WEB-BASED SICKLE CELL PATIENT REGISTRY

The South Carolina Department of Health and Environmental Control (DHEC) is procuring a web-based Sickle Cell Disease Patient Registry through a Request for Proposal (RFP) with solicitation number 5400024444, specifically targeting Richland County. The procurement seeks a comprehensive, HIPAA-compliant, web-based platform that will allow DHEC-designated staff to enter and manage patient data related to sickle cell disease, with secondary access for providers and clinicians. Key deliverables include a mobile-capable system compatible with standard browsers, featuring customizable dashboards, ad hoc reporting capabilities, and strict data security protocols including AES-256 encryption and mandatory six-year audit logging. The solution must be fully implemented within six months of contract start, with data entry capabilities for demographics, patient history, clinical diagnosis, and treatment plans, and the ability to export data in Excel and PDF formats. Proposal submissions were initially due on December 20, 2022, but were extended to January 3, 2023, at 2:30 PM ET, with award notification originally scheduled for January 20, 2023, and subsequently extended to February 3, 2023. The RFP Evaluation Committee held charging and evaluation meetings on January 6 and January 23, 2023, respectively, to review and select the most qualified vendor.

The solicitation does not explicitly mandate specific set-aside designations, but requires offerors to be registered with South Carolina's Division of Small and Minority Business Contracting and Certification. No incumbent vendors are identified in the documentation. The proposed contract has an estimated budget of $225,000, with the potential for proposals exceeding this amount to be considered. The initial contract term is one year with one optional one-year renewal, resulting in a maximum contract duration of two years (January 20, 2023 - January 19, 2025). All development and support must be based in the United States, with server infrastructure hosted in a continental U.S. Level III or better data center. Contractors must provide comprehensive documentation, 24/7 technical support, system maintenance, and user training. Upon contract termination, the vendor must return or destroy all data within 30 days and provide written certification of destruction. Additional requirements include submission of insurance evidence, completion of a Service Provider Security Assessment Questionnaire, identification of any subcontractors, and execution of DHEC's Business Associate Agreement.