ACCT-25997 - USA (Kent, Washington) - HIPAA Risk Audit and Business Associate Agreements Guidance Service - Deadline July 17,2026

(1) Vendor needs to provide HIPAA risk audit and business associate agreements guidance service to the government authority located in Kent, WA. • Conduct a comprehensive audit of HIPAA–related risks within the organization’s system, processes, and data handling practices, and to provide expert guidance on the development, review, and implementation of Business Associate Agreements (BAAs).• Provider will assess HIPAA related risks within the RFA’s systems, processes, and data handling practices, and provide expert recommendations and guidance to support compliance with the Health Insurance Portability and Accountability Act (HIPAA), including the development, review, and implementation of Business Associate Agreements• Perform a full assessment of administrative, physical, and technical safeguards.• Evaluate current data handling, storage, transmission, and disposal practices.• Identify gaps in compliance against HIPAA Security and Privacy Rules.• Provide a prioritized risk register with severity ratings.• Recommend corrective actions and mitigation strategies• Support the development of an internal BAA governance process.• Provide templates or language recommendations for new BAAs.• Provide guidance on risk allocation, indemnification, breach response requirements, and subcontractor handling.(2) All the questions must be submitted no later than July 8, 2026.