Subcontractor Compliance and Business Associate Agreement (BAA) Management

The contract seeks qualified vendors to manage HIPAA Business Associate Agreements and provide comprehensive compliance oversight for all subcontractors that handle protected health information. Responsibilities include ensuring every subcontractor is formally bound by a legally compliant BAA, monitoring ongoing adherence to HIPAA Privacy, Security, and Breach Notification Rules, and maintaining documentation to demonstrate continuous compliance. The vendor must implement systems for tracking agreement execution, conducting periodic audits, providing training, and responding promptly to potential violations or data security incidents involving protected health information. The opportunity is classified under NAICS code 541611 for Management Consulting Services and is issued by the Connecticut Department of Administrative Services Procurement division. The solicitation was posted on June 27, 2026, with responses due by July 20, 2026, at 6:00 PM. All work related to this contract must be performed in compliance with federal health information regulations and is expected to support state-level healthcare operations under Connecticut’s oversight. There is no set-aside designation specified, and the place of performance is not defined beyond the agency’s jurisdiction. Interested parties must submit proposals via the official Connecticut procurement portal.