NYC Health + Hospitals

The buyer is seeking an enterprise-wide patient privacy monitoring solution to perform periodic information systems access reviews for applications processing PHI and PII. The solution must provide real-time auditing to detect unauthorized record viewing. The buyer requires implementation, maintenance, support, professional services, and training for the solution. An onsite resource is preferred to support daily operations.

• 2/27/2025 - RSVP for mandatory pre-proposal conference call
• 2/28/2025 - Mandatory pre-proposal conference call
• 3/6/2025 - Proposer questions due
• 3/20/2025 - Proposal Due Date

• Must have been in business for 5 years
• Must have annual revenue of $10 million for last three fiscal years
• Prior experience providing patient privacy monitoring services in two multi-hospital health systems
• HITRUST or ISO 27001 certification
• Solution must have 99% uptime

• Implement enterprise-wide patient privacy monitoring solution
• Provide real-time auditing software to detect unauthorized record viewing
• Import raw records from multiple applications including Epic and PeopleSoft
• Provide maintenance and support post-implementation
• Provide professional services including privacy health checkups and case reviews
• Provide training to end users
• Provide onsite resource to support solution and conduct daily operational activities
• Build use cases and customize reports and dashboards
• Monitor and report privacy incidents within the solution