Loading...
HomeMy WebLinkAboutAgreementA-20-290withCDPHforSTDCollaboration.pdfState of California – Health and Human Services Agency – California Department of Public Health CDPH 1229 (09/2019) Page 1 of 4 CALIFORNIA SEXUALLY TRANSMITTED DISEASES PROGRAM STD Program Management Awarded By THE CALIFORNIA DEPARTMENT OF PUBLIC HEALTH, hereinafter “Department” TO County of Fresno, hereinafter “Grantee” Implementing the “STD Program Management and Collaboration Project,” hereinafter “Project” GRANT AGREEMENT NUMBER 19-10960 The Department awards this Grant and the Grantee accepts and agrees to use the Grant funds as follows: AUTHORITY: The Department has authority to grant funds for the Project under Health and Safety Code Section 131085(a). PURPOSE: The Department shall provide a grant to and for the benefit of the Grantee. The purpose of the grant is to implement public health activities to monitor, investigate, and prevent sexually transmitted diseases (STD) in collaboration with community-based organizations (CBOs) within the local health jurisdiction (LHJ). Funds allocated to the LHJs shall be used for innovative and impactful STD prevention and control activities including, but not limited to, the following: voluntary screening for STDs among inmates and wards of county adult and juvenile correctional facilities; technology, telehealth, and digital platforms and applications to enhance immediate access to screening, testing, and treatment; state-of-the-art testing modalities that ensure swift and accurate screening for and diagnosis of STDs; and community-based testing and disease investigation. Key strategic targets for STD prevention and control are: enhancement of surveillance and case follow up for syphilis cases; testing, treatment, partner services, and referrals to services for vulnerable and underserved clients at high risk for STDs; and implementation of community-based services through partnerships between LHJs and CBOs. GRANT AMOUNT: The maximum amount payable under this Grant shall not exceed Nine Hundred Seventy-Two Thousand, Seven Hundred Fifty-Five Dollars ($972,755). TERM OF GRANT AGREEMENT: The term of the Grant shall begin on July 1, 2019 and terminates on June 30, 2024. No funds may be requested or invoiced for services performed or costs incurred after June 30, 2024. Agreement No. 20-290 State of California – Health and Human Services Agency – California Department of Public Health CDPH 1229 (09/2019) Page 2 of 4 PROJECT REPRESENTATIVES: The Project Representatives during the term of this Grant will be: California Department of Public Health Grantee: County of Fresno Name: Karlo Estacio Chief, Business Operations Support Section Name: Jena Adams Supervising CDC Specialist Address: P.O. Box 997377, MS 7320 Address: 1221 Fulton Street City, Zip: Sacramento, CA 95899-7377 City, Zip: Fresno, CA 93775 Phone: (916) 552-9820 Phone: (559) 600-3042 Fax: (916) 440-5106 Fax: N/A Email: Karlo.Estacio@cdph.ca.gov Email: jadams@fresnocountyca.gov Direct all inquiries to: California Department of Public Health STD Control Branch Grantee: County of Fresno Attention: Christine Johnson Grant Manager Attention: Jena Adams Supervising CDC Specialist Address: P.O. Box 997377, MS 7320 Address: 1221 Fulton Street City, Zip: Sacramento, CA 95899-7377 City, Zip: Fresno, CA 93775 Phone: (916) 552-9796 Phone: (559) 600-3042 Fax: (916) 636-6454 Fax: N/A Email: Christine.Johnson@cdph.ca.gov Email: jadams@fresnocountyca.gov State of California – Health and Human Services Agency – California Department of Public Health CDPH 1229 (09/2019) Page 3 of 4 All payments from CDPH to the Grantee shall be sent to the following address: Remittance Address Grantee: County of Fresno Attention “Cashier:” Bruna Chavez Address: PO Box 11800 City, Zip: Fresno, CA 93775 Phone: (559) 600-6415 Fax: N/A Email: dphboap@fresnocountyca.gov Either party may make changes to the Project Representatives, or remittance address, by giving a written notice to the other party. Said changes shall not require an amendment to the agreement. Note: Remittance address changes will require the Grantee to submit a completed CDPH 9083 Governmental Entity Taxpayer ID Form or STD 204 Payee Data Record Form which can be requested through the CDPH Project Representatives for processing. STANDARD PROVISIONS. The following exhibits are attached and made a part of this Grant by this reference: Exhibit A SCOPE OF WORK Exhibit B BUDGET DETAIL AND PAYMENT PROVISIONS Exhibit C STANDARD GRANT CONDITIONS Exhibit D ADDITIONAL PROVISIONS Exhibit E STD LOCAL ASSISTANCE FUNDS – STANDARDS AND GENERAL TERMS AND CONDITIONS Exhibit F INFORMATION PRIVACY AND SECURITY REQUIREMENTS County of Fresno Grant 19-10960 Page 1 of 14 Exhibit A Scope of Work 1. Service Overview The Grantee will implement public health activities to monitor, investigate, and prevent Sexually Transmitted Diseases (STD) in collaboration with community-based organizations (CBOs)1 within the local health jurisdiction. California Health and Safety Code (H&SC) Section 120551 requires that the department allocate funds to local health jurisdictions for innovative and impactful STD prevention and control activities, including, but not limited to the following: voluntary screening for STDs among inmates and wards of county adult and juvenile correctional facilities; technology, telehealth, and digital platforms and applications to enhance immediate access to screening, testing and treatment; state-of-the-art testing modalities that ensure swift and accurate screening for and diagnosis of STDs; and community-based testing and disease investigation. Local health jurisdictions should use these funds to enhance activities already provided for STD prevention and control, and should not replace existing activities. H&SC Section 120511 also requires that no less than 50 percent of the funds allocated to the LHJs shall be provided to one or more CBOs for purposes consistent with this section, provided that there are CBOs in the jurisdiction that provide these activities and demonstrate the ability to identify priority target populations, satisfactorily describe outreach protocols and include/describe community resources for prevention and control activities. If the Contractor determines that no CBOs existing within the local health jurisdiction meet the criteria specified in H&SC Section 120511, then the Contractor shall submit written documentation demonstrating this fact to CDPH, which CDPH will review on a case-by-case basis. California Department of Public Health (CDPH) STD surveillance data indicate that over the past five years, there were continued increases in infectious syphilis, congenital syphilis, gonorrhea, and chlamydia trachomatis infection across the state. The increases in syphilis among women, including pregnant women, and the devastating impact of congenital syphilis is of particular concern. Key strategic targets for STD prevention and control are: enhancement of surveillance and case follow up for syphilis cases; testing, treatment, partner services, and referrals to services for vulnerable and underserved clients at high risk for STD; and implementation of community-based services through partnerships between public health and CBOs. 2. Service Location The services shall be performed at applicable facilities in the County of Fresno. 3. Service Hours The services shall be primarily provided Monday through Friday, from 8:00 a.m. to 5:00 p.m. and include evenings, weekends, and holidays as needed. 1 A CBO is defined as a private entity that is a nonprofit corporation [Int. Rev Code Section 501(c)] operating at the local level with extensive experience serving persons living with or at risk for STDs. CBOs may include community health centers, syringe service programs, and non-profit drug treatment programs. County of Fresno Grant 19-10960 Page 2 of 14 Exhibit A Scope of Work 4. Services to be Performed: Collaboration with CBOs to implement core STD prevention and control Part I: Supplement to Core STD Public Health Services – Surveillance and Disease Intervention LHJs are required to participate in all required activities (A through D), as well as at least one of the optional activities listed (E or F). Place a checkmark in the box for the optional activity you plan to participate in and complete the SOW Narrative section. All program activities, including innovative projects, should support the outcome measures of increased screening, treatment and linkage to care. Please complete the SOW Narrative section indicating whether the LHJ or a subcontracted CBO will complete activities E or F in this section. Activities Performance Indicators/Deliverables Timeline A. Assure completeness and accuracy of key data variables through review of laboratory and provider reports, local surveillance system documentation (e.g., CalREDIE), and public health follow-up of early syphilis cases. • Percent of female syphilis cases (all stages) with complete data for the following: o Pregnancy status (females ages 12-44) o Estimated Date of Delivery (EDD), if pregnant o Treatment date, stage-appropriate medication and dosage o HIV status • Percent of neonates exposed to syphilis with documented birth outcome and appropriate classification on the Congenital Syphilis Case Report Form. • Percent of male primary and secondary syphilis cases with complete data for the following: treatment date, stage-appropriate medication/dosage, HIV status and gender of sex partners. 7/1/2019 – 6/30/2024 B. Ensure all staff with access to STD data complete the CDPH required confidentiality and data security training and maintain on file the associated confidentiality agreements. • Confidentiality and data security training agreements are maintained in the LHJ. 7/1/2019 – 6/30/2024 County of Fresno Grant 19-10960 Page 3 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline C. Establish a local protocol for conducting case follow up on newly reported cases of syphilis, including reports on neonates, women of childbearing age, and early syphilis among men. • Syphilis case follow-up protocol submitted to CDPH within 90 days of award. 7/1/2019 – 6/30/2020 D. Ensure timely investigation of all reported reactive serologic tests for syphilis according to local protocol and CDPH recommendations. • Percent of neonates exposed to syphilis with appropriate infant medical evaluation and treatment per CDC recommendations. • Percent of early syphilis cases among prioritized population (pregnant women, men who have sex with women, MSM) with at least one partner treated within 30 days before or after index client specimen collection. 7/1/2019 – 6/30/2024 OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity. E. Use technology, telehealth, and digital platforms and applications to enhance immediate access to partner notification and treatment. • Number of syphilis cases for which digital platforms are used for partner notification. • Number and percent of partners notified of exposure to STD. 7/1/2020 – 6/30/2024 OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity. F. Additional innovative and impactful activity you plan to undertake. Complete the SOW Narrative section, ensuring all program activities, including innovative projects, support the outcome measures of increased screening, treatment and linkage to care. (Please describe below.) Please propose indicators, deliverables and outcomes of success. 7/1/2019 – 6/30/2024 County of Fresno Grant 19-10960 Page 4 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline Optional: G. Place a checkmark in the box if Grantee plans to subcontract any activities from Part I. SOW Narrative: Specify whether the LHJ or a subcontracted CBO will complete the activities and deliverables listed above under Part I Activities E or F by placing a checkmark in the appropriate box under each activity. Describe the approach that will be used to complete the activities selected for this objective, including the approximate beginning and ending month and year for each major activity. Provide the name of the subcontractor if known; otherwise indicate “TBD” for the name of the subcontractor. E – Use technology, telehealth, and digital platforms and applications. (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Brief description of activity: Determine and implement a digital platform to increase access to telehealth treatment and partner notification. Name of subcontractor, if applicable: 7/1/2020 – 6/30/2024 F – Additional innovative and impactful activity (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Brief description of activity: Name of subcontractor, if applicable: Part II: STD testing, treatment, and referral to other services among vulnerable and underserved clients at high risk for STD LHJs are required to participate in all required activities (I through K), as well as at least one of the optional activities listed (A through H). Place a checkmark in the box for the optional activity you plan to participate in and complete the SOW Narrative section. All program activities, including innovative projects, should support the outcome measures of increased screening, treatment and linkage to care. Please complete the SOW Narrative section indicating whether the LHJ or a subcontracted CBO will complete the activities in this section. County of Fresno Grant 19-10960 Page 5 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity A. Conduct or ensure the provision of routine, universal testing for gonorrhea and chlamydia among people who are incarcerated in county juvenile correctional facilities, as close to booking as possible. Per juvenile correctional facility: • Number of people booked. • Number who were tested for STDs. • Number and percent of people who tested that were diagnosed with chlamydia, gonorrhea, or syphilis, by STD (Target: at least 2% for any STD). • Number and percent of people who tested positive that received CDC recommended treatment, by STD (Target: at least 90%). • Number of EPT doses dispensed. 