Consent and Preference Management Software

Inland Empire Health Plan (IEHP), a California-based local public entity and Medi-Cal health plan serving over 1.5 million members across Riverside and San Bernardino counties, issued a Request for Proposal on February 3, 2026, for Consent and Preference Management Software designed to centralize and unify consent and cookie management across multiple platforms including public websites, member portals, and mobile applications. The software must support automated detection and classification of cookies and trackers, integrate with existing systems including Azure Active Directory and current consent management platforms, and ensure compliance with HIPAA, CCPA, and GDPR regulations. Key deliverables include a fully functional consent management platform with multi-platform integration capabilities, compliance documentation, implementation support, training, and ongoing administration. Bidders must demonstrate financial stability, provide evidence of cyber liability insurance of at least $10 million for organizations serving over 1 million members, and submit SOC 2 Type II, ISO 27001, or HITRUST certifications along with security risk assessments and references from three similar contracts awarded within the past three years. The RFP evaluation criteria allocate 65 points to scope and company evaluation, 30 points to cost, 5 points for local preference, and an additional 10 points for demonstrations if held, with all pricing submitted as fully inclusive blended rates covering administration, travel, training, and implementation costs. Bidder questions are due by February 24, 2026, at 2:00 p.m. PT, proposals are due by March 5, 2026, at 2:00 p.m. PT, and bidder demonstrations are scheduled for April 15-22, 2026. The contract term is one year with options to renew for up to four additional one-year periods at IEHP's discretion.

No set-asides or incumbent protections are specified in this procurement, and no disadvantaged enterprise designations or restrictions on respondent types are identified in the available documentation. A local preference of 5 points is available to qualified bidders with fixed offices and majority employees located in Riverside or San Bernardino Counties with at least six months of operating history in those jurisdictions, as documented through California Board of Equalization forms, current business licenses, and proof of business address with staffing evidence. No incumbent vendors or current contractors are identified, though bidders must demonstrate integration capability with existing systems including Azure Active Directory and current consent management platforms already deployed within IEHP's technology infrastructure. All proposals must include execution of a HIPAA Business Associate Agreement, and contractors must comply with nondiscrimination provisions, maintain no conflicts of interest, and certify non-debarment status from state and federal health care program exclusion lists on a monthly basis. The RFP does not commit IEHP to award a contract or purchase any specified amount of services, and IEHP reserves the right to award to multiple bidders, negotiate with selected vendors, request best and final offers, or reject all proposals if determined to be in IEHP's best interest. Specific budget or award value ranges are not disclosed in the available documentation.