Covered California issued a competitive RFP (2024‑11) for legal services focused on data‑privacy and security compliance (HIPAA, HITECH, FISMA, NIST 800‑53, MARS‑E, tax‑information safeguards). The selected vendor, Davis Wright Tremaine, will provide counsel on federal and state privacy statutes, support third‑party contracts, and deliver advice on technical security matters. The contract has a base term of 2 years 10 months (Feb 1 2025 – Dec 1 2027) with a funding ceiling of $300,000 and a possible two‑year extension. Proposals were due Dec 2 2024, and the intent‑to‑award was issued Dec 20 2024. The solicitation emphasizes conflict‑of‑interest compliance, required insurance (liability, cyber, E&O), and allows remote work with standard business‑hour availability.