7/1/2019 – 6/30/2024 OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity B. Conduct or ensure the provision of routine, universal testing for syphilis among people who are incarcerated in county jails with a positivity of 2% or more, as close to booking as possible. Per county jail facility: • Number of people booked. • Number and percent of people who received STD testing (Target: 80%). • Number and percent of people who tested that were diagnosed with chlamydia, gonorrhea, or syphilis, by STD (Target: at least 2% for any STD). • Number and percent of people who tested positive that received CDC recommended treatment, by STD (Target: at least 90%). • Number of EPT doses dispensed. 7/1/2019 – 6/30/2024 OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity. C. Use technology, telehealth, and digital platforms and applications to enhance immediate access to screening, testing, and treatment. Description of digital platforms submitted to CDPH. • Number of people receiving STD tests via platform. • Number and percent of people diagnosed with chlamydia, gonorrhea, or syphilis, by STD (Target: at least 2% for any STD). • Number and percent of people with positive tests that received CDC- 7/1/2019 – 6/30/2024 County of Fresno Grant 19-10960 Page 6 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline recommended treatment, by STD. (Target: at least 90%). • Number of EPT doses dispensed OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity. D. Use state-of-the-art testing modalities that ensure swift and accurate screening for, and diagnosis of, STDs. Description of testing modalities used submitted to CDPH. • Number of people receiving STD testing via modality • Number and percent of people diagnosed with chlamydia, gonorrhea, or syphilis, by STD (Target: at least 2% for any STD). • Number and percent of people with positive tests that received CDC- recommended treatment, by STD. (Target: at least 90%). • Number of EPT doses dispensed. 7/1/2019 – 6/30/2024 OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity. E. Conduct community-based, data-driven testing among populations at risk for chlamydia, gonorrhea, and/or syphilis. Priority populations include people who are African American/Black; lesbian, gay, bisexual, or transgender (LGBT); and people who can become pregnant who are at risk of syphilis. Description of community-based testing submitted to CDPH, including populations prioritized for screening, STD tests offered, and anatomic sites being tested. • Number of people receiving community-based testing for STDs. • Number and percent of people diagnosed with chlamydia, gonorrhea, or syphilis, by STD (Target: at least 2% for any STD). • Number and percent of people with positive tests that received CDC- recommended treatment, by STD (Target: at least 90%). • Number of EPT doses dispensed. 7/1/2019 – 6/30/2024 OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity. F. Conduct STD screening among people who are homeless or unstably housed, including referrals/linkage to family planning, preconception, or prenatal care for pregnant people experiencing homelessness. Description of outreach and testing submitted to CDPH. • Number of people receiving STD testing. • Number and percent of people diagnosed with chlamydia, gonorrhea, or syphilis, by STD (Target: at least 2%). • Number and percent of people diagnosed with STDs that received 7/1/2019 – 6/30/2024 County of Fresno Grant 19-10960 Page 7 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline treatment, by STD. (Target: at least 90%). • Number of EPT doses dispensed. OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity. G. Provide comprehensive case management for pregnant people diagnosed with syphilis, including referrals to prenatal care, housing, drug treatment, syringe exchange programs, transportation, and/or social services. • Description of case management submitted to CDPH. Number of pregnant people diagnosed with syphilis provided referrals. 7/1/2019 – 6/30/2024 OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity. H. Additional innovative and impactful activity you plan to undertake, and complete the SOW Narrative section. All program activities, including innovative projects, should support the outcome measures of increased screening, treatment and linkage to care. (Please describe below in SOW narrative.) Please propose indicators, deliverables and outcomes of success. 7/1/2019 – 6/30/2024 I. Assess HIV status of people tested for STDs and link to HIV testing, HIV PrEP or HIV care, as appropriate. Description of process for integrating HIV prevention into STD testing and outreach activities submitted to CDPH. 7/1/2019 – 6/30/2024 County of Fresno Grant 19-10960 Page 8 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline J. Facilitate HIV prevention among STD cases. Indicators measured via CalREDIE: • Number and percent of early syphilis cases newly diagnosed with HIV, among those not HIV-positive. • Number and percent of early syphilis cases/partners with new HIV diagnosis that were linked to HIV care within 30 days of HIV test. • Number and percent of HIV-negative early syphilis cases/partners, referred to PrEP. 7/1/2019 – 6/30/2024 Optional: K. Place a checkmark in the box if Grantee plans to subcontract any activities from Part II. SOW Narrative: Specify whether the LHJ or a subcontracted CBO will complete the activities and deliverables listed above under Part II by placing a checkmark in the appropriate box under each activity. Describe the approach that will be used to complete the activities selected for this objective, including the approximate beginning and ending month and year for each major activity. Provide the name of the subcontractor if known; otherwise indicate “TBD” for the name of the subcontractor. A – Provision of routine, universal testing for gonorrhea and chlamydia for incarcerated youth (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Name of subcontractor, if applicable: B – Provision of routine, universal testing for syphilis for incarcerated people (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Name of subcontractor, if applicable: County of Fresno Grant 19-10960 Page 9 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline C – Use technology, telehealth, and digital platforms and applications (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Brief description of activity: Name of subcontractor, if applicable: D – Use state-of-the-art testing modalities (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Brief description of activity: Name of subcontractor, if applicable: E – Community-based, data-driven testing among populations at risk for chlamydia, gonorrhea, and/or syphilis (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Brief description of activity: Partner with CBO to increase STD screenings among vulnerable populations via mobile units or increased clinic operations. Name of subcontractor, if applicable: TBD through RFP in Summer 2020 7/1/2020 – 6/30/2024 F – STD screening among homeless or unstably housed people (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Brief description of activity: Name of subcontractor, if applicable: G – Comprehensive case management for pregnant people diagnosed with syphilis (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Brief description of activity: Name of subcontractor, if applicable: County of Fresno Grant 19-10960 Page 10 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline H – Additional innovative and impactful activity (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Brief description of activity: Name of subcontractor, if applicable: I - HIV status of people tested for STDs and linkage to HIV testing, HIV PrEP or HIV care (REQUIRED) LHJ will conduct this activity CBO will conduct this activity Name of subcontractor, if applicable: 7/1/2019 – 6/30/2024 J – Facilitate HIV prevention among STD cases (REQUIRED) LHJ will conduct this activity CBO will conduct this activity Name of subcontractor, if applicable: 7/1/2019 – 6/30/2024 Part III: Partnerships: Increase community-level capacity to deliver STD screening, testing, treatment and linkages to services for vulnerable and underserved clients at high risk for STD LHJs are required to participate in all required activities (A and B). Place a checkmark in the box for the optional activity (C) to propose an innovative evidence-based practice. All program activities, including innovative projects, should support the outcome measures of increased screening, treatment and linkage to care. Please complete the SOW Narrative section indicating whether the LHJ or a subcontracted CBO will complete the activities in this section. Activities Performance Indicators/Deliverables Timeline A. Develop and maintain local (and, where relevant, regional) partnerships with stakeholders such as public and private health plans, federally qualified health centers, rural health clinics, Indian health organizations, hospitals, labor and Summary of barriers identified and strategies developed and implemented through new and existing partnerships, coalitions, task forces, and/or work groups and outcome of those partnerships in improving STD prevention, screening, 7/1/2019 – 6/30/2024 County of Fresno Grant 19-10960 Page 11 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline delivery, prenatal, and family planning settings, laboratories, pharmacies, substance use and behavioral health treatment programs, syringe exchange programs, housing services programs, HIV/HCV programs, people from populations at risk of STD, correctional partners, and other partners to assess barriers and develop and implement strategies for improving the accessibility of STD prevention, screening, diagnosis, navigation, linkages to care, and treatment for vulnerable and underserved individuals. diagnosis, linkages to care, and treatment for vulnerable and underserved individuals. B. Collaborate with programs providing services to people who are pregnant (e.g., Maternal/Child Health Programs, prenatal and labor and delivery providers, outreach programs) to increase access to and engagement with prenatal care for pregnant people at risk for syphilis (e.g., those experiencing homelessness, using drugs, or who are incarcerated). Summary of barriers identified and strategies developed and implemented to increase engagement with prenatal care for pregnant people at risk for syphilis. 7/1/2019 – 6/30/2024 OPTIONAL ACTIVITY: Place a checkmark in the box only if Grantee plans to participate in this activity. C. Additional innovative and impactful activity you plan to undertake, and complete the SOW Narrative section. All program activities, including innovative projects, should support the outcome measures of increased screening, treatment and linkage to care. (Please describe below.) Please propose indicators, deliverables and outcomes of success. 7/1/2019 – 6/30/2024 County of Fresno Grant 19-10960 Page 12 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline Optional: D Place a checkmark in the box if Grantee plans to subcontract for any activities in Part III. SOW Narrative: Specify whether the LHJ or a subcontracted CBO will complete the activities and deliverables listed above under Part II by placing a checkmark in the appropriate box for each activity. Describe the approach that will be used to complete the activities selected for this objective, including the approximate beginning and ending month and year for each major activity. Provide the name of the subcontractor if known; otherwise indicate “TBD” for the name of the subcontractor. A – Local/regional partnerships with stakeholders (REQUIRED) LHJ will conduct this activity CBO will conduct this activity Brief description of activity: 7/1/2019 – 6/30/2024 B – Collaborate with programs providing services to people who are pregnant (REQUIRED) LHJ will conduct this activity CBO will conduct this activity Brief description of activity: 7/1/2019 – 6/30/2024 C – Additional innovative and impactful activity (OPTIONAL) Activity will not be conducted LHJ will conduct this activity CBO will conduct this activity Brief description of activity: Name of subcontractor, if applicable: Part IV: Fund Community-Based Organizations for STD prevention activities LHJs are required to subcontract out no less than 50 percent of the funds to one or more CBOs, provided that there are CBOs in the jurisdiction that provide these activities and demonstrate the ability to identify priority target populations, satisfactorily describe outreach protocols and include/describe community resources for prevention and control activities. If the Grantee determines that no CBOs existing within the local health jurisdiction meet the criteria specified in H&SC Section 120511, then the Grantee shall submit written documentation demonstrating this fact to CDPH, which CDPH will review on a case-by- case basis. County of Fresno Grant 19-10960 Page 13 of 14 Exhibit A Scope of Work Activities Performance Indicators/Deliverables Timeline A. Develop a mechanism for selecting and funding CBO(s) with capacity to reach priority target populations, satisfactorily describe outreach protocols, and include community resources for prevention and control activities. • Selection method submitted to CDPH in writing. 7/1/2019 – 6/30/2020 B. Develop and implement a program evaluation plan to monitor CBO performance. Collect data on required metrics, monitor performance, and provide quality assurance and quality improvement assistance where needed. • Program evaluation plan developed and submitted to CDPH. LHJs must demonstrate that the CBO has (1) identified and reached priority target populations, (2) satisfactorily described its outreach protocols, and (3) included community resources for prevention and control activities. 