Loading...
HomeMy WebLinkAboutSTATE Department of Health Care Services-Medi-Cal County Inmate Program Participation Agreement_A-23-169.pdf COtj County of Fresno Hall of Records, Room301 2281 Tulare Street Fresno,California Board of Supervisors 93721-2198 O� i85 0 Telephone: (559)600-3529 FRE`'� Minute Order Toll Free: 1-800-742-1011 www.co.fresno.ca.us April 11, 2023 Present: 5- Supervisor Steve Brandau,Vice Chairman Nathan Magsig, Supervisor Buddy Mendes, Supervisor Brian Pacheco, and Chairman Sal Quintero Agenda No. 38. Public Health File ID: 23-0167 Re: Approve and authorize the Chairman to execute a Participation Agreement with the California Department of Health Care Services for participation in the Medi-Cal County Inmate Program, effective July 1, 2023 and will remain in effect until terminated by either party pursuant to and in accordance with the requirements and conditions set forth in this Participation Agreement,for an estimated amount of$800,000; and approve and authorize the Chairman to execute an Administrative Services Agreement with the California Department of Health Care services to allow reimbursement for administration of the Medi-Cal County Inmate Program for State Fiscal Year 2023-26,effective July 1, 2023,through June 30,2026,total not to exceed$26,636 APPROVED AS RECOMMENDED Ayes: 5- Brandau, Magsig, Mendes, Pacheco,and Quintero Agreement No.23-169,Agreement No.23-170 County of Fresno Page 42 ti coves Board Agenda Item 38 011 1560 FRES DATE: April 11, 2023 TO: Board of Supervisors SUBMITTED BY: David Luchini, RN, PHN, Director, Department of Public Health SUBJECT: Medi-Cal County Inmate Program Participation Agreement and Administrative Services Agreement RECOMMENDED ACTION(S)- 1. Approve and authorize the Chairman to execute a Participation Agreement with the California Department of Health Care Services for participation in the Medi-Cal County Inmate Program, effective July 1, 2023 and will remain in effect until terminated by either party pursuant to and in accordance with the requirements and conditions set forth in this Participation Agreement,for an estimated amount of$800,000; and 2. Approve and authorize the Chairman to execute an Administrative Services Agreement with the California Department of Health Care Services to allow reimbursement for administration of the Medi-Cal County Inmate Program for State Fiscal Year 2023-26, effective July 1, 2023,through June 30, 2026,total not to exceed $26,636. Approval of the first recommended action will allow medical providers to seek reimbursement from the California Department of Health Care Services (DHCS) Medi-Cal County Inmate Program (MCIP)for covered inpatient hospital services (covered services) rendered to eligible County adult inmates and juvenile wards (eligible inmates)effective July 1, 2023, until such time as either party provides written notice of non-renewal. Approval of the second recommended action provides for the reimbursement to DHCS for their service costs to administer the MCIP. This item is countywide. ALTERNATIVE ACTION(S): Should your Board not approve the recommended actions, providers would not be reimbursed by DHCS for covered services provided to eligible inmates who are incarcerated at Fresno County Detention Facilities and the Juvenile Justice Campus. Furthermore, the County would retain responsibility for payment to providers for these services. County provider participation in MCIP is contingent upon maintaining both the Administrative Services and Participation Agreements with DHCS. FISCAL IMPACT: There is no increase in Net County Cost associated with the recommended actions. The estimated three-year maximum compensation is $800,000 for the Medi-Cal County Inmate Program Participation Agreement, which allows the County to participate in the MCIP. DHCS will also charge the County an annual administrative service fee of$8,205 for year one, $8,861 for year two, and $9,570 for year three, which is based on a methodology specified in the proposed Administrative Services Agreement with a maximum compensation of$26,636 for the three-year agreement. Sufficient appropriations and estimated revenues will be included in the Department of Public Health's Org 5620 FY2023-24 Recommended Budget and will County of Fresno page 1 File Number:23-0167 File Number:23-0167 be included in future budget requests. DISCUSSION: Federal law generally prohibits claiming Medicaid funds to reimburse for health care services provided to inmates residing in correctional facilities. However, this prohibition does not apply to inpatient hospital services, including inpatient psychiatric services and physician services provided to an eligible inmate at a medical facility that is located off the grounds of the correctional facility and when the inpatient hospitalization is expected to be for at least 24 hours. Assembly Bill 1628 (Chapter 729, Statutes of 2010)and Assembly Bill 396 (Chapter 394, Statutes of 2011)authorized DHCS and counties to claim Federal Financial Participation (FFP)for medical and psychiatric inpatient hospital services provided to County Medi-Cal eligible inmates housed in county correctional facilities. On April 2, 2018, your Board approved Agreement Nos. 18-169 and 18-170 with California Forensic Medical Group, Inc., (now Wellpath),which provide for participation in MCIP for inpatient hospitalization services. On May 8, 2018, your Board approved the designation of the Sheriffs Office as an entity to assist County Jail inmates with their health care applications to include MCIP applications. The designation allowed the Sheriffs Office to assist and act on behalf of those inmates who are unwilling to cooperate and/or incapacitated and/or unable to cooperate in the application process under the MCIP. The County must have an executed MCIP Participation Agreement with DHCS prior to provider direct submittal of service claims. The agreement sets forth the terms and the County shall retain financial responsibility for inpatient hospital services provided to inmates and wards who are not eligible for MCIP. Generally, these are inmates and wards receiving a pension or who have a source of income that is above the allowable Medi-Cal limit. As part of the MCIP Participation Agreement process, the Department submitted the MCIP Letter of Intent Medi-Cal County Inmate Program County Participation Form for the State Fiscal Year(SFY)2023 through SFY 2026, included as Attachment A. The form allowed DHCS to determine the County's administrative services costs, which are included in the recommended MCIP Administrative Services Agreement. Continued county provider participation in MCIP is contingent upon approval of both agreements and the County must enter into both a new Participation Agreement and Administrative Services Agreement to allow for continued MCIP provider invoicing beyond June 30, 2023. This