The National Academies

ACRP 11-01/Topic 12-01 [RFP]

RE-POST Legal Implications of Data Collection at Airports
[ ACRP 11-01 (Legal Aspects of Airport Programs) ]

Posted Date: 6/27/2019

  Project Data
Funds: $75,000
Contract Time: 12 months
Authorization to Begin Work: 10/15/2019 -- estimated
Staff Responsibility: Theresia H. Schatz
   Phone: (202) 334-2981
   Email: tschatz@nas.edu
RFP Close Date: 8/21/2019
Fiscal Year: 2019

This RFP was originally posted on 4/3/2019; however, it has been revised to shift the payment schedule.  
As technology continues to evolve, airports and airport users are collecting more and more data from passengers, airport users, tenants, concessionaires, airlines, and others. Airports and their tenants also are beginning to consider whether and how to monetize the data collected. A wide range of functions within the airport environment will utilize this data, including legal, management, operations, marketing, information technology, and planning and development. People who seek to gather and use this data may not consider or be aware of the legal requirements or implications, including those related to public records, data privacy, data breach, and Payment Card Industry Data Security Standard (PCI DSS) compliance.   
The objective of this research is to provide guidance to the collectors of data with respect to the applicable laws, including federal, state, and international, the compliance requirements, and the consequences of non-compliance. The digest will include a survey of applicable law, recommendations for the collection and safe keeping of data, and a review of the issues that arise related to data collection among airports, their tenants, and other users and how to address them.
This research will be conducted in two phases and five tasks in a firm fixed price agreement. At the conclusion of Phase I, ACRP will make a determination whether to proceed with Phase II. The tasks will be as follows:
Phase I
Task 1. After contract execution, participate in a conference call with the ACRP panel for a project kick-off call to discuss the scope of work.   
Task 2. Conduct background research and collect relevant material. Based on the initial but complete review of the source materials, submit a detailed report outline. The outline should contain sufficient detail to describe what a report of appropriate length will contain. This outline should also contain the estimated pagination for each proposed section and/or subsection. This material will be submitted for ACRP consideration and approval. Participate in a conference call with the ACRP project review panel 3 weeks after submission of the outline.
Phase II
Task 3. After ACRP approval of the detailed outline, conduct additional research, and case and statutory/regulatory analysis. Collect additional primary data to the extent necessary.
Task 4. Submit an initial draft report in accordance with the approved outline (including any modification required by ACRP). Participate in a conference call with the ACRP project review panel 3 weeks after submission of the initial draft report.
Task 5. Revise the initial report as necessary and provide a red-line and clean version of the draft final report (DFR). The ACRP will provide written comments, each of which will need a point-by-point response. The report will be revised as appropriate and submitted as the final report.
FUNDING: $75,000
30% paid upon submission and approval of the Task 2 Outline 
45% paid upon submission and approval of the Task 4 Draft Report 
25% paid upon submission and approval of the Task 5 Final Report
To be selected, proposers should include individual(s) with expertise in data management and privacy laws, and airport legal issues.
Proposals should be submitted as a single PDF with the following information and in the following order
  • Summary sheet. Here is the summary sheet;      
  • A research plan that describes each task in sufficient detail to allow the review panel to make an informed assessment of the likelihood of the proposer’s success. The plan must include:

    • An introduction that provides a concise overview of the proposer’s understanding of the topic and the issues presented, the proposed team’s experience and qualifications relevant to the topic, and the team’s proposed approach to conducting the research and preparing the report;
    • A brief outline of the proposed contents of the report;
    • Detailed information on the proposed research methodology for each task in sufficient detail to permit evaluation of achieving the objective(s);
    • Statement of resources (e.g., hours per person per task) allocated to this project, and timelines for each task;
  • Resumes of key team members along with a description of responsibilities;
  • Any additions, deletions, or changes you may wish to suggest to the scope of work for undertaking the work; and
  • A list of relevant prior publications (one or two samples may be enclosed);
Proposers will be evaluated by individuals collectively knowledgeable in this problem area. Evaluations are based upon the proposers’: (1) knowledge, experience, and accomplishments in the subject area (demonstrated by the research plan, statement of resources, qualifications, and resumes; (2) understanding of the work (demonstrated by the team’s proposed approach to conducting the research and preparing the report); (3) prior relevant publications (including briefs); and (4) schedule for completing the work.

Proposals should be submitted electronically to tschatz@nas.edu and ckeith@nas.edu by 4:30 pm (EST) by August 21, 2019 with “11-01/Topic 12-01” in the subject line.
Proposers should read Guidance for Working on ACRP Legal Studies Projects for more information.

To create a link to this page, use this URL: http://apps.trb.org/cmsfeed/TRBNetProjectDisplay.asp?ProjectID=4705