Loading...
The URL can be used to link to this page
Your browser does not support the video tag.
Home
My WebLink
About
29446
CountyofFresno16-10769Page1of7ExhibitAScopeofWork1.ServiceOverviewTheContractoragreestoprovidetotheCaliforniaDepartmentofPublicHealth(CDPH)theservicesdescribedherein.TheContractoragreestoadministertheHIVSurveillanceProgram(HSP)andtoinsuretheimplementationofHumanImmunodeficiencyVirus(HIV)surveillanceactivitiesasdescribedinthisScopeofWork(SOW).TheContractorwillplan,develop,andimplementallaspectsofHIVsurveillanceintheServiceLocation.TheLegislatureauthorizedintheHealth&SafetyCode(HSC)Section131019theCDPH,OfficeofAIDS(OA)astheleadagencywithintheStateresponsibleforcoordinatingstateprograms,servicesandactivitiesrelatedtoHIVandAcquiredImmuneDeficiencySyndrome(AIDS).HSC131085(a)and(b)authorizetheCDPHtoenterintocontractstoperformpublichealthactivities.2.ServiceLocationTheservicesshallbeperformedatapplicablefacilitiesintheCountyofFresno.3.ServiceHoursTheservicesshallbeprovidedduringregularbusinesshours,MondaythroughFriday,exceptofficialholidays.4.ProjectRepresentativesA.Theprojectrepresentativesduringthetermofthisagreementwillbe:CaliforniaDepartmentofPublicHealthCountyofFresnoKimberlyFerreira,AssistantChiefJenaAdams,SupervisingCommunicableDiseaseSpecialistTelephone:(916)449-5262Telephone:(559)600-3434Fax:(916)449-5858Fax:(559)600-7601E-mail:kimberly.ferreira@cdph.ca.govE-mail:jadams@co.fresno.ca.usB.Directallinquiriesto:CaliforniaDepartmentofPublicHealthCountyofFresnoSurveillanceResearch&EvaluationBranchKimberlyFerreira,AssistantChiefJenaAdams,SupervisingCommunicableDiseaseSpecialist1616CapitolAvenue,Suite616,MS77001221FultonMallSacramento,CA,95899-7426Fresno,CA93721Telephone:(916)449-5262Telephone:(559)600-3434Fax:(916)449-5858Fax:(559)600-7601E-mail:kimberly.ferreira@cdph.ca.qovE-mail:jadams@co.fresno.ca.usC.Eitherpartymaymakechangestotheinformationabovebygivingwrittennoticetotheotherparty.Saidchangesshallnotrequireanamendmenttothisagreement. CountyofFresno16-10769Page2of7ExhibitAScopeofWork5.ServicestobePerformedServicesperformedshallbeconsistentwiththeOAGuidetoHIVSurveillance(https://www.cdph.ca.gov/proqrams/aids/Paqes/SurvProcedures.aspx).acomprehensiveguidethatalsoincludesthestandardoperatingprocedures(SOPs),andbeperformedinsupportofthegoalsofCalifornia’sIntegratedHIVSurveillance,Prevention,andCarePlanandtheNationalHIV/AIDSStrategy(NHAS).Contractorshallperformtheactivitiesoutlinedbelow:A.MaintainInfrastructureforHIVSurveillanceThegoalunderthisagreementregardingmaintaininginfrastructureforHIVsurveillanceistoestablishandmaintainHIVcasesurveillanceinhealth,medical,publichealth,andsocialservicesettings,includinglaboratoriesandHIVtestingsitessuchthatHIVcasereportingtothelocalhealthdepartmentoccursinatimelyandcompletefashion.1)ContractorshallidentifyallsitesresponsibleforHIVcasereportingunderCaliforniaHealthandSafetyCodesection120130and121022,Title17,CaliforniaCodeofRegulations(CCR)§2641andTitle17CCR§2643inthejurisdiction,including,butnotlimitedto,medicaloffices,clinics,hospitals,testingsites,community-basedorganizations,correctionalhealthcaresettings,andclinicallaboratories.2)ContractorshallevaluateHIVcasereportingproceduresatHIVreportingsites(seeGuideforHIVSurveillanceforspecificcriteria)toinsureallcaseinformationisreportedperCaliforniaHealthandSafetyCodesection120130and121022,Title17CCR§2641andTitle-17CCR§2643,andOAGuidetoHIVSurveillance.Provideeducationandtechnicalassistancetositesasneededtoimprovesite-specificprocessesforHIVreporting.3)Contractorshallidentify,obtain,andmaintainaccesstoalldatasourceswithinthejurisdictioncontaininginformationrelevanttoHIVcasesurveillanceincluding,butnotlimitedto:clinicandhospitalmedicalrecords,vitalrecords,sexuallytransmitteddisease(STD)surveillancedata,RyanWhiteprogramdata,tuberculosis(TB)surveillancedata,andHIVandSTDpartnerservicesdata.ThesedatasourcesmayincludeCaliforniaReportableDiseaseInformationExchange(CalREDIE),AIDSRegionalInformationandEvaluationSystem(ARIES),andLocalEvaluationOnline(LEO).B.CollectandSubmitAccurate,Complete,andTimelyHIVSurveillanceDatatoOAThegoalunderthisagreementregardingcollectingaccurateandcompleteHIVsurveillancedataistocollectHIVsurveillancedatathatmeetsalldatarequirementssetforthbytheOAandtheCentersforDiseaseControlandPrevention(CDC),andsubmitdatatoOAaspertheOAGuidetoHIVSurveillance.1)ContractorshallidentifyallnewHIVandnewHIVstage3AIDScases(includingpreviouslyreportedHIVcasesthathavetransitionedtoHIVstage3AIDS)reportedinthejurisdictionthroughroutinemonitoringoflaboratoryandproviderreports,andelectroniclaboratorydata. CountyofFresno16-10769Page3of7ExhibitAScopeofWork2)ContractorshalldeterminewhethernewlyidentifiedHIVandHIVStage3AIDScasesarenewcasesbyconducting'casechecks’onallpotentiallynewcasesagainstlocalandstateHIVsurveillancedata.3)Contractorshallassignauniqueidentifier("STATENO")toeachnewlyidentifiedHIVcaseusingthelistofSTATENOsprovidedbyOA.4)ContractorshallcompleteanAdultorPediatricCaseReportFormfor100percentofnewlyreportedHIVcasesand100percentofnewHIVStage3AIDScasesidentifiedinthejurisdictionandsubmitthosecasereportformstotheOAwithin45daysoftheContractorreceivingnotificationofanewcase[asperHSCSection121023andCaliforniaCodeofRegulations,Title17§2643.15],5)Contractorshallcollectallrequireddataelementson100percentofAdultandPediatricCaseReportFormsusingallavailabledatasourcestotheextentpermittedbylawincluding,butnotlimitedto,datafrommedicalproviders,HIVtestsites,laboratories,HIVpreventionprograms,RyanWhitefundedprograms,STDsurveillanceprograms,andSTDandHIVpartnerservicesprograms.RequireddataelementsarestatedinOAGuidetoHIVSurveillanceandinclude,butarenotlimitedto,demographicinformation,contactinformation,riskbehavior,clinicalinformation,andtestingandtreatmenthistory.OAshallprovideanannualreporttothecontractoronthecompletenessofrequireddataelementsinordertofacilitateidentificationofdataandprogramgaps.6)Contractorshallenter100percentofnon-electroniclaboratoryresultsreceivedintotheLabDataEntryTool(LDET)orequivalentsystem,andsubmitthelabresultstotheOAwithin90daysofspecimencollectiondate.OAshallprovideaquarterlyreporttotheContractorsummarizingperformanceonthisitem.7)Contractorshallimport100percentofelectroniclaboratoryrecord(ELR)datafilesreceivedfromOAintoLDETorequivalentsystemwithin5businessdaysofreceipt.8)ContractorshallreviewandinvestigatecasesanddataqualityissuesidentifiedonmonthlyOAqualityassurance/qualitycontrolreports.ContractorshallmakeappropriatedatacorrectionsorupdatesthroughprocessesspecifiedintheGuidetoHIVSurveillancewithin90daysofreceiptofthereports.9)ContractorshallcollaboratewithOAandCDCstafftoconductinvestigationsofCasesofPublicHealthImportance(COPHI)[caseswithunusualorhighlyconcerningclinicalorexposurecharacteristics,includingbutnotlimitedtoworkplaceexposure,etc.].COPHIcaseinvestigationsshallbecompletedwithin3monthsoftheContractorreceivingnotificationofthecasefromOA.10)ContractorshallsubmitanexportoflabdatafromLDETtoOAatleasttwicepermonth.11)ContractorshallproactivelyidentifytechnicalassistanceandtrainingneedsregardingHIVsurveillanceandinformtheOAofthoseneeds.ContractorshallcollaboratewithOAtoreceivetechnicalassistanceandtrainingasdeterminedbyOA. CountyofFresno16-10769Page4of7ExhibitAScopeofWorkC.MaintainDataSecurityandConfidentialityThegoalunderthisagreementregardingdatasecurityandconfidentialityistoprotectpatientprivacyandconfidentialitybyensuringthatprotectedhealthinformationisstoredanddisclosedonlyinamannerconsistentwithCaliforniaandfederallawsandregulations,andOApoliciesandprocedures.1)ContractorshallmaintainasecureHIVsurveillanceworkareawhereallelectronicandpaperHIVsurveillancedataarestored.Accesstotheworkareashallberestrictedtolocalhealthdepartmentstaffthat(a)areauthorizedbytheLocalHIVSurveillanceCoordinatortoaccessHIV-relateddata,(b)havecompletedannualHIVsurveillancedatasecurityandconfidentialitytraining,and(c)annuallysignedthe"HIV/AIDSConfidentialityAgreement"form(ExhibitH).2)ContractorshallprovideacopyofallsignedExhibitHformstoOAatthetimeofhireandannuallybyApril30thofeachyear.3)ContractorshallmaintainanupdatedlistofallpersonswithaccesstotheHIVsurveillanceworkarea.ThelistshallincludethemostrecentdatetheannualtrainingwascompletedandthedatethemostrecentCDPH8689formwassigned.ThelistshallbemadeavailabletoOAonrequest.4)ContractorshallfacilitatelocalhealthdepartmentdiseaseinvestigationandHIV/STDpreventionandcarestaffaccesstoHIVsurveillancedatabyproactivelyidentifyingwhichstaffshouldcompletetherequiredtrainingandsigntheconfidentialityagreement.TheseindividualsshallbeincludedonthelistspecifiedinsectionC.3.5)Contractorshallmaintaininformationtechnology(IT)securityforITsystemscontainingHIVsurveillancedatainamannerconsistentwiththeGuidetoHIVSurveillance.6)Contractorshallannuallycomplete,byApril30thofeachyear,thePeriodicChecklistforHIVDataSecurityandConfidentialityfromtheOAGuidetoHIVSurveillance.ThePeriodicChecklistshallbesubmittedtoOAuponcompletion.7)ContractorshallsubmitareportonanydeficienciesidentifiedonthePeriodicChecklistwithin30daysofreceivingnoticefromOAofthedeficiency.Thereportshallcontainitemsoutofcompliance,describetheactionstepsforremediatingthedeficiency,andatimelineforthoseactionstepstobecompleted.ContractorshallconsultwithOAtoidentifyandimplementactionsteps.8)ContractorshallinsurealllocalHIVsurveillancestaffadheretoallcomponentsofthedatasecurityandconfidentialityguidanceintheOAGuidetoHIVSurveillanceandtrainings.Thisincludes,butisnotlimitedto,lockingupallpaperorelectronicmaterialswhennotinuse,shreddingdocumentsfordisposalusinganapprovedcross-cutshredder,adheringtothelocally-approveddocumentretentionschedule,submittingpaperandelectronicrecordstoOAinanapprovedandsecuremanner,andverifyingtheidentityandauthorityofacallertoreceiveinformationthatisbeingsharedoverthephone. CountyofFresno16-10769Page5of7ExhibitAScopeofWork9)ContractorshallnotreleaseHIVsurveillancedatatounauthorizedpersonsthatcouldleadtotheidentificationofanindividualdiagnosedwithHIV.Thisincludesusingappropriatemethodsforsuppressingsmallcellsizesinpublishedreportsandtables;foranexample,seetheCDPH/OAInternalGuidelinesforWorkingwithSmallCellSizes(https://www.cdph.ca.qov/proqrams/aids/Documents/SmallCellGuidance.pdf),10)ContractorshallnotreleaseHIVsurveillancedataofanytypedirectlytotheCDC,unlessspecificallydirectedtodosobyOA.D.ProgramManagementandCoordinationThegoalunderthisagreementregardingprogrammanagementandcoordinationistoconductHIVsurveillanceactivitiesinamannerconsistentwithadministrative,fiscal,budgetary,andprogramguidancefromCDPH,OA,andCDC.1)ContractorshalldesignateaLocalHIVSurveillanceCoordinatorforthejurisdictionthatisresponsiblefor:1)overseeingandimplementingthiscontractandmeetingtheobjectivesinthisSOW;2)receivingandrespondingtocommunicationswithOA;3)informingotherlocalHIVsurveillancestaffandlocalhealthdepartmentleadershipofprogramchangesandcommunicationsfromOA;4)ensuringthatcontractmonitoringandinvoicesubmissionoccurs;5)completingandsubmittingrequiredreports;6)attendingOA-requiredconferencesandtrainings,includingmonthlyall-countycalls;and7)maintaininglocaldatasecurityandconfidentiality.2)ContractorshallcommunicatethenameandcontactinformationoftheLocalHIVSurveillanceCoordinatortoOAonanannualbasisatthestartofthecontractyearandwithin10businessdaysofanychangeinthenameorcontactinformationfortheLocalHIVSurveillanceCoordinator.3)ContractorshallsubmitinvoicesrelatedtoHIVsurveillanceactivitiesoutlinedinthisSOWtoOAonaquarterlybasis.4)TheLocalHIVSurveillanceCoordinator,ortheirdesignee,willparticipateinallOA-convenedHIVsurveillancemeetingsandconferencecalls,including,butnotlimitedto,monthlyall-countycallsandOA-ledtrainingsessions.E.CollaborateWithPartnerstoRespondtotheHIVEpidemicThegoalofthisagreementregardingcollaboratingwithpartnersistofacilitatesharingdataandresourcestosupportprogresstowardmeetingCalifornia'sIntegratedPlangoalsandobjectives.1)ContractorshallprovidelocalhealthdepartmentHIVpreventionanddiseaseinvestigationstaffwithallavailableinformation,includingbutnotlimitedtopatientname,contactinformation,diagnosingprovider,regardingpersonsnewlydiagnosedwithHIVwithin5businessdaysoftheContractorreceivingnotificationofthecaseinordertofacilitatelinkagetocareandpartnerservicesforpersonsnewlydiagnosedwithHIV.ContractorshallprovideadditionalnecessaryinformationtolocalhealthdepartmentHIVpreventionandcareprogramsasitbecomesavailable. CountyofFresno16-10769Page6of7ExhibitAScopeofWork2)ContractorshallprovidelocalhealthdepartmentHIVpreventionanddiseaseinvestigationstaffwithallavailableinformationincludingbutnotlimitedtopatientname,contactinformation,diagnosingprovider,regardingcasesofacuteHIVinfectionwithin1businessdayoftheContractorreceivingnotificationofthecase.ContractorshallprovideadditionalnecessaryinformationtolocalhealthdepartmentHIVpreventionandcareprogramsasitbecomesavailable.3)Contractorshallsharelocallygenerated,orOAgeneratedlistsofHIVcasesthatareoutofcarewithlocalhealthdepartmentHIVpreventionandcareprogramsonamonthlybasisataminimumtoinsurethatlocalhealthdepartmentHIVpreventionandcarestaffareabletofollow¬uponthesecasesandreconnectpatientstocare.4)Contractorshallobtainupdatedcasecontact,riskbehavior,provider,orclinicalinformationfromlocalhealthdepartmentHIVpreventionandcareprograminvestigationsofpersonswhoareoutofcareandupdateHIVsurveillancedatawiththisinformationusingthemethodspecifiedbyOAintheGuidetoHIVSurveillance.5)ContractorsareencouragedtoanalyzeHIVsurveillancedata,includingdatasharedunderDataUseAgreements,tosupportlocalprogramplanning,implementation,andmonitoring.6)ContractorsshallsupporttheCaliforniaMedicalMonitoringProject(MMP)bysharingHIVsurveillancedatawithOAMMPstaffuponrequest,andfacilitatingcommunicationsbetweenOAMMPstaff,andlocalmedicalprovidersandcorrectionalfacilities.F.OptionalActivity:ReceiveHIVSurveillanceDatafromtheOAThegoalofthisoptionalactivityistopermitOAtoprovidedetaileddatafilescontainingidentifiableinformationonpeoplelivingwithHIV(PLWH)intheContractor’sjurisdictiongeneratedfromthestatewideHIVsurveillancesystem.1)BecausethesedatafilesareprovidedbyOA,andcanincludedatacollectedbyotherlocalhealthjurisdictions,Contractorselectingtoreceivethesedatafilesshallcommittomeetingtherequirementsinthe"CALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENT”(seeExhibitG).2)ContractorswhotosignandsubmittheAgreementshallreceivedatafilesinasecuremethodspecifiedbytheGuidetoHIVSurveillance.6.ScopeofWorkChangesPursuanttoHealthandSafetyCodeSection38077(b)(2),changesandrevisionstotheScopeofWorkcontainedintheagreement,utilizingthe"allowablecostpaymentsystem",maybeproposedbytheContractorinwriting.AllrequestedchangesandrevisionsaresubjecttotheapprovaloftheState.FailuretonotifytheStateofproposedrevisionstotheScopeofWorkmayresultinanauditfinding.1)TheStatewillrespond,inwriting,astotheapprovalordisapprovalofallsuchrequestsforchangesorrevisionstotheScopeofWorkwithin30calendardaysofthedatetherequestisreceivedintheprogram.ShouldtheStatefailtorespondtotheContractor'srequestwithin30calendardaysofreceipt,theContractor'srequestshallbedeemedapproved. CountyofFresno16-10769Page7of7ExhibitAScopeofWork2)TheStatemayalsorequestchangesandrevisionstotheScopeofWork.TheStatewillmakeagood-faithefforttoprovidetheContractor30calendardaysadvancewrittennoticeofsaidchangesorrevisions.NochangestotheScopeofWorkagreedtopursuanttothisprovisionshalltakeeffectuntilthecooperativeagreementsareamendedandtheamendmentisapprovedasrequiredbylawandthisagreement. CountyofFresno16-10769Page1of3ExhibitBBudgetDetailandPaymentProvisions1.InvoicingandPaymentA.InnoeventshalltheContractorrequestreimbursementfromtheStateforobligationsenteredintoorforcostsincurredpriortothecommencementdateoraftertheexpirationofthisAgreement.B.Forservicessatisfactorilyrendered,anduponreceiptandapprovaloftheinvoices,theStateagreestocompensatetheContractorforactualexpendituresincurredinaccordancewiththeBudgetLineItemsamountsspecifiedinAttachmentI,ofthisExhibit.C.InvoicesshallincludetheAgreementNumberandshallbesubmittednotmorefrequentlythanmonthlyinarrears.Eachinvoiceforthequartershallbesubmittedforpaymentnomorethanthirty(30)calendardaysfollowingthecloseofeachquarter,unlessanalternatedeadlineisagreedtoinwritingbytheprogramcontractmanager.Directallinquiriesto:InvoiceDeskCaliforniaDepartmentofPublicHealthOfficeofAIDSMS77001616CapitolAvenue,Suite616Sacramento,CA95899-7426D.Invoicesshall:1)SubmitonContractorletterheadandsignedbyanauthorizedrepresentative,certifyingthattheexpendituresclaimedrepresentactualexpensesfortheserviceperformedunderthiscontract.2)Identifycontractagreementnumber.3)Identifythebillingand/orperformanceperiodcoveredbytheinvoice.4)Itemizecostsforthebillingperiodinthesameorgreaterlevelofdetailasindicatedinthisagreement.Subjecttothetermsofthisagreement,reimbursementmayonlybesoughtforthosecostsand/orcostcategoriesexpresslyidentifiedasallowableinthisagreementandapprovedbyCDPH.E.AmountsPayableTheamountspayableunderthisagreementshallnotexceed:1)$85,513forthebudgetperiodof07/01/16through06/30/17.2)$85,513forthebudgetperiodof07/01/17through06/30/18.3)$85,513forthebudgetperiodof07/01/18through06/30/19.2.BudgetContingencyClauseA.ItismutuallyagreedthatiftheBudgetActofthecurrentyearand/oranysubsequentyearscoveredunderthisAgreementdoesnotappropriatesufficientfundsfortheprogram,thisAgreementshallbeofnofurtherforceandeffect.Inthisevent,theStateshallhavenoliabilitytopayanyfundswhatsoevertoContractorortofurnishanyotherconsiderationsunderthisAgreementandContractorshallnotbeobligatedtoperformanyprovisionsofthisAgreement. CountyofFresno16-10769Page2of3ExhibitBBudgetDetailandPaymentProvisionsB.IffundingforanyfiscalyearisreducedordeletedbytheBudgetActforpurposesofthisprogram,theStateshallhavetheoptiontoeithercancelthisAgreementwithnoliabilityoccurringtotheState,orofferanagreementamendmenttoContractortoreflectthereducedamount.3.PromptPaymentClausePaymentwillbemadeinaccordancewith,andwithinthetimespecifiedin,GovernmentCodeChapter4.5,commencingwithSection927.4.TimelySubmissionofFinalinvoiceA.Afinalundisputedinvoiceshallbesubmittedforpaymentnomorethansixty(60)calendardaysfollowingtheexpirationorterminationdateofthisagreement,unlessalateroralternatedeadlineisagreedtoinwritingbytheprogramcontractmanager.Saidinvoiceshouldbeclearlymarked"FinalInvoice",indicatingthatallpaymentobligationsoftheStateunderthisagreementhaveceasedandthatnofurtherpaymentsaredueoroutstanding.TheStatemay,atitsdiscretion,choosenottohonoranydelinquentfinalinvoiceiftheContractorfailstoobtainpriorwrittenStateapprovalofanalternatefinalinvoicesubmissiondeadline.B.TheContractorisherebyadvisedofitsobligationtosubmittothestate,withthefinalinvoice,acompletedcopyofthe“Contractor’sRelease(ExhibitI)”.5.AllowableLineItemShiftsA.SubjecttothepriorreviewandapprovaloftheState,lineitemshiftsofuptofifteenpercent(15%)oftheannualcontracttotal,nottoexceedamaximumofonehundredthousand($100,000)annuallyareallowed,solongastheannualagreementtotalneitherincreasesnordecreases.BThe$100,000maximumlimitshallbeassessedannuallyandautomaticallyadjustedbytheStateinaccordancewithcost-of-livingindexes.Saidadjustmentsshallnotrequireaformalagreementamendment.TheStateshallannuallyinformtheContractorinwritingoftheadjustedmaximum.C.Lineitemshiftsmeetingthiscriteriashallnotrequireaformalagreementamendment.D.TheContractorshalladheretoStaterequirementsregardingtheprocessrequestingapprovaltolineitemshifts.E.Lineitemshiftsmaybeproposed/requestedbyeithertheStateortheContractor.6.ExpenseAllowability/FiscalDocumentationA.Invoices,receivedfromtheContractorandacceptedforpaymentbytheState,shallnotbedeemedevidenceofallowableagreementcosts.B.ContractorshallmaintainforreviewandauditandsupplytoCDPHuponrequest,adequatedocumentationofallexpensesclaimedpursuanttothisagreementtopermitadeterminationofexpenseallowability. CountyofFresno16-10769Page3of3ExhibitBBudgetDetailandPaymentProvisionsC.IftheallowabilityofanexpensecannotbedeterminedbytheStatebecauseinvoicedetail,fiscalrecords,orbackupdocumentationisnonexistentorinadequateaccordingtogenerallyacceptedaccountingprinciplesorpractices,allquestionablecostsmaybedisallowedandpaymentmaybewithheldbytheState.Uponreceiptofadequatedocumentationsupportingadisallowedorquestionableexpense,reimbursementmayresumefortheamountsubstantiatedanddeemedallowable.7.RecoveryofOverpaymentsA.Contractoragreesthatclaimsbaseduponthetermsofthisagreementoranauditfindingand/oranauditfindingthatisappealedandupheld,willberecoveredbytheStatebyoneofthefollowingoptions:1)Contractor'sremittancetotheStateofthefullamountoftheauditexceptionwithin30daysfollowingtheState'srequestforrepayment;2)ArepaymentscheduleagreeablebetweentheStateandtheContractor.B.TheStatereservestherighttoselectwhichoptionasindicatedaboveinparagraphAwillbeemployedandtheContractorwillbenotifiedbytheStateinwritingoftheclaimproceduretobeutilized.C.InterestontheunpaidbalanceoftheauditfindingordebtwillaccrueatarateequaltothemonthlyaverageoftheratereceivedoninvestmentsinthePooledMoneyInvestmentFundcommencingonthedatethatanauditorexaminationfindingismailedtotheContractor,beginning30daysafterContractor'sreceiptoftheState'sdemandforrepayment.D.IftheContractorhasfiledavalidappealregardingthereportofauditfindings,recoveryoftheoverpaymentswillbedeferreduntilafinaladministrativedecisionontheappealhasbeenreached.IftheContractorlosesthefinaladministrativeappeal,Contractorshallrepay,totheState,theover-claimedordisallowedexpenses,plusaccruedinterest.InterestaccruesfromtheContractor’sfirstreceiptofState'snoticerequestingreimbursementofquestionedauditcostsordisallowedexpenses.8.TravelandPerDiemReimbursementAnyreimbursementfornecessarytravelandperdiemshall,unlessotherwisespecifiedinthisAgreement,beattheratescurrentlyineffect,asestablishedbytheCaliforniaDepartmentofHumanResources(CalHR).IftheCalHRrateschangeduringthetermoftheAgreement,thenewratesshallapplyupontheireffectivedateandnoamendmenttothisAgreementshallbenecessary.NotraveloutsidethestateofCaliforniashallbereimbursedwithoutpriorauthorizationfromtheCDPH.Verbalauthorizationshouldbeconfirmedinwriting.Writtenauthorizationmaybeinaformincludingfaxoremailconfirmation. ExhibitB-AttachmentIBudgetDetailJuly1.2016-June30.2019Countyoffresrc16-10763Year(1)Year(2)Year(31TotalsA.PersonnelAnnualSalarySOWPositionTitleReferenceRangeFTEAvg.SalaryBudgetFTEAvg.SalaryBudgetFTEAvg.SalaryBudgetOarrmunicaoleDiseaseSpecialist5S41.134-S52.59250%S52.592$26,23650%S52.592$25,29650%$52,592S25.296$78,868OfficeAssistari5$29,1BO-$37,32338.121%S37.323$14,22338.121%$37,323$14,22636.121%$37,323S14.22B$42,684TotalSalariesandWages$40,524$40,524$40,524$121,572FringeBenefits*5PercentagePercentagePercentage83.4939%$33,83583.4939%$33,83583.4939%$33.835$101,505TotalPersonnel174,359$74,359574,359$223,077SOWB.OperatingExpensesReferenceBudgetBudgetBudget1.FaciiiiesCostSCso$0$02.GeneralOfficeSupoiesSO$0$0SC'3.EgjpmerlRenta&PurchasesSOSOsosoA.TelecommunicationsSO$0$0so5.Media'PromotkmSOsososo6.TravelandPerDiemsoso$0$0TotalOperatingExpensessosososoC.CapitolExpendituresSOWReferenceBudqetBudgetBudgetTotalCapitolExpendituresso$0sosoD.OtherCostSOWReferenceBudgetBudgetBudgetSutcentraKorSOsosoSCConsultants}TotalOtherCostssososo$0E.IndirectCostsPercentageBudgetPercentageBudgetPercentageBudgetIndirectCosts(uplo15%ofTotalAllowableDirectCost)PersarrocCosts15S11.15415$11,15415$11,154$33,462TotalCosts$85,513$85,513$85,513$256,539‘FringeBenefr.percentagesbasedcremployeccc/ributicnsthatrtdixteRCA.rredcat,'.vcrxer'sccropensaecn.shar:arcengtermcisabrity,and'coremen*ratesOperatingExpenses-aciilies-Rent2.GenersiOfSceSuepies—Pens,Paper,Post-Crotes3.EqjpmertRecta;&Purchases—Rentals(oapymachines.largeprinters)Purchases(comoulers.laptops,tablets,ceilphones)4.7eteconwnunicatkws—CountyEiectroncNetworkSystem,InternetProvider.CeilPhenePrcr.icer,LandIreTefepnaneSystem)5.Media'Promobcns—Development&PurchasingMaterials{brochures,Tiers}andAdvertising{banners,ads}6.7ravelandPerDem{Conferences,TracingsMeetings)OtherCasts(SubcontractorsandConsultants)Subcontractors): GTC610EXHIBITCGENERALTERMSANDCONDITIONS1.APPROVAL:ThisAgreementisofnoforceoreffectuntilsignedbybothpartiesandapprovedbytheDepartmentofGeneralServices,ifrequired.Contractormaynotcommenceperformanceuntilsuchapprovalhasbeenobtained.2.AMENDMENT:NoamendmentorvariationofthetermsofthisAgreementshallbevalidunlessmadeinwriting,signedbythepartiesandapprovedasrequired.NooralunderstandingorAgreementnotincorporatedintheAgreementisbindingonanyoftheparties.3.ASSIGNMENT:ThisAgreementisnotassignablebytheContractor,eitherinwholeorinpart,withouttheconsentoftheStateintheformofaformalwrittenamendment.4.AUDIT:Contractoragreesthattheawardingdepartment,theDepartmentofGeneralServices,theBureauofStateAudits,ortheirdesignatedrepresentativeshallhavetherighttoreviewandtocopyanyrecordsandsupportingdocumentationpertainingtotheperformanceofthisAgreement.Contractoragreestomaintainsuchrecordsforpossibleauditforaminimumofthree(3)yearsafterfinalpayment,unlessalongerperiodofrecordsretentionisstipulated.Contractoragreestoallowtheauditor(s)accesstosuchrecordsduringnormalbusinesshoursandtoallowinterviewsofanyemployeeswhomightreasonablyhaveinformationrelatedtosuchrecords.Further,ContractoragreestoincludeasimilarrightoftheStatetoauditrecordsandinterviewstaffinanysubcontractrelatedtoperformanceofthisAgreement.(Gov.Code§8546.7,Pub.ContractCode§10115etseq.,CCRTitle2,Section1896).5.INDEMNIFICATION:Contractoragreestoindemnify,defendandsaveharmlesstheState,itsofficers,agentsandemployeesfromanyandallclaimsandlossesaccruingorresultingtoanyandallcontractors,subcontractors,suppliers,laborers,andanyotherperson,firmorcorporationfurnishingorsupplyingworkservices,materials,orsuppliesinconnectionwiththeperformanceofthisAgreement,andfromanyandallclaimsandlossesaccruingorresultingtoanyperson,firmorcorporationwhomaybeinjuredordamagedbyContractorintheperformanceofthisAgreement.6.DISPUTES:ContractorshallcontinuewiththeresponsibilitiesunderthisAgreementduringanydispute.7.TERMINATIONFORCAUSE:TheStatemayterminatethisAgreementandberelievedofanypaymentsshouldtheContractorfailtoperformtherequirementsofthisAgreementatthetimeandinthemannerhereinprovided.IntheeventofsuchterminationtheStatemayproceedwiththeworkinanymaimerdeemedproperbytheState.AllcoststotheStateshallbedeductedfromanysumduetheContractorunderthisAgreementandthebalance,ifany,shallbepaidtotheContractorupondemand. 