Participation Agreement has an estimated maximum compensation amount of$800,000 as there are several factors that could affect the actual amount of compensation, which includes the recent local recission of the Emergency Zero-Dollar Bail rule. This may result in longer incarcerations with more inpatient hospital services being provided to inmates and wards, also of consideration is the possible increase in Medi-Cal provider reimbursement in 2024, both of which would increase the County's share of the FFP. Additionally, the mandated changes that will be brought about by the California Advancing and Innovating Medi-Cal (CaIAIM) initiative Services and Supports for Justice-Involved Adults and Youth may lower the actual Participation Agreement compensation starting in SFY 2024-25. The initiative will help to address poor health outcomes and disproportionate risk of illness and accidental death among justice-involved Medi-Cal eligible adults and youth as they re-enter their communities by providing the Medi-Cal Managed Care enrollment process and providing targeted Medi-Cal services to eligible individuals while they are incarcerated and 90-days prior to their release, thus ensuring continuity of coverage and services after incarceration. Providers would not submit claims through the MCIP for any 90-day pre-release inpatient services rendered. DHCS will charge the County for the Non-Federal Share of the Medi-Cal fee-for-service reimbursed to medical providers not to exceed $800,000. DHCS will charge the County an annual administrative fee of$8,205 for year one, $8,861 for year two, and $9,570 for year three ($26,636), which is based on a methodology specified in the proposed Administrative Services Agreement, Addendum A. The methodology for calculating the County's share of DHCS County of Fresno page 2 File Number:23-0167 File Number:23-0167 administrative costs is based on population data with 30% of the total administrative costs being distributed evenly to participating counties of over 50,000 in population and 70% of the total administrative costs being allocated to participating counties pro-rata based on population. To account for the cost-of-living adjustment on a yearly basis after year one, DHCS will include a year-over-year growth factor of 8% to the maximum payable amount of the annual administrative cost for each subsequent SFY. DHCS will invoice the County for the administrative costs quarterly after the close of the previous quarter based on actual administrative costs. The recommended agreements contain language stating that the County agrees to indemnify DHCS and although neither agreement contains the standard County indemnification language and insurance requirements, given the nature of this agreement, the Department is of the opinion, and County Risk Management has concurred, that the agreements are in the County's best interest. The recommended agreements allow DHCS to draw Federal funds for allowable services, which in turn allows the County to realize a savings for costs that would have otherwise been incurred. The Participation Agreement also contains Business Associate language. DHCS has clarified that the recommended Participation Agreement, while containing evergreen language, shall remain in effect for a maximum of three years (July 1, 2023, through June 30, 2026) and only as long as the County remains in an Administrative Services Agreement with DHCS and should that Administrative Services Agreement terminate, the Participation Agreement will automatically terminate as well.The Participation Agreement shall remain in effect upon the same terms and conditions unless written notice of non-renewal is given by either party to the other party by providing a 30-day written notice. The Administrative Services Agreement shall be effective from July 1, 2023, through and including June 30, 2026, unless written notice of non-renewal is given by either party to the other party by providing a 30-day written notice. Termination of the proposed Administrative Services Agreement will automatically terminate the Participation Agreement. Failure to enter into an Administrative Services Agreement with DHCS will also deem the Participation Agreement terminated. REFERENCE MATERIAL: BAI #40, July 7, 2020 BAI #44, October 8, 2019 BAI #36, May 8, 2018 BAI#8, April 3, 2018 BAI #26, February 7, 2017 BAI #36.1, December 6, 2016 ATTACHMENTS INCLUDED AND/OR ON FILE: Attachment A On file with Clerk- Participation Agreement On file with Clerk-Administrative Services Agreement CAO ANALYST: Ronald Alexander County of Fresno Page 3 File Number:23-0167 State of California—Health and Human Services Agency IDHCS s„ o►;T.. Department of Health Care Services MICHELLE BAASS GAVIN NEWSOM DIRECTOR GOVERNOR Letter of Intent Medi-Cal County Inmate Program County Participation Form: SFY 2023 through SFY 2026 Fresno County chooses the option selected below in County Name response to our interest in voluntarily participating in the Medi-Cal County Inmate Program (MCIP) from July 1, 2023, through June 30, 2026, for State Fiscal Years 2023- 2026: 0 Voluntarily Participate in MCIP- By selecting this option, we are certifying our interest to voluntarily participate in the MCIP and intend on submitting a fully executed Provider Participation Agreement and Administrative Agreement. ❑ Not Interested in participating in MCIP I hereby certify, that the option selected above is the option that said county will abide by under penalty of perjury, to the best of my knowledge, is true and accurate based on the time of submission. , County Official: Date: 1/5/2023 Signatu County Official Title: County of Fresnor� rtment of Public Health Director County Name: Fresno Primary Contact: David LUchinl Alternate: Stephen McComas Phone: (559) 600-6401 Phone:Assistant Sheriff (559)600-8145 Email: dluchini@fresnocountyca.gov Email: stephen.mccomas@fresnosheriff.org Submit completed electroninc form to the following email address: DHCSIMCU@dhcs.ca.gov Department of Health Care Services Local Governmental Financing Division/Inmate Medi-Cal Claiming Unit, MS 2628 P.O. Box 997436, Sacramento, CA 95899-7436 E-Mail Address: DHCSIMCU@dhcs.ca.gov Internet Address: http://www.DHCS.ca.gov Agreement No. 23-169 State of California—Health and Human Services Agency Department of Health Care Services Medi-Cal County Inmate Program (MCIP) Participation Agreement 23-MCIPFRESNO-10 County Name: Fresno ARTICLE I — STATEMENT OF INTENT The purpose of this Participation Agreement (PA) between the Department of Health Care Services (DHCS) and the County of Fresno (County) is to permit the County to voluntarily participate in the Medi-Cal County Inmate Program (MCIP). ARTICLE II - AUTHORITY This PA is authorized by Welfare and Institutions Code sections 14053.7, 14053.8, and Penal Code section 5072. ARTICLE III — TERM AND TERMINATION OF THE AGREEMENT 1. This PA is effective on July 1, 2023 (date). 