7/1/2019 – 6/30/2020 County of Fresno Grant 19-10960 Page 14 of 14 Exhibit A Scope of Work 5. Summary of Required Reports and Data Frequency Timeframe Deadline Activities Report Recipient Semi-Annual (Narrative summary reports) Fiscal Year 1 07/01/19 – 12/31/19 01/01/20 – 06/30/20 Fiscal Year 2 07/01/20 – 12/31/20 01/01/21 – 06/30/21 Fiscal Year 3 07/01/21 – 12/31/21 01/01/22 – 06/30/22 Fiscal Year 4 07/01/22 – 12/31/22 01/01/23 – 06/30/23 Fiscal Year 5 07/01/23 – 12/31/23 01/01/24 – 06/30/24 Fiscal Year 1 07/31/20 Fiscal Year 2 01/31/21 07/31/21 Fiscal Year 3 12/31/21 07/31/22 Fiscal Year 4 12/31/22 07/31/23 Fiscal Year 5 12/31/23 6/30/24 Part I - IV STDLHJContracts@ cdph.ca.gov Quarterly (Aggregate client services data reports) Year 1 03/01/20 – 06/30/20 Year 2 07/01/20 – 09/30/20 10/01/20 – 12/31/20 01/01/21 – 03/31/21 04/01/21 – 06/30/21 Year 3 07/01/21 – 09/30/21 10/01/21 – 12/31/21 01/01/22 – 03/31/22 04/01/22 – 06/30/22 Year 4 07/01/22 – 09/30/22 10/01/22 – 12/31/22 01/01/23 – 03/31/23 04/01/23 – 06/30/23 Year 5 07/01/23 – 09/30/23 10/01/23 – 12/31/23 01/01/24 – 03/31/24 04/01/24 – 06/30/24 Year 1 07/31/20 Year 2 10/31/20 01/31/21 04/30/21 07/31/21 Year 3 10/31/21 12/31/21 04/15/22 07/31/22 Year 4 10/31/22 12/31/22 04/15/23 07/31/23 Year 5 10/31/23 12/31/23 04/15/24 06/30/24 Part II Secure file transfer protocol; CalREDIE County of Fresno Grant 19-10960 Page 1 of 4 Exhibit B Budget Detail and Payment Provisions 1. Invoicing and Payment A. Upon completion of project activies as provided in Exhibit A, Scope of Work, and upon receipt and approval of the invoices, the State agrees to reimburse the Grantee for activities performed and expenditures incurred in accordance with the costs specified herein. B. Invoices shall include the Grant Number and shall be submitted in duplicate not more frequently than quarterly in arrears to: Christine Johnson California Department of Public Health STD Control Branch MS 7320 P.O. Box 997377 Sacramento, CA 95899-7377 C. Invoices shall: 1) Be prepared on Grantee letterhead. If invoices are not on produced letterhead invoices must be signed by an authorized official, employee or agent certifying that the expenditures claimed represent activities performed and are in accordance with Exhibit A, Scope of Work, under this Grant. 2) Bear the Grantee’s name as shown on the Grant. 3) Identify the billing and/or performance period covered by the invoice. 4) Itemize costs for the billing period in the same or greater level of detail as indicated in this Grant. Subject to the terms of this Grant, reimbursement may only be sought for those costs and/or cost categories expressly identified as allowable and approved by CDPH. D. Invoices must be submitted no more than forty-five (45) calendar days after the end of each quarter unless a later or alternate deadline is agreed to in writing by the program Grant Manager. 2. Budget Contingency Clause A. It is mutually agreed that if the Budget Act of the current year and/or any subsequent years covered under this Agreement does not appropriate sufficient funds for the program, this Agreement shall be of no further force and effect. In this event, the State shall have no liability to pay any funds whatsoever to Grantee or to furnish any other considerations under this Agreement and Grantee shall not be obligated to fulfill any provisions of this Agreement. B. If funding for any fiscal year is reduced or deleted by the Budget Act for purposes of this program, the State shall have the option to either cancel this Agreement with no liability occurring to the State, or offer an agreement amendment to Grantee to reflect the reduced amount. County of Fresno Grant 19-10960 Page 2 of 4 Exhibit B Budget Detail and Payment Provisions 3. Prompt Payment Clause Payment will be made in accordance with, and within the time specified in, Government Code Chapter 4.5, commencing with Section 927. 4. Amounts Payable A. The amount payable under this Grant shall not exceed $972,755. B. Payment allocations shall be made for allowable expenses up to the amount annually encumbered commensurate with the state fiscal year in which services are fulfilled and/or goods are received. 5. Timely Submission of Final Invoice A. A final undisputed invoice shall be submitted for payment no more than forty-five (45) calendar days following the expiration or termination date of this Grant, unless a later or alternate deadline is agreed to in writing by the program grant manager. Said invoice should be clearly marked “Final Invoice”, indicating that all payment obligations of the State under this Grant have ceased and that no further payments are due or outstanding. B. The State may, at its discretion, choose not to honor any delinquent final invoice if the Grantee fails to obtain prior written State approval of an alternate final invoice submission deadline. 6. Travel and Per Diem Reimbursement A. Any reimbursement for necessary travel and per diem shall be at the rates currently in effect as established by the California Department of Human Resources (CalHR). B. Grant funds may be used for reimbursement of travel expenses to attend meetings, conferences, and training. The Grantee is recommended to include travel funds for staff to attend the following: 1. California STD/HIV Controllers Association annual meeting 2. Other statewide conferences and meetings for congenital syphilis, surveillance, and disease intervention 3. Disease Intervention Specialist training (e.g. Passport to Partner Services training for new DIS staff or other training for existing DIS staff) C. In accordance with California Assembly Bill 1887 (Chapter 687, Statutes of 2016), and Government Code Section 11139.8, travel is prohibited to states that, enact the following after June 26, 2015: County of Fresno Grant 19-10960 Page 3 of 4 Exhibit B Budget Detail and Payment Provisions 1. A law that voids or repeals, or has the effect of voiding or repealing, existing state or local protections against discrimination on the basis of sexual orientation, gender identify, or gender expression. 2. A law that authorizes or requires discrimination against same-sex couples or their families or on the basis of sexual orientation, gender identify, or gender expression. 3. A law that creates an exemption to antidiscrimination laws in order to permit discrimination against same-sex couples or their families or on the basis of sexual orientation, gender identify, or gender expression. The California Attorney General’s webpage lists the states to where travel is prohibited. D. The total budget amount for out-of-state travel shall not exceed five (5) percent of the total annual budget of this grant agreement. 7. Use of Funds / Supplanting These funds shall be used to supplement and enhance existing local STD program activities and services and shall not replace existing services and activities, prevent the addition of new services and activities, and does not duplicate reimbursement of costs and services received from local funds or other sources. Supplanting of funds is defined (for the purposes of this agreement) as using local assistance award monies to “replace” or “take the place of” existing local funding. For example, reductions in local funds cannot be offset by the use of any dollars for the same purpose. 8. Proper Use of Funds A. The funds for this grant agreement may be used for: 1. Local health jurisdiction staff to support STD prevention and control activities. 2. Out-of-state travel to conferences and meetings, except to prohibited states as provided in 6.C. above. Travel costs may include travel and per diem for local leadership and other relevant staff (listed in the budget as in-kind support) to attend the Annual California STD HIV Controllers Association Membership Meeting, Annual STDCB Statewide Meeting (e.g., Congenital Syphilis Prevention Forum), National STD Prevention Conference, or other national forums as relevant. Prior written approval for out-of-state travel approval must be obtained from STDCB and shall not exceed five (5) percent of the total annual budget of this grant agreement. 3. In-state travel to support local capacity building, except to prohibited states as provided in 6.C. above. This includes training course fees, travel, and per diem to support enhancement of knowledge, skills, and abilities of Disease Intervention Workforce (e.g., Passport to Partner Services, Phlebotomy, Cultural Humility), or other staff essential to STD prevention and control. 4. STD test kits and other testing supplies. 5. STD treatment (i.e., Suprax, Azithromycin, Bicillin, Ceftriaxone, Doxycycline) 6. Condoms. County of Fresno Grant 19-10960 Page 4 of 4 Exhibit B Budget Detail and Payment Provisions 7. Provider education materials. 8. Client education materials. B. The funds for this grant agreement may be used for the following items, with supportive justification, tracking, and reporting of outcomes: 1. Incentives such as low value gift cards (e.g., WalMart, Safeway, transportation vouchers), hygiene kits, and/or other STD-related incentives. a. Client incentives, such as low value gift cards, may be approved as Behavioral Modification Materials (BMM). The value of the incentive is limited to $50.00 of merchandise per person per intervention (e.g. client attendance for syphilis treatment at $25.00 for each Bicillin injection). b. Current CDPH approvals require the BMM to be justified with scientific proof of behavior change, and be accompanied by a targeted distribution plan, incentive tracking log, and reporting of incentive distribution and client outcomes. c. Incentives cannot be used for the purchase of alcohol, tobacco, or drug products. d. The use of incentives must comply with the provisions in Exhibit E, STD Local Assistance Funds – Standards and General Terms and Conditions. 2. BMMs are provided to program participants to motivate and/or reinforce positive behavior and/or involvement in STD control and prevention activities. Receipt of a BMM requires action on the part of the recipient. The Grantee is responsible for the possession, security (e.g., will keep the BMMs in a secure location), and accountability of the BMMs. The Grantee will prepare a log sheet that will track and identify each of the BMMs, value, transfer date, and recipient. C. The funds for this grant agreement cannot be used for: 1. Stuff We All Get (SWAG) - The purchase of free promotional items for health promotion events such as pens, mugs, t-shirts, posters, key chains, or bumper stickers. This provision is in accordance with the California State Constitution, Article 16, section 6, which prohibits any gifting of public funds. 2. Individual prizes or high value incentives (e.g., iPads, iPhones) for health promotion competitions. 3. Cash incentives paid to an individual. 4. Scholarships paid to an individual or a school on behalf of an individual. 5. Food (e.g., sponsored lunch or dinner at provider education sessions, brown bag lunches, buffets at screening events). 6. The purchase, lease, or other support of county vehicles or mobile testing units. 7. Construction, renovation, improvement, or repair of property. 8. The purchase of alcohol, tobacco, or cannabis. County of Fresno Grant 19-10960 Page 1 of 4 Exhibit C Standard Grant Conditions 1. APPROVAL: This grant is of no force or effect until signed by both parties and approved by the Department of General Services, if required. The Grantee may not commence performance until such approval has been obtained. 2. AMENDMENT: No amendment or variation of the terms of this grant shall be valid unless made in writing, signed by the parties, and approved as required. No oral understanding or agreement not incorporated in the grant is binding on any of the parties. In no case shall the Department materially alter the scope of the project set forth in Exhibit A. 3. ASSIGNMENT: This grant is not assignable by the Grantee, either in whole or in part, without the written consent of the Grant Manager in the form of a written amendment to the grant. 4. AUDIT: Grantee agrees that the Department, the Bureau of State Audits, or their designated representative shall have the right to review and to copy any records and supporting documentation pertaining to this grant. Grantee agrees to maintain such records for a possible audit for a minimum of three (3) years after final payment or completion of the project funded with this grant, unless a longer period of records retention is stipulated. Grantee agrees to allow the auditor(s) access to such records during normal business hours and to allow interviews of any employees who might reasonably have information related to such records. Further, Grantee agrees to include a similar right of the State to audit records and interview staff in any subcontract related to the project. 5. CONFLICT OF INTEREST: Grantee certifies that it is in compliance with all applicable state and/or federal conflict of interest laws. 6. INDEMNIFICATION: Grantee agrees to indemnify, defend, and save harmless the State, its officers, agents, and employees from any and all claims and losses accruing or resulting to any and all contractors, subcontractors, suppliers, laborers, and any other person, firm, or corporation furnishing or supplying work services, materials, or supplies in connection with the project, and from any and all claims and losses accruing or resulting to any person, firm, or corporation who may be injured or damaged by Grantee in the performance of any activities related to the project. 7. FISCAL MANAGEMENT SYSTEMS AND ACCOUNTING STANDARDS: Grantee agrees that, at a minimum, its fiscal control and accounting procedures will be sufficient to permit tracing of all grant funds to a level of expenditure adequate to establish that such funds have not been used in violation of any applicable state or federal law, or the provisions of this grant. Grantee further agrees that it will maintain separate project accounts in accordance with generally accepted accounting principles. 