SPECIAL NOTICE
D -- De-Identification Software Requirement
- Notice Date
- 5/21/2010
- Notice Type
- Special Notice
- NAICS
- 511210
— Software Publishers
- Contracting Office
- Department of the Air Force, Direct Reporting Unit - Air Force District of Washington, AF Surgeon General, 2509 Kennedy Circle, Bldg 125, Rm 187, Brooks City-Base, Texas, 78235-5116, United States
- ZIP Code
- 78235-5116
- Solicitation Number
- RFI-AFMSA-HID
- Archive Date
- 6/22/2010
- Point of Contact
- Alice P. Sanders, Phone: (210) 536-2673
- E-Mail Address
-
alice.sanders@brooks.af.mil
(alice.sanders@brooks.af.mil)
- Small Business Set-Aside
- N/A
- Description
- This is an Request for Information (RFI). This is NOT a solicitation request for proposals or quotations. The purpose of this notice is to obtain information. Responders to the RFI must address each of the listed requirements. If a vendor's software tool does not already support one or more of the requirements, but can be modified to do so in a timely manner, that will, in and of itself, not be a disqualification from consideration. This is not a custom development project and a non-Commercial-Off-The-Shelf (COTS) or GOTS solution will NOT be accepted. If a vendor has several software tools that, when integrated together, satisfy all requirements, the Government will give consideration to the vendor's proposed solution. The Healthcare Informatics Division (HID) of the Air Force Medical Support Agency (AFMSA) is soliciting government, industry and academia for a high quality software tool for encryption and de-identification of protected healthcare information in a large and dynamic healthcare research clinical data repository environment. The specific requirements for this software are as follows: 1. Security of the de-identification method The software should de-identify data in accordance with both HIPAA and ISO accepted standards, with a minimum probability of re-identification by unauthorized personnel. The pertinent sections of HIPAA are embodied by Public Law 111-5 Section 13402 and Public Law 104-191 Section 264 as implemented by the Code of Federal Regulations Title 45--Public Welfare, Subtitle A--Department Of Health And Human Services, Part 164-Security and Privacy, Subpart A-General Provisions, and Subpart E-Privacy of Individually Identifiable Health Information. The international standard for PHI is embodied in ISO Technical Standard (ISO/TS) 25237:2008. 2. Capability for re-identification The software should provide the capability for automated re-identification by authorized personnel when required. 3. Retention of data integrity after de-identification Software must retain the integrity of internal data relationships after de-identification. e.g. If a patient number is used to relate two records for the same patient, the de-identification of that specific patient number must be consistently the same to maintain the integrity of the patient's records. Since the data may represent treatments that have both start and stop dates, the software must have the ability to retain the appropriate date spans for the data to be useful in many research studies. 4. Retention of data format after de-identification Software must retain the native formats of the data after de-identification. In other words, a numeric 9-digit SSN should continue to be a 9-digit numeric value. This prevents the need for redesign and redevelopment of existing databases and applications in order to use the software. 5. Encryption The software should support identity-based field-level encryption using AES (IBSE) in compliance with FIPS 140-2, and include tools to enable symmetric key management and data decryption. 6. Seamless Integration The software must integrate seamlessly into the ongoing operation of the U.S Air Force Medical Support Agency Healthcare Informatics Division's Healthcare Informatics Data Warehouse environment. This environment makes use of Microsoft SQL Server, Oracle, and Cache databases and the Informatica ETL tool. With approximately 40 TB of data, provision must be made for in-situ de-identification of data in the databases without unloading and reloading during initial integration. 7. Ease of use and learning curve associated with the software Any automated software tool for de-identification should require a minimum of overhead and present a short learning curve to be effectively accepted for use. Its use should be as unobtrusive to the normal workflow as possible. Responses shall be limited to no more than 20 pages, not including cover letter, cover page, and table of contents. Each response must address all requirements stated. In addition, responses should include, but are not limited to, the following: (a) technology concept(s) and associated performance, cost and risk parameters; (b) respondent's stated assumptions; (c) technology maturity; (d) cost drivers; and (e) other programmatic and technical information respondents deem necessary top aid the government in its program planning, decision making, and execution. Also include information such as: Company name, address, e-mail, telephone number, points of contact, and size of business pursuant to the North American Industrial Classification System (NAICS) 511210, Software Publishers, Small Business Standard of $25 million. Upon review of all submissions in response to this RFI, AFMSA/HID may schedule individual meetings with any or all respondents to gain further understanding of their specific responses. Responses shall be submitted no later than 3:00 PM CST on 7 June 2010 to points of contacts listed below. All responses shall be transmitted electronically. Submissions shall be compatible with and accessible using Microsoft Office software applications. Additional information: This notice does not obligate the Government to award a contract or otherwise pay for the information provided in response to this RFI synopsis or any future requests. Any information submitted in response to this RFI is strictly voluntary. This RFI is for information planning purposes and the Government will not pay or otherwise reimburse respondents for information submitted. It is the responsibility of potential offerors to monitor this site for the release of any follow-on information. All documentation shall become the property of the Government. Unless otherwise stated herein, no additional information is available and requests for the same will be disregarded. Respondents are advised that the Government is under no obligation to acknowledge receipt of the information received or provide feedback to respondents with respect to any information submitted. All proprietary, classified, or sensitive information must be marked in your response. The Government reserves the right to use any non-proprietary technical information in any resultant solicitations. Primary Points of Contact: Dr. William Redmond, PhD, PMP Sr Database Administrator SpecPro Technical Services William.redmond.ctr@brooks.af.mil (Non-Disclosure Agreement on file with Government) Alice P. Sanders, Civ, USAF Contracting Officer Alice.sanders@brooks.af.mil
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/notices/e82b04db730c6b87666259e2948df0ba)
- Place of Performance
- Address: Brooks City-Base, Texas, 78235-5116, United States
- Zip Code: 78235-5116
- Zip Code: 78235-5116
- Record
- SN02157181-W 20100523/100521235637-e82b04db730c6b87666259e2948df0ba (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |