HomeMy WebLinkAbout20152864.tiff RESOLUTION
RE: APPROVE CONTRACT AMENDMENT #2 TO PERFORM FUNCTIONS OF A SINGLE
ENTRY POINT AGENCY FOR HOME CARE ALLOWANCE AND ADULT FOSTER
CARE CLIENTS AND AUTHORIZE CHAIR TO SIGN
WHEREAS, the Board of County Commissioners of Weld County, Colorado, pursuant to
Colorado statute and the Weld County Home Rule Charter, is vested with the authority of
administering the affairs of Weld County, Colorado, and
WHEREAS, the Board has been presented with Contract Amendment #2 to perform the
functions of a Single Entry Point agency for Home Care Allowance and Adult Foster Care Clients
between the County of Weld, State of Colorado, by and through the Board of County
Commissioners of Weld County, on behalf of the Department of Human Services, Area Agency
on Aging, and the Colorado Department of Human Services, commencing September 1, 2015,
and ending June 30, 2016, with further terms and conditions being as stated in said amendment,
and
WHEREAS, after review, the Board deems it advisable to approve said amendment, a
copy of which is attached hereto and incorporated herein by reference.
NOW, THEREFORE, BE IT RESOLVED by the Board of County Commissioners of Weld
County, Colorado, that the Contract Amendment #2 to perform the functions of a Single Entry
Point agency for Home Care Allowance and Adult Foster Care Clients between the County of
Weld, State of Colorado, by and through the Board of County Commissioners of Weld County, on
behalf of the Department of Human Services, Area Agency on Aging, and the Colorado
Department of Human Services, be, and hereby is, approved.
BE IT FURTHER RESOLVED by the Board that the Chair be, and hereby is, authorized
to sign said amendment.
CC.' HSO ( 7G/ CM)
-1/ <35 / O1G
2015-2864
HR0086
RE: CONTRACT AMENDMENT #2 TO PERFORM FUNCTIONS OF A SINGLE ENTRY POINT
AGENCY FOR HOME CARE ALLOWANCE AND ADULT FOSTER CARE CLIENTS
PAGE 2
The above and foregoing Resolution was, on motion duly made and seconded, adopted
by the following vote on the 26th day of August, A.D., 2015.
BOARD OF COUNTY COMMISSIONERS
WELD COUNTY, CO ORADO
i
ATTEST:
ditia4A) .. . o
���•, .rbara Kirkmeye , Chair
Weld County Clerk to the Board � � EL,�
ED
eeman, Pro-Tem
B ism (�
D= uty Clerk to the Board
. Conway
ED A ORM:
JJ� ozad
ou ty Attorney
Steve Moreno
Date of signature: VLC)//_6
2015-2864
H R0086
/ �
5 ��
� J` �vf
COLORADO ,� v� ^. � �
� ; ors���o�o�s��t� a, 1� �
' ` ��a�ce��, . , � �
Kaiie Griego, Direc[or ��� ��_J �
� � �5�
,�"`� �'
, ��
�
`Barbara Kirkmey�r
Wetd Ca�ty Area Ag�recy an Aging
315 North 11 th Ave Buit�ng C
Gree{ey. CO 80631
.luly 31, 2015
Ptease fint! the three (3) enclosed originals of the Singte Entry Point (SEP)
contracts with attact�d instructions on signature authority. This contract is to
perfonn the fu�ctions of a Single Entry Point Agency for Home Care Allowance
and Adutt Foster Care clients.
The contract signature delegation authority for your Sins�le Entry Point is on
page 3. Ptease confirm the information is carrect, make changes as
necessary, sirn and date and return with the signed contracts. This page
will be presented to the Colo�ado Department of Human Services Contract
Management Unit for verification of signature detegation far each re�on.
Retum atl three r31 tign ori ina( contracts to Anne Berkeley by 5:00 p.m. on
Friday, Au�ust 14", 2015. Contract activities may not start until the cantr�cts
have been futty executed by the State. If you have any questions, please
contact Danielle Dunaway via email as soon as possible at
Daniette.DunawayC�state.co.us or by phone at (303) 866-2788.
Sincerely,
.J C��� �--J
Danietle Dunaway, Manager
Benefits and Services Unit
Enctosu�es
CC: Eva Jewell
2015-2864
,'ci�'��.
.;����`-.�
1575 Sherman Street, Denver,CO 80203 P 303.866.5700 www.coto�ado.gav/cdhs '+-�' �\y
John W. Hickenlooper, Gove��ror � R �
eggie Bicha,Executive Direttor `.. , �',� �r�
'�.*..!,�a�/�`��
�l876.�`'`�
�-�,�- ,A ���5
MEMORANDUM
DATE: August 12, 2015
.�'�"� 18 h 1 .�'.�
-_ _�
�� ��, ` TO: Board of County Commissioners—Pass-Around
FR: Judy A. Griego, Director, Human Services
� u � � �' Y
Uz� � �_,� �, � a
RE: Department of Human Services' Single Entry Point Agency
for Home Care Allowance and Adult Foster Care between the
Weld County Area Agency on Aging(AAA)and the Colorada
Department of Human Services
Please review and indicate if you would like a work session prior to placing this item on the
Board's agenda.
