iowa’s operational environment. The contract is structured as a subcontract under NAICS code 541611, reflecting professional administrative and compliance services. It was posted on July 27, 2026, with a response deadline of August 20, 2026, and is administered by the University of Iowa through its Iowa office. While specific performance location and point of contact details are未提供, the work is expected to align with the university’s institutional compliance protocols. Participation requires a thorough understanding of data governance, contractual obligations tied to protected information, and the ability to respond dynamically to evolving regulatory expectations without reliance on external documentation or citations.