HomeMy WebLinkAboutAgreement A-17-663 with ASI.pdf1
2
AGREEMENT
Agreement No. 17-663
3 THIS AGREEMENT is made and entered into effective January 1, 2018, by and
4 between the COUNTY OF FRESNO, hereinafter referred to as "COUNTY", and Administrative
5 Solutions-, Inc., a California corporation, hereinafter referred to as "CONTRACTOR".
6
7 NOW, THEREFORE, in consideration of the mutual covenants, terms and conditions herein
8 contained, the parties hereto agree as follows:
9 1. OBLIGATIONS OF THE CONTRACTOR
1 a 1. The CONTRACTOR will provide health benefit administrative services as
11 outlined in Exhibit A.
12 2 .. The CONTRACTOR will provide the COUNTY with general administrative
13 services that include, but are not limited to:
14 1) Necessary training to assist the COUNTY in utilizing the
15 CONTRACTOR'S-services.
16 2) Furnish the COUNTY with any available information from the
I
I
17 CONTRACTOR's records which the COUNTY may need.
18 3) Resolve any issues raised by COUNTY with due diligence. Any
19 questionable enrollment or service requests will be referred to COUNTY for clarification
20 2. OBLIGATIONS OF THE COUNTY
21 1. The COUNTY is solely responsible for compliance with the Internal
22 Revenue Code and other Federal, State or local laws.
23 2. The COUNTY is solely responsible for the accuracy and integrity of
24 COUNTY data. ,
25 3. TERM
26 This Agreement shall become effective on the 1st day of January, 2018 and
27 shall terminate on the 31 st day of December, 2018.
28
-1-
1 4. TERMINATION
2 1. Non-Allocation of Funds -The terms of this Agreement, and the services to
3 be provided thereunder, are contingent on the approval of funds by the COUNTY. Should
4 .sufficient funds not be allocated, the services provided may be modified, or this Agreement
5 terminated, at any time by giving the CONTRACTOR thirty (30) days advance written notice.
6 2. Breach of Contract -The COUNTY may immediately suspend or terminate
7 this Agreement in whole or in part, where in the determination of the COUNTY there is:
8
9
10
11 COUNTY;
1) An illegal or improper use of funds;
2) A failure to comply with any term of this Agreement;
3) A substantially incorrect or in9omplete report submitted to the
12 4) Improperly performed service.
13 In no event shall any payment by the COUNTY constitute a waiver by the COUNTY
14 of any breach of this Agreement or any default which may then exist on the part of the
15 CONTRACTOR. Neither shall such payment impair or prejudice any remedy available to the
16 COUNTY with respect to the breach or default. The COUNTY shall have the right to demand of
17 the CONTRACTOR the repayment to the. COUNTY of any funds disbursed to the CONTRACTOR
18 under this Agreement, which in the judgment of the COUNTY were not expended in accordance
19 with the terms of this Agreement. The CONTRACTOR shall promptly refund any such fun9s upon
20 demand.
21 3. Without Cause -Under circumstances other than those set forth 'above,
22 this Agreement may be terminated by COUNTY upon the giving of sixty (60) days advance written
23 notice of an intention to terminate to CONTRACTOR.
24 5. COMPENSATION: COUNTY agrees to pay CONTRACTOR and
25 CONTRACTOR agrees to receive compensation as follows: $2.00 Per Retiree Per Month (PRPM)
26 paid monthly througho1,.Jt theJerm of this Agreement per the compiled monthly transmittals
27 provided by the COUNTY for funding disbursement. The PRPM fee will be paid in arrears and is
28 based on the actual number of eligible retirees as determined by the COUNTY and as used for all
-2-
1 eligibility purposes for the specific contract month.
2 6. OWNERSHIP OF DATA:. All data delivered by the COUNTY to
3 CONTRACTOR, or which is created by either party for the COUNTY in connection with the
4 performance of this Agreement shall be the exclusive property of the COUNTY. CONTRACTOR
5 shall be the custodian of such data and will immediately make such data available to the COUNTY
6 upon request during normal working hours. CONTRACTOR shall return all personnel/payroll raw
7 data collected or generated in connection with the performance of the Agreement within thirty (30)
8 days of the termination of this Agreement and shall not access said data for any purpose other
9 than in connection with the performance of this Agreement.