Request I3oard Approval of the Departnnents' 5ingle Entry Point Agency for Home Care
Allowance and Adult Foster Care between the Weld County Area Agency.on Aging(At1A)
and the Colorado Department of Human Services. Enclosed for boazd approval is the
contraet amendment#2. The contract amou�lt for State FY 2016 will be �47,793.99. These
do[lars are used to fund the administrative functions of the Single Entry Point specifically for
the Home Care Allowance and Adult Foster Care programs. The contract effective dates are
September 1,2015 through June 31, 2016.
On N1ay 27, 201� the Department of Human Services used the Notice of�xercise of Holdover
Provision for 15 IHGA OOES 69375 to extend the FY I S coniract for the monihs of July an.d
August 2015 to avoid a disruption in services. This allowed the state additional time getting the
Contract Amendment#2 to the Single Entry Points.
[do not recammend a Work Session. [ cecommend approval of this Contract.
Aeprove Reauest
[3OCC A�endx Work Session
Sean Conway � �
Steve Moreno �
Barbara Kirkmeyer �
MiEce Freeman
Julie Cozad �
Pass-Around Memorandum; August Z2, 2015 Page 1
Contratt irrstructions
1. Read th+e c�tracts thorou�hly. Have you received the correct eontract?
!s tt�e le�at name and address cornplete and correct?
2. Si�n each si�nature pa�e (pagel3 of 25), ir�dividc►aliy, in ink. The
s�nat�,r MUST be a person autharized to tegatl�r bind the contractor to
perfafmance af the cantratt(s). Please verify tt�e infarmation o� page 3
and sign and date and retum this page with the signed contracts.
torporatton - Chairpe�on of the Board, President, or Vice-
President
Assotiation - Chairperson of the Board, President, � Vice-
President
Countq - Chairman of the Board of County Commissioners
ff anather person signs, the Contractor must submit written
documentation authorizing such designee's actio�s (power of
attorney, board resolution authorizins� signature).
3. Have the above signature attested (counter-si�ned) by the appropriate
individual, as noted below:
torparation - Chairperson of the �ard, President, or Vice-
President
Association - Chairperson of the Board, President, or Vice-
President
County - Chairman of the Board of County Commissioners
4. If the Contractor is a private entity (Not-For-Profit-Corporation) a
certificate from the Secretary of State's Office witl need to be attached
to the signed contracts. The certificate must show the Contractor's
status to be in "�ood standing." Please note [hat the Contractor°s name
on contract needs to be identicat with the Secretary of State's
Certificate. This certificate may be found at the fotlowing website:
http://www.sos.state.co.us/biz/BusinessEntityCriteria.do
of co '\.
�� `
1575 Sherman Stree[, Denver, CO 80203 P 303.866.5700 www.cotorado.govicdhs I y�� '�
John W. Hickenl<wper,Governor I Reggie Bicha, Executive Director �*'�"+ �^ � ��
����
��/�78�
ra' ' . .
If the Contractor is associated with a County Government, a
"Certificate in Good Standing" from the Secretary of State's Office
is not required.
5. The Contractor shall provide a copy of the Certificate of Insurance
identifying that the Contractor meets the compliance with the insurance
requirements in the contract.
0
6. Return alt three originals and all other required documents to Anne
Berkeley at 1575 Sherman, 3rd Floor, Denver, CO 80203. One original will
be returned to the Contractor after the signature process has been
completed..
7. Services provided under the contract cannot begin until the contract has
been signed and finalized.
1575 Sherman Street,Denver,CO 80203 P 303 866.5700 www.colorado.gov/cdhs Ne `"Y t;
John W. Hickenlooper,Governor I Reggie 81cha, Executive Director I * CO *
•1B s
CONTRACT AMENDMENT
Amendment#2 Original Contract CMS # 11IHA18055 Amendment CMS# 16IHGA82107
1) PARTIES
This Amendment to the above-referenced Original Contract(hereinafter called the Contract) is entered into by
and beriveen�i"etd('crunt}' Area on.Agrng(hereinaficr called the"ConlrNrtor`�,and the STATE OF
COLORADO acting by and through the Uepartment of Ilu�nan S�rvices, l�;mployment & Brnefits Diviswt►n,
(hereinafter called the"State").
2) EFFECTIVE DATE AND ENFORCEABILITY
This Amendment shall not be effective or enforceable until it is approved and signed by the Colorado State
Controller or designee(hereinafter called the"Effective Date").The State shall not be liable to pay or reimburse
Contractor for any performance hereunder including,but not limited to,costs or expenses incurred,or be bound
by any provision hereof prior to the Effective Date.
3) FACTUAL REC[TALS
The Parties entered into the Contract to perturm the fuartions of a Siogle Entr� Point Agenc}� as defined b}
Seetion Z(r2-122.3 C'.R.S.and the regulations applicable ta the Departmeat and t6e Single Entry Point
system a1 9 C.C.R. 25U3-S�StaR mannal Yolume 3,tiection 3.72t1 et seq.
$y this Amendment,the p�rties deseire to eateud the Eerm of ihe Contract ta June 30.2016,snd to increase
and uthernisr adjust the evntracl price.
4) CONSIDERATIOIV-COLORADO SPECIAL PROVISIONS
The Parties acknowledge that the mutual promises and covenants contained herein and other good and valuable
consideration are sufficient and adequate to support this Amendment.The Parties agree to replacing the
Colorado Special Provisions with the most recent version(if such have been updated since the Contract and any
modification thereto were effective)as pan consideration for this Amendment. If applicable,such Special
Provisions are attached hereto and incorporated by reference herein as Exhibits
5) LIMITS OF EFFECT
This Amendment is incorporated by reference into the Contract,and the Contract and all prior amendments
thereto, if any,remain in full force and effect except as specifically modified herein.
6) MODIFICATIONS.
The Contract and all prior amendments thereto,if any,are modified as follows:
a ihe term ot'the Cantcact is extended to end on 06 30'?U 16.
b. T'he maximum amount available for state fiu.al year?015-1h(SFY16)shall be$47.743.y9.
c. I hc Home Care Allc�wance pro�;ram for tiFY l6�hall be$47,272.77;the Specia! Populauon�
tlome Care Allowance prugram far SFY 16 shall be$5?I.22.
d. T'hc tutal contract�Srice n�t to exc,r�d val�including all previou.4 amendments,option letter�ecc.
,hatl be$286.5 t_'.67(SFY 11 -$3R.781.01;SFY 12-$43,439.4R; SfY 13-$50.�48.49;SFY t4
�S-�,3��.96 and SI-'l'15-�52,t03.7=�;SFY 16 $d17,793.99 At Page 1 of the Contract,the contract
price not to excecd is hereby modi6ed accardingly.
e. Th�partie:;underst�n�anci agree that che Co�tcact fixed price for any giveo year af the Contract
Certn is detern�ined by calGulating the monthly average percentage of[IC:A clicnts served by the
Contractor in�he year prior to any surh given year out�3f the total monthly a��erage number of
FIC'A clients m the State in such pri�r year.
f. IIIPAA contrac�clau.ye: llealth Insurance Ponabilitv&Accountability Act oC 1996�"Ii1PAA"l.
C-e�eral law and regulaiion�governin�the privacy oFcertain health inforruation requires a
"Business Associate Cantract"b�twern the State and the C'ontractor. 45 C.F.R. Section
1 h=t.5�4(e). Attached and incor��rated herein by reference and agreed a�by the panic�i�a new
"Revis�d Contract Exhlbit B H(PAA Busine�s Assoe;iate Addendum"f�r HIPAA compliance.
Tenn+of die new Addec�dum,fiali be car►sidered binding upon exc�:ution i�f thi�Amendment�t2,
and shall remain tn effect during thc remarning teRn uf the C'�ntract, inciudmg any extensions.
7) START DATE
This Amendment shali take effect upon the later of its Effective Date or July 1. ?0 15.
8) ORDER OF PRECEDENCE
Except for the Special Provisions, in the event of any conflict,inconsistency, variance,or contradictioit between
the provisions of this Amendment and any of the provisions of the Contract, the provisions of this Amendment
shall in all respecty supersede,govern,and control.The most recent version of the Special Provisions
Page 1
incorporated into the Contract or any amendment shall always control other provisions in the Contract or any
amendments.
9) AVAILABLE FUNDS
Financial obligations of the state payable after the current fiscal year are contingent upon funds for that purpose
being appropriated,budgeted,or otherwise made available.
THE PARTIES HERETO HAVE EXECUTED THIS AMENDMENT
* Persons signing for Contractor hereby swear and affirm that they are authorized to act on Contractor's
behalf and acknowledge that the State is relying on their representations to that effect.
CONTRACTOR STATE OF COLORADO
Weld County Area on Aging John W. Hickenlooper,Governor
Colorado Department of Human Services
Barbara Kirkmeyer, Chair Reggie Bicha,Executive Director
Board of Weld County Commissioners �y- e��.�/��
-�( ) C.
*Signature
Date: AUG 2 6 2015 By: Levetta Love, Director of Office of Economic Security
'J& • /\
L�L �i,L, ✓ Date: ,
ALL CONTRACTS REQUIRE APPROVAL BY THE STATE CONTROLLER
CRS §24-30-202 requires the State Controller to approve all State contracts.This Amendment is not valid
until signed and dated below by the State Controller or delegate. Contractor is not authorized to begin
performance until such time. If Contractor begins performing prior thereto,the State of Colorado is not
obligated to pay Contractor for such performance or for any goods and/or services provided hereunder.
STATE CONTROLLER
Robert Jaros,CPA,MBA,JD
By: vi
Pint Gimp
Date: %1St(�,�
Page 2 p2Q/o - p20 &2 V(.2-)
•
EXHIBIT B
HIPAA BUSINESS ASSOCIATE ADDENDUM
This Business Associate Addendum("Addendum") is a part of the Contract dated July 1,
2015 between the Department of Human Services, Employment and Benefits Division and Weld
County Area on Aging, contract number 16 IHA 82107. For purposes of this Addendum, the State
is referred to as "Covered Entity" or"CE" and the Contractor is referred to as "Associate".
Unless the context clearly requires a distinction between the Contract document and this
Addendum, all references herein to "the Contract" or"this Contract" include this Addendum.
