1. Home
  2. |Insights
  3. |GAO Finds Eight Days Insufficient for FPR Response

GAO Finds Eight Days Insufficient for FPR Response

Client Alert | 1 min read | 12.03.19

In a recently published decision, MCR Federal, LLC, GAO sustained a protest challenging the required response date for final proposal revisions in a task order procurement. Specifically, as part of its voluntary corrective action in response to an earlier post award protest by MCR, the agency issued MCR two “interchange notices” stating concerns related to experience levels and the contingent-hire nature of the majority of MCR’s proposed staffing, and permitting MCR two days to “either revise or confirm” its proposal. MCR again protested that the allotted two days were insufficient. In response, the agency extended the deadline to a total of eight days and then moved to dismiss. GAO declined to dismiss. Instead, it sustained MCR’s protest, finding eight days insufficient to provide MCR a fair opportunity to improve its proposal. Subsequently, GAO dismissed the agency’s reconsideration request and declined to recommend a specific time period for final proposal revisions. 


Contacts

Insights

Client Alert | 7 min read | 08.17.26

Delayed Notification of Cyberattacks May Trigger HIPAA Breach Notification Rule

After identifying a ransomware attack in 2021, OSF Healthcare System waited until its forensic investigation had concluded before notifying the U.S. Department of Health and Human Services (HHS) — and the affected individuals — of the breach. The 110-day delay (nearly double the 60-calendar-day notification deadline mandated by the HIPAA Breach Notification Rule) triggered an investigation from HHS’s Office for Civil Rights (OCR). The health system’s investigation determined that protected health information (PHI) had been stolen....