8.INDEPENDENTCONTRACTOR:Contractor,andtheagentsandemployeesofContractor,intheperformanceofthisAgreement,shallactinanindependentcapacityandnotasofficersoremployeesoragentsoftheState.9.RECYCLINGCERTIFICATION:TheContractorshallcertifyinwritingunderpenaltyofperjury,theminimum,ifnotexact,percentageofpostconsumermaterialasdefinedinthePublicContractCodeSection12200,inproducts,materials,goods,orsuppliesofferedorsoldtotheStateregardlessofwhethertheproductmeetstherequirementsofPublicContractCodeSection12209.WithrespecttoprinterorduplicationcartridgesthatcomplywiththerequirementsofSection12156(e),thecertificationrequiredbythissubdivisionshallspecifythatthecartridgessocomply(Pub.ContractCode§12205).10.NON-DISCRIMINATIONCLAUSE:DuringtheperformanceofthisAgreement,Contractoranditssubcontractorsshallnotunlawfullydiscriminate,harass,orallowharassmentagainstanyemployeeorapplicantforemploymentbecauseofsex,race,color,ancestry,religiouscreed,nationalorigin,physicaldisability(includingHIVandAIDS),mentaldisability,medicalcondition(e.g.,cancer),age(over40),maritalstatus,anddenialoffamilycareleave.Contractorandsubcontractorsshallinsurethattheevaluationandtreatmentoftheiremployeesandapplicantsforemploymentarefreefromsuchdiscriminationandharassment.ContractorandsubcontractorsshallcomplywiththeprovisionsoftheFairEmploymentandHousingAct(Gov.Code§12990(a-f)etseq.)andtheapplicableregulationspromulgatedthereunder(CaliforniaCodeofRegulations,Title2,Section7285etseq.).TheapplicableregulationsoftheFairEmploymentandHousingCommissionimplementingGovernmentCodeSection12990(a-f),setforthinChapter5ofDivision4ofTitle2oftheCaliforniaCodeofRegulations,areincorporatedintothisAgreementbyreferenceandmadeaparthereofasifsetforthinfull.ContractoranditssubcontractorsshallgivewrittennoticeoftheirobligationsunderthisclausetolabororganizationswithwhichtheyhaveacollectivebargainingorotherAgreement.ContractorshallincludethenondiscriminationandcomplianceprovisionsofthisclauseinallsubcontractstoperformworkundertheAgreement.11.CERTIFICATIONCLAUSES:TheCONTRACTORCERTIFICATIONCLAUSEScontainedinthedocumentCCC307areherebyincorporatedbyreferenceandmadeapartofthisAgreementbythisreferenceasifattachedhereto.12.TIMELINESS:TimeisoftheessenceinthisAgreement.13.COMPENSATION:TheconsiderationtobepaidContractor,asprovidedherein,shallbeincompensationforallofContractor'sexpensesincurredintheperformancehereof,includingtravel,perdiem,andtaxes,unlessotherwiseexpresslysoprovided.14.GOVERNINGLAW:ThiscontractisgovernedbyandshallbeinterpretedinaccordancewiththelawsoftheStateofCalifornia. 15.ANTITRUSTCLAIMS:TheContractorbysigningthisagreementherebycertifiesthatiftheseservicesorgoodsareobtainedbymeansofacompetitivebid,theContractorshallcomplywiththerequirementsoftheGovernmentCodesSectionssetoutbelow.a.TheGovernmentCodeChapteronAntitrustclaimscontainsthefollowingdefinitions:1)"Publicpurchase"meansapurchasebymeansofcompetitivebidsofgoods,services,ormaterialsbytheStateoranyofitspoliticalsubdivisionsorpublicagenciesonwhosebehalftheAttorneyGeneralmaybringanactionpursuanttosubdivision(c)ofSection16750oftheBusinessandProfessionsCode.2)"Publicpurchasingbody"meanstheStateorthesubdivisionoragencymakingapublicpurchase.GovernmentCodeSection4550.b.Insubmittingabidtoapublicpurchasingbody,thebidderoffersandagreesthatifthebidisaccepted,itwillassigntothepurchasingbodyallrights,title,andinterestinandtoallcausesofactionitmayhaveunderSection4oftheClaytonAct(15U.S.C.Sec.15)orundertheCartwrightAct(Chapter2(commencingwithSection16700)ofPart2ofDivision7oftheBusinessandProfessionsCode),arisingfrompurchasesofgoods,materials,orservicesbythebidderforsaletothepurchasingbodypursuanttothebid.Suchassignmentshallbemadeandbecomeeffectiveatthetimethepurchasingbodytendersfinalpaymenttothebidder.GovernmentCodeSection4552.c.Ifanawardingbodyorpublicpurchasingbodyreceives,eitherthroughjudgmentorsettlement,amonetaryrecoveryforacauseofactionassignedunderthischapter,theassignorshallbeentitledtoreceivereimbursementforactuallegalcostsincurredandmay,upondemand,recoverfromthepublicbodyanyportionoftherecovery,includingtrebledamages,attributabletooverchargesthatwerepaidbytheassignorbutwerenotpaidbythepublicbodyaspartofthebidprice,lesstheexpensesincurredinobtainingthatportionoftherecovery.GovernmentCodeSection4553.d.Upondemandinwritingbytheassignor,theassigneeshall,withinoneyearfromsuchdemand,reassignthecauseofactionassignedunderthispartiftheassignorhasbeenormayhavebeeninjuredbytheviolationoflawforwhichthecauseofactionaroseand(a)theassigneehasnotbeeninjuredthereby,or(b)theassigneedeclinestofileacourtactionforthecauseofaction.SeeGovernmentCodeSection4554.16.CHILDSUPPORTCOMPLIANCEACT:ForanyAgreementinexcessof$100,000,thecontractoracknowledgesinaccordancewithPublicContractCode7110,that:a.Thecontractorrecognizestheimportanceofchildandfamilysupportobligationsandshallfrillycomplywithallapplicablestateandfederallawsrelatingtochildandfamilysupportenforcement,including,butnotlimitedto,disclosureofinformationandcompliancewithearningsassignmentorders,asprovidedinChapter8(commencingwithsection5200)ofPart5ofDivision9oftheFamilyCode;andb.Thecontractor,tothebestofitsknowledgeisfullycomplyingwiththeearningsassignmentordersofallemployeesandisprovidingthenamesofallnewemployeestotheNewHireRegistrymaintainedbytheCaliforniaEmploymentDevelopmentDepartment. 17.UNENFORCEABLEPROVISION:IntheeventthatanyprovisionofthisAgreementisunenforceableorheldtobeunenforceable,thenthepartiesagreethatallotherprovisionsofthisAgreementhaveforceandeffectandshallnotbeaffectedthereby.18.PRIORITYHIRINGCONSIDERATIONS:IfthisContractincludesservicesinexcessof$200,000,theContractorshallgivepriorityconsiderationinfillingvacanciesinpositionsfundedbytheContracttoqualifiedrecipientsofaidunderWelfareandInstitutionsCodeSection11200inaccordancewithPub.ContractCode§10353.19.SMALLBUSINESSPARTICIPATIONANDDVBEPARTICIPATIONREPORTINGREQUIREMENTS;a.IfforthisContractContractormadeacommitmenttoachievesmallbusinessparticipation,thenContractormustwithin60daysofreceivingfinalpaymentunderthisContract(orwithinsuchothertimeperiodasmaybespecifiedelsewhereinthisContract)reporttotheawardingdepartmenttheactualpercentageofsmallbusinessparticipationthatwasachieved.(Govt.Code§14841.)b.IfforthisContractContractormadeacommitmenttoachievedisabledveteranbusinessenterprise(DVBE)participation,thenContractormustwithin60daysofreceivingfinalpaymentunderthisContract(orwithinsuchothertimeperiodasmaybespecifiedelsewhereinthisContract)certifyinareporttotheawardingdepartment:(1)thetotalamounttheprimeContractorreceivedundertheContract;(2)thenameandaddressoftheDVBE(s)thatparticipatedintheperformanceoftheContract;(3)theamounteachDVBEreceivedfromtheprimeContractor;(4)thatallpaymentsundertheContracthavebeenmadetotheDVBE;and(5)theactualpercentageofDVBEparticipationthatwasachieved.Apersonorentitythatknowinglyprovidesfalseinformationshallbesubjecttoacivilpenaltyforeachviolation.(Mil.&Vets.Code§999.5(d);Govt.Code§14841.)20.LOSSLEADER:Ifthiscontractinvolvesthefurnishingofequipment,materials,orsuppliesthenthefollowingstatementisincorporated:Itisunlawfulforanypersonengagedinbusinesswithinthisstatetoselloruseanyarticleorproductasa“lossleader”asdefinedinSection17030oftheBusinessandProfessionsCode.(PCC10344(e).)http://www.doouments.dgsxa.gov/ols/GTC-610.doc CountyofFresno16-10769ExhibitDSpecialTermsandConditions(Rev6/16)(ForCooperativeAgreementinaccordancewithHSC38070)TheprovisionshereinapplytothisAgreementunlesstheprovisionsareremovedbyreference,theprovisionsaresupersededbyanalternateprovisionappearingelsewhereinthisAgreement,ortheapplicableconditionsdonotexist.IndexofSpecialTermsandConditions1.ProcurementRules2.EquipmentOwnership/Inventory/Disposition3.SubcontractRequirements4.IncomeRestrictions5.SiteInspection6.IntellectualPropertyRights7.PriorApprovalofTrainingSeminars,WorkshopsorConferences8.ConfidentialityofInformation9.Documents,Publications,andWrittenReports10.DisputeResolutionProcess11.OfficialsNottoBenefit12.ProhibitedUseofStateFundsforSoftware13.ContractUniformity(FringeBenefitAllowability)14.CancellationPage1of16 ExhibitDSpecialTermsandConditions1.ProcurementRules(Applicabletoallagreementsinwhichequipment,property,commoditiesand/orsuppliesarefurnishedbyCDPHorexpensesforsaiditemsarereimbursedwithstateorfederalfunds.)a.EquipmentdefinitionsWhereverthetermequipment/propertyisused,thefollowingdefinitionsshallapply:(1)Majorequipment/property:Atangibleorintangibleitemhavingabaseunitcostof$5,000ormorewithalifeexpectancyofone(1)yearormoreandiseitherfurnishedbyCDPHorthecostisreimbursedthroughthisAgreement,Softwareandvideosareexamplesofintangibleitemsthatmeetthisdefinition.(2)Minorequipment/property:Atangibleitemhavingabaseunitcostoflessthan$5,000withalifeexpectancyofone(1)yearormoreandiseitherfurnishedbyCDPHorthecostisreimbursedthroughthisAgreement.b.Governmentandpublicentities(includingstatecolleges/universitiesandauxiliaryorganizations),whetheractingasacontractor,maysecureallcommodities,supplies,equipmentandservicesrelatedtosuchpurchasesthatarerequiredinperformanceofthisAgreement.SaidprocurementsaresubjecttoParagraphsdthroughgofthisprovision.Paragraphcofthisprovisionshallalsoapply,ifequipmentpurchasesaredelegatedtosubcontractorsthatarenonprofitorganizationsorcommercialbusinesses.c.Nonprofitorganizationsandcommercialbusinesses,whetheractingasacontractorand/orsubcontractor,maysecurecommodities,supplies,equipmentandservicesrelatedtosuchpurchasesforperformanceunderthisAgreement.(1)Equipmentpurchasesshallnotexceed$50,000annually.Tosecureequipmentabovetheannualmaximumlimitof$50,000,theContractorshallmakearrangementsthroughtheappropriateCDPHProgramContractManager,tohaveallremainingequipmentpurchasedthroughCDPH’sPurchasingUnit.ThecostofequipmentpurchasedbyorthroughCDPHshallbedeductedfromthefundsavailableinthisAgreement.ContractorshallsubmittotheCDPHProgramContractManageralistofequipmentspecificationsforthoseitemsthattheStatemustprocure.TheStatemaypaythevendordirectlyforsucharrangedequipmentpurchasesandtitletotheequipmentwillremainwithCDPH.TheequipmentwillbedeliveredtotheContractor'saddress,asstatedonthefaceoftheAgreement,unlesstheContractornotifiestheCDPHProgramContractManager,inwriting,ofanalternatedeliveryaddress.(2)Allequipmentpurchasesaresubjecttoparagraphsdthroughgofthisprovision.Paragraphbofthisprovisionshallalsoapply,ifequipmentpurchasesaredelegatedtosubcontractorsthatareeitheragovernmentorpublicentity.(3)Nonprofitorganizationsandcommercialbusinesses,shalluseaprocurementsystemthatmeetsthefollowingstandards:(a)Maintainacodeorstandardofconductthatshallgoverntheperformanceofitsofficers,employees,oragentsengagedinawardingprocurementcontracts.Noemployee,Page2of16 ExhibitDSpecialTermsandConditionsofficer,oragentshallparticipateintheselection,award,oradministrationofaprocurement,orbidcontractinwhich,tohisorherknowledge,heorshehasafinancialinterest.(b)Procurementsshallbeconductedinamannerthatprovides,tothemaximumextentpractical,open,andfreecompetition.(c)Procurementsshallbeconductedinamannerthatprovidesforallofthefollowing:[1]Avoidpurchasingunnecessaryorduplicateitems.