RECITALS
A. CE wishes to disclose certain information to Associate pursuant to the terms of the
Contract, some of which may constitute Protected Health Information("PHI") (defined
below).
B. CE and Associate intend to protect the privacy and provide for the security of PHI
disclosed to Associate pursuant to this Contract in compliance with the Health Insurance
Portability and Accountability Act of 1996, 42 U.S.C. § 1320d— 1320d-8 ("HIPAA") as
amended by the American Recovery and Reinvestment Act of 2009 ("ARRA")/HITECH
Act(P.L. 111-005), and its implementing regulations promulgated by the U.S.
Department of Health and Human Services, 45 C.F.R. Parts 160, 162 and 164 (the
"HIPAA Rules") and other applicable laws, as amended.
C. As part of the HIPAA Rules, the CE is required to enter into a written contract containing
specific requirements with Associate prior to the disclosure of PHI, as set forth in,but not
limited to, Title 45, Sections 160.103, 164.502(e) and 164.504(e) of the Code of Federal
Regulations ("C.F.R.") and contained in this Addendum.
The parties agree as follows:
1. Definitions.
a. Except as otherwise defined herein, capitalized terms in this Addendum shall have
the definitions set forth in the HIPAA Rules at 45 C.F.R. Parts 160, 162 and 164, as amended.
In the event of any conflict between the mandatory provisions of the HIPAA Rules and the
provisions of this Contract, the HIPAA Rules shall control. Where the provisions of this
Contract differ from those mandated by the HIPAA Rules,but are nonetheless permitted by the
HIPAA Rules, the provisions of this Contract shall control.
b. "Protected Health Information"or"PHI"means any information, whether oral or
recorded in any form or medium: (i) that relates to the past,present or future physical or mental
condition of an individual; the provision of health care to an individual; or the past,present or
future payment for the provision of health care to an individual; and (ii) that identifies the
individual or with respect to which there is a reasonable basis to believe the information can be
O,10/0-.-axe I/ (a-)
used to identify the individual, and shall have the meaning given to such term under the HIPAA
Rules, including,but not limited to, 45 C.F.R. Section 164.501.
c. "Protected Information" shall mean PHI provided by CE to Associate or created
received, maintained or transmitted by Associate on CE's behalf. To the extent Associate is a
covered entity under HIPAA and creates or obtains its own PHI for treatment, payment and
health care operations, Protected Information under this Contract does not include any PHI
created or obtained by Associate as a covered entity and Associate shall follow its own policies
and procedures for accounting, access and amendment of Associate's PHI.
d. "Subcontractor" shall mean a third party to whom Associate delegates a function,
activity, or service that involves CE's Protected Information, in order to carry out the
responsibilities of this Agreement.
2. Obligations of Associate.
a. Permitted Uses. Associate shall not use Protected Information except for the
purpose of performing Associate's obligations under this Contract and as permitted under this
Addendum. Further, Associate shall not use Protected Information in any manner that would
constitute a violation of the HIPAA Rules if so used by CE, except that Associate may use
Protected Information: (i) for the proper management and administration of Associate; (ii)to
carry out the legal responsibilities of Associate; or(iii) for Data Aggregation purposes for the
Health Care Operations of CE. Additional provisions, if any, governing permitted uses of
Protected Information are set forth in Attachment A to this Addendum. Associate accepts full
responsibility for any penalties incurred as a result of Associate's breach of the HIPAA Rules.
b. Permitted Disclosures. Associate shall not disclose Protected Information in any
manner that would constitute a violation of the HIPAA Rules if disclosed by CE, except that
Associate may disclose Protected Information: (i) in a manner permitted pursuant to this
Contract; (ii) for the proper management and administration of Associate; (iii) as required by
law; (iv) for Data Aggregation purposes for the Health Care Operations of CE; or(v)to report
violations of law to appropriate federal or state authorities, consistent with 45 C.F.R. Section
164.502(j)(1). To the extent that Associate discloses Protected Information to a third party
Subcontractor, Associate must obtain, prior to making any such disclosure: (i)reasonable
assurances through execution of a written agreement with such third party that such Protected
Information will be held confidential as provided pursuant to this Addendum and only disclosed
as required by law or for the purposes for which it was disclosed to such third party; and that
such third party will notify Associate within two (2)business days of any breaches of
confidentiality of the Protected Information, to the extent it has obtained knowledge of such
breach. Additional provisions, if any, governing permitted disclosures of Protected Information
are set forth in Attachment A.
c. Appropriate Safeguards. Associate shall implement appropriate safeguards as are
necessary to prevent the use or disclosure of Protected Information other than as permitted by
this Contract. Associate shall comply with the requirements of the HIPAA Security Rule at 45
C.F.R. Sections 164.308, 164.310, 164.312, and 164.316. Associate shall maintain a
comprehensive written information privacy and security program that includes administrative,
technical and physical safeguards appropriate to the size and complexity of the Associate's
operations and the nature and scope of its activities. Associate shall review, modify, and update
documentation of, its safeguards as needed to ensure continued provision of reasonable and
appropriate protection of Protected Information.