10 7. HEAL TH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT
11 1. The parties to this Agreement shall be in strict conformance with all
12 applicable Federal and State of California laws and regulations, including but not limited to
13 Sections 5328, 10850, and 14100.2 et seq. of the Welfare and Institutions Code, Sections 2.1 and
14 431.300 et seq. of Title 42, Code of Federal Regulations (CFR), Section 56 et seq. of the
15 California Civil Code, Sections 11977 and 11812 of Title 22 of the California Code· of Regulations,
16 and the Health Insurance Portability and Accountability Act (HIPAA), including but not limited to
1 17 Section 1320 D et seq. of Title 42, United States Code (USC) and its implementing regulations,
18 including, but not limited to Title 45, CFR, Sections 142, 160, 162, and 164, The Health
19 Information Technology for Economic and Clinical Health Act (HITECH) regarding the
20 confidentiality and security of patient information, and the Genetic Information Nondiscrimination
21 Act (GINA) of 2008 regarding the confidentiality of genetic information.
22 Except as otherwise provided in this Agreement, CONTRACTOR, as a
23 Business Associate of COUNTY, may use or disclose Protected Health Information (PHI) to
24 perform functions, activities or services for or on behalf of COUNTY, as specified in this
25 Agreement, provided that such use or disclosure shall not violate the Health Insurance Portabiiity
26 and Accountability Act (HIPAA), 42 USC 1320d et seq. The uses and disclosures of PHI may not
27 be more expansive than those applicable to COUNTY, as the "Covered Entity" under the HIPAA .
28
-3-
1 Privacy Rule (45 CFR 164.500 et seq.), except as authorized for management, administrative or
2 legal responsibilities of the Business Associate.
3 2. CONTRACTOR, including its subcontractors and employees, shall protect,
4 from unauthorized access, use, or disclosure of names and other identifying information, including
5 genetic information, concerning persons receiving services pursuant to this Agreement, except
6 where permitted in order to carry out d~ta aggregation purposes for health care operations [45
7 CFR Sections 164.504 (e)(2)(i), 164.504 (3)(2)(ii)(A), and 164.504 (e)(4)(i)] This pertains to any
8 and all persons receiving services pursLJant to a COUNTY funded program. This requirement
9 applies to electronic PHI. CONTRACTOR shall not use such identifying information or genetic
1 O information for any purpose other than carrying out CONTRACTOR's obligations under this
11 Agreement.
12 3. CONTRACTOR, including its subcontractors and employees, shall not
13 disclose any such identifying information or genetiQ information to any person or entity, except as
14 otherwise specifically permitted by this Agreement, authorized by Subpart ~ of 45 CFR Part 164 ,
15 or other law, required by the Secretary, or authorized by the client/patient in writing. In using or
16 disclosing PHI that is permitted by this Agreement or authorized by law, CONTRACTOR shall
17 make reasonable efforts to limit PHI to the minimum necessary to accomplish intended purpose
18 of use, disclosure or request.
19 4. For purposes of the above sections, identifying information shall include,
t -
20 but not be limited to name, identifying number, symbol, or other identifying particular assigned to
21 the individual, such as finger or voice print, or photograph.
22 5. For purposes of the above sections, genetic information shall include
23 genetic tests of family members of an individual·or individual, mar-iifestation of disease or disorder-
24 of family members of an individual, or any request for or receipt of, genetic services by individual
25 or family members. Family member means a dependent or any person who is first, second, third,
26 or fourth deg re~ relative.
27 6. CONTRACTOR shall provide access, at the request of COUNTY, and in
28 the time and manner designated by COUNTY, to PHI in a designated record set (as defined in 45
-4-
1 CFR Section 164.501), to an individual or to COUNTY in order to meet the requirements of 45
2 CFR Section 164.524 regarding access by individuals to their PHI. With respect to individual
3 requests, access shall be provided within thirty (30) days from request. Access may be extended
4 if CONTRACTOR cannot provide access and provides individual with the reasons for the delay
5 and the date when.access may be granted. PHI shall be provided in the form and format
6 requested by the individual or COUNTY. /
7 CONTRACTOR shall make any amendment(s) to PHI in a designated record set at
8 the request of COUNTY or individual, and in the time and manner designated by COUNTY in :
9 accordance with 45 CFR Section 164.526.
