CA DMV RFQ #ISD25-3194 national change of address (NCOA)

The California Department of Motor Vehicles (DMV) has issued Request for Quotation (RFQ) #ISD25-3194 seeking a contractor to provide National Change of Address (NCOA) services for vehicle registration renewal notices. The procurement specifically requires file-based NCOA services to update registration print records with address changes from the United States Postal Service (USPS), including address standardization and delivery point barcodes. Key deliverables include Data Personator API software for address validation and Data US Express Entry Bulk API software, with the capacity to process up to 24,000,000 records annually. Mandatory qualifications for bidders include GDPR and CCPA compliance, SOC 2 and HIPAA/HITrust standards, ISO/IEC 27001:2022 certification, and a valid Coding Accuracy Supporting Systems (CASS) certification. The RFQ employs a 500-point scoring methodology with cost as the primary evaluated factor, where the lowest-cost bidder receives maximum points and others receive proportionally lower scores. Bidder questions must be submitted in writing by September 26, 2025, at 5:00 pm PDT, with the quote due on October 9, 2025. The DMV plans to conduct a Public Cost Opening on October 13, 2025, and intends to award the contract on October 21, 2025, with a three-year contract term beginning November 1, 2025.

The solicitation includes provisions for small business and disabled veteran business enterprise (DVBE) preferences, with potential additional preference points available for qualifying businesses. The contract will be funded through the DMV's existing budget, with monthly payments made in arrears based on actual processed and accepted records. The procurement supports the DMV's Digital eXperience Project (DXP), which aims to replace aging systems with a modern platform to improve IT service delivery and operational efficiencies. While a specific contract value is not explicitly stated, the DMV processes up to 3.5 million records per week, suggesting a significant potential annual value. The successful contractor will be responsible for maintaining rigorous security and privacy standards, including encryption, endpoint protection, and vulnerability management, while adhering to state and federal information security regulations. Travel, per diem, and other engagement expenses must be included within the contractor's rates, with the DMV explicitly stating it will not pay for these as separate items. The contract's broad scope and technical requirements suggest a complex procurement targeting vendors with sophisticated address validation and data processing capabilities.