2. This PA will remain in effect until terminated by either party pursuant to and in accordance with the requirements and conditions set forth in this PA. 3. Termination Without Cause: Either party may terminate this PA without cause, and terminate the participation of the County in MCIP by issuing at least a 30 day prior written notification to the other party of the intent to terminate. Notice of termination shall result in the County's immediate withdrawal from MCIP on the termination date and exclusion from further participation in MCIP unless and until such time as the County's participation is reinstated by DHCS in MCIP. The County shall remain obligated to pay for the non-federal share of all MCIP services provided to the County. 4. Termination With Cause: If the County fails to comply with any of the terms of this PA, DHCS may terminate this PA for cause effective immediately by providing written notice to the County's representative listed in ARTICLE IV. Furthermore, DHCS may terminate this PA for cause if DHCS determines that the County does not meet the requirements for participation in MCIP, the County has not submitted a valid reimbursement claim, or that the County is unable to certify that the claims are eligible for federal funds. Termination for cause will result in the County's immediate withdrawal and exclusion from further participation in the MCIP. [Page 1 of 9] DHCS 07/01/2023 Medi-Cal County Inmate Program Participation Agreement 23-MCIPFRESNO-10 County: Fresno The conviction of an employee, subcontractor, or authorized agent of the County, or of an employee or authorized agent of a subcontractor, of any felony or of a misdemeanor involving fraud, abuse of any Medi-Cal applicant or beneficiary, or abuse of the Medi-Cal Program, shall result in the exclusion of that employee, agent, or subcontractor, or employee or agent of a subcontractor, from participation in MCIP. Failure of the County to exclude a convicted individual from participation in MCIP shall constitute a breach of this agreement for which DHCS may terminate this PA. DHCS may terminate this PA in the event that DHCS determines that the County, or any employee or contractor working with the County has violated the laws, regulations or rules governing MCIP. In cases where DHCS determines in its sole discretion that the health and welfare of Medi-Cal beneficiaries or the public is jeopardized by continuation of this PA, this PA shall be terminated effective the date that DHCS made such determination. After termination of the PA, any overpayment must be returned to DHCS pursuant to Welfare and Institutions Code sections 14176 and 14177. Finally, this PA will terminate automatically upon the termination of the County's MCIP Administrative Service Agreement. ARTICLE IV— PROJECT REPRESENTATIVES David Luchini, Director, Department of Public Health County of Fresno P.O. Box 11867 Fresno, CA 93775 Uma De Silva, Chief County-Based Claiming and Inmate Services Section Telephone: (916) 345-7934 Fax: (916) 324-0738 E-Mail: Uma.DeSilva@dhcs.ca.gov Direct all inquiries and notices to: Inmates Medi-Cal Claiming Unit Local Governmental Financing Division 1501 Capitol Ave., MS 2628 P.O. Box 997436 Sacramento, CA 95899-7436 Telephone: (916) 345-7895 E-Mail: DHCSIMCU(aOhcs.ca.gov Any notice, request, demand or other communication required or permitted hereunder, shall be deemed to be properly given when delivered to the project representatives identified above. [Page 2 of 91 DHCS 07/01/2023 Medi-Cal County Inmate Program Participation Agreement 23-MCIPFRESNO-10 County: Fresno ARTICLE V— PAYMENT TERMS AND INVOICING 1. The County shall compensate DHCS for the County's apportioned share of the nonfederal share of MCIP services listed in Article VII, as required by Welfare and Institutions Code sections 14053.7 and 14053.8, Government Code sections 26605.6, 26605.7, and 26605.8, and Penal Code 5072 within 60 days of receipt of an invoice from DHCS, which specifies both the total federally claimable cost and the nonfederal share of the total cost, for payments DHCS has made to providers. The DHCS invoice shall not contain and the County shall not compensate DHCS for MCIP services provided by Medi-Cal providers where the County incurs the cost of providing MCIP services and claims them through the CPE process as outlined specifically for Designated Public Hospitals (DPHs). The County shall not reimburse DHCS for the nonfederal share of services as Certified Public Expenditures (CPEs) of DPHs. 2. DHCS shall submit to the County a quarterly invoice for MCIP services that identifies the nonfederal share amount, and a report that contains information regarding paid claims data for the quarter, including information identifying the provider of services and the beneficiary, the recipient aid code, and amount of reimbursement, and other information that may be agreed to between the parties. If after comparing its owed nonfederal share to payments actually made, the County has overpaid DHCS, and the amount is undisputed DHCS shall refund the overpayment to the County within 180 days of receipt of an invoice containing the same information from the County. This refund may be made by offsetting the amount against the County's next quarterly payment due to DHCS. 3. DPHs, in MCIP participating counties may submit claims and follow the CPE process which includes a pricing methodology established on an annual basis. These DPHs are paid using Federal Financial Participation (FFP) only. ARTICLE VI — COUNTY RESPONSIBILITIES 1. Except as provided in subdivision (f.) of this section, the County is responsible for reimbursing DHCS for the nonfederal share of MCIP services paid by DHCS. a. The County may pay a Medi-Cal provider to the extent required by or otherwise permitted by state and federal law to arrange for services for Medi-Cal beneficiaries. Such additional amounts shall be paid entirely with county funds, and shall not be eligible for Social Security Act Title XIX FFP. b. If DHCS pays the Medi-Cal provider more than what the County would have paid for services rendered, the County cannot request and receive the difference from the Medi- Cal provider. c. If the County would have paid the Medi-Cal provider less than what DHCS paid the Medi-Cal provider, the County is still obligated to reimburse DHCS for the nonfederal share of DHCS' payment for the MCIP services. [Page 3 of 9] DHCS 07/01/2023 Medi-Cal County Inmate Program Participation Agreement 23-MCIPFRESNO-10 County: Fresno d. In the event that FFP is not available for any MCIP service claimed pursuant to this PA, the County shall be solely responsible for arranging and paying for the MCIP service. e. If the Centers for Medicare & Medicaid Services (CMS) determines an overpayment has occurred including the application of any federal payment limit that reduces the amount of FFP available then DHCS shall seek the overpayment amount from the provider, return the collected FFP to CMS, and return the collected nonfederal share to the County. In the event that DHCS cannot recover the overpayment from the Medi-Cal provider, the County shall pay DHCS an amount equal to the FFP portion of the unrecovered amount to the extent that Section 1903(d)(2)(D) of the Social Security Act is found not to apply. f. The County is not responsible for reimbursing DHCS for the nonfederal share of expenditures for MCIP services provided by DPHs when those services are reimbursed under the CPE process because DHCS is not responsible for the nonfederal share of expenditures for MCIP services reimbursed in the CPE process. 