1. Home
  2. |Insights
  3. |"Rule of Two" For Small Business Set-Asides Extended to Award of Task and Delivery Orders

"Rule of Two" For Small Business Set-Asides Extended to Award of Task and Delivery Orders

Client Alert | less than 1 min read | 10.21.08

In Delex Systems, Inc. (Oct. 8, 2008, http://www.gao.gov/decisions/bidpro/400403.pdf), GAO expanded the reach of FAR 19.502-2(b), which requires an agency to limit competition to small businesses when it concludes it has a reasonable expectation of receiving offers from at least two responsible small businesses and award can be made at a fair and reasonable price. GAO held that the so-called "Rule of Two" applies to task and delivery order competitions among multiple-award contract holders, opening up a new class of award decisions to the small business set-aside requirements and potential bid protests.

Contacts

Insights

Client Alert | 7 min read | 08.17.26

Delayed Notification of Cyberattacks May Trigger HIPAA Breach Notification Rule

After identifying a ransomware attack in 2021, OSF Healthcare System waited until its forensic investigation had concluded before notifying the U.S. Department of Health and Human Services (HHS) — and the affected individuals — of the breach. The 110-day delay (nearly double the 60-calendar-day notification deadline mandated by the HIPAA Breach Notification Rule) triggered an investigation from HHS’s Office for Civil Rights (OCR). The health system’s investigation determined that protected health information (PHI) had been stolen....

View All Insights