8. GOVERNING LAW: This grant is governed by and shall be interpreted in accordance with the laws of the State of California. County of Fresno Grant 19-10960 Page 2 of 4 Exhibit C Standard Grant Conditions 9. INCOME RESTRICTIONS: Grantee agrees that any refunds, rebates, credits, or other amounts (including any interest thereon) accruing to or received by the Grantee under this grant shall be paid by the Grantee to the Department, to the extent that they are properly allocable to costs for which the Grantee has been reimbursed by the Department under this grant. 10. INDEPENDENT GRANTEE: Grantee, and its agents and employees of Grantee, in the performance of the project, shall act in an independent capacity and not as officers, employees, or agents of the Department. 11. MEDIA EVENTS: Grantee shall notify the Department’s Grant Manager in writing at least twenty (20) working days before any public or media event publicizing the accomplishments and/or results of the project and provide the opportunity for attendance and participation by Department’s representatives. 12. NO THIRD-PARTY RIGHTS: The Department and Grantee do not intend to create any rights or remedies for any third-party as a beneficiary of this grant or the project. 13. NOTICE: Grantee shall promptly notify the Department’s Grant Manager in writing of any events, developments, or changes that could affect the completion of the project or the budget approved for this grant. 14. PROFESSIONALS: Grantee agrees that only licensed professionals will be used to perform services under this grant where such services are called for. 15. RECORDS: Grantee certifies that it will maintain project accounts in accordance with generally accepted accounting principles. Grantee further certifies that it will comply with the following conditions for a grant award as set forth in the Grant. A. Establish an official file for the project which shall adequately document all significant actions relative to the project; B. Establish separate accounts which will adequately and accurately depict all amounts received and expended on this project, including all grant funds received under this grant; C. Establish separate accounts which will adequately depict all income received which is attributable to the project, especially including any income attributable to grant funds disbursed under this grant; D. Establish an accounting system which will adequately depict final total costs of the project, including both direct and indirect costs; and E. Establish such accounts and maintain such records as may be necessary for the state to fulfill federal reporting requirements, including any and all reporting requirements under federal tax statutes or regulations. County of Fresno Grant 19-10960 Page 3 of 4 Exhibit C Standard Grant Conditions 16. RELATED LITIGATION: Under no circumstances may Grantee use funds from any disbursement under this grant to pay for costs associated with any litigation between the Grantee and the Department. 17. RIGHTS IN DATA: Grantee and the Department agree that all data, plans, drawings, specifications, reports, computer programs, operating manuals, notes, and other written or graphic work submitted under Exhibit A in the performance of the project funded by this grant shall be in the public domain. Grantee may disclose, disseminate, and use, in whole or in part, any final form, data, and information received, collected, and developed under this project, subject to appropriate acknowledgment of credit to the Department for financial support. Grantee shall not utilize the materials submitted to the Department (except data) for any profit-making venture or sell or grant rights to a third-party who intends to do so. The Department has the right to use submitted data for all governmental purposes. 18. VENUE: The Department and Grantee agree that any action arising out of this grant shall be filed and maintained in the Superior Court, California. Grantee waives any existing sovereign immunity for the purposes of this grant, if applicable. 19. STATE-FUNDED RESEARCH GRANTS A. Grantee shall provide for free public access to any publication of a department- funded invention or department-funded technology. Grantee further agrees to all terms and conditions required by the California Taxpayer Access to Publicly Funded Research Act (Chapter 2.5 (commencing with Section 13989) of Part 4.5 of Division 3 of Title 2 of the Government Code). B. As a condition of receiving the research grant, Grantee agrees to the following terms and conditions which are set forth in Government Code Section 13989.6 (“Section 13989.6”): 1) Grantee is responsible for ensuring that any publishing or copyright agreements concerning submitted manuscripts fully comply with Section 13989.6. 2) Grantees shall report to the Department the final disposition of the research grant, including, but not limited to, if it was published, when it was published, where it was published, when the 12-month time period expires, and where the manuscript will be available for open access. 3) For a manuscript that is accepted for publication in a peer-reviewed journal, the Grantee shall ensure that an electronic version of the peer- reviewed manuscript is available to the department an on an appropriate publicly accessible database approved by the Department, including, but not limited to, the University of California’s eScholoarship Repository at the California Digital Library, to be made publicly available not later than County of Fresno Grant 19-10960 Page 4 of 4 Exhibit C Standard Grant Conditions 12 months after the official date of publication. Manuscripts submitted to the California Digital Open Source Library shall be exempt from the requirements in subdivision (b) of Section 66408 of the Education Code. Grantee shall make reasonable efforts to comply with this requirement by ensuring that their manuscript is accessible on an approved publicly accessible database, and notifying the Department that the manuscript is available on a department-approved database. If Grantee is unable to ensure that their manuscript is accessible on an approved publicly accessible database, Grantee may comply by providing the manuscript to the Department not later than 12 months after the official date of publication. 4) For publications other than those described in paragraph B.3 above, including meeting abstracts, Grantee shall comply by providing the manuscript to the Department not later than 12 months after the official date of publication. 5) Grantee is authorized to use grant money for publication costs, including fees charged by a publisher for color and page charges, or fees for digital distribution. County of Fresno Grant 19-10960 Page 1 of 4 Exhibit D Additional Provisions 1. Cancellation / Termination A. This Grant may be cancelled by CDPH without cause upon thirty (30) calendar days advance written notice to the Grantee. B. CDPH reserves the right to cancel or terminate this Grant immediately for cause. The Grantee may submit a written request to terminate this Grant only if CDPH substantially fails to perform its responsibilities as provided herein. C. The term “for cause” shall mean that the Grantee fails to meet the terms, conditions, and/or responsibilities of this agreement. Causes for termination include, but are not limited to the following occurrences: 1) If the Grantee knowingly furnishes any statement, representation, warranty, or certification in connection with the agreement, which representation is materially false, deceptive, incorrect, or incomplete. 2) If the Grantee fails to perform any material requirement of this Grant or defaults in performance of this agreement. 3) If the Grantee files for bankruptcy, or if CDPH determines that the Grantee becomes financially incapable of completing this agreement. D. Grant termination or cancellation shall be effective as of the date indicated in CDPH’s notification to the Grantee. The notice shall stipulate any final performance, invoicing or payment requirements. E. In the event of early termination or cancellation, the Grantee shall be entitled to compensation for services performed satisfactorily under this agreement and expenses incurred up to the date of cancellation and any non-cancelable obligations incurred in support of this Grant. F. In the event of termination, and at the request of CDPH, the Grantee shall furnish copies of all proposals, specifications, designs, procedures, layouts, copy, and other materials related to the services or deliverables provided under this Grant, whether finished or in progress on the termination date. G. The Grantee will not be entitled to reimbursement for any expenses incurred for services and deliverables pursuant to this agreement after the effective date of termination. H. Upon receipt of notification of termination of this Grant, and except as otherwise specified by CDPH, the Grantee shall: 1) Place no further order or subgrants for materials, services, or facilities. 2) Settle all outstanding liabilities and all claims arising out of such termination of orders and subgrants. County of Fresno Grant 19-10960 Page 2 of 4 Exhibit D Additional Provisions 3) Upon the effective date of termination of the Grant and the payment by CDPH of all items properly changeable to CDPH hereunder, Grantee shall transfer, assign and make available to CDPH all property and materials belonging to CDPH, all rights and claims to any and all reservations, grants, and arrangements with owners of media/PR materials, or others, and shall make available to CDPH all written information regarding CDPH’s media/PR materials, and no extra compensation is to be paid to Grantee for its services. 4) Take such action as may be necessary, or as CDPH may specify, to protect and preserve any property related to this agreement which is in the possession of the Grantee and in which CDPH has or may acquire an interest. I. CDPH may, at its discretion, require the Grantee to cease performance of certain components of the Scope of Work as designated by CDPH and complete performance of other components prior to the termination date of the Grant. 2. Avoidance of Conflicts of Interest by Grantee A. CDPH intends to avoid any real or apparent conflict of interest on the part of the Grantee, subgrants, or employees, officers and directors of the Grantee or subgrants. Thus, CDPH reserves the right to determine, at its sole discretion, whether any information, assertion or claim received from any source indicates the existence of a real or apparent conflict of interest; and, if a conflict is found to exist, to require the Grantee to submit additional information or a plan for resolving the conflict, subject to CDPH review and prior approval. B. Conflicts of interest include, but are not limited to: 1) An instance where the Grantee or any of its subgrants, or any employee, officer, or director of the Grantee or any subgrant or has an interest, financial or otherwise, whereby the use or disclosure of information obtained while performing services under the grant would allow for private or personal benefit or for any purpose that is contrary to the goals and objectives of the grant. 2) An instance where the Grantee’s or any subgrant’s employees, officers, or directors use their positions for purposes that are, or give the appearance of being, motivated by a desire for private gain for themselves or others, such as those with whom they have family, business or other ties. C. If CDPH is or becomes aware of a known or suspected conflict of interest, the Grantee will be given an opportunity to submit additional information or to resolve the conflict. A Grantee with a suspected conflict of interest will have five (5) working days from the date of notification of the conflict by CDPH to provide complete information regarding the suspected conflict. If a conflict of interest is determined to exist by CDPH and cannot be resolved to the satisfaction of CDPH, the conflict will be grounds for terminating the grant. CDPH may, at its discretion upon receipt of a written request from the Grantee, authorize an extension of the timeline indicated herein. County of Fresno Grant 19-10960 Page 3 of 4 Exhibit D Additional Provisions 3. Dispute Resolution Process A. A Grantee grievance exists whenever there is a dispute arising from CDPH’s action in the administration of an agreement. If there is a dispute or grievance between the Grantee and CDPH, the Grantee must seek resolution using the procedure outlined below. 1) The Grantee should first informally discuss the problem with the CDPH Program Grant Manager. If the problem cannot be resolved informally, the Grantee shall direct its grievance together with any evidence, in writing, to the program Branch Chief. The grievance shall state the issues in dispute, the legal authority or other basis for the Grantee's position and the remedy sought. The Branch Chief shall render a decision within ten (10) working days after receipt of the written grievance from the Grantee. The Branch Chief shall respond in writing to the Grantee indicating the decision and reasons therefore. If the Grantee disagrees with the Branch Chief’s decision, the Grantee may appeal to the second level. 