The Division of Taxation is seeking proposals to provide a mechanism to find and match taxpayers’ bank accounts to aid in the collection of past due debts and ensure compliance with all applicable tax laws, defined in part by the following objective: Integrate and utilize the Financial Institution Data Match request and response process in conjunction with the Division of Taxation’s integrated tax system. All storage, manipulation, synthetization and creation of data and derivations of data must be stored in a FEDRAMP certified Government Cloud. The Division of Taxation shall have sole ownership of all Rhode Island data, in both the original form and in any derived form. The method, manner, place, and terms of storing, accessing, offshoring, or otherwise handling data and derivations of data shall be determined by the Division of Taxation. With any proposal, a Security Management plan is required. This plan must include how the project will adhere to FEDRAMP and IRS Publication 1075 requirements, discussion of controls on how data is accessed, transformed, stored and consumed, how processes and procedures used in implementation will be secured, general project Access Control Policies and Procedures, Data Transfer Security, Incident Response plans, Escalation and Communication procedures in the event of an incident, and Data audit logging plan.