10 CONTRACTOR shall provide to COUNTY or to an individual, in a time and manner
11 designated by COUNTY, information collected in accordance with 45 C~R Section 164.528, to
12 permit COUNTY to respond to a request by the individual for an accounting of disclosures of PHI
13 in accordance with 45 CFR Section 164.528.
14 7. CONTRACTOR shall report to COUNTY, in writing, any knowledge or .
15 reasonable belief that there has been unauthorized access, viewing, use, disclosure, security
16 incident, or breach of unsecured PHI not permitted by this Agreement of which it becomes aware,
17 immediately and without reasonable delay and in no case later than two (2) business days of
18 discovery. Immediate notification shall be made to COUNTY's Information Security Officer and
19 Privacy Officer and COUNTY's DPH HIPAA Representative, within two (2) business days of
20 discovery. The notification shall include, to the extent possible, the identification of each individual
21 whose unsecured PHI has been, or is reasonably believed to have been, accessed, acquired,
I
22 used, disclosed, or breached. CONTRACTOR shall take prompt corrective action to cure any·
23 deficiencies and any action pertaining to such unauthorized disclosure required by applicable
24 Federal and State Laws and regulations. CONTRACTOR shall investigate such breach and is
25 responsible for all notifications required by law and regulation or deemed necessary by COUNTY
26 and shall provide a written report of the investigation and reporting required to COUNTY's
27 Information Security Officer and Privacy Officer and COUNTY's DPH HIPAA Representative. This
28
-5-
1 written investigation and description of any reporting necessary shall be postmarked within the
2 thirty (30) working days of the discovery of the breach to the addresses below:
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
County of Fresno
Dept. of Public Health
HIPAA Representative
(559) 600-6439
P.O. Box 11867
Fresno, CA 93775
County of Fresno
Dept. of Public Health
Privacy Officer
(559) 600-6405
P.O. Box 11867
Fresno, CA 93775
County of Fresno
Dept. of Internal Services
Information Security Officer
(559) 600-5800
333 W. Pontiac Way
Clovis, CA 93612
8. CONTRACTOR shall make its internal practices, books, and records
relating to the use and disclosure of PHI received from COUNTY, or created or received by the
CONTRACTOR on behalf of COUNTY, in compliance with HIPAA's Privacy Rule, including, but
not limited to the requirements set forth in Title 45, CFR, Sections 160 and 164. CONTRACTOR
shall make its internal practices, books, and records relating to the use and disclosure of PHI
received from COUNTY, or created or received by the CONTRACTOR on behalf of COUNTY,
available to the United States Department of Health and Human Services (Secretary) upon
demand.
CONTRACTOR shall cooperate with the compliance and investigation reviews
conducted by the Secretary. PHI access to the Secretary must be provided during the
CONTRACTOR's normal business hours, however, upon exigent circumstances access at any
time must be granted. Upon the Secretary's compliance or investigation review, if PHI is
unavailable to CONTRACTOR and in possession of a Subcontractor, it must certify efforts to
obtain the information to the Secretary.
9. Safeguards
CONTRACTOR shall implement administrative, physical, and technical safeguards
as required by the HIPAA Security Rule, Subpart C of 45 CFR 164, that reasonably and
appropriately protect the confidentiality, integrity, and availability of PHI, including electronic PHI,
that it creates, receives, maintains or transmits on behalf of COUNTY and to prevent unauthorized
access, viewing, use, disclosure, or breach of PHI other than as provided for by this Agreement.
