The Centers for Disease Control and Prevention (CDC) released the solicitation for its Public Health Data Modernization IDIQ in April 2026, a $800 million, seven-year vehicle that will be the agency's primary contracting mechanism for cloud migration, data interoperability, and public health surveillance system engineering. The CDC is targeting 10–12 awardees, with proposals due June 27, 2026. The solicitation is posted on SAM.gov under the CDC's Office of the Chief Information Officer acquisition page.
What CDC is modernizing
CDC's data infrastructure runs largely on aging on-premises systems that hampered the agency's COVID-19 response. The IDIQ funds four functional areas:
- FA1: Cloud migration and infrastructure modernization (AWS GovCloud and Azure Government)
- FA2: Data interoperability and HL7 FHIR implementation for surveillance reporting
- FA3: Public health analytics and disease modeling platforms
- FA4: Cybersecurity, FISMA compliance, and zero-trust architecture
Proposal factors and timeline
- Evaluation factors: Technical approach (most important), management approach, past performance, price
- Proposals due: June 27, 2026
- Awards expected: September 2026
- Small-business track: The IDIQ has a separate 8(a) set-aside track (FA1 only) — 8(a) firms should review the separate solicitation number on SAM.gov
Action items
- Register under NAICS 541512 (Computer Systems Design) and 541519 (Other Computer Related Services) — both are used across the FAs
- Identify past performance references in federal health IT, public health, or epidemiology data systems — CDC places high value on health domain expertise
- Teaming: Large firms need small-business subcontracting plans; small firms should consider teaming with a partner that has CDC past performance