d. Reporting of Improper Use or Disclosure. Associate shall report to CE in writing
any use or disclosure of Protected Information other than as provided for by this Contract within
five(5)business days of becoming aware of such use or disclosure.
e. Associate's Agents. If Associate uses one or more Subcontractors or agents to
provide services under the Contract, and such Subcontractors or agents receive or have access to
Protected Information, each Subcontractor or agent shall sign an agreement with Associate
containing the same provisions as this Addendum and further identifying CE as a third party
beneficiary with rights of enforcement and indemnification from such Subcontractors or agents
in the event of any violation of such Subcontractor or agent agreement. The Agreement between
the Associate and Subcontractor or agent shall ensure that the Subcontractor or agent agrees to at
least the same restrictions and conditions that apply to Associate with respect to such Protected
Information. Associate shall implement and maintain sanctions against agents and
Subcontractors that violate such restrictions and conditions and shall mitigate the effects of any
such violation.
f. Access to Protected Information. If Associate maintains Protected Information
contained within CE's Designated Record Set, Associate shall make Protected Information
maintained by Associate or its agents or Subcontractors in such Designated Record Sets
available to CE for inspection and copying within ten(10)business days of a request by CE to
enable CE to fulfill its obligations to permit individual access to PHI under the HIPAA Rules,
including,but not limited to, 45 C.F.R. Section 164.524. If such Protected Information is
maintained by Associate in an electronic form or format, Associate must make such Protected
Information available to CE in a mutually agreed upon electronic form or format.
g. Amendment of PHI. If Associate maintains Protected Information contained
within CE's Designated Record Set, Associate or its agents or Subcontractors shall make such
Protected Information available to CE for amendment within ten(10)business days of receipt of
a request from CE for an amendment of Protected Information or a record about an individual
contained in a Designated Record Set, and shall incorporate any such amendment to enable CE
to fulfill its obligations with respect to requests by individuals to amend their PHI under the
HIPAA Rules, including, but not limited to, 45 C.F.R. Section 164.526. If any individual
requests an amendment of Protected Information directly from Associate or its agents or
Subcontractors, Associate must notify CE in writing within five(5)business days of receipt of
the request. Any denial of amendment of Protected Information maintained by Associate or its
agents or Subcontractors shall be the responsibility of CE.
h. Accounting Rights. If Associate maintains Protected Information contained
within CE's Designated Record Set, Associate and its agents or Subcontractors shall make
available to CE within ten(10)business days of notice by CE, the information required to
provide an accounting of disclosures to enable CE to fulfill its obligations under the HIPAA
Rules, including,but not limited to, 45 C.F.R. Section 164.528. In the event that the request for
an accounting is delivered directly to Associate or its agents or Subcontractors, Associate shall
within five(5)business days of the receipt of the request forward it to CE in writing. It shall be
CE's responsibility to prepare and deliver any such accounting requested. Associate shall not
disclose any Protected Information except as set forth in Section 2(b) of this Addendum.
i. Governmental Access to Records. Associate shall keep records and make its
internal practices,books and records relating to the use and disclosure of Protected Information
available to the Secretary of the U.S. Department of Health and Human Services (the
"Secretary"), in a time and manner designated by the Secretary, for purposes of determining
CE's or Associate's compliance with the HIPAA Rules. Associate shall provide to CE a copy of
any Protected Information that Associate provides to the Secretary concurrently with providing
such Protected Information to the Secretary when the Secretary is investigating CE. Associate
shall cooperate with the Secretary if the Secretary undertakes an investigation or compliance
review of Associate's policies, procedures or practices to determine whether Associate is
complying with the HIPAA Rules, and permit access by the Secretary during normal business
hours to its facilities,books, records, accounts, and other sources of information, including
Protected Information, that are pertinent to ascertaining compliance.
j. Minimum Necessary. Associate (and its agents or subcontractors) shall only
request,use and disclose the minimum amount of Protected Information necessary to accomplish
the purpose of the request, use or disclosure, in accordance with the Minimum Necessary
requirements of the HIPAA Rules including,but not limited to 45 C.F.R. Sections 164.502(b)
and 164.514(d).
k. Data Ownership. Associate acknowledges that Associate has no ownership rights
with respect to the Protected Information.
1. Retention of Protected Information. Except upon termination of the Contract as
provided in Section 4(d) of this Addendum, Associate and its Subcontractors or agents shall
retain all Protected Information throughout the term of this Contract and shall continue to
maintain the information required under Section 2(h) of this Addendum for a period of six (6)
years.
m. Associate's Insurance. Associate shall maintain insurance to cover loss of PHI
data and claims based upon alleged violations of privacy rights through improper use or
disclosure of PHI. All such policies shall meet or exceed the minimum insurance requirements
of the Contract (e.g., occurrence basis, combined single dollar limits, annual aggregate dollar
limits, additional insured status and notice of cancellation).
n. Notice of Privacy Practices. Associate shall be responsible for reviewing CE's
Notice of Privacy Practices, available on CE's external website, to determine any requirements
applicable to Associate per this Contract.
