SHREDDING/STORAGE

The contractor is required to provide comprehensive secure records management services at Fort Gordon, Georgia, including pick-up, storage, retrieval, re-filing, destruction, and shipment of media records such as paper, diskettes, tapes, videotapes, CD-ROMs, X-rays, micrographics, and electronic records. All records, including classified documents designated as confidential and those containing protected health information or personally identifiable information (PHI/PII), must be stored in a climate-controlled, secured facility compliant with HIPAA, AR 25-400-2, AFI 33-322, and National Archives and Records Administration standards. Classified and sensitive materials require a separate, regulated secure environment. Approximately 760 to 1,200 cubic feet of cartons will be stored at any time, with each carton to be labeled with a barcode and assigned an accession number using Standard Form 135 for tracking. Annual destruction obligations include shredding approximately 1,500 units of paper and non-paper media and destroying about 800 computer hard drives on-site, with additional bulk purging historically requiring disposal of up to 20 pallets of records at year-end. Records designated for retirement are to be transferred to the AMEDD Records Processing Center in St. Louis, Missouri. The contractor must maintain a 24/7 customer service hotline and provide an on-site representative within two hours during business hours (8:00 a.m. to 8:00 p.m. EST, Monday through Friday, excluding holidays), with an average response time of eight business hours. Packaging and labeling must comply with specific barcode and transmittal form requirements, though military standards such as MIL-STD are not referenced. All personnel must undergo background checks via NCIC-III and TSDB, obtain vendor credentials, wear government-issued badges, and complete mandatory training including AT Level I awareness, DoD Information Assurance Awareness, iWATCH, Privacy Act, HIPAA, and 42 CFR Part 2 training, with certifications submitted within 30 days of assignment and renewed annually. The contractor is designated as a HIPAA Business Associate and must execute Data Sharing Agreements for any use of DHA data, submitting a Certificate of Data Disposition upon agreement termination. Subcontracting limitations restrict payments to non-similarly situated subcontractors to no more than 50% of the contract value for services and supplies. Incidents of sexual harassment or assault on government property must be