2) When appealing to the second level, the Grantee must prepare an appeal indicating the reasons for disagreement with Branch Chief’s decision. The Grantee shall include with the appeal a copy of the Grantee's original statement of dispute along with any supporting evidence and a copy of the Branch Chief’s decision. The appeal shall be addressed to the Deputy Director of the division in which the branch is organized within ten (10) working days from receipt of the Branch Chief’s decision. The Deputy Director of the division in which the branch is organized or his/her designee shall meet with the Grantee to review the issues raised. A written decision signed by the Deputy Director of the division in which the branch is organized or his/her designee shall be directed to the Grantee within twenty (20) working days of receipt of the Grantee's second level appeal. B. If the Grantee wishes to appeal the decision of the Deputy Director of the division in which the branch is organized or his/her designee, the Grantee shall follow the procedures set forth in Division 25.1 (commencing with Section 38050) of the Health and Safety Code and the regulations adopted thereunder. (Title 1, Division 2, Chapter 2, Article 3 (commencing with Section 1140) of the California Code of Regulations). C. Disputes arising out of an audit, examination of an agreement or other action not covered by subdivision (a) of Section 20204, of Chapter 2.1, Title 22, of the California Code of Regulations, and for which no procedures for appeal are provided in statute, regulation or the Agreement, shall be handled in accordance with the procedures identified in Sections 51016 through 51047, Title 22, California Code of Regulations. D. Unless otherwise stipulated in writing by CDPH, all dispute, grievance and/or appeal correspondence shall be directed to the CDPH Grant Manager. County of Fresno Grant 19-10960 Page 4 of 4 Exhibit D Additional Provisions E. There are organizational differences within CDPH’s funding programs and the management levels identified in this dispute resolution provision may not apply in every contractual situation. When a grievance is received and organizational differences exist, the Grantee shall be notified in writing by the CDPH Grant Manager of the level, name, and/or title of the appropriate management official that is responsible for issuing a decision at a given level. County of Fresno Grant 19-10960 Page 1 of 5 Exhibit E STD Local Assistance Funds – Standards and General Terms and Conditions 1. Overview The California Department of Public Health (CDPH) STD Control Branch (STDCB) sets forth the following standards and procedures. These standards and procedures specify the conditions for receipt of CDPH STDCB local assistance funds. The local health department has the authority for STD prevention and control as outlined in the Summary of Regulations Related to STD Prevention and Control Efforts in California. https://www.cdph.ca.gov/Programs/CID/DCDC/Pages/STD- ForLocalHealthJurisdictions.aspx 2. Grantee’s Responsibilities The Grantee agrees to: A. Direct activities toward achieving the program objectives set forth by the CDPH STDCB. B. Use these funds in accordance with any additional guidance set forth by the CDPH STDCB regarding the granting, use and reimbursement of the STDCB local assistance funds. Additional consideration should be given to other guidance from the CDPH and Centers for Disease Control and Prevention (CDC) intended to highlight successful STD, HIV and/or HCV prevention strategies or outline California specific initiatives, policies and procedures. Please find relevant programmatic guidance documents on the CDPH STDCB website: https://www.cdph.ca.gov/Programs/CID/DCDC/Pages/STD.aspx C. Use these funds to augment existing funds and not supplant funds that have been locally appropriated for the same purposes. Local assistance funds are intended to provide local entities with increased capabilities to address STD control needs. Supplanting of funds is defined (for the purposes of this agreement) as using local assistance award monies to “replace” or “take the place of” existing local funding. For example, reductions in local funds cannot be offset by the use of CDPH STDCB dollars for the same purpose. D. Abide by the most recent standards of care for STD screening, treatment, control and prevention as promulgated by: 1. California Department of Public Health https://www.cdph.ca.gov/Programs/CID/DCDC/Pages/STDs- ClinicalGuidelines.aspx 2. Centers for Disease Control and Prevention https://www.cdc.gov/std/tg2015/default.htm E. Share health advisories, health education materials, outreach, testing and linkage to care and care coordination protocols, and other products created to enhance STD awareness, prevention, testing, linkage to care, and care coordination funded with these dollars with CDPH and other LHJs and community-based organizations (CBOs) in California. The intent of this is to allow duplication (where possible) and cross-jurisdictional reach of successful STD interventions and activities aimed at the priority populations, clinical providers, and community partners. Source documents should be submitted to County of Fresno Grant 19-10960 Page 2 of 5 Exhibit E STD Local Assistance Funds – Standards and General Terms and Conditions CDPH STDCB upon completion and with the annual progress report, and upon request from CDPH, as relevant. F. Submit information and reports as requested by the CDPH STDCB. G. Ensure the use of a competitive bid process in the selection of all subcontracts. If the subcontract is one where the LHJ has a current agreement with, indicate the date the agreement was effective. If the CBO is a non-profit agency as defined by Internal Revenue Code 501(c), ensure the LHJ has a current letter on file from the Internal Revenue Service for the CBO. 3. Reporting Requirements A. Case Report, Laboratory, and Interview Record All Grantees shall comply with morbidity reporting requirements for reportable STDs identified in Title 17, California Code of Regulations (CCR) §2500, §2593, §2641.5-2643.20, and §2800 – 20182 Reportable Diseases and Conditions. https://www.cdph.ca.gov/Programs/CID/DCDC/CDPH%20Document%20Library/ ReportableDiseases.pdf All Grantees, excluding Los Angeles and San Francisco, must enter STD case reports, laboratory results, and interview data for their jurisdiction directly into the California Reportable Disease Information Exchange (CalREDIE) system, the CDPH web-based reporting software for notifiable diseases. Data must be entered into the appropriate tabs and forms in CalREDIE. Submission of hard copy forms for data entry into CalREDIE by CDPH or scanning of case reports, laboratory results, or interview records into the electronic filing cabinet (EFC), sans data entry, will not be accepted. CDPH STD Control Branch will provide essential variables for data entry and STD case report forms. Specific case investigation and report requirements are as follows: 1. Syphilis laboratory tests and confidential morbidity reports should be processed and assigned for investigation according to the California Syphilis Reactor Alert System (SRAS). Some health jurisdictions may have a more nuanced local system for prioritizing reported reactive syphilis tests. https://www.cdph.ca.gov/Programs/CID/DCDC/CDPH%20Document%20 Library/SyphilisReactorSRASChartAlgorithm.pdf 2. Syphilis cases and congenital syphilis case investigations are to be reported according to updated CDPH STDCB protocols on the appropriate case report forms (Syphilis Interview Record or California Congenital Syphilis-CS Case Investigation and Report) found in CalREDIE; samples of these forms can be viewed at https://www.cdph.ca.gov/Programs/PSB/Pages/CommunicableDiseaseCo ntrol.aspx. Grantees will complete and close investigations in CalREDIE within 45 days of initial report to local health department. County of Fresno Grant 19-10960 Page 3 of 5 Exhibit E STD Local Assistance Funds – Standards and General Terms and Conditions 3. Chlamydia and gonorrhea reports are automatically initiated through CalREDIE with electronic laboratory report information, data entry of laboratory, or provider report. 4. Cases of gonorrhea with suspected treatment failure or with high minimum inhibitory concentrations (MIC) to CDC-recommended treatment should be reported to CDPH STDCB within 24 hours of initial report to local health department. Reports should be conveyed by calling the CDPH STDCB Office at (510) 620-3400. 5. Suspected or confirmed cases of lymphogranuloma venereum, and chancroid should be reported to CDPH STDCB within 24 hours of initial report to local health department. Reports should be conveyed by calling the CDPH STDCB Office at (510) 620-3400. 6. Grantees will participate in STD-specific CalREDIE trainings and conduct quality control procedures, including review of cases to ensure appropriate surveillance case definition and reconciliation of case counts. For additional STD-related CalREDIE help, please email STDCalREDIE@cdph.ca.gov. For STD case definitions, please visit https://www.cdph.ca.gov/Programs/CID/DCDC/Pages/STDCaseDefinitions.aspx For frequently asked questions, manuals/guidelines, and forms/instructions. https://www.cdph.ca.gov/Programs/CID/DCDC/Pages/STD-CalREDIE- Resources.aspx Los Angeles and San Francisco grantees must report the data outlined above to CDPH STD Control Branch via a secure file transfer protocol (FTP) on a weekly basis. Data will be transmitted using the following formats: • Case report data to be submitted using the National Electronic Telecommunications System for Surveillance (NETSS) or Message Mapping Guides (MMG) standards. • Interview record data to be submitted in a format that conforms to the corresponding CalREDIE data elements. B. Performance Measurement and Program Evaluation Grantees will submit performance indicators specified in the scope of work, including for activities subcontracted to one or more community-based organizations. Project specific data reporting requirements and performance indicators will be determined in collaboration with CDPH within the first three months of the project period. County of Fresno Grant 19-10960 Page 4 of 5 Exhibit E STD Local Assistance Funds – Standards and General Terms and Conditions C. Data Security and Confidentiality Grantees shall comply with recommendations set forth in CDC’s “Data Security and Confidentiality Guidelines for HIV, Viral Hepatitis, Sexually Transmitted Disease, and Tuberculosis Programs.” http://www.cdc.gov/nchhstp/programintegration/docs/PCSIDataSecurityGuideline s.pdf. Grantees shall have staff complete CDPH required confidentiality and data security training, and maintain on file associated confidentiality agreements for each staff person with access to STD data. D. Outbreak Reporting The California Code of Regulations (Title 17, Section 2502[c]) directs local health officers to immediately report unusual disease occurrences or outbreaks to CDPH. Reports should be conveyed by calling the CDPH STDCB Office at (510) 620-3400. E. Financial Expenditures and Reporting Grantees must maintain records reflecting actual expenditures. Please see the CDPH STDCB Use of Local Assistance Funds document for guidance on allowable and non-allowable expenditures. https://www.cdph.ca.gov/Programs/CID/DCDC/CDPH%20Document%20Library/ UseofLocalAssistanceFunds.pdf. The CDPH STDCB reserves the right to question and re-negotiate reimbursement for any expenditure that may appear to exceed a reasonable cost for the service. Financial expenditures/reporting are required and must be submitted within 45 calendar days after the end of each quarter. Annual financial expenditures and reporting should be submitted no later than 45 days after the end of the budget period. Invoices should be sent to STDLHJInvoices@cdph.ca.gov. F. Performance Progress Reporting The Annual Performance Progress Report is due no later than 30 days prior to the end of the budget period (e.g. May 31, 2020), and serves as the continuation application for the follow-on budget period. All publications and manuscripts published as a result of the work supported in part or whole by the cooperative grant must be submitted with the performance progress reports. Additionally, health advisories, health education materials, and other products should be submitted. Annual Performance Progress Report should be submitted to STDLHJContracts@cdph.ca.gov. G. Reporting Use of Incentives Acceptable incentives include items such as low value gift cards (e.g., WalMart, Safeway, transportation vouchers), hygiene kits, and/or other STD-related incentives. All proposals for incentives must be submitted to CDPH STDCB for review prior to purchase and project implementation, accompanying documents must contain justification for use as behavior modification material, and County of Fresno Grant 19-10960 Page 5 of 5 Exhibit E STD Local Assistance Funds – Standards and General Terms and Conditions accompanied by a targeted distribution plan and tracking/reporting/outcome log. When using incentives to achieve the goals and objectives outlined in the Scope of Work, the Grantee must adhere to the following requirements: 1. Complete a Subject Reimbursement Log that is kept within a secure study file. This log will contain the gift card brand, gift card number, denomination, date purchased, reason for disbursement, the recipient of the incentive, and the issue date (see attached log). 2. Each participant receiving an incentive must complete a Subject Incentive Payment Receipt at the time the incentive is issued. The Subject Incentive Payment Receipt must be kept in a secure location. 3. Participation incentives cannot be used for the purchase of alcohol, tobacco, or drug products. 4. A copy of the Subject Reimbursement Log must be submitted with the quarterly invoice. 5. The Subject Incentive Payment Receipt must be kept for a minimum of five (5) years after the termination of the grant. 