AddendumThreeRFSQ-HIPAAComplianceResponses.pdf

This is an addendum to a Request for Statement of Qualifications (RFSQ) issued by California County regarding Health Insurance Portability and Accountability Act (HIPAA) Compliance Program Services. The addendum outlines compliance requirements and response procedures for qualified agencies seeking to provide risk management and insurance consulting services. The document establishes mandatory HIPAA compliance standards that prospective contractors must address in their qualifications submissions, ensuring that all vendors understand and can meet the county's federal privacy and security obligations related to health information management. The addendum specifies the format and content requirements for vendors' written responses demonstrating their HIPAA compliance capabilities, experience, and organizational policies.

The addendum establishes clear expectations for bidder responses regarding HIPAA compliance protocols, including detailed documentation of privacy safeguards, security measures, breach notification procedures, and staff training programs. Vendors are required to provide evidence of their ability to maintain Protected Health Information (PHI) in accordance with federal standards, including technical, administrative, and physical safeguards. The submission requirements define the evaluation criteria the county will use to assess each bidder's qualifications in this service category, with responses incorporated into the overall evaluation of each firm's suitability for the risk management consulting contract. This addendum ensures that only vendors demonstrating robust HIPAA compliance programs can be considered for services involving health-related data and information systems.