Northeast Ohio Medical University is seeking a qualified consulting firm to assist in determining whether the university qualifies as a Hybrid Entity under HIPAA and to support the implementation of necessary privacy and security controls. The selected firm will conduct a comprehensive review of the university's operations, evaluate HIPAA applicability, and provide legal opinion or compliance memorandum supporting the determination. The firm will also identify and document Covered Components, develop a Hybrid Entity designation memo, and perform a HIPAA gap analysis and risk analysis. The project aims to ensure the university's compliance with HIPAA regulations and to provide guidance on handling sensitive data. Key services include: • Conducting a comprehensive review of the university's operations to identify departments or activities subject to HIPAA • Evaluating HIPAA applicability across the university and its affiliated functions • Providing legal opinion or compliance memorandum supporting the determination • Identifying and documenting Covered Components • Developing a Hybrid Entity designation memo • Performing a HIPAA gap analysis and risk analysis • Supporting the implementation of HIPAA-compliant policies and procedures