Service Treatment Records in Support of BUMED

Other / Unclassified

This document outlines the standard contract language for the Department of the Navy (DON) regarding the protection of Personally Identifiable Information (PII), Protected Health Information (PHI), and Federal Information Requirements. It details the contractor's responsibilities concerning the Privacy Act of 1974, the Freedom of Information Act (FOIA), and the Health Insurance Portability and Accountability Act (HIPAA).

Key areas covered include:

• Records Management: Compliance with federal and DON requirements.
• Freedom of Information Act (FOIA): Procedures for handling FOIA requests, including submission to the BUMED FOIA Officer.
• Systems of Records: Identification and management of systems containing PII, including coordination for Systems of Records Notices (SORNs).
• Privacy Impact Assessment (PIA): Requirements for PIAs when storing DoD or DON data on contractor-owned systems.
• Data Sharing Agreements (DSA): Consultation with BUMED Privacy and Civil Liberties Office for accessing, using, or storing DoD/DON data, including PII/PHI.
• Human Subject Research: Compliance with DFARS clause for contracts involving human subject research.
• Privacy Act and HIPAA Training: Requirement for staff training and certification.
• HIPAA Business Associate Provisions: Requirement for a Business Associate Agreement (BAA) with BUMED.
• Breach Response: Detailed procedures for reporting and responding to potential or confirmed breaches and cybersecurity incidents, including timelines and reporting channels.
• Individual Notification Provisions: Procedures for notifying affected individuals in the event of a breach.
• Applicable FAR Clauses: Lists relevant Federal Acquisition Regulation (FAR) clauses related to privacy and security.

This document is critical for any bidder whose contract may involve handling PII, PHI, or other sensitive government information. It clearly defines the legal and regulatory obligations, reporting requirements, and necessary agreements (like BAAs and DSAs) that contractors must adhere to. Understanding these requirements is essential for ensuring compliance and avoiding penalties, and it directly impacts how a contractor must manage data and respond to security incidents throughout the contract lifecycle.

Statement of Work (SOW) / Performance Work Statement (PWS)

To ensure the timely and accurate disposition of Service Treatment Records (STRs) to the Department of Veterans Affairs (VA) for Navy veterans filing claims, by digitizing paper-based STRs into the Healthcare Artifact and Information Management Solution (HAIMS).

• Receive, inventory, process, track, and finalize disposition of STRs, including dental records and loose late flowing (LLF) medical documentation for Navy Service Members (SMs) who have separated or retired.

• Provide conversion services for paper STRs, Electronic Health Record (EHR) documents, generation of DD 2963s, and conversion of LLF documents to electronic images.

• Prepare documents for scanning, including validation, indexing, reassembly of folders, and confirmation of image delivery in a searchable electronic format to the HAIMS repository.

• Contractor must hold ISO 9001:2015 Certification and comply with NIST standards and various DoD directives and manuals related to privacy, cybersecurity, and information management.

• Scan and upload all received records and LLF medical documentation within 15 calendar days of receipt.

• Deliver an estimated 8 million images per year.

• Ensure 100% legibility of all documents and scan with 99.5% accuracy.

• Zero misfiled pages in the STR.

• Maintain an electronic communication log for incomplete records.

• Provide weekly production reports.

• Base period: March 1, 2026 - February 28, 2027.

• Four (4) 12-month option periods.

• Services to be performed at a contractor operator facility within 50 miles of the BUMED Project Management Office (PMO) in St. Louis, MO.

• Estimated warehouse requirement: 4,500 square feet.

• Treat all documentation as privileged and confidential, adhering to HIPAA and Privacy Act requirements.

• Utilize the DoD Paper Health Record Tracking system (PRT) or current DoD system for tracking.

• Comply with cybersecurity requirements, including obtaining necessary system access and training.

• Maintain a secure scanning environment.

• Provide a production management tracking system and an internal chain of custody tracking system.

• Personnel must be trained on Navy STR indexing, DD 2963, and relevant forms, and complete annual training.

Other / Unclassified

This document is a Standard Operating Procedure (SOP) from the Navy Medicine Readiness Activity (NMRA) detailing the process for accessing and utilizing the Armed Forces Health Longitudinal Technology Application (AHLTA) and its associated AHLTA Web Print (AWP) function. It provides step-by-step instructions for Navy Medicine Records Activity staff to look up Service Members, request, and download patient records.

While this document is an internal SOP, it outlines the systems and processes used for accessing and managing electronic health records within the Navy Medicine system. Understanding these procedures can be relevant for contractors involved in healthcare IT, data management, or any services requiring access to or interaction with military health records. It details the technical steps, security protocols (CAC authentication, consent banners), and specific applications (AHLTA, AWP, AWP-SA) used, which may inform potential bidders on the technological environment and data handling requirements in related opportunities.

Solicitation / RFP / RFQ

This solicitation, N0018926RB007, issued by NAVSUP FLT LOG CTR NORFOLK, is for "Healthcare Artifact Image Management Solution Service Treatment Records services in support of BUMED." The acquisition is unrestricted.

• Services in accordance with the Performance Work Statement (PWS).

• Software in support of CLIN 0001.

• The document references a Performance Work Statement (PWS) as Attachment 01.

• Pricing Arrangement: Firm Fixed Price.

• The contract includes multiple option line items (1001 through 4002), each for 12 months.

• The period of performance for CLIN 0001 is from 01 Jun 2026 to 31 May 2027.

• Option line items extend the period of performance annually through 31 May 2031.

• The contract type is contemplated as a firm fixed price contract.

• Offer Due Date: 30 Apr 2026, 04:00 PM EST.

• Proposals must be submitted electronically via email to william.p.stevenson28.civ@us.navy.mil.

• Proposals must be submitted in two separate email attachments: Volume I (Non-Price Proposal) and Volume II (Price Proposal).

• Volume I (Non-Price Proposal) is limited to ten (10) pages and includes Performance Approach, Past Performance, and Socio-economic Plan.

• Volume II (Price Proposal) is not page limited and includes completed solicitation documents and a detailed price breakdown.

• Key evaluation factors (in descending order of importance) for non-price proposals are: Proof of a NARA compliant facility, Performance Approach, Past Performance, and Socio-economic Plan.

• Offerors must provide proof of a NARA compliant facility within the local commuting area of Navy Medicine Records Activity (NMRA).

• Performance Approach is rated higher than Past Performance, which is rated higher than Socio-Economic Plan.

• Offers will be evaluated in two phases: Phase I (NARA facility proof) and Phase II (Performance Approach, Past Performance, Socio-Economic Plan, and price).

• The Government reserves the right to award to other than the lowest evaluated price or highest technically rated offeror.

• This acquisition is unrestricted.

• Small business subcontracting goals are provided: Small Business (21.95%), WOSB (5%), SDB (5%), VOSB (3%), SDVOSB (3%), HUBZone (3%).

• The solicitation includes extensive clauses regarding contractor access to facilities, information technology, and security requirements, including background investigations and Common Access Card (CAC) issuance.

• The solicitation also details requirements for the Quality Assurance Surveillance Plan (QASP) and Contractor Performance Assessment Reporting System (CPARS).