[2]Equipmentsolicitationsshallbebaseduponaclearandaccuratedescriptionofthetechnicalrequirementsofthegoodstobeprocured.[3]Takepositivestepstoutilizesmallandveteranownedbusinesses.d.UnlesswaivedorotherwisestipulatedinwritingbyCDPH,priorwrittenauthorizationfromtheappropriateCDPHProgramContractManagerwillberequiredbeforetheContractorwillbereimbursedforanypurchaseexceeding$5,000ormoreforcommodities,supplies,equipment,andservicesrelatedtosuchpurchases.TheContractormustprovideinitsrequestforauthorizationallparticularsnecessary,asspecifiedbyCDPH,forevaluatingthenecessityordesirabilityofincurringsuchcosts.Theterm"purchase"excludesthepurchaseofservicesfromasubcontractorandpublicutilityservicesatratesestablishedforuniformapplicabilitytothegeneralpublic.e.Inspecialcircumstances,determinedbyCDPH(e.g.,whenCDPHhasaneedtomonitorcertainpurchases,etc.),CDPHmayrequirepriorwrittenauthorizationand/orthesubmissionofpaidvendorreceiptsforanypurchase,regardlessofdollaramount.CDPHreservestherighttoeitherdenyclaimsforreimbursementortorequestrepaymentforanyContractorpurchasethatCDPHdeterminestobeunnecessaryincarryingoutperformanceunderthisAgreement.f.TheContractormustmaintainacopyornarrativedescriptionoftheprocurementsystem,guidelines,rules,orregulationsthatwillbeusedtomakepurchasesunderthisAgreement.TheStatereservestherighttorequestacopyofthesedocumentsandtoinspectthepurchasingpracticesoftheContractoratanytime.g.Forallpurchases,theContractormustmaintaincopiesofallpaidvendorinvoices,documents,bidsandotherinformationusedinvendorselection,forinspectionoraudit.Justificationssupportingtheabsenceofbidding(i.e.,solesourcepurchases)shallalsobemaintainedonfilebytheContractorforinspectionoraudit.2.EquipmentOwnership/Inventory/Disposition(Applicabletoagreementsinwhichequipmentand/orpropertyisfurnishedbyCDPHand/orwhensaiditemsarepurchasedorreimbursedwithstate)a.Whereverthetermsequipmentand/orpropertyareusedinthisprovision,thedefinitionsinprovision1,paragrapha.,shallapply.UnlessotherwisestipulatedinthisAgreement,allequipmentand/orpropertythatarepurchased/reimbursedwithagreementfundsorfurnishedbyCDPHunderthetermsofthisAgreementshallbeconsideredstateequipmentandthepropertyofCDPH.Page3of16 ExhibitDSpecialTermsandConditions(1)CDPHrequiresthereporting,taggingandannualinventoryingofallequipmentand/orpropertythatisfurnishedbyCDPHorpurchased/reimbursedwithfundsprovidedthroughthisAgreement.Uponreceiptofequipmentand/orproperty,theContractorshallreportthereceipttotheCDPHProgramContractManager.Toreportthereceiptofsaiditemsandtoreceivepropertytags,ContractorshalluseaformorformatdesignatedbyCDPH'sAssetManagementUnit.Iftheappropriateform(i.e.,ContractorEquipmentPurchasedwithCDPHFunds)doesnotaccompanythisAgreement,ContractorshallrequestacopyfromtheCDPHProgramContractManager.(2)IftheContractorentersintoanagreementwithatermofmorethantwelvemonths,theContractorshallsubmitanannualinventoryofstateequipmentand/orpropertytotheCDPHProgramContractManagerusingaformorformatdesignatedbyCDPH’sAssetManagementUnit.Ifaninventoryreportform(i.e.,Inventory/DispositionofCDPH-FundedEquipment)doesnotaccompanythisAgreement,ContractorshallrequestacopyfromtheCDPHProgramContractManager.Contractorshall:(a)Includeintheinventoryreport,equipmentand/orpropertyintheContractor'spossessionand/orinthepossessionofasubcontractor(includingindependentconsultants).(b)SubmittheinventoryreporttoCDPHaccordingtotheinstructionsappearingontheinventoryformorissuedbytheCDPHProgramContractManager.(c)ContacttheCDPHProgramContractManagertolearnhowtoremove,trade-in,sell,transferorsurveyoff,fromtheinventoryreport,expiredequipmentand/orpropertythatisnolongerwanted,usableorhaspasseditslifeexpectancy.InstructionswillbesuppliedbyCDPH'sAssetManagementUnit.b.Titletostateequipmentand/orpropertyshallnotbeaffectedbyitsincorporationorattachmenttoanypropertynotownedbytheState.c.Unlessotherwisestipulated,CDPHshallbeundernoobligationtopaythecostofrestoration,orrehabilitationoftheContractor'sand/orSubcontractor'sfacilitywhichmaybeaffectedbytheremovalofanystateequipmentand/orproperty.d.TheContractorshallmaintainandadministerasoundbusinessprogramforensuringtheproperuse,maintenance,repair,protection,insuranceandpreservationofstateequipmentand/orproperty.(1)Inadministeringthisprovision,CDPHmayrequiretheContractortorepairorreplace,toCDPH'ssatisfaction,anydamaged,lostorstolenstateequipmentand/orproperty.ContractorshallimmediatelyfileatheftreportwiththeappropriatepoliceagencyortheCaliforniaHighwayPatrolandContractorshallpromptlysubmitonecopyofthetheftreporttotheCDPHProgramContractManager.e.UnlessotherwisestipulatedbytheprogramfundingthisAgreement,equipmentand/orpropertypurchased/reimbursedwithagreementfundsorfurnishedbyCDPHunderthetermsofthisAgreement,shallonlybeusedforperformanceofthisAgreementoranotherCDPHagreement.f.Withinsixty(60)calendardayspriortotheterminationorendofthisAgreement,theContractorPage4of16 ExhibitDSpecialTermsandConditionsshallprovideafinalinventoryreportofequipmentand/orpropertytotheCDPHProgramContractManagerandshall,atthattime,queryCDPHastotherequirements,includingthemannerandmethod,ofreturningstateequipmentand/orpropertytoCDPH.Finaldispositionofequipmentand/orpropertyshallbeatCDPHexpenseandaccordingtoCDPHinstructions.Equipmentand/orpropertydispositioninstructionsshallbeissuedbyCDPHimmediatelyafterreceiptofthefinalinventoryreport.AttheterminationorconclusionofthisAