Responses_to_Contractors_Questions.docx

RESPONSES TO CONTRACTORS’ QUESTIONS

Q: Is this an “on-site” Paper shredding solicitation with data bearing media mixed in? The title of the solicitation listed on FBO is “Data Destruction Services” however when reviewing the PWS solicitation it reads as if this is mostly a paper destruction.

A: The contract is primarily for paper shredding but there will be CD/DVDs mixed into the shredding. In the past, there has not been any requirement to separate the paper and CD/DVDs.

Q: We are a HIPAA Compliant Recycling company. Is there any requirement to record any serial numbers on any of the tapes, hard drives, etc. prior to shredding them on-site? What needs to be recorded on the Certificate of Destruction?

A: The contract for shredding will be for the destruction of paper and CD media. The contract will not be processing hard drives, back up tapes, or diskettes.

All Hard drives, diskettes, and back up tapes are destroyed through the 72 MDG Systems office utilizing a process involving microwaves and magnets to wipe the information. Once this process is completed, the wiped hard drives, diskettes, and back up tapes are sent back to the 72 MDG where they are packaged up and sent to DRMO for destruction.

Q: The performance thresholds lists “100% Compliance Mandatory privacy HIPPA Privacy Act”. It is our experience that each agency / office had their own standards of destruction to follow. Is the minimum requirement for this solicitation the HIPPA Standards?

A: The media must be rendered unrecongnizable following the destruction (burning, crushing, shredding, melting, whatever the method may be), in accordance with the HIPAA standard.