CONTRACTOR shall conduct an accurate and thorough assessment of the potential risks and
-6-
1 vulnerabilities to the confidential, integrity and availability of electronic PHI. CONTRACTOR shall
2 develop and maintain a written information privacy and security program that includes
3 administrative, technical and physical safeguards appropriate to the size and complexity of
4 CONTRACTOR's operations and the nature and scope of its activities. Upon COUNTY's request,
5 CONTRACTOR shall provide COUNTY with information concerning such safeguards.
6 CONTRACTOR shall implement strong access controls and other security
7 safeguards and precautions in order to restrict logical and physical access to confidential,
8 personal (e.g., PHI) or sensitive data to authorized users only. Said safeguards and precautiohs
9 shall include the following administrative and technical password controls for all systems used to
, 10 process or store confidential, personal, or sensitive data:
11 1. Passwords must not be:
12 a. Shared or written down where they are accessible or recognizable by
13 anyone else; such as taped to computer screens, stored under keyboards,
14 or visible in a work area;
15 b. A dictionary word; or
16 c. Stored in clear text
17
'18
19
20
21
22
23
24
25
2. Passwords must be:
a. Eight (8) characters or more in length;
b. Changed every ninety (90) days;
c. Changed immediately if revealed or compromised; and
d. Composed of characters from at least three (3) of the following four (4) ·
groups from the standard keyboard:
1) Upper case letters (A-Z);
2) Lowercase letters (a-z);
· 3) Arabic numerals (0 through 9); and
26 4) Non-alphanumeric characters (punctuation symbols).
27 CONTRACTOR shall implement the following security controls on each workstation
28 or portable computing d'evice (e.g., laptop computer) containing confidential,
-7-
1 personal, or sensitive data:
2
3
4
1.
2.
3.
Network-based firewall and/or personal firewall;
Continuously updated anti-virus software; and
Patch management process including installation of all operating
5 system/software vendor security patches.
6 CONTRACTOR shall utilize a commercial encryption solution that has received
7 FIPS 140-2 validation to encrypt all confidential, personal, or sensitive data stored on portc;1ble
8 electronic media (including, but not limited to, compact disks and. thumb drives) and on portable
9 computing devices (including, but not limited to, laptop and notebook computers).
10 CONTRACTOR shall not transmit confidential, personal, or sensitive data via e-maH
11 or other internet tram~port protocol unless the data is encrypted by a solution that has been
12 validated by the National Institute of Standards and Technology (NIST) as conforming to the
13 Advanced Encryption_Standard (AES) Algorithm. CONTRACTOR must apply appropriate
14 sanctions against its employees who fail to comply with these safeguards. CONTRACTOR must
15 adopt procedures for terminating access to PHI when employment of employee ends.
· 15 1 O. l\'1itigation of Harmful Effects
17 CONTRACTOR shall mitigate, to the extent practicable, any harmful effect that is
18 suspected or known to CONTRACTOR of an unauthorized access, viewing, use, disclosure, or
19 breach of PHI by CONTRACTOR or its subcontractors in violation of the requirements of these
20 provisions. CONTRACTOR must document ~uspected or known harmful effects and the
21 outcome.
22 11. CONTRACTOR's Subcontractors
23 CONTRACTOR shall ensure that.any of its contractors, including subcontractors, if
24 applicable, to whom CONTRACTOR provides PHI received from or created or received by
25 CONTRACTOR on behalf of COUNTY, agree to the same restrictions, safeguards, and conditions
26 that apply to CONTRACTOR with respect to such PHI and to incorporate, when applicable, the
--27 relevant provisions of these provisions into e~ch subcontract or sub-award to such agents or
28 subcontractors.
-8-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
12. Employee Training and Discipline
CONTRACTdR shall train and use reasonable measures to ensure compliance with
the requirements of these provisions by employees who assist in the performance of functions or
activities on behalf of COUNTY under this Agreement and use or disclose PHI and discipline such,
employees who intentionally violate any provisions of these provisions, including termination of
employment.
I •
13. Termination for Cause
Upon COUNTY's knowledge of a material breach of these provisions by
CONTRACTOR, COUNTY shall either:
1. Provide an opportunity for CONTRACTOR to cure the breach or end the violation
and terminate this Agreement if CONTRACTOR does not cure the breach or end
the violation within the time specified by COUNTY; or
2. Immediately terminate this Agreement if CONTRACTOR has breached a material
term of these provisions and cure is not possible.