o. Notification of Breach. During the term of this Contract, Associate shall notify
CE within two (2)business days of any suspected or actual breach of security, intrusion or
unauthorized use or disclosure of PHI and/or any actual or suspected use or disclosure of data in
violation of any applicable federal or state laws or regulations. Associate shall not initiate
notification to affected individuals per the HIPAA Rules without prior notification and approval
of CE. Information provided to CE shall include the identification of each individual whose
unsecured PHI has been, or is reasonably believed to have been accessed, acquired or disclosed
during the breach. Associate shall take(i)prompt corrective action to cure any such deficiencies
and (ii) any action pertaining to such unauthorized disclosure required by applicable federal and
state laws and regulations.
p. Audits, Inspection and Enforcement. Within ten(10)business days of a written
request by CE, Associate and its agents or subcontractors shall allow CE to conduct a reasonable
inspection of the facilities, systems,books, records, agreements, policies and procedures relating
to the use or disclosure of Protected Information pursuant to this Addendum for the purpose of
determining whether Associate has complied with this Addendum; provided, however, that: (i)
Associate and CE shall mutually agree in advance upon the scope, timing and location of such an
inspection; and(ii) CE shall protect the confidentiality of all confidential and proprietary
information of Associate to which CE has access during the course of such inspection. The fact
that CE inspects, or fails to inspect, or has the right to inspect, Associate's facilities, systems,
books, records, agreements, policies and procedures does not relieve Associate of its
responsibility to comply with this Addendum, nor does CE's (i) failure to detect or(ii) detection,
but failure to notify Associate or require Associate's remediation of any unsatisfactory practices,
constitute acceptance of such practice or a waiver of CE's enforcement rights under the Contract.
q. Safeguards During Transmission. Associate shall be responsible for using
appropriate safeguards, including encryption of PHI, to maintain and ensure the confidentiality,
integrity and security of Protected Information transmitted pursuant to the Contract, in
accordance with the standards and requirements of the HIPAA Rules.
r. Restrictions and Confidential Communications. Within ten (10) business days of
notice by CE of a restriction upon uses or disclosures or request for confidential communications
pursuant to 45 C.F.R. Section 164.522, Associate will restrict the use or disclosure of an
individual's Protected Information. Associate will not respond directly to an individual's
requests to restrict the use or disclosure of Protected Information or to send all communication of
Protect Information to an alternate address. Associate will refer such requests to the CE so that
the CE can coordinate and prepare a timely response to the requesting individual and provide
direction to Associate.
3. Obligations of CE.
a. Safeguards During Transmission. CE shall be responsible for using appropriate
safeguards, including encryption of PHI, to maintain and ensure the confidentiality, integrity and
security of Protected Information transmitted pursuant to the Contract, in accordance with the
standards and requirements of the HIPAA Rules.
„ v
b. Notice of Changes. CE maintains a copy of its Notice of Privacy Practices on its
website. CE shall provide Associate with any changes in, or revocation of, permission to use or
disclose Protected Information, to the extent that it may affect Associate's permitted or required
uses or disclosures. To the extent that it may affect Associate's permitted use or disclosure of
PHI, CE shall notify Associate of any restriction on the use or disclosure of Protected
Information that CE has agreed to in accordance with 45 C.F.R. Section 164.522.
4. Termination.
a. Material Breach. In addition to any other provisions in the Contract regarding
breach, a breach by Associate of any provision of this Addendum, as determined by CE, shall
constitute a material breach of this Contract and shall provide grounds for immediate termination
of this Contract by CE pursuant to the provisions of the Contract covering termination for cause,
if any. If the Contract contains no express provisions regarding termination for cause, the
following terms and conditions shall apply:
(1) Default. If Associate refuses or fails to timely perform any of the
provisions of this Contract, CE may notify Associate in writing of the non-performance, and if
not promptly corrected within the time specified, CE may terminate this Contract. Associate
shall continue performance of this Contract to the extent it is not terminated and shall be liable
for excess costs incurred in procuring similar goods or services elsewhere.
(2) Associate's Duties. Notwithstanding termination of this Contract, and
subject to any directions from CE, Associate shall take timely, reasonable and necessary action
to protect and preserve property in the possession of Associate in which CE has an interest.
(3) Compensation. Payment for completed supplies delivered and accepted
by CE shall be at the Contract price. In the event of a material breach under paragraph 4a, CE
may withhold amounts due Associate as CE deems necessary to protect CE against loss from
third party claims of improper use or disclosure and to reimburse CE for the excess costs
incurred in procuring similar goods and services elsewhere.
(4) Erroneous Termination for Default. If after such termination it is
determined, for any reason, that Associate was not in default, or that Associate's action/inaction
was excusable, such termination shall be treated as a termination for convenience, and the rights
and obligations of the parties shall be the same as if this Contract had been terminated for
convenience, as described in this Contract.
b. Reasonable Steps to Cure Breach. If CE knows of a pattern of activity or practice
of Associate that constitutes a material breach or violation of the Associate's obligations under
the provisions of this Addendum or another arrangement and does not terminate this Contract
pursuant to Section 4(a), then CE shall take reasonable steps to cure such breach or end such
violation.. If CE's efforts to cure such breach or end such violation are unsuccessful, CE shall
either(i)terminate the Contract, if feasible or(ii) if termination of this Contract is not feasible,
CE shall report Associate's breach or violation to the Secretary of the Department of Health and
Human Services. If Associate knows of a pattern of activity or practice of a Subcontractor or
agent that constitutes a material breach or violation of the Subcontractor's or agent's obligations
under the written agreement between Associate and the Subcontractor or agent, Associate shall
take reasonable steps to cure such breach or end such violation, if feasible.
c. Judicial or Administrative Proceedings. Either party may terminate the
Contract, effective immediately, if(i)the other party is named as a defendant in a criminal
proceeding for a violation of the HIPAA Rules or other security or privacy laws or(ii) a finding
or stipulation that the other party has violated any standard or requirement of the HIPAA Rules
or other security or privacy laws is made in any administrative or civil proceeding in which the
party has been joined.
d. Effect of Termination.
