GSA Identity Protection Services (IPS)

GSA Federal Acquisition Service established a multiple-award Master BPA for identity protection services on September 1, 2015, with a last date to order of August 31, 2020 — the vehicle is no longer accepting new task orders as of nearly six years ago. The BPA covers business information services, credit monitoring, identity monitoring, identity theft insurance, identity restoration, website services, and call center services related to data breach response and employee protection.

Ordering momentum peaked in 2016 and 2017 with seven orders per year, then declined to four orders annually from 2018 through 2020. The BPA generated 28 task orders totaling $825.5 million in combined potential value, of which $811.1 million (98 percent) has been obligated. Competition is heavily concentrated: Identity Theft Guard Solutions, Inc. captured 24 of 28 orders and $821.2 million in potential value, leaving only Sontiq, Inc. with 3 orders ($4.3 million) and Identityforce, Inc. with 1 order ($7 thousand). All task orders were awarded on an unrestricted, non-set-aside basis.

Customer concentration is also pronounced, though more dispersed than prime concentration. Office of Personnel Management dominates with two large orders totaling $382.4 million in potential value, driven by a January 2019 task order for credit monitoring and identity protection related to background investigation cybersecurity incidents and a November 2018 order for the same purpose ($414 million and $42.3 million in potential value respectively). The Department of Health and Human Services Centers for Medicare and Medicaid Services, Pension Benefit Guaranty Corporation, NASA Headquarters, and Defense Human Resources Activity collectively account for nine orders across 22 distinct customer agencies.

Task-order values span a wide range, from less than $800 to over $416 million. Most orders are firm fixed price; a small subset employ time-and-materials pricing. Recent orders (2019–2020) range from $16.6 thousand to $416.9 million in ceiling value, with performance periods extending from one to four years. The vehicle is no longer available for new procurement activity.

GSA has awarded a multiple award BPA to provide identity monitoring data breach response and protection services for the federal government including: (1) Business information services; (2) Credit monitoring services; (3) Identity monitoring services;(4) Identity theft insurance;(5) Identity restoration services;(6) Website services; and (7) Call center services (related to these requirements).