3. If neither cure nor termination is feasible, the COUNTY's Privacy Officer shall:
report the violation to the Secretary of the U.S. Department of Health and Hurnan
Services.
.14. Judicial or Administrative Proceedings
COUNTY may terminate this Agreement in accordance with the terms and
conditions of this Agreement as written hereinabove, if: (1) CONTRACTOR is found guilty in a
criminal proceeding for a violation of the HIPAA Privacy or Security Laws or the HITECH Act; or-
(2) there is a finding or stipulation that the CONTRACTOR has violated a privacy or security
standard or requirement of the HITECH Act, HIPAA or other security or privacy laws in an
administrative or civil proceeding in which the CONTRACTOR is a party.
15. Effect of Termination
Upon termination or expiration of this Agreement for any reason, CONTRACTOR
(
shall return or destroy all PHI received from COUNTY (or created or received by CONTRACTOR
on behalf of COUNTY) that CONTRACTOR still maintains in any form, and shall retain no copies
-9-
1 of such PHI. If return or destruction of PHI is not feasible, it shall continue to extend the
2 protections of these provisions to such information, and limit further use of such PHI to those
3 purposes that make the return or destruction of such PHI infeasible. This provision shall apply to
4 PHI that is in the possession of subcontractors or agents, if applicable, of CONTRACTOR. If
5 CONTRACTOR destroys the PHI data, a certification of date and time of destruction shall be
6 provided to the COUNTY by CONTRACTOR.
7 16. Disclaimer
8 COUNTY makes no warranty or representation that compliance by CONTRACTOR
9 with these provisions, the HITECH Act, HIPAA or the HIPAA regulations will be adequate or
10 satisfactory for CONTRA CTOR's own purposes or that any information in CONTRACTOR's
11 possession or control, or transmitted or received by CONTRACTOR, is or will be secure from
12 unauthorized access, viewing, use, disclosure, or breach. CONTRACTOR is solely responsible
13 for all decisions mc;1de by CONTRACTOR regarding the safeguarding of PHI.
14 17.Amendment
15 The parties acknowledge that Federal and State laws relating to electronic data
16 security arid privacy are rapidly evolving and that amendment of these provisions may be required
17 to provide for procedures to ensure compliance with. such developments. The parties specifically
18 ·agree to take such action as is necessary to amend this agreement in order to implement the
19 standards and requirements of HIPAA, the HIPAA regulations, the HITECH Act and other
20 applicable laws relating to the security or privacy of PHI. COUNTY may terminate this Agreement
)
21 upon thirty (30) days written notice in the event that CONTRACTOR does not enter into an
22 amendment providing assurances regarding the safeguarding df PHI that COUNTY in its sole
23 discretion, deems sufficient to satisfy the standards and requirements of HIPAA, the HIPAA
24 regulations and the HITECH Act.
25 18. No Third-Party Beneficiaries
26 Nothing express or implied in the terms and conditions of these provisions is intended to confer,
27 nor shall anything herejn confer, upon any person other than COUNTY or CONTRACTOR and
28 their respective successors or assignees, any rights, remedies, obligations or liabilities
-10-
1 whatsoever.
2 19. Interpretation
3 The terms and conditions in these provisions shall be interpreted as broadly as
4 necessary to implement and comply with HIPAA, the HIPAA regulations and applicable State
5 laws. The parties agree that any ambiguity in the terms and conditions of these provisions shall be
6 resolved in favor of a mea~ing that complies and is consistent with HIPAA and the HIPAA
7 regulations.
8 20. Regulatory References
9 A reference in the terms and conditions of these provisions to a section in the
10 HIPAA regulations means the section as in effect or as amended.
11 21. Survival
12 The respective rights and obligations of CONTRACTOR as stated in this Section
13 shall survive the termination or expiration of this Agreement.
14 22. No Waiver of Obligations
15 No change, waiver or ,discharge of any liability or obligation hereunder on any one or
' 16 more occasions shall be deemed a waiver of performance of any continuing or other obligation, or
17 shall prohibit enforcement of any obligation on any other occasion.
