PATIENT PRIVACY MONITORING SOLUTION

NYC Health + Hospitals (the “System”) is looking for an enterprise-wide patient privacy monitoring solution that will allow it to perform periodic information systems access reviews for its applications processing Protected Health Information (PHI) and Personally Identifiable Information (PII). Accordingly, the System requires real-time auditing software to detect and alert when an unauthorized workforce member is viewing patient records. This is intended to prohibit unauthorized access to and disclosure of patient records. Given limitations of current manual processes to appropriately ascertain unauthorized viewing of patient records, this solution will further assist the System in reducing its risk of exposure to unauthorized access to and disclosure of PHI and PII.

The System is seeking a vendor to implement the Solution, provide maintenance and support post implementation, provide professional services including but not limited to any Privacy Health checkup, case reviews etc., and provide training to end users. Preferably, the selected vendor would provide a permanent onsite resource (a workforce member) to support the solution, infrastructure, build use cases, conduct day to day operational activities regarding the solution, and perform incident monitoring for the duration

of the contract.

Please note that it is expected that the System will own any data produced as a result of use of this Solution.