2. If CMS determines DHCS claimed a higher Federal Medical Assistance Percentage (FMAP) rate than is allowed and FFP is reduced by CMS then the County shall hold DHCS harmless for the return of the FFP to CMS. 3. Upon the County's compliance with all applicable provisions in this PA and applicable laws, the County may send its MCIP-eligible beneficiaries to Medi-Cal providers to receive MCIP services. 4. The County understands and agrees that the overall nature of the medical facilities in which an inmate receives medical services must be one of community interaction such that members of the general public may be admitted to receive services and admission into the medical facility or into specific beds within the facility is not limited to individuals under the responsibility of a correctional facility, and that inmates are admitted to specific medical units not based on their status as inmates of a correctional institution, but rather on their treatment needs and plan of care. 5. Ensure that an appropriate audit trail exists within records and accounting system and maintain expenditure data as indicated in this PA. 6. The County agrees to provide to DHCS or any federal or state department with monitoring or reviewing authority, access and the right to examine its applicable records and documents for compliance with relevant federal and state statutes, rules and regulations, and this PA. 7. In the event of any federal deferral or disallowance applicable to MCIP expenditures, the County shall provide all documents requested by DHCS within 14 days. 8. The County shall assist with the completion and delivery of completed Medi-Cal applications to the County Welfare Department within 90 days after the date of admission [Page 4 of 91 DHCS 07/01/2023 Medi-Cal County Inmate Program Participation Agreement 23-MCIPFRESNO-10 County: Fresno of the beneficiary to a Medi-Cal provider off of the grounds of the County correctional facility resulting in an expected stay of more than 24 hours. 9. As a condition of participation in MCIP, and in recognition of revenue generated by MCIP, the County shall pay annual administrative costs directly to DHCS. a. The annual administrative costs payment shall be used to cover DHCS' administrative costs associated with MCIP, including, but not limited to, claims processing, technical assistance, and monitoring. DHCS shall determine and report staffing requirements upon which projected costs will be based. b. The amount of the administrative costs shall be based upon the anticipated state salaries, benefits, operating expenses, and equipment necessary to administer MCIP and other costs related to that process. c. The County shall enter in to a separate agreement with DHCS to reimburse DHCS for the administrative costs of administering MCIP. ARTICLE VII — DHCS RESPONSIBILITIES 1. DHCS shall pay the appropriate Medi-Cal fee-for-service rate to Medi-Cal providers that directly bill DHCS for MCIP services rendered to the County's MCIP eligible beneficiaries and seek FFP for these service claims. DHCS shall be responsible to pay such Medi-Cal providers only to the extent the County commits to reimburse DHCS for the nonfederal share of all federally reimbursable MCIP claims and for which FFP is available and obtained by DHCS for the MCIP service claims. 2. DHCS shall maintain accounting records to a level of detail which identifies the actual expenditures incurred for MCIP services, the services provided, the county responsible, the specific MCIP-eligible beneficiary treated, the MCIP-eligible beneficiaries aid code, and the specific provider billing. 3. DHCS shall submit claims in a timely manner to CMS to draw down FFP and shall distribute FFP for all eligible claims. 4. DHCS shall: a. Ensure that an appropriate audit trail exists within records and accounting system and maintain expenditure data as indicated in this PA. b. Designate a person to act as liaison with the County concerning issues arising under this PA. This person shall be identified to the County's contact person for this PA. c. Provide a written response by email or mail to the County's contact person within 30 days of receiving a written request for information related to MCIP. [Page 5 of 9] DHCS 07/01/2023 Medi-Cal County Inmate Program Participation Agreement 23-MCIPFRESNO-10 County: Fresno d. With each quarterly cost invoice, provide a paid claim analysis report to the County regarding MCIP claims submitted by providers for the County's MCIP-eligible beneficiaries. This analysis shall be used to determine the amount of the non-federal share that the County is obligated to pay under this PA. 5. Should the services to be performed under this PA conflict with DHCS' responsibilities under federal Medicaid law, those responsibilities shall take precedence. 6. DHCS' cessation of any activities due to federal Medicaid responsibilities does not relinquish the obligation of the County to reimburse DHCS for MCIP services incurred by DHCS in connection with this PA for periods in which the County participated in MCIP. 7. DHCS agrees to provide to the County, or any federal or state department with monitoring or reviewing authority, access and the right to examine its applicable records and documents for compliance with relevant federal and state statutes, rules and regulations, and this PA. ARTICLE Vill — FISCAL PROVISIONS 1. DHCS will invoice the County quarterly at the address indicated in ARTICLE IV. Each invoice shall include the agreement number and supporting documentation for the previous quarter's paid claims. 2. Counties are required to sign and submit the MCIP Certification and Hold Harmless by an authorized county representative to DHCS annually to ensure the County is providing efficient oversight of federal expenditures. ARTICLE IX— BUDGET CONTIGENCY CLAUSE 1. It is mutually agreed that if the State Budget Act of the current State Fiscal Year (SFY) and any subsequent SFYs covered under this PA does not provide sufficient funds for MCIP, this PA shall be of no further force and effect. In this event, the DHCS shall have no liability to pay any funds whatsoever to the County or to furnish any other considerations under the PA and the County shall not be obligated to perform any provisions of this PA. 2. If funding for any SFY is reduced or deleted by the State Budget Act for purposes of MCIP, DHCS shall have the option to either cancel this PA, with no liability occurring to DHCS, or offer an agreement amendment to the County to reflect the reduced amount. ARTICLE X— LIMITATION OF STATE LIABILITY 1. In the event of a federal audit disallowance, the County shall cooperate with DHCS in replying to and complying with any federal audit exception related to MCIP. The County shall assume sole financial responsibility for any and all federal audit disallowances related to the rendering of services under this PA. The County shall assume sole financial responsibility for any and all penalties and interest charged as a result of a federal audit [Page 6 of 9] DHCS 07/01/2023 Medi-Cal County Inmate Program Participation Agreement 23-MCIPFRESNO-10 County: Fresno disallowance related to the rendering of services under this PA. The amount of the federal audit disallowance, plus interest and penalties shall be payable on demand from DHCS. 2. To the extent that a federal audit disallowance and interest results from a claim or claims for which the Medi-Cal provider has received reimbursement for MCIP services under this PA, DHCS shall recoup from the Medi-Cal provider, upon written notice of 60 days after the completion of an audit or other examination that results in the discovery of an overpayment per Welfare and Institutions Code section14172.5), amounts equal to the amount of the disallowance and interest in that state fiscal year for the disallowed claim, less the amounts already remitted to or recovered by DHCS. ARTICLE XI —AMENDMENT 1. This PA and any exhibits attached hereto, along with the MCIP Administrative Agreement shall constitute the entire agreement among the parties regarding MCIP and supersedes any prior or contemporaneous understanding or agreement with respect to MCIP and may be amended only by a written amendment to this PA. 2. Changes to the project representatives may be made via written communication including email by either party and shall not constitute a formal amendment to the PA. ARTICLE XII — GENERAL PROVISIONS 1. None of the provisions of this PA are or shall be construed as for the benefit of, or enforceable by any person not a party to this PA. 2. The interpretation and performance of this PA shall be governed by the State of California. The venue shall lie only in counties in which the California Attorney General maintains an office. DHCS and the County shall maintain and preserve all records relating to this PA for a period of three years from DHCS' receipt of the last payment of FFP or until three years after all audit findings are resolved, whichever is later. This does not limit any responsibilities held by DHCS or the County provided for elsewhere in this PA, or in state or federal law. ARTICLE XIII — INDEMNIFICATION It is agreed that the County shall defend, hold harmless, and indemnify DHCS, its officers, employees, and agents from any and all claims liability, loss or expense (including reasonable attorney fees) for injuries or damage to any person or property which arise out of the terms and conditions of this PA and the negligent and intentional acts or omissions of the County, its officers, employees, or agents. ARTICLE XIV—AVOIDANCE OF CONFLICTS OF INTEREST [Page 7 of 9] DHCS 07/01/2023 Medi-Cal County Inmate Program Participation Agreement 23-MCIPFRESNO-10 County: Fresno The County is subject to compliance with the Medi-Cal Conflict of Interest Law, as applicable and set forth in Welfare and Institutions Code section 14022, and Article 1.1 (commencing with Welfare and Institutions Code section 14047), and implemented pursuant to 22 California Code of Regulations, section 51466. ARTICLE XV— CONFIDENTIALITY The County shall comply with the applicable confidentiality requirements as specified in Section 1902(a)(7) of the Social Security Act; 42 Code of Federal Regulations, part 431.300; Welfare and Institutions Code section 14100.2; and 22 California Code of Regulations, section 51009; and, the Business Associates Agreement hereby incorporated by reference. ARTICLE XVI —ALTERNATIVE FORMATTING 1. The County assures the state that it complies with the ADA, which prohibits discrimination on the basis of disability, as well as all applicable regulations and guidelines issued pursuant to the ADA. 2. County will ensure that deliverables developed and produced pursuant to this Agreement comply with federal and state laws, regulations or requirements regarding accessibility and effective communication, including the Americans with Disabilities Act (42 U.S.C. § 12101, et. seq.), which prohibits discrimination on the basis of disability, and section 508 of the Rehabilitation Act of 1973 as amended (29 U.S.C. § 794 (d)). Specifically, electronic and printed documents intended as public communications must be produced to ensure the visual- impaired, hearing-impaired, and other special needs audiences are provided material information in the formats needed to provide the most assistance in making informed choices. These formats include but are not limited to braille, large font, and audio. THIS SPACE INTENTIONALLY LEFT BLANK [Page 8 of 9] DHCS 07/01/2023 Medi-Cal County Inmate Program Participation Agreement 23-MCIPFRESNO-10 County: Fresno The signatories to this PA warrant that they have full and binding authority to the commitments contained herein on behalf of their respective entities. County Name: County of Fresno Sal Quintero Name of Authorized Representative (Person legally authorized to bind contracts for the County) Chairman of the Board of Supervisors of the County of Fresno Title of Authorized Representative o--% , %, -I _ Si nat r of uthorized Re sentative ATTEST: BERNICE E.SEIDEL Clerk of the Board of Supervisors Date County of Fresno,State of California By / r.a lj;t l ._Deputy STATE OF CALIFORNIA — DEP RTMFNT-OF HEALTH CARE SERVICES Signature of the DHCS Authorized Representative Robert M. Strom Typed or Printed Name of the DHCS Authorized Representative Staff Services Manager II Typed or Printed Title of the DHCS Authorized Representative AUG 0 S 2M Date [Page 9 of 9] DHCS 07/01/2023 County of Fresno 23-MCIPFRESNO-10 1 Business Associate Addendum 1. This Agreement has been determined to constitute a business associate relationship under the Health Insurance Portability and Accountability Act (HIPAA) and its implementing privacy and security regulations at 45 Code of Federal Regulations, Parts 160 and 164 (collectively, and as used in this Agreement) 2. The term "Agreement" as used in this document refers to and includes both this Business Associate Addendum and the contract to which this Business Associate Agreement is attached as an exhibit, if any. 3. For purposes of this Agreement, the term "Business Associate" shall have the same meaning as set forth in 45 CFR section 160.103. 