County of Santa Barbara

Buyer seeks an independent contractor to provide specialized services. Contractor must protect confidential information under HIPAA regulations, implement appropriate safeguards, and maintain proper documentation. Contractor must report any data breaches promptly and allow for audits of their practices. The agreement emphasizes strict compliance with privacy laws and proper handling of Protected Health Information.

• 4/30/2025 - Proposal Due Date

• Must not be debarred or suspended from government contracts
• Must maintain required licenses and permits
• Must comply with county, state, and federal regulations
• Must maintain insurance coverage as specified
• Must be able to certify security practices compliance

• Comply with all data privacy regulations including HIPAA and HITECH Act
• Maintain secure systems for handling Protected Health Information (PHI)
• Implement appropriate safeguards for administrative, physical, and technical protection
• Report breaches within 24 hours of discovery
• Return or destroy Protected Information upon contract termination
• Ensure all subcontractors comply with same privacy restrictions
• Provide access to PHI in designated record sets when requested
• Process amendment requests for Protected Information within 10 days
• Maintain detailed accounting of PHI disclosures
• Allow audits and inspections of records and systems