The Department of Veterans Affairs (VA) Network Contracting Office 5 has issued a Request for Quotations (RFQ) 36C24526Q0187 for an Onsite Representative (OSR) to support the PAR Excellence weight-based point-of-use (POU) inventory management system at the Washington DC VA Medical Center. This is a total small business set-aside with NAICS code 541614 and a $20 million size standard. The contractor will provide one full-time OSR for a base year and four one-year option periods, from March 1, 2026, to February 28, 2031. The OSR must be PAR Excellence certified with at least two years of experience, responsible for system troubleshooting, item registration/deregistration, training, and collaboration with VA staff. The RFQ includes standard government contract clauses, security requirements for unclassified IT resources, and specific instructions for offerors regarding submissions, evaluation, and protest procedures. All invoices must be submitted electronically, and offerors must be registered in SAM.
This Business Associate Agreement (BAA) between the Department of Veterans Affairs Veterans Health Administration (VHA) and a Business Associate establishes requirements for the use and disclosure of Protected Health Information (PHI) in accordance with HIPAA, HITECH, and related rules. The Business Associate provides services to VHA and will handle PHI, adhering to strict guidelines. Key terms like "Business Associate," "Covered Entity," and "PHI" are defined, emphasizing the Business Associate's role in creating, receiving, maintaining, or transmitting PHI on behalf of VHA. The agreement mandates that the Business Associate cannot use or disclose PHI except as permitted by the agreement or law, must comply with VHA's minimum necessary policies, and can de-identify PHI upon request. The Business Associate must implement safeguards, notify VHA of breaches within 24 hours, provide detailed written reports within ten business days, and mitigate harm. They must use U.S.-based subcontractors with equally restrictive agreements and make information available for individual access, amendment, or accounting requests. Upon termination, all PHI must be returned or destroyed, with retention only permitted by law or VHA approval. The Business Associate is liable for HIPAA violations, while VHA agrees not to request impermissible PHI uses and to notify the Business Associate of any restrictions or changes in privacy practices. The agreement can be amended for HIPAA compliance, terminates automatically or for cause, and includes a biennial review. This BAA ensures the secure and compliant handling of sensitive health information in government operations.