4. The Department of Health Care Services (DHCS) intends that Business Associate may create, receive, maintain, transmit or aggregate certain information pursuant to the terms of this Agreement, some of which information may constitute Protected Health Information (PHI) and/or confidential information protected by Federal and/or state laws. 4.1 As used in this Agreement and unless otherwise stated, the term "PHI" refers to and includes both "PHI" as defined at 45 CFR section 160.103 and Personal Information (PI) as defined in the Information Practices Act (IPA) at California Civil Code section 1798.3(a). PHI includes information in any form, including paper, oral, and electronic. 4.2 As used in this Agreement, the term "confidential information" refers to information not otherwise defined as PHI in Section 4.1 of this Agreement, but to which state and/or federal privacy and/or security protections apply. 5. Contractor (however named elsewhere in this Agreement) is the Business Associate of DHCS acting on DHCS's behalf and provides services or arranges, performs or assists in the performance of functions or activities on behalf of DHCS, and may create, receive, maintain, transmit, aggregate, use or disclose PHI (collectively, "use or disclose PHI") in order to fulfill Business Associate's obligations under this Agreement. DHCS and Business Associate are each a party to this Agreement and are collectively referred to as the "parties." 6. The terms used in this Agreement, but not otherwise defined, shall have the same meanings as those terms in HIPAA and/or the IPA. Any reference to statutory or regulatory language shall be to such language as in effect or as amended. DHCS HIPAA BAA (Revised 09/2021) Page 1 of 11 County of Fresno 23-MCIPFRESNO-10 2 7. Permitted Uses and Disclosures of PHI by Business Associate Except as otherwise indicated in this Agreement, Business Associate may use or disclose PHI, inclusive of de-identified data derived from such PHI, only to perform functions, activities or services specified in this Agreement on behalf of DHCS, provided that such use or disclosure would not violate HIPAA or other applicable laws if done by DHCS. 7.1 Specific Use and Disclosure Provisions Except as otherwise indicated in this Agreement, Business Associate may use and disclose PHI if necessary for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. Business Associate may disclose PHI for this purpose if the disclosure is required by law, or the Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will be held confidentially and used or further disclosed only as required by law or for the purposes for which it was disclosed to the person. The person shall notify the Business Associate of any instances of which the person is aware that the confidentiality of the information has been breached, unless such person is a treatment provider not acting as a business associate of Business Associate. 8. Compliance with Other Applicable Law 8.1 To the extent that other state and/or federal laws provide additional, stricter and/or more protective (collectively, more protective) privacy and/or security protections to PHI or other confidential information covered under this Agreement beyond those provided through HIPAA, Business Associate agrees: 8.1.1 To comply with the more protective of the privacy and security standards set forth in applicable state or federal laws to the extent such standards provide a greater degree of protection and security than HIPAA or are otherwise more favorable to the individuals whose information is concerned; and 8.1.2 To treat any violation of such additional and/or more protective standards as a breach or security incident, as appropriate, pursuant to Section 18. of this Agreement. 8.2 Examples of laws that provide additional and/or stricter privacy protections to certain types of PHI and/or confidential information, as defined in Section 4. of this Agreement, include, but are not limited to the Information Practices Act, California Civil Code sections 1798-1798.78, Confidentiality of Alcohol and Drug Abuse Patient Records, 42 CFR Part 2, Welfare and DHCS HIPAA BAA (Revised 09/2021) Page 2 of 11 County of Fresno 23-MCIPFRESNO-10 3 Institutions Code section 5328, and California Health and Safety Code section 11845.5. 8.3 If Business Associate is a Qualified Service Organization (QSO) as defined in 42 CFR section 2.11, Business Associate agrees to be bound by and comply with subdivisions (2)(i) and (2)(ii) under the definition of QSO in 42 CFR section 2.11. 9. Additional Responsibilities of Business Associate 9.1 Nondisclosure 9.1.1 Business Associate shall not use or disclose PHI or other confidential information other than as permitted or required by this Agreement or as required by law. 9.2 Safeguards and Security 9.2.1 Business Associate shall use safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of PHI and other confidential data and comply, where applicable, with subpart C of 45 CFR Part 164 with respect to electronic protected health information, to prevent use or disclosure of the information other than as provided for by this Agreement. Such safeguards shall be based on applicable Federal Information Processing Standards (FIPS) Publication 199 protection levels. 9.2.2 Business Associate shall, at a minimum, utilize a National Institute of Standards and Technology Special Publication (NIST SP) 800-53 compliant security framework when selecting and implementing its security controls and shall maintain continuous compliance with NIST SP 800-53 as it may be updated from time to time. The current version of NIST SP 800-53, Revision 5, is available online at; updates will be available online through the Computer Security Resource Center website. 9.2.3 Business Associate shall employ FIPS 140-2 validated encryption of PHI at rest and in motion unless Business Associate determines it is not reasonable and appropriate to do so based upon a risk assessment, and equivalent alternative measures are in place and documented as such. FIPS 140-2 validation can be determined online through the Cryptographic Module Validation Program Search, with information about the Cryptographic Module Validation Program under FIPS 140-2. In addition, Business Associate shall maintain, at a minimum, the most current industry standards for transmission and storage of PHI and other confidential information. DHCS HIPAA BAA (Revised 09/2021) Page 3 of 11 County of Fresno 23-MCIPFRESNO-10 4 9.2.4 Business Associate shall apply security patches and upgrades, and keep virus software up-to-date, on all systems on which PHI and other confidential information may be used. 9.2.5 Business Associate shall ensure that all members of its workforce with access to PHI and/or other confidential information sign a confidentiality statement prior to access to such data. The statement must be renewed annually. 