4. Rights of California Department of Public Health, Sexually Transmitted Disease Control Branch A. The CDPH STDCB reserves the right to modify the terms and conditions of all awards. Additional information and documentation may be required. B. The CDPH STDCB reserves the right to use and reproduce all reports and data produced and delivered pursuant to the local assistance awards and reserves the right to authorize others to use or reproduce such materials, provided that the confidentiality of patient information and records is protected pursuant to California State laws and regulations. County of Fresno Grant 19-10960 Page 1 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) This Information Privacy and Security Requirements Exhibit (For Non-HIPAA/HITECH Act Contracts) (hereinafter referred to as “this Exhibit”) sets forth the information privacy and security requirements Contractor is obligated to follow with respect to all personal and confidential information (as defined herein) disclosed to Contractor, or collected, created, maintained, stored, transmitted or used by Contractor for or on behalf of the California Department of Public Health (hereinafter “CDPH”), pursuant to Contractor’s agreement with CDPH. (Such personal and confidential information is referred to herein collectively as “CDPH PCI”.) CDPH and Contractor desire to protect the privacy and provide for the security of CDPH PCI pursuant to this Exhibit and in compliance with state and federal laws applicable to the CDPH PCI. I. Order of Precedence: With respect to information privacy and security requirements for all CDPH PCI, the terms and conditions of this Exhibit shall take precedence over any conflicting terms or conditions set forth in any other part of the agreement between Contractor and CDPH, including Exhibit A (Scope of Work), all other exhibits and any other attachments, and shall prevail over any such conflicting terms or conditions. II. Effect on lower tier transactions: The terms of this Exhibit shall apply to all contracts, subcontracts, and subawards, and the information privacy and security requirements Contractor is obligated to follow with respect to CDPH PCI disclosed to Contractor, or collected, created, maintained, stored, transmitted or used by Contractor for or on behalf of CDPH, pursuant to Contractor’s agreement with CDPH. When applicable the Contractor shall incorporate the relevant provisions of this Exhibit into each subcontract or subaward to its agents, subcontractors, or independent consultants. III. Definitions: For purposes of the agreement between Contractor and CDPH, including this Exhibit, the following definitions shall apply: A. Breach: “Breach” means: 1. the unauthorized acquisition, access, use, or disclosure of CDPH PCI in a manner which compromises the security, confidentiality or integrity of the information; or 2. the same as the definition of "breach of the security of the system" set forth in California Civil Code section 1798.29(f). B. Confidential Information: “Confidential information” means information that: 1. does not meet the definition of “public records” set forth in California Government Code section 6252(e), or is exempt from disclosure under any of the provisions of Section 6250, et seq. of the California Government Code or any other applicable state or federal laws; or 2. is contained in documents, files, folders, books or records that are clearly labeled, marked or designated with the word “confidential” by CDPH. County of Fresno Grant 19-10960 Page 2 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) C. Disclosure: “Disclosure” means the release, transfer, provision of, access to, or divulging in any manner of information outside the entity holding the information. D. PCI: “PCI” means “personal information” and “confidential information” (as these terms are defined herein: E. Personal Information: “Personal information” means information, in any medium (paper, electronic, oral) that: 1. directly or indirectly collectively identifies or uniquely describes an individual; or 2. could be used in combination with other information to indirectly identify or uniquely describe an individual, or link an individual to the other information; or 3. meets the definition of “personal information” set forth in California Civil Code section 1798.3, subdivision (a) or 4. is one of the data elements set forth in California Civil Code section 1798.29, subdivision (g)(1) or (g)(2); or 5. meets the definition of “medical information” set forth in either California Civil Code section 1798.29, subdivision (h)(2) or California Civil Code section 56.05, subdivision (j); or 6. meets the definition of “health insurance information” set forth in California Civil Code section 1798.29, subdivision (h)(3); or 7. is protected from disclosure under applicable state or federal law. F. Security Incident: “Security Incident” means: 1. an attempted breach; or 2. the attempted or successful unauthorized access or disclosure, modification or destruction of CDPH PCI, in violation of any state or federal law or in a manner not permitted under the agreement between Contractor and CDPH, including this Exhibit; or 3. the attempted or successful modification or destruction of, or interference with, Contractor’s system operations in an information technology system, that negatively impacts the confidentiality, availability or integrity of CDPH PCI; or 4. any event that is reasonably believed to have compromised the confidentiality, integrity, or availability of an information asset, system, process, data storage, or transmission. Furthermore, an information security incident may also include an event that constitutes a violation or imminent threat of violation of information security policies or procedures, including acceptable use policies. G. Use: “Use” means the sharing, employment, application, utilization, examination, or analysis of information. County of Fresno Grant 19-10960 Page 3 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) IV. Disclosure Restrictions: The Contractor and its employees, agents, and subcontractors shall protect from unauthorized disclosure any CDPH PCI. The Contractor shall not disclose, except as otherwise specifically permitted by the agreement between Contractor and CDPH (including this Exhibit), any CDPH PCI to anyone other than CDPH personnel or programs without prior written authorization from the CDPH Program Contract Manager, except if disclosure is required by State or Federal law. V. Use Restrictions: The Contractor and its employees, agents, and subcontractors shall not use any CDPH PCI for any purpose other than performing the Contractor's obligations under its agreement with CDPH. VI. Safeguards: The Contractor shall implement administrative, physical, and technical safeguards that reasonably and appropriately protect the privacy, confidentiality, security, integrity, and availability of CDPH PCI, including electronic or computerized CDPH PCI. At each location wher CDPH PCI exists under Contractor’s control, the Contractor shall develop and maintain a written information privacy and security program that includes administrative, technical and physical safeguards appropriate to the size and complexity of the Contractor’s operations and the nature and scope of its activities in performing its agreement with CDPH, including this Exhibit, and which incorporates the requirements of Section VII, Security, below. Contractor shall provide CDPH with Contractor’s current and updated policies within five (5) business days of a request by CDPH for the policies. VII. Security: The Contractor shall take any and all steps reasonably necessary to ensure the continuous security of all computerized data systems containing CDPH PCI. These steps shall include, at a minimum, complying with all of the data system security precautions listed in the Contractor Data Security Standards set forth in Attachment 1 to this Exhibit. VIII. Security Officer: At each place where CDPH PCI is located,, the Contractor shall designate a Security Officer to oversee its compliance with this Exhibit and to communicate with CDPH on matters concerning this Exhibit. IX. Training: The Contractor shall provide training on its obligations under this Exhibit, at its own expense, to all of its employees who assist in the performance of Contractor’s obligations under Contractor’s agreement with CDPH, including this Exhibit, or otherwise use or disclose CDPH PCI. A. The Contractor shall require each employee who receives training to certify, either in hard copy or electronic form, the date on which the training was completed. B. The Contractor shall retain each employee’s certifications for CDPH inspection for a period of three years following contract termination or completion. C. Contractor shall provide CDPH with its employee’s certifications within five (5) business days of a request by CDPH for the employee’s certifications. X. Employee Discipline: Contractor shall impose discipline that it deems appropriate (in its sole discretion) on such employees and other Contractor workforce members under Contractor’s direct control who intentionally or negligently violate any provisions of this Exhibit. County of Fresno Grant 19-10960 Page 4 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) XI. Breach and Security Incident Responsibilities: A. Notification to CDPH of Breach or Security Incident: The Contractor shall notify CDPH immediately by telephone call plus email or fax upon the discovery of a breach (as defined in this Exhibit), and within twenty-four (24) hours by email or fax of the discovery of any security incident (as defined in this Exhibit), unless a law enforcement agency determines that the notification will impede a criminal investigation, in which case the notification required by this section shall be made to CDPH immediately after the law enforcement agency determines that such notification will not compromise the investigation. Notification shall be provided to the CDPH Program Contract Manager, the CDPH Privacy Officer and the CDPH Chief Information Security Officer, using the contact information listed in Section XI(F), below. If the breach or security incident is discovered after business hours or on a weekend or holiday and involves CDPH PCI in electronic or computerized form, notification to CDPH shall be provided by calling the CDPH Information Security Office at the telephone numberslisted in Section XI(F), below. For purposes of this Section, breaches and security incidents shall be treated as discovered by Contractor as of the first day on which such breach or security incident is known to the Contractor, or, by exercising reasonable diligence would have been known to the Contractor. Contractor shall be deemed to have knowledge of a breach if such breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is a employee or agent of the Contractor. Contractor shall take: 1. prompt corrective action to mitigate any risks or damages involved with the breach or security incident and to protect the operating environment; and 2. any action pertaining to a breach required by applicable federal and state laws, including, specifically, California Civil Code section 1798.29. B. Investigation of Breach and Security Incidents: The Contractor shall immediately investigate such breach or security incident. As soon as the information is known and subject to the legitimate needs of law enforcement, Contractor shall inform the CDPH Program Contract Manager, the CDPH Privacy Officer, and the CDPH Chief Information Security Officer of: 1. what data elements were involved and the extent of the data disclosure or access involved in the breach, including, specifically, the number of individuals whose personal information was breached; and 2. a description of the unauthorized persons known or reasonably believed to have improperly used the CDPH PCI and/or a description of the unauthorized persons known or reasonably believed to have improperly accessed or acquired the CDPH PCI, or to whom it is known or reasonably believed to have had the CDPH PCI improperly disclosed to them; and 3. a description of where the CDPH PCI is believed to have been improperly used or disclosed; and County of Fresno Grant 19-10960 Page 5 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) 4. a description of the probable and proximate causes of the breach or security incident; and 5. whether Civil Code section 1798.29 or any other federal or state laws requiring individual notifications of breaches have been triggered. C. Written Report: The Contractor shall provide a written report of the investigation to the CDPH Program Contract Manager, the CDPH Privacy Officer, and the CDPH Chief Information Security Officer as soon as practicable after the discovery of the breach or security incident. The report shall include, but not be limited to, the information specified above, as well as a complete, detailed corrective action plan, including information on measures that were taken to halt and/or contain the breach or security incident, and measures to be taken to prevent the recurrence or further disclosure of data regarding such breach or security incident. D. Notification to Individuals: If notification to individuals whose information was breached is required under state or federal law, and regardless of whether Contractor is considered only a custodian and/or non-owner of the CDPH PCI, Contractor shall, at its sole expense, and at the sole election of CDPH, either: 1. make notification to the individuals affected by the breach (including substitute notification), pursuant to the content and timeliness provisions of such applicable state or federal breach notice laws. Contractor shall inform the CDPH Privacy Officer of the time, manner and content of any such notifications, prior to the transmission of such notifications to the individuals; or 2. cooperate with and assist CDPH in its notification (including substitute notification) to the individuals affected by the breach. E. Submission of Sample Notification to Attorney General: If notification to more than 500 individuals is required pursuant to California Civil Code section 1798.29, and regardless of whether Contractor is considered only a custodian and/or non-owner of the CDPH PCI, Contractor shall, at its sole expense, and at the sole election of CDPH, either: 1. electronically submit a single sample copy of the security breach notification, excluding any personally identifiable information, to the Attorney General pursuant to the format. content and timeliness provisions of Section 1798.29, subdivision (e). Contractor shall inform the CDPH Privacy Officer of the time, manner and content of any such submissions, prior to the transmission of such submissions to the Attorney General; or 2. cooperate with and assist CDPH in its submission of a sample copy of the notification to the Attorney General. F. CDPH Contact Information: To direct communications to the above referenced CDPH staff, the Contractor shall initiate contact as indicated herein. CDPH reserves the right to make changes to the