MINDSOURCE Website Hosting and Maintenance - FY26-30

The State of Colorado is seeking a contractor to provide website hosting and maintenance services for the MINDSOURCE program from FY26 to FY30. The contractor will be required to comply with the Health Insurance Portability and Accountability Act (HIPAA) and ensure the confidentiality, integrity, and security of protected health information (PHI). The contractor will need to provide written assurance that they will adequately safeguard all PHI and obtain written assurance from their subcontractors and agents that they will also safeguard all PHI. The contractor will be required to report any breaches of PHI to the State of Colorado and cooperate with the State's efforts to audit their compliance with HIPAA. • The contractor will be required to use appropriate safeguards to prevent the use or disclosure of PHI other than as provided in the agreement. • The contractor will be required to restrict the use or disclosure of PHI to the minimum necessary to accomplish the objectives of the contract. • The contractor will be required to provide the State of Colorado with any changes in, or revocation of, permission to use or disclose PHI. • The contractor will be required to notify the State of Colorado of any use or disclosure of PHI not provided for by the agreement, including breaches of unsecured protected health information.