Subcontractor Management & BAA Compliance Coordination

The contract requires the successful bidder to serve as the primary compliance liaison responsible for ensuring all subcontractors enter into and execute HIPAA Business Associate Agreements and consistently uphold privacy obligations when processing, storing, or transmitting protected health information. This role involves actively coordinating with subcontractors to verify their adherence to federal HIPAA regulations, monitoring compliance protocols, and addressing any gaps or failures in documentation or practice to maintain the integrity of health data handling across the supply chain. The position demands meticulous oversight, clear communication, and the ability to enforce contractual privacy obligations without delay. This subcontract is issued by the County of Merced under NAICS code 541611 and is open for response until July 27, 2026. The work is tied to the administration of health-related services under the county’s oversight, requiring the contractor to function as a critical bridge between vendor operations and regulatory compliance. While the physical location of performance is unspecified, the scope is centralized around ensuring all third-party actors handling protected health information are legally and procedurally aligned with HIPAA standards, making this a high-stakes, compliance-driven engagement with no tolerance for noncompliance.