(1) Except as provided in paragraph(2) of this subsection, upon termination
of this Contract, for any reason, Associate shall return or destroy all Protected Information that
Associate or its agents or Subcontractors still maintain in any form, and shall retain no copies of
such Protected Information. If Associate elects to destroy the PHI, Associate shall certify in
writing to CE that such PHI has been destroyed.
(2) If Associate believes that returning or destroying the Protected
Information is not feasible, Associate shall promptly provide CE notice of the conditions making
return or destruction infeasible. Associate shall continue to extend the protections of Sections
2(a), 2(b), 2(c), 2(d) and 2(e) of this Addendum to such Protected Information, and shall limit
further use of such PHI to those purposes that make the return or destruction of such PHI
infeasible.
5. Injunctive Relief. CE shall have the right to injunctive and other equitable and legal
relief against Associate or any of its Subcontractors or agents in the event of any use or
disclosure of Protected Information in violation of this Contract or applicable law.
6. No Waiver of Immunity. No term or condition of this Contract shall be construed or
interpreted as a waiver, express or implied, of any of the immunities, rights, benefits,protection,
or other provisions of the Colorado Governmental Immunity Act, CRS 24-10-101 et seq. or the
Federal Tort Claims Act, 28 U.S.C. 2671 et seq. as applicable, as now in effect or hereafter
amended.
7. Limitation of Liability. Any limitation of Associate's liability in the Contract shall be
inapplicable to the terms and conditions of this Addendum.
8. Disclaimer. CE makes no warranty or representation that compliance by Associate with
this Contractor the HIPAA Rules will be adequate or satisfactory for Associate's own purposes.
Associate is solely responsible for all decisions made by Associate regarding the safeguarding of
PHI.
9. Certification. To the extent that CE determines an examination is necessary in order to
comply with CE's legal obligations pursuant to the HIPAA Rules relating to certification of its
security practices, CE or its authorized agents or contractors, may, at CE's expense, examine
Associate's facilities, systems, procedures and records as may be necessary for such agents or
contractors to certify to CE the extent to which Associate's security safeguards comply with the
HIPAA Rules or this Addendum.
10. Amendment.
a. Amendment to Comply with Law. The parties acknowledge that state and federal
laws relating to data security and privacy are rapidly evolving and that amendment of this
Addendum may be required to provide for procedures to ensure compliance with such
developments. The parties specifically agree to take such action as is necessary to implement the
standards and requirements of the HIPAA Rules and other applicable laws relating to the
confidentiality, integrity, availability and security of PHI. The parties understand and agree that
CE must receive satisfactory written assurance from Associate that Associate will adequately
safeguard all Protected Information and that it is Associate's responsibility to receive satisfactory
written assurances from Associate's Subcontractors and agents. Upon the request of either party,
the other party agrees to promptly enter into negotiations concerning the terms of an amendment
to this Addendum embodying written assurances consistent with the standards and requirements
of the HIPAA Rules or other applicable laws. CE may terminate this Contract upon thirty(30)
days written notice in the event (i) Associate does not promptly enter into negotiations to amend
this Contract when requested by CE pursuant to this Section, or(ii) Associate does not enter into
an amendment to this Contract providing assurances regarding the safeguarding of PHI that CE,
in its sole discretion, deems sufficient to satisfy the standards and requirements of the HIPAA
Rules.
b. Amendment of Attachment A. Attachment A may be modified or amended by
mutual agreement of the parties in writing from time to time without formal amendment of this
Addendum.
11. Assistance in Litigation or Administrative Proceedings. Associate shall make itself, and
any Subcontractors, employees or agents assisting Associate in the performance of its obligations
under the Contract, available to CE, at no cost to CE up to a maximum of 30 hours, to testify as
witnesses, or otherwise, in the event of litigation or administrative proceedings being
commenced against CE, its directors, officers or employees based upon a claimed violation of
the HIPAA Rules or other laws relating to security and privacy or PHI, except where Associate
or its Subcontractor, employee or agent is a named adverse party.
12. No Third Party Beneficiaries. Nothing express or implied in this Contract is intended to
confer, nor shall anything herein confer, upon any person other than CE, Associate and their
respective successors or assigns, any rights, remedies, obligations or liabilities whatsoever.
13. Interpretation and Order of Precedence. The provisions of this Addendum shall prevail
over any provisions in the Contract that may conflict or appear inconsistent with any provision in
this Addendum. Together, the Contract and this Addendum shall be interpreted as broadly as
necessary to implement and comply with the HIPAA Rules. The parties agree that any
ambiguity in this Contract shall be resolved in favor of a meaning that complies and is consistent
•
with the HIPAA Rules. This Contract supercedes and replaces any previous separately executed
HIPAA addendum between the parties.
14. Survival of Certain Contract Terms. Notwithstanding anything herein to the contrary,
Associate's obligations under Section 4(d) ("Effect of Termination") and Section 12 ("No Third
Party Beneficiaries") shall survive termination of this Contract and shall be enforceable by CE as
provided herein in the event of such failure to perform or comply by the Associate. This
Addendum shall remain in effect during the term of the Contract including any extensions.
15. Representatives and Notice.
a. Representatives. For the purpose of the Contract, the individuals identified
elsewhere in this Contract shall be the representatives of the respective parties. If no
representatives are identified in the Contract, the individuals listed below are hereby designated
as the parties' respective representatives for purposes of this Contract. Either party may from
time to time designate in writing new or substitute representatives.
b. Notices. All required notices shall be in writing and shall be hand delivered or
given by certified or registered mail to the representatives at the addresses set forth below.
State/Covered Entity Representative:
Name: Katie Griego
Title: Director
Department and Division: _CDHS, Employment & Benefits Division_
Address: _1575 Sherman Street , 3rd floor_
Denver, CO 80203
Contractor/Business Associate Representative:
Name: Barbara Kirkmeyer
Title: Chair, Board of Weld County Commissioners
Department and Division:Weld County Area on Aging
Address: _315 North 11th Avenue, Building C
Greeley, CO 80631
ATTACHMENT A
This Attachment sets forth additional terms to the HIPAA Business Associate
Addendum, which is part of the Contract dated July 1, 2015, between Colorado Department of
Human Services, Employment and Benefits Division and Weld County Area on Aging , contract#
16 IHGA 82107("Contract") and is effective as of July 1, 2015 (the"Attachment Effective
Date"). This Attachment may be amended from time to time as provided in Section 10(b) of the
Addendum.
1. Additional Permitted Uses. In addition to those purposes set forth in Section 2(a) of the
Addendum, Associate may use Protected Information as follows:
None except as otherwise directed in writing by the State
2. Additional Permitted Disclosures. In addition to those purposes set forth in Section 2(b)
of the Addendum, Associate may disclose Protected Information as follows:
None except as otherwise directed in writing by the State
3. Subcontractor(s). The parties acknowledge that the following subcontractors or agents of
Associate shall receive Protected Information in the course of assisting Associate in the
performance of its obligations under this Contract:
None except as otherwise directed in writing by the State
4. Receipt. Associate's receipt of Protected Information pursuant to this Contract shall be
deemed to occur as follows, and Associate's obligations under the Addendum shall commence
with respect to such PHI upon such receipt:
Upon receipt of PHI from the Department
5. Additional Restrictions on Use of Data. CE is a Business Associate of certain other
Covered Entities and,pursuant to such obligations of CE, Associate shall comply with the
following restrictions on the use and disclosure of Protected Information:
As may be directed in writing by the State
6. Additional Terms. [This section may include specifications for disclosure format,
method of transmission, use of an intermediary, use of digital signatures or PKI, authentication,
additional security of privacy specifications, de-identification or re-identification of data and
other additional terms]
None
•
CMS Routing Number: 16 1HGA 82107
CONTRACT SIGNATURE INFORMATION
Weld County Area Agency on Aging- 16 IHGA 82107
Eva Jewell
Weld County Area Agency on Aging
315 North 11th Ave Building C
Greeley, CO 80631
970-346-6950 x6101
e •
•
COG/RAC OR COUNTY DIRECTOR •
CONTRACT SIGNATURE DELEGATION AND AUTHORITY TO SIGN CONTRACT
*Barbara Kirkmeyer
chair, Board of Wetd County Commissioners
Weld County Area Agency on Aging
315 North 11th Ave Building C
Greeley, CO 80631
I attest the information listed on this page to be accurate. Any necessary
corrections have been have been initiated and dated.
By:
Title: Barbara Kirkmeyer, Chair
Board of Weld County Commissioners
Date: 'AUG 2 t 2015
•
oi5'a,f ( °
1575 Sherman Street, Denver,CO 80203 P 303.866.5700 www.cotorado.gav/cdhs H` p
John W. Hickentooper, Governor I Reggie Bicha, Executive Director I \,,t4,.y {,)'
*1876.;
CONTRACT ID#175, SINGLE ENTRY POINT AGENCY FOR HOME CARE ALLOWANCE
AND ADULT FOSTER" CARE CLIENTS
ATTEST: dlr./WV v• ' BOARD OF COUNTY COMMISSIONERS
Weld nt Clerk to the oard(� W LD COUNTY, CO ORADO .
BY:
Deputy C rk t the Board arbara Kirkmey , Chair
AUG 2 6 MK
VlVE�A NDIN • APPROVED AS TO SUBSTANCE:
./itittilf
Controller Electecc Official or epa ent H ad
APPROVED AS TO FORM:
,I a�;hector of General Services
•unty Attorney -- , OW '1
(14413;
d,o/6-0104 C6)
Hello