contact information below by verbal or written notice to the Contractor. Said changes shall not require an amendment to this Exhibit or the agreement to which it is incorporated. County of Fresno Grant 19-10960 Page 6 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) CDPH Program Contract Manager CDPH Privacy Officer CDPH Chief Information Security Officer See the Scope of Work exhibit for Program Contract Manager Privacy Officer Privacy Office Office of Legal Services California Dept. of Public Health 1415 L Street, 5th Floor Sacramento, CA 95814 Email: privacy@cdph.ca.gov Telephone: (877) 421-9634 Chief Information Security Officer Information Security Office California Dept. of Public Health P.O. Box 997377 MS6302 Sacramento, CA 95899-7413 Email: cdphiso@cdph.ca.gov Telephone: (855) 500-0016 XII. Documentation of Disclosures for Requests for Accounting: Contractor shall document and make available to CDPH or (at the direction of CDPH) to an Individual such disclosures of CDPH PCI, and information related to such disclosures, necessary to respond to a proper request by the subject Individual for an accounting of disclosures of personal information as required by Civil Code section 1798.25, or any applicable state or federal law. XIII. Requests for CDPH PCI by Third Parties: The Contractor and its employees, agents, or subcontractors shall promptly transmit to the CDPH Program Contract Manager all requests for disclosure of any CDPH PCI requested by third parties to the agreement between Contractor and CDPH (except from an Individual for an accounting of disclosures of the individual’s personal information pursuant to applicable state or federal law), unless prohibited from doing so by applicable state or federal law. XIV. Audits, Inspection and EnforcementCDPH may inspect the facilities, systems, books and records of Contractor to monitor compliance with this Exhibit. Contractor shall promptly remedy any violation of any provision of this Exhibit and shall certify the same to the CDPH Program Contract Manager in writing. XV. Return or Destruction of CDPH PCI on Expiration or Termination: Upon expiration or termination of the agreement between Contractor and CDPH for any reason, Contractor shall securely return or destroy the CDPH PCI. If return or destruction is not feasible, Contractor shall provide a written explanation to the CDPH Program Contract Manager, the CDPH Privacy Officer and the CDPH Chief Information Security Officer, using the contact information listed in Section XI(F), above. A. Retention Required by Law: If required by state or federal law, Contractor may retain, after expiration or termination, CDPH PCI for the time specified as necessary to comply with the law. B. Obligations Continue Until Return or Destruction: Contractor’s obligations under this Exhibit shall continue until Contractor returns or destroys the CDPH PCI or returns the CDPH PCI to CDPH; provided however, that on expiration or termination of the agreement between Contractor and CDPH, Contractor shall not further use or disclose the CDPH PCI except as required by state or federal law. County of Fresno Grant 19-10960 Page 7 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) C. Notification of Election to Destroy CDPH PCI: If Contractor elects to destroy the CDPH PCI, Contractor shall certify in writing, to the CDPH Program Contract Manager, the CDPH Privacy Officer and the CDPH Chief Information Security Officer, using the contact information listed in Section XI(F), above, that the CDPH PCI has been securely destroyed. The notice shall include the date and type of destruction method used. XVI. Amendment: The parties acknowledge that federal and state laws regarding information security and privacy rapidly evolves and that amendment of this Exhibit may be required to provide for procedures to ensure compliance with such laws. The parties specifically agree to take such action as is necessary to implement new standards and requirements imposed by regulations and other applicable laws relating to the security or privacy of CDPH PCI.The parties agree to promptly enter into negotiations concerning an amendment to this Exhibit consistent with new standards and requirements imposed by applicable laws and regulations. XVII. Assistance in Litigation or Administrative Proceedings: Contractor shall make itself and any subcontractors, workforce employees or agents assisting Contractor in the performance of its obligations under the agreement between Contractor and CDPH, available to CDPH at no cost to CDPH to testify as witnesses, in the event of litigation or administrative proceedings being commenced against CDPH, its director, officers or employees based upon claimed violation of laws relating to security and privacy, which involves inactions or actions by the Contractor, except where Contractor or its subcontractor, workforce employee or agent is a named adverse party. XVIII. No Third-Party Beneficiaries: Nothing express or implied in the terms and conditions of this Exhibit is intended to confer, nor shall anything herein confer, upon any person other than CDPH or Contractor and their respective successors or assignees, any rights, remedies, obligations or liabilities whatsoever. XIX. Interpretation: The terms and conditions in this Exhibit shall be interpreted as broadly as necessary to implement and comply with regulations and applicable State laws. The parties agree that any ambiguity in the terms and conditions of this Exhibit shall be resolved in favor of a meaning that complies and is consistent with federal and state laws and regulations. XX. Survival: If Contractor does not return or destroy the CDPH PCI upon the completion or termination of the Agreement, the respective rights and obligations of Contractor under Sections VI, VII and XI of this Exhibit shall survive the completion or termination of the agreement between Contractor and CDPH. County of Fresno Grant 19-10960 Page 8 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) Attachment 1 Contractor Data Security Standards 1. General Security Controls A. Confidentiality Statement. All persons that will be working with CDPH PCI must sign a confidentiality statement. The statement must include at a minimum, General Use, Security and Privacy safeguards, Unacceptable Use, and Enforcement Policies. The statement must be signed by the workforce member prior to access to CDPH PCI. The statement must be renewed annually. The Contractor shall retain each person’s written confidentiality statement for CDPH inspection for a period of three (3) years following contract termination. B. Background check. Before a member of the Contractor’s workforce may access CDPH PCI, Contractor must conduct a thorough background check of that worker and evaluate the results to assure that there is no indication that the worker may present a risk for theft of confidential data. The Contractor shall retain each workforce member’s background check documentation for a period of three (3) years following contract termination. C. Workstation/Laptop encryption. All workstations and laptops that process and/or store CDPH PCI must be encrypted using a FIPS 140-2 certified algorithm, such as Advanced Encryption Standard (AES), with a 128bit key or higher. The encryption solution must be full disk unless approved by the CDPH Information Security Office. D. Server Security. Servers containing unencrypted CDPH PCI must have sufficient administrative, physical, and technical controls in place to protect that data, based upon a risk assessment/system security review. E. Minimum Necessary. Only the minimum necessary amount of CDPH PCI required to perform necessary business functions may be copied, downloaded, or exported. F. Removable media devices. All electronic files that contain CDPH PCI data must be encrypted when stored on any removable media or portable device (i.e. USB thumb drives, floppies, CD/DVD, smart devices tapes etc.). PCI must be encrypted using a FIPS 140-2 certified algorithm, such as Advanced Encryption Standard (AES), with a 128bit key or higher G. Antivirus software. All workstations, laptops and other systems that process and/or store CDPH PCI must install and actively use a comprehensive anti-virus software solution with automatic updates scheduled at least daily. H. Patch Management. All workstations, laptops and other systems that process and/or store CDPH PCI must have operating system and application security patches applied, with system reboot if necessary. There must be a documented patch management process which determines installation timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable patches must be installed within 30 days of vendor release. I. User IDs and Password Controls. All users must be issued a unique user name for accessing CDPH PCI. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee with knowledge of the password. County of Fresno Grant 19-10960 Page 9 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) Passwords are not to be shared. Must be at least eight characters. Must be a non-dictionary word. Must not be stored in readable format on the computer. Must be changed every 60 days. Must be changed if revealed or compromised. Must be composed of characters from at least three of the following four groups from the standard keyboard: • Upper case letters (A-Z) • Lower case letters (a-z) • Arabic numerals (0-9) • Non-alphanumeric characters (punctuation symbols) J. Data Sanitization. All CDPH PCI must be sanitized using NIST Special Publication 800-88 standard methods for data sanitization when the CDPH PCI is no longer needed. 2. System Security Controls A. System Timeout. The system must provide an automatic timeout, requiring reauthentication of the user session after no more than 20 minutes of inactivity. B. Warning Banners. All systems containing CDPH PCI must display a warning banner each time a user attempts access, stating that data is confidential, systems are logged, and system use is for business purposes only. User must be directed to log off the system if they do not agree with these requirements. C. System Logging. The system must maintain an automated audit trail which can identify the user or system process which initiates a request for CDPH PCI, or which alters CDPH PCI. The audit trail must be date and time stamped, must log both successful and failed accesses, must be read only, and must be restricted to authorized users This logging must be included for all user privilege levels including, but not limited to, systems administrators. If CDPH PCI is stored in a database, database logging functionality must be enabled. Audit trail data must be archived for at least 3 years after occurrence. D. Access Controls. The system must use role based access controls for all user authentications, enforcing the principle of least privilege. E. Transmission encryption. All data transmissions of CDPH PCI outside the contractor’s secure internal network must be encrypted using a FIPS 140-2 certified algorithm, such as Advanced Encryption Standard (AES), with a 128bit key or higher. Encryption can be end to end at the network level, or the data files containing CDPH PCI can be encrypted. This requirement pertains to any type of CDPH PCI in motion such as website access, file transfer, and E-Mail. F. Intrusion Detection. All systems involved in accessing, holding, transporting, and protecting CDPH PCI that are accessible via the Internet must be protected by a comprehensive intrusion detection and prevention solution. 3. Audit Controls County of Fresno Grant 19-10960 Page 10 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) A. System Security Review. All systems processing and/or storing CDPH PCI must have at least an annual system risk assessment/security review which provides assurance that administrative, physical, and technical controls are functioning effectively and providing adequate levels of protection. Reviews shall include vulnerability scanning tools. B. Log Reviews. All systems processing and/or storing CDPH PCI must have a routine procedure in place to review system logs for unauthorized access. C. Change Control. All systems processing and/or storing CDPH PCI must have a documented change control procedure that ensures separation of duties and protects the confidentiality, integrity and availability of data. 4. Business Continuity / Disaster Recovery Controls A. Disaster Recovery. Contractor must establish a documented plan to enable continuation of critical business processes and protection of the security of electronic CDPH PCI in the event of an emergency. Emergency means any circumstance or situation that causes normal computer operations to become unavailable for use in performing the work required under this agreement for more than 24 hours. B. Data Backup Plan. Contractor must have established documented procedures to securely backup CDPH PCI to maintain retrievable exact copies of CDPH PCI. The backups shall be encrypted.The plan must include a regular schedule for making backups, storing backups offsite, an inventory of backup media, and the amount of time to restore CDPH PCI should it be lost. At a minimum, the schedule must be a weekly full backup and monthly offsite storage of CDPH data. 5. Paper Document Controls A. Supervision of Data. CDPH PCI in paper form shall not be left unattended at any time, unless it is locked in a file cabinet, file room, desk or office. Unattended means that information is not being observed by an employee authorized to access the information. CDPH PCI in paper form shall not be left unattended at any time in vehicles or planes and shall not be checked in baggage on commercial airplanes. B. Escorting Visitors. Visitors to areas where CDPH PCI is contained shall be escorted and CDPH PHI shall be kept out of sight while visitors are in the area. C. Confidential Destruction. CDPH PCI must be disposed of through confidential means, using NIST Special Publication 800-88 standard methods for data sanitization when the CDPH PSCI is no longer needed. D. Removal of Data. CDPH PCI must not be removed from the premises of the Contractor except with express written permission of CDPH. E. Faxing. Faxes containing CDPH PCI shall not be left unattended and fax machines shall be in secure areas. Faxes shall contain a confidentiality statement notifying persons receiving County of Fresno Grant 19-10960 Page 11 of 11 Exhibit F Information Privacy and Security Requirements (For Non-HIPAA/HITECH Act Contracts) CDPH IPSR (10/19) faxes in error to destroy them. Fax numbers shall be verified with the intended recipient before sending. F. Mailing. CDPH PCI shall only be mailed using secure methods. Large volume mailings of CDPH PHI shall be by a secure, bonded courier with signature required on receipt. Disks and other transportable media sent through the mail must be encrypted with a CDPH approved solution, such as a solution using a vendor product specified on the CALIFORNIA STRATEGIC SOURCING INITIATIVE. Contractor Certification Clause CCC 04/2017 CERTIFICATION I, the official named below, CERTIFY UNDER PENAL TY OF PERJURY that I am duly authorized to legally bind the prospective Contractor to the clause(s) listed below. This certification is made under the laws of the State of California . Contractor/Bidder Firm Name (Printed) County of Fresno By (Authorized Signature) Printed Name and Title of Person Signing Federal ID Number Ernest Buddy Mendes, Chairman of the Board of Supervisors of the County of Fresno Date Executed Executed in the Countv of ATTEST: Fresno ~ Lf 1...