LEGAL COUNSEL FOR DATA PRIVACY AND SECURITY INCIDENT RESPONSE

2026-11-03

The City of Philadelphia Law Department seeks legal counsel to provide support and counsel on data privacy and security incidents . Outside counsel will provide support to the HIPAA & Privacy Law Unit and the Office of Risk Management upon request . SCOPE OF WORK 3 . 1 Description of Services This Section 3 . 1 , Description of Services includes the requirements for the project , including the services to be performed and the deliverables that must be met by the selected Applicant . The City reserves the right to change certain service requirements or deliverables based on changed circumstances , like a change in the business or technical environment or contract negotiations with Applicant ( s ) selected for negotiations , without issuing a revised RFP . Applicants should read this section closely . An Applicant ’ s proposed scope of work must detail how they will meet the service requirements or achieve the deliverables described in this section . Applicants may also propose additional or revised services or deliverables to achieve the outcomes described in Section 2 . 3 Outcome Goals of this RFP . However , Applicants must explain why each of these additional services or deliverables are necessary , and when and how they will be completed . Service Requirements The Department requires completion and delivery of at least the tangible work products listed below . The proposed scope of work should state in detail how the Applicant will produce each work product , including the personnel / job titles that will be responsible for delivering the work product . For each work product , the Applicant should propose criteria for satisfactory completion and delivery . Applicants may propose additional or revised tangible or work products , but should explain why each is necessary to achieve the project objectives . ● Capacity , availability , and expertise to respond quickly and effectively to the Law Department in the event of a data privacy or security incident ; ● Legal research and advising via written communication and participation in meetings with Law Department personnel and clients ; ● Management of forensic vendor and other breach response - related vendor contracts and relationships ; ● Correspondence with federal or state regulatory bodies on behalf of the City ; and ● Other deliverables as specified by the Law Department . General Requirements The Law Department ’ s objectives for this project include the following : ● Outside counsel must have significant expertise in data privacy and security incident response , as set forth in Section 2 . 1 , 2 . 2 , & 3 . 1 ; ● Outside counsel will provide support to the HIPAA & Privacy Law Unit , as needed , for the activities described in Section 2 . 1 , 2 . 2 , & 3 . 1 ; ● Outside Counsel may be sought on a project - by - project basis or may be needed for a set time period to cover attorney ( s ) out on leave . The Applicant ’ s proposed scope of work should address each objective specifically and describe in detail how the Applicant will achieve the objective . 3 . 2 Performance Metrics , Contract Management & Payments Performance Metrics The City of Philadelphia is interested in identifying metrics in order to monitor and improve performance during the life of the contract . The Law Department has identified the following metrics and will work with the awarded provider ( s ) to add to or refine this list during contract negotiations . The final set of performance metrics and frequency of collection will be negotiated by each successful Applicant and the Law Department prior to the finalization of an agreement between parties and may be adjusted over time as needed . The successful Applicant shall report to the Law Department on a regular basis regarding the status of projects . At a minimum , the successful Applicant shall submit a monthly invoice detailing the services and / or products provided , the goals / tasks accomplished , and the associated costs . If hourly rates are charged , the invoice must also detail the number of hours , the hourly rate , and the individual who performed the services . Contract Performance Monitoring As part of the City of Philadelphia ’ s commitment to improved outcomes , the City seeks to actively and regularly monitor service delivery to enhance contract management , improve results , and adjust service delivery based on learning what works . Reliable and relevant data is necessary to drive service improvements , ensure compliance , inform trends to be monitored , and evaluate results and performance . As such , the City reserves the right to request / collect other key data and metrics from providers related to the performance of the contract and to reject any item of work that does not meet the performance standards described in the contract .

Pennsylvania

2026-05-09