2-Attachment I - HIPAA - Worldwide Travel Staffing.pdf

This is a HIPAA compliance attachment document prepared by the Arizona Department of Health Services (ADHS) for the Registry Staffing Services contract opportunity at the Arizona State Hospital. The document outlines HIPAA requirements and compliance obligations that staffing contractors must meet when providing Behavioral Health Technicians (BHTs) and Registered Nurses (RNs) to the facility. The attachment establishes the healthcare data protection standards and privacy requirements that contractors must adhere to when handling patient information and operating within the hospital environment. This document serves as a mandatory compliance framework for all prospective contractors bidding on the staffing services contract, with responses due by March 10, 2025, for services to be provided on an as-needed basis across all shifts at the Arizona State Hospital in Phoenix, Maricopa County.

The HIPAA attachment specifies the federal privacy and security requirements that contractors must incorporate into their operations, including staff training on protected health information (PHI) handling, data breach notification procedures, and business associate agreement compliance. Contractors must demonstrate their ability to maintain HIPAA compliance across their entire staffing operation, ensuring that all personnel assigned to the Arizona State Hospital understand and follow applicable federal healthcare privacy regulations. This requirement applies regardless of contract volume or shift assignments, as any staff member accessing patient information or hospital systems must be fully compliant with HIPAA standards. No specific pricing terms, set-asides, or incumbent information is detailed in this attachment, as it functions solely as a compliance requirement document to ensure all potential bidders understand the mandatory regulatory obligations associated with this healthcare staffing contract.