()°LD BERNICE E. SEIDEL ____ .___.__ __________ ~----Clerk of the Board of Supervisors CONTRACTOR CERTIFICATION CLAUSES County f Fre~no , late of California By·~lli:J,b.,~~~:k:-- Deputy 1. STATEMENT OF COMPLIANCE : Contractor has, unless exempted, complied with the nondiscrimination program requirements. (Gov. Code §12990 (a-f) and CCR, Title 2, Section 11102) (Not applicable to public entities .) 2 . DRUG-FREE WORKPLACE REQUIREMENTS : Contractor will comply with the requirements of the Drug-Free Workplace Act of 1990 and will provide a drug-free workplace by taking the following actions : a. Publish a statement notifying employees that unlawful manufacture , distribution , dispensation, possession or use of a controlled substance is prohibited and specifying actions to be taken against employees for violations . b . Establish a Drug-Free Awareness Program to inform employees about: 1) the dangers of drug abuse in the workplace; 2) the person's or organization's policy of maintaining a drug-free workplace ; 3) any available counseling, rehabilitation and employee assistance programs; and, 4) penalties that may be imposed upon employees for drug abuse violations. c. Every employee who works on the proposed Agreement will : 1) receive a copy of the company's drug-free workplace policy statement; and , 2) agree to abide by the terms of the company's statement as a condition of employment on the Agreement. Failure to comply with these requirements may result in suspension of payments under the Agreement or termination of the Agreement or both and Contractor may be ineligible for award of any future State agreements if the department determines that any of the following has occurred: the Contractor has made false certification, or violated the certification by failing to carry out the requirements as noted above. (Gov. Code §8350 et seq.) 3.NATIONAL LABOR RELATIONS BOARD CERTIFICATION: Contractor certifies that no more than one (1) final unappealable finding of contempt of court by a Federal court has been issued against Contractor within the immediately preceding two-year period because of Contractor's failure to comply with an order of a Federal court, which orders Contractor to comply with an order of the National Labor Relations Board. (Pub. Contract Code §10296) (Not applicable to public entities.) 4.CONTRACTS FOR LEGAL SERVICES $50,000 OR MORE- PRO BONO REQUIREMENT: Contractor hereby certifies that Contractor will comply with the requirements of Section 6072 of the Business and Professions Code, effective January 1, 2003. Contractor agrees to make a good faith effort to provide a minimum number of hours of pro bono legal services during each year of the contract equal to the lessor of 30 multiplied by the number of full time attorneys in the firm’s offices in the State, with the number of hours prorated on an actual day basis for any contract period of less than a full year or 10% of its contract with the State. Failure to make a good faith effort may be cause for non-renewal of a state contract for legal services, and may be taken into account when determining the award of future contracts with the State for legal services. 5.EXPATRIATE CORPORATIONS: Contractor hereby declares that it is not an expatriate corporation or subsidiary of an expatriate corporation within the meaning of Public Contract Code Section 10286 and 10286.1, and is eligible to contract with the State of California. 6.SWEATFREE CODE OF CONDUCT: a.All Contractors contracting for the procurement or laundering of apparel, garments or corresponding accessories, or the procurement of equipment, materials, or supplies, other than procurement related to a public works contract, declare under penalty of perjury that no apparel, garments or corresponding accessories, equipment, materials, or supplies furnished to the state pursuant to the contract have been laundered or produced in whole or in part by sweatshop labor, forced labor, convict labor, indentured labor under penal sanction, abusive forms of child labor or exploitation of children in sweatshop labor, or with the benefit of sweatshop labor, forced labor, convict labor, indentured labor under penal sanction, abusive forms of child labor or exploitation of children in sweatshop labor. The contractor further declares under penalty of perjury that they adhere to the Sweatfree Code of Conduct as set forth on the California Department of Industrial Relations website located at www.dir.ca.gov, and Public Contract Code Section 6108. b. The contractor agrees to cooperate fully in providing reasonable access to the contractor’s records, documents, agents or employees, or premises if reasonably required by authorized officials of the contracting agency, the Department of Industrial Relations, or the Department of Justice to determine the contractor’s compliance with the requirements under paragraph (a). 7.DOMESTIC PARTNERS: For contracts of $100,000 or more, Contractor certifies that Contractor is in compliance with Public Contract Code section 10295.3. 8.GENDER IDENTITY: For contracts of $100,000 or more, Contractor certifies that Contractor is in compliance with Public Contract Code section 10295.35. DOING BUSINESS WITH THE STATE OF CALIFORNIA The following laws apply to persons or entities doing business with the State of California. 1.CONFLICT OF INTEREST: Contractor needs to be aware of the following provisions regarding current or former state employees. If Contractor has any questions on the status of any person rendering services or involved with the Agreement, the awarding agency must be contacted immediately for clarification. Current State Employees (Pub. Contract Code §10410): 1). No officer or employee shall engage in any employment, activity or enterprise from which the officer or employee receives compensation or has a financial interest and which is sponsored or funded by any state agency, unless the employment, activity or enterprise is required as a condition of regular state employment. 2). No officer or employee shall contract on his or her own behalf as an independent contractor with any state agency to provide goods or services. Former State Employees (Pub. Contract Code §10411): 1). For the two-year period from the date he or she left state employment, no former state officer or employee may enter into a contract in which he or she engaged in any of the negotiations, transactions, planning, arrangements or any part of the decision-making process relevant to the contract while employed in any capacity by any state agency. 2). For the twelve-month period from the date he or she left state employment, no former state officer or employee may enter into a contract with any state agency if he or she was employed by that state agency in a policy-making position in the same general subject area as the proposed contract within the 12-month period prior to his or her leaving state service. If Contractor violates any provisions of above paragraphs, such action by Contractor shall render this Agreement void. (Pub. Contract Code §10420) Members of boards and commissions are exempt from this section if they do not receive payment other than payment of each meeting of the board or commission, payment for preparatory time and payment for per diem. (Pub. Contract Code §10430 (e)) 2.LABOR CODE/WORKERS' COMPENSATION: Contractor needs to be aware of the provisions which require every employer to be insured against liability for Worker's Compensation or to undertake self-insurance in accordance with the provisions, and Contractor affirms to comply with such provisions before commencing the performance of the work of this Agreement. (Labor Code Section 3700) 3.AMERICANS WITH DISABILITIES ACT: Contractor assures the State that it complies with the Americans with Disabilities Act (ADA) of 1990, which prohibits discrimination on the basis of disability, as well as all applicable regulations and guidelines issued pursuant to the ADA. (42 U.S.C. 12101 et seq.) 4.CONTRACTOR NAME CHANGE: An amendment is required to change the Contractor's name as listed on this Agreement. Upon receipt of legal documentation of the name change the State will process the amendment. Payment of invoices presented with a new name cannot be paid prior to approval of said amendment. 5.CORPORATE QUALIFICATIONS TO DO BUSINESS IN CALIFORNIA: a. When agreements are to be performed in the state by corporations, the contracting agencies will be verifying that the contractor is currently qualified to do business in California in order to ensure that all obligations due to the state are fulfilled. b. "Doing business" is defined in R&TC Section 23101 as actively engaging in any transaction for the purpose of financial or pecuniary gain or profit. Although there are some statutory exceptions to taxation, rarely will a corporate contractor performing within the state not be subject to the franchise tax. c. Both domestic and foreign corporations (those incorporated outside of California) must be in good standing in order to be qualified to do business in California. Agencies will determine whether a corporation is in good standing by calling the Office of the Secretary of State. 6.RESOLUTION: A county, city, district, or other local public body must provide the State with a copy of a resolution, order, motion, or ordinance of the local governing body which by law has authority to enter into an agreement, authorizing execution of the agreement. 7.AIR OR WATER POLLUTION VIOLATION: Under the State laws, the Contractor shall not be: (1) in violation of any order or resolution not subject to review promulgated by the State Air Resources Board or an air pollution control district; (2) subject to cease and desist order not subject to review issued pursuant to Section 13301 of the Water Code for violation of waste discharge requirements or discharge prohibitions; or (3) finally determined to be in violation of provisions of federal law relating to air or water pollution. 8.PAYEE DATA RECORD FORM STD. 204: This form must be completed by all contractors that are not another state agency or other governmental entity. STATE OF CALIFORNIA CALIFORNIA CIVIL RIGHTS LAWS ATTACHMENT DGS OLS 04 (Rev. 01/17 ) DEPARTMENT OF GENERAL SERVICES OFFICE OF LEGAL SERVICES Pursuant to Public Contract Code section 2010 , a person that submits a bid or proposal to, or otherwise proposes to enter into or renew a contract with , a state agency with respect to any contract in the amount of $100,000 or above shall certify , under penalty perjury , at the time the bid or proposa l is submitted or the contract is renewed , all of the following : 1. CALIFORNIA CIVIL RIGHTS LAWS : For contracts executed or renewed after January 1, 2017 , the contractor certifies compliance with the Unruh Civ il Rights Act (Section 51 of the Civil Code) and the Fair Employment and Housing Act (Section 12960 of the Government Code); and 2 . EMPLOYER DISCRIMINATORY POLICIES : For contracts executed or renewed after January 1, 2017 , if a Contractor has an internal policy against a sovereign nat ion or peoples recognized by the United States government, the Contractor certifies that such pol icies are not used in violation of the Unruh Civil Rights Act (Section 51 of the Civil Code) or the Fair Employment and Housing Act (Section 12960 of the Government Code). CERTIFICATION r-------------------------------------------------------,----------------------1 I, the official named below, certify under penalty of perjury under I Federal ID Number the laws of the State of Californi a that the foregoing is true and ! correct. I I I Proposer/Bidder Firm Name (Printed) I I County of Fresno I I r -------------------------------------------------------....1..----------------------7 1 By (Authorized Signature) 1 I I I ~ I ~ Printed Name and Title of~~ -----------------~ I I I Ernest Buddy Mendes, Cha i rman of the Board of Supervisors of the County of Fresno I I I r--------------------------------r----------------------------------------------1 1 Date Executed I Executed in the County and State of 1 I I I ! 'b \ ~) '2£>2::D ! Fresno California ! L ________________________________ L ______________________________________________ J ATTEST: Agreement Between the County of Fresno and California Department of Public Health Name: Sexually Transmitted Disease (STD) Program Management and Collaboration Project Grant Agreement No. 19-10960 Fund/Subclass: 0001/10000 Organization #: 56201661 Revenue Account #: 3530