18 8. INDEPENDENT CONTRACTOR: In performance of the work, duties and
19 obligations assumed by CONTRACTOR under this Agreement, it is mutually understood and
20 agreed that CONTRACTOR, including any and all of the CONTRACTOR'S officers, agents, and
21 employees will at all times be acting and performing as an independent contractor, and shall act in
22 an independent capacity and not as an officer, agent, servant, employee, joirit venturer, partner, or
23 associate of the COUNTY. Furthermore, COUNTY shall have no right to control or supervise or
24 direct the manner or method by which CONTRACTOR shall perform its work and function.
25 However, COUNTY shall retain the right to administer this Agreement so as to verify that
26 CONTRACTOR is performing its obligations in a'ccordance with the terms and conditions thereof.
27 CONTRACTOR and COUNTY shall comply with all applicable provisions of
28 law and the rules and regulations, if any, of governmental authorities having jurisdiction over
-11-
1 matters the subject thereof.
2 Because of its status as an independent contractor, CONTRACTOR shall hav~
3 absolutely no right to employment rights and benefits available to COUNTY employees.
4 CONTRACTOR shall be solely liable and responsibl~ for providing to, or on behalf of, its
5 employees all legally-required employee benefits. In addition, CONTRACTOR shall be solely
6 responsible and save COUNTY harmless fro_m all matters relating to payment of
7 CONTRACTOR'S employees, including compliance with Social Security withholding and all other
8 regulations governing such matters. It is acknowledged that during the term of this Agreement,
9 CONTRACTOR may be providing services to others unrelated to the COUNTY or to this
10 Agreement.
11 9. MODIFICATION: Any matters of this Agreement may be modified from time to
12 time by the written consent of all the parties without, in any way, affecting the remainder.
13 10. NON-ASSIGNMENT: Neither party may assign, transfer or sub-contract this
14 Agreement nor their rights or duties under this Agre~ment without the prior written consent of the
15 other party.
16 1.1. HOLD HARMLESS: CONTRACTOR ~grees to indemnify, save, hold
17 harmless, and at COUNTY'S request, defend the COUNTY, its officers, agents, and employees
18 from any and all costs and expenses (including attorney's fees and costs), damages, liabilities,
19 claims, and losses occurring or resulting to COUNTY in connection with the performance, or
20 failure to perform, by CONTRACTOR, its officers, agents, or employees under this Agreement,
21 and from any and all costs and expenses (including attorney's fees and costs), damages,
22 liabilities., claims, and losses occurring or resulting to any person, firm, or corporation who may be
23 injured or damaged by _the performance, or failure to perform, of CONTRACTOR, its officers,
I
24 agents, or employees under this Agreement.
25 12. INSURANCE
26 A Required Insurance
27 Without limiting the COUNTY's right to obtain indemnification from
28 CONTRACTOR or any third parties, CONTRACTOR, at its sole expense, shall maintain in full
-12-
1 force and effect, the following insurance policies or a program of self-insurance, including but not
2 limited to, an insurance pooling arrangement or Joint Powers Agreement (JPA) throughout the
3 term of the Agreement:
4 1. Commercial General Liability
5 Commercial General Liability Insurance with limits of not less than One Million
6 Dollars ($1,000,000) per occurrence and an annual aggregate of Two Million Dollars ($2,000,000).
7 This policy shall be issued on a per occurrence basis.
8 2. Automobile Liability
9 Comprehensive Automobile liability Insurance with limits of not less than One
10 Million Dollars ($1,000,000.00) per accident for bodily injury and for property damages: Coverage
11 should include any auto used in connection with this Agreement.
12 3. Professional Liability
13 CONTRACTOR shall maintain Professional Liability Insurance with limits of
14 not less than One Million Dollars ($1,000,000.00) per occurrence, Three Million Dollars
15 ($3,000,000.00) annual aggregate.
16 4. Worker's Compensation
17 A policy of Worker's Compensation insurance as may be required by the
18 California Labor Code.
19 5. Technology Professional Liability (Errors and Omissions)
20 Technology professional liability (errors and omissions) insurance with limits
21 of not less than Two Million Dollars ($2,000,000.00) per occurrence. Coverage shall
22 encompass all of the CONTRACTOR's duties and obligations that are the subject of this
23 Agr7ement. Coverage shall include, but not be limited to, any and all claims, damages, costs,
' 24 fees, regulatory fines and penalties, or forms of legal action involving Cyber Risks.
