AI helper
This RFP solicits proposals for health insurance compliance consulting services related to HIPAA and HITECH for the Public Education Employees Health Insurance Plan (PEEHIP) for fiscal years 2027 through 2031. Services include audit, training, and consulting to ensure PEEHIP's compliance with healthcare security and privacy regulations. Key dates include RFP issuance on April 17, 2026, questions due by May 1, 2026, and proposals due by June 4, 2026. The selected firm will provide legal guidance, conduct yearly in-person or computer-based training, review Business Associate Agreements, perform security and privacy assessments, update policy handbooks, and attend board meetings as needed. Training materials and in-person training must be completed by February 28 of each contract year. Payments will be made monthly, 30 days from receipt of invoice. Proposers must meet minimum qualifications, including experience consulting with self-insured health insurance plans with at least 150,000 covered lives and $500 million in annual claims for three of the last five years. Subcontractors and joint ventures are not approved. Successful proposer must be registered in the STAARS vendor self-service portal. Additional documents required with the proposal include a State of Alabama Disclosure Statement, Immigration Compliance Certificate, Proposer Profile Form, Proposer References Form, IRS Form W9, and an IT Security Questionnaire.
The bid opening date is June 4, 2026, and proposals will not be accepted after 2:00 p. m. CST on this date.
The bid notice states that payments will be made no more frequently than monthly based upon the firm's actual hours worked, and PEEHIP requires payment terms to be payable 30 days from receipt of invoice.
The bid notice states that the selection will be based on a combination of technical score (70 points) and cost proposal (30 points), with a total possible score of 100 points. Finalist interviews may allow for an additional 10 points.
Proposals will be accepted from firms where both the firm and the assigned lead consultant have consulted with and advised a self-insured health insurance plan on its HIPAA security and privacy practices, with such plan having at least 150,000 covered lives and claims of at least $500 million annually. This experience should be for three years of the most recent five years.
The bid notice indicates that there is no possibility of inspection or site visit.
The bid notice states that a sample must not be sent.
The deadline to submit questions regarding this RFP is May 1, 2026, at 2:00 p. m. CST.