9.2.6 Business Associate shall identify the security official who is responsible for the development and implementation of the policies and procedures required by 45 CFR Part 164, Subpart C. 9.3 Business Associate's Agent Business Associate shall ensure that any agents, subcontractors, subawardees, vendors or others (collectively, "agents") that use or disclose PHI and/or confidential information on behalf of Business Associate agree to the same restrictions and conditions that apply to Business Associate with respect to such PHI and/or confidential information. 10. Mitigation of Harmful Effects Business Associate shall mitigate, to the extent practicable, any harmful effect that is known to Business Associate of a use or disclosure of PHI and other confidential information in violation of the requirements of this Agreement. 11. Access to PHI Business Associate shall make PHI available in accordance with 45 CFR section 164.524. 12. Amendment of PHI Business Associate shall make PHI available for amendment and incorporate any amendments to protected health information in accordance with 45 CFR section 164.526. 13. Accounting for Disclosures Business Associate shall make available the information required to provide an accounting of disclosures in accordance with 45 CFR section 164.528. 14. Compliance with DHCS Obligations DHCS HIPAA BAA (Revised 09/2021) Page 4 of 11 County of Fresno 23-MCIPFRESNO-10 5 To the extent Business Associate is to carry out an obligation of DHCS under 45 CFR Part 164, Subpart E, comply with the requirements of the subpart that apply to DHCS in the performance of such obligation. DHCS HIPAA BAA (Revised 09/2021) Page 5 of 11 County of Fresno 23-MCIPFRESNO-10 6 15. Access to Practices, Books and Records Business Associate shall make its internal practices, books, and records relating to the use and disclosure of PHI on behalf of DHCS available to DHCS upon reasonable request, and to the federal Secretary of Health and Human Services for purposes of determining DHCS' compliance with 45 CFR Part 164, Subpart E. 16. Return or Destroy PHI on Termination; Survival At termination of this Agreement, if feasible, Business Associate shall return or destroy all PHI and other confidential information received from, or created or received by Business Associate on behalf of, DHCS that Business Associate still maintains in any form and retain no copies of such information. If return or destruction is not feasible, Business Associate shall notify DHCS of the conditions that make the return or destruction infeasible, and DHCS and Business Associate shall determine the terms and conditions under which Business Associate may retain the PHI. If such return or destruction is not feasible, Business Associate shall extend the protections of this Agreement to the information and limit further uses and disclosures to those purposes that make the return or destruction of the information infeasible. 17. Special Provision for SSA Data If Business Associate receives data from or on behalf of DHCS that was verified by or provided by the Social Security Administration (SSA data) and is subject to an agreement between DHCS and SSA, Business Associate shall provide, upon request by DHCS, a list of all employees and agents and employees who have access to such data, including employees and agents of its agents, to DHCS. 18. Breaches and Security Incidents Business Associate shall implement reasonable systems for the discovery and prompt reporting of any breach or security incident, and take the following steps: 18.1 Notice to DHCS 18.1.1 Business Associate shall notify DHCS immediately upon the discovery of a suspected breach or security incident that involves SSA data. This notification will be provided by email upon discovery of the breach. If Business Associate is unable to provide notification by email, then Business Associate shall provide notice by telephone to DHCS. DHCS HIPAA BAA (Revised 09/2021) Page 6 of 11 County of Fresno 23-MCIPFRESNO-10 7 18.1.2 Business Associate shall notify DHCS within 24 hours by email (or by telephone if Business Associate is unable to email DHCS) of the discovery of the following, unless attributable to a treatment provider that is not acting as a business associate of Business Associate: 18.1.2.1 Unsecured PHI if the PHI is reasonably believed to have been accessed or acquired by an unauthorized person; 18.1.2.2 Any suspected security incident which risks unauthorized access to PHI and/or other confidential information; 18.1.2.3 Any intrusion or unauthorized access, use or disclosure of PHI in violation of this Agreement; or 18.1.2.4 Potential loss of confidential information affecting this Agreement. 18.1.3 Notice shall be provided to the DHCS Program Contract Manager (as applicable), the DHCS Privacy Office, and the DHCS Information Security Office (collectively, "DHCS Contacts") using the DHCS Contact Information in Section 18.6. Notice shall be made using the current DHCS "Privacy Incident Reporting Form" ("PIR Form"; the initial notice of a security incident or breach that is submitted is referred to as an "Initial PIR Form") and shall include all information known at the time the incident is reported. The form is available online at the DHCS Data Privacy webpage. Upon discovery of a breach or suspected security incident, intrusion or unauthorized access, use or disclosure of PHI, Business Associate shall take: 18.1.3.1 Prompt action to mitigate any risks or damages involved with the security incident or breach; and 18.1.3.2 Any action pertaining to such unauthorized disclosure required by applicable Federal and State law. 18.2 Investigation Business Associate shall immediately investigate such security incident or breach. DHCS HIPAA BAA (Revised 09/2021) Page 7 of 11 County of Fresno 23-MCIPFRESNO-10 8 18.3 Complete Report To provide a complete report of the investigation to the DHCS contacts within ten (10) working days of the discovery of the security incident or breach. This "Final PIR" must include any applicable additional information not included in the Initial Form. The Final PIR Form shall include an assessment of all known factors relevant to a determination of whether a breach occurred under HIPAA and other applicable federal and state laws. The report shall also include a full, detailed corrective action plan, including its implementation date and information on mitigation measures taken to halt and/or contain the improper use or disclosure. If DHCS requests information in addition to that requested through the PIR form, Business Associate shall make reasonable efforts to provide DHCS with such information. A "Supplemental PIR" may be used to submit revised or additional information after the Final PIR is submitted. DHCS will review and approve or disapprove Business Associate's determination of whether a breach occurred, whether the security incident or breach is reportable to the appropriate entities, if individual notifications are required, and Business Associate's corrective action plan. 18.3.1 If Business Associate does not complete a Final PIR within the ten (10) working day timeframe, Business Associate shall request approval from DHCS within the ten (10) working day timeframe of a new submission timeframe for the Final PIR. 18.4 Notification of Individuals If the cause of a breach is attributable to Business Associate or its agents, other than when attributable to a treatment provider that is not acting as a business associate of Business Associate, Business Associate shall notify individuals accordingly and shall pay all costs of such notifications, as well as all costs associated with the breach. The notifications shall comply with applicable federal and state law. DHCS shall approve the time, manner and content of any such notifications and their review and approval must be obtained before the notifications are made. 18.5 Responsibility for Reporting of Breaches to Entities Other than DHCS If the cause of a breach of PHI is attributable to Business Associate or its agents, other than when attributable to a treatment provider that is not acting as a business associate of Business Associate, Business Associate is responsible for all required reporting of the breach as required by applicable federal and state law. DHCS HIPAA BAA (Revised 09/2021) Page 8 of 11 County of Fresno 23-MCIPFRESNO-10 9 18.6 DHCS Contact Information To direct communications to the above referenced DHCS staff, the Contractor shall initiate contact as indicated here. DHCS reserves the right to make changes to the contact information below by giving written notice to Business Associate. These changes shall not require an amendment to this Agreement. 18.6.1 DHCS Program Contract Manager See the Scope of Work exhibit for Program Contract Manager information. If this Business Associate Agreement is not attached as an exhibit to a contract, contact the DHCS signatory to this Agreement. 18.6.2 DHCS Privacy Office Privacy Office c/o: Office of HIPAA Compliance Department of Health Care Services P.O. Box 997413, MS 4722 Sacramento, CA 95899-7413 Email: incidents(a dhcs.ca.gov Telephone: (916) 445-4646 18.6.3 DHCS Information Security Office Information Security Office DHCS Information Security Office P.O. Box 997413, MS 6400 Sacramento, CA 95899-7413 Email: incidents(aD_dhcs.ca.gov 19. Responsibility of DHCS DHCS agrees to not request the Business Associate to use or disclose PHI in any manner that would not be permissible under HIPAA and/or other applicable federal and/or state law. 20. Audits, Inspection and Enforcement 20.1 From time to time, DHCS may inspect the facilities, systems, books and records of Business Associate to monitor compliance with this Agreement. Business Associate shall promptly remedy any violation of this Agreement and shall certify the same to the DHCS Privacy Officer in writing. Whether DHCS HIPAA BAA (Revised 09/2021) Page 9 of 11 County of Fresno 23-MCIPFRESNO-10 10 or how DHCS exercises this provision shall not in any respect relieve Business Associate of its responsibility to comply with this Agreement. 20.2 If Business Associate is the subject of an audit, compliance review, investigation or any proceeding that is related to the performance of its obligations pursuant to this Agreement, or is the subject of any judicial or administrative proceeding alleging a violation of HIPAA, Business Associate shall promptly notify DHCS unless it is legally prohibited from doing so. 21. Termination 21.1 Termination for Cause Upon DHCS' knowledge of a violation of this Agreement by Business Associate, DHCS may in its discretion: 21.1.1 Provide an opportunity for Business Associate to cure the violation and terminate this Agreement if Business Associate does not do so within the time specified by DHCS; or 21.1.2 Terminate this Agreement if Business Associate has violated a material term of this Agreement. 21.2 Judicial or Administrative Proceedings DHCS may terminate this Agreement if Business Associate is found to have violated HIPAA, or stipulates or consents to any such conclusion, in any judicial or administrative proceeding. 22. Miscellaneous Provisions 22.1 Disclaimer DHCS makes no warranty or representation that compliance by Business Associate with this Agreement will satisfy Business Associate's business needs or compliance obligations. Business Associate is solely responsible for all decisions made by Business Associate regarding the safeguarding of PHI and other confidential information. 22.2 Amendment 22.2.1 Any provision of this Agreement which is in conflict with current or future applicable Federal or State laws is hereby amended to conform to the provisions of those laws. Such amendment of this Agreement shall be effective on the effective date of the laws necessitating it, and shall be binding on the parties even though such amendment may not have been reduced to writing and formally agreed upon and executed by the parties. DHCS HIPAA BAA (Revised 09/2021) Page 10 of 11 County of Fresno 23-MCIPFRESNO-10 11 22.2.2 Failure by Business Associate to take necessary actions required by amendments to this Agreement under Section 22.2.1 shall constitute a material violation of this Agreement. 22.3 Assistance in Litigation or Administrative Proceedings Business Associate shall make itself and its employees and agents available to DHCS at no cost to DHCS to testify as witnesses, or otherwise, in the event of litigation or administrative proceedings being commenced against DHCS, its directors, officers and/or employees based upon claimed violation of HIPAA, which involve inactions or actions by the Business Associate. 22.4 No Third-Party Beneficiaries Nothing in this Agreement is intended to or shall confer, upon any third person any rights or remedies whatsoever. 22.5 Interpretation The terms and conditions in this Agreement shall be interpreted as broadly as necessary to implement and comply with HIPAA and other applicable laws. 22.6 No Waiver of Obligations No change, waiver or discharge of any liability or obligation hereunder on any one or more occasions shall be deemed a waiver of performance of any continuing or other obligation, or shall prohibit enforcement of any obligation, on any other occasion. DHCS HIPAA BAA (Revised 09/2021) Page 11 of 11 California Department of Health Care Services Name: Medical County Inmate Program (MCIP) Participation Agreement No.: 23-MCI PFRESNO-10 Fund/Subclass: 0001/10000 Organization #: 56201683 Revenue Account #: 7295 Est. $800,000 Annually