25 6. Cyber Liability
26 Cyber liability insurance with limits of not less than Two Million Dollars
27 ($2,000,000.00) per occurrence. Coverage shall include, but not be limited to, any and all
28 claims, damages, costs, fees, regulatory fines and penalties, or forms of legal action involving
-13-
1 Cyber Risks. The cyber liability policy shall be endorsed to cover the fuU replacement value of,
2 damage to, alteration of, loss of, theft of, ransom of, or destruction of intangible property
3 (including but not limited to information or data) that is in the care, custody, or control of
4 CONTRACTOR.
5 For purposes of the technology professional liability insurance and the cyber liability
(
6 insurance required under this Agreement, Cyber Risks include, but are not limited to, (i) security
7 breaches, which include disclosure of, whether intentional or unintentional, information provided
8 by COUNTY, information provided by or obtained from any employee, or personal-identifying
9 information relating to any employee, to an unauthorized third party; (ii) breach of any of
10 CONTRACTOR's obligations under this Agreement relating to data security, protection,
11 preservation, usage, storage_, transmission, and the like; (iii) infringement of intellectual property
12 including, but not limited to, infringement of copyright, trademark, and .trade dress; (iv) invasion
13 of privacy, including any release of private_ information; (v) information theft by any person or
14 entity, whatsoever; (vi) damage to or destruction or alteration of electronic information; (vii)
15 extortion related to CONTRACTOR's obligations under this Agreementregarding electronic
16 information, including information provided by COUNTY, information provided by or obtained
17 from any employee, or personal-identifying information relating to any employee; (viii) network
18 security; (ix) data breach response costs, including security breach response costs; (x)
1 19 regulatory fines and penalties related to CONTRACTOR's obligations under this Agreement
20 regarding electronic information, including information provided by COUNTY, information
21 provided by or obtained from an employee, or personal-identifying information relating to any
22 employee; and (xi) credit monitoring expenses.
23 B. Additional Requirements Relating to Insurance
24 CONTRACTOR shall obtain endorsements_to the Commercial General Liability
25 insurance naming the COUNTY, its officers, agents, and employees, individually and collectively,
26 as additional insured, but only insofar as the operations under this Agre~ment are concerned.
27 Such coverage for additional insured shall apply as primary insurance and any other insurance, or
28 self-insurance, maintainE:ld by COUNTY, its officers, agents and employees shall be exc_ess only
\
-14-
1 and not contributing with insurance provided under CONTRACTOR's policies herein. This
2 insurance shall not be cancelled or changed without a minimum of thirty (30) days advance written
3 notice given to COUNTY.
· 4 CONTRACTOR hereby waives its right to recover from COUNTY, its officers,
5 agents, and employees any amounts paid by the policy of worker's compensation insurance ·
6 required by this Agreement. CONTRACTOR is solely responsible to obtain any endorsement to
7 such policy that may be necessary to accomplish such waiver of subrogation, but
8 CONTRACTOR's waiver of subrogation under this paragraph is effective whether or not
9 CONTRACTOR obtains such an endorsement.
10 Within thirty (30) days from the date CONTRACTOR signs and executes th.is
11 Agreement, CONTRACTOR shall provide certificates of insurance and endorsement as stated
12 above for all of the foregoing policies, as required herein, to the COUNTY, (Paul Nerland, Director
13 of Human Resources, 2220 Tulare Street, 16 th Floor, Fresno, CA 93721 ), stating that such
14 insurance coverage have beeffobtained and are in full force; that the COUNTY, officers, agents
15 and employees will not be responsible for any premiums on the policies; that such Commercial
l . •
16 General Liability insurance names the COUNTY, its officers, agents and employees, individually
17 and collectively, as additional insured, but only insofar as the operations under this Agreement'are
18 concerned; that such coverage for additional insured shall apply as primary insurance and ~my 1
19 other insurance, or self-insurance, maintained by COUNTY, its officers, agents an.d employees,
20 shall be excess only and not contributing with insurance pro'(ided under.CONTRACTO_R's policies
21 herein; and that this insurance shall not be cancelled or changed without a minimum of thirty (30)
22 days advance, written notice given to COUNTY.
23 In the event CONTRACTOR fails to keep in effect at all times insurance
l
24 coverage as herein provided, the COUNTY may, in addition to other remedies it may have,
25 suspend or terminate this Agreement upon the occurrence of such event.
26 , All policies shall be with admitted insurers licensed to do business in the State
27 of California. Insurance purchased shall be purchased from ·companies possessing a current AM ..
28 Best, Inc. rating of A FSC VII or better.
-15-
1
2
3
4
5
6
7
8
9
\
10
11
12
13
14
15
16
17
18.
19
20
21
22
23
24
25
26
27
28
13. AUDITS AND INSPECTIONS: The CONTRACTOR shall at any time during
business hours, and as often as the COUNTY may deem necessary, make available to the
COUNTY for examination all of its records and data with respect to the matters covered by this
Agreement. The CONTRACTOR shall, upon request by the COUNTY, permit the COUNTY to
audit and inspect all of such records and data necessary to ensure CONTRACTOR'S compliance
with the terms of this Agreement. I
If this Agreement exceeds ten thousand dollars ($10,000.00), CONTRACTOR
shall be subject to the examination and audit of the Auditor General for a period of three (3) years
after final payment under contract (Government Code Section 8546.7).
14. NOTICES: The persons and their addresses having authority to give and
receive notices under this Agreement include the following:
COUNTY
Paul Nerland,
Director of Human Resources
2220 Tulare Street. 16th Floor
. Fresno, CA 93721
CONTRACTOR
Barry Maas, President
Administrative Solutions, Inc.
5260 N. Palm Ave., Ste. 300
Fresno, CA 93704
Any and all notices between the COUNTY and the CONTRACTOR provided
for or permitted under this Agreement or by law shall be in writing and shall be deemed duly
'
served when personally delivered to one of the parties, or in lieu of such personal services, when
deposited in the United States Mail, postage prepaid, addressed to such party.
15. GOVERNING LAW: Venue for any action arising out of or related to this
Agreement shall only be in Fresno County, California.
The rights and obligations of the parties and all interpretation and performance
of this Agreement shall be governed in all respects by the laws of the State of California.
16. ENTIRE AGREEMENT: This Agreement constitutes the entire_agreement
between the CONTRACTOR and COUNTY with respect to the subject matter hereof and
supersedes all previous Agreement negotiations, proposals, commitments, writings,
advertisement$, publications, and understanc::iing of any nature whatsoever unless expressly
included in this Agreement.
-16-
1 IN WITNESS WHEREOF, the parties hereto have executed this Agreement as of the
2 day and year first hereinabove written.
3
4
5
6
7
8
9
-----~tO=-
11 ~~~.J;~~!~~s
Mailing Address
12
13
14
15
16
17
18
19
20
21
----------22
FOR ACCOUNTING USE ONLY:
Fund No: 1060
23 Subclass: 10000
24 ORG No: 89250200
Account No: 7185
25
26
27
28
COUNTY OF FRESNO
~-----~--~--------
-17-
ATTEST:
Bernice E. Seidel
Clerk of the Board of Supervisors
County of Fresno, State of California
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
EXHIBIT A
CONTRACTOR will provide the following Administrative Services for the COUNTY:
1. Process retirees', enrollment/billing paperwork once received from COUNTY;
2. T~ack benefits elected by retirees and covered family members;
3. Send retirees introductory letter containing payment options (e.g. payment coupons for
check or money order, ACH for auto-payment, credit cards);
4. Track and collect retirees' monthly premiums;
5. Remit premiums to COUNTY directly (CONTRACTOR does not send to carriers);
6. Notify COUNTY of all retiree terminations;
7. Store COUNTY benefit plan rules, including eligibility restrictions, waiting periods, volume
and age calculation frequencies;
8. Maintain standard reporting system, including various census, discrepancy, enrollment,
I '
and audit reports.
-18-