Privacy Compliance Document Transcription and Standardization Services

Past New Requirement Updated

Agency
Solicitation expected
Estimated value
$5,000,000 to $10,000,000
Set-aside
Total Small Business

Forecast facts

Anticipated award
Through
NAICS code
541611 Administrative Management and General Management Consulting Services
Place of performance
Washington, D.C., DC
Forecast number
F2026073922
Points of contact

Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.

About this forecast

The Department of Homeland Security Office of Privacy is procuring contractor support under a Total Small Business set-aside to analyze, standardize, and transform over 4,500 legacy privacy compliance artifacts—including Privacy Threshold Analyses and Privacy Impact Assessments—into a modernized Privacy Risk Framework aligned with the Privacy Act, E-Government Act of 2002, OMB guidance, and the NIST Privacy Framework. The contractor shall convert legacy documents into structured, analyzable data; map content to Privacy Risk Framework domains and scoring criteria; identify privacy risks, mitigations, and control gaps; enable future system ingestion and automation; and develop repeatable, scalable workflows to provide decision-support outputs for leadership. The solicitation was estimated for release on July 7, 2026, with award anticipated for September 1, 2026.

The estimated contract value ranges from $5 million to $10 million under the OASIS+ contract vehicle using a Labor Hour contract type, with a period of performance spanning approximately two years from September 1, 2026, through August 31, 2028. Work is performed in Washington, DC. The Contracting Officer is Tanya M. Hill (tanya.hill@hq.dhs.gov, 202-770-4712), and the Contract Specialist is Bridget Boyle (bridget.boyle@hq.dhs.gov, 202-843-0933).

Forecast text

The DHS Office of Privacy requires contractor support to analyze, standardize, and transform over 4,500+ legacy privacy compliance artifacts (including Privacy Threshold Analysis, Privacy Impact Assessment, and related documentation) into a modernized Privacy Risk Framework. The office is implementing a new standardized template framework aligned with the Privacy Act, E-Government Act of 2002, OMB guidance, and the NIST Privacy Framework. This effort is not limited to document conversion.

The contractor shall:

• Transform legacy compliance artifacts into structured, analyzable data

• Map content to the Privacy Risk Framework domains and scoring criteria

• Identify privacy risks, mitigations, and control gaps

• Enable future system ingestion and automation

• Support development of repeatable, scalable workflows

• Provide decision-support outputs for leadership

On GovTribe

Work this forecast

  • Track it in your pipeline
  • Find teaming partners
  • Similar forecasts
  • Ask GovTribe AI about this forecast