EXTRA-79457 - USA (California) - HIPAA Managed Compliance Services - Deadline November 20,2026

(1) Vendor needs to provide HIPAA managed compliance services to the government authority located in California.– Provide advisory, governance, documentation, reporting, and coordination services to support the County’s ongoing compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), including the Privacy Rule, Security Rule, and Breach Notification Rule.– Establish and maintain a documented, defensible compliance program that supports current regulatory requirements and evolving federal guidance and enforcement expectations.– Establish and maintain a documented HIPAA compliance program– Identify, assess, and track compliance gaps and risks– Provide governance, reporting, and oversight support– Support County leadership and designated privacy, security, and compliance personnel– Reduce compliance risk through continuous monitoring and advisory services; and– Maintain a structured and repeatable process for risk analysis, remediation planning, policy review, training, and incident preparedness.(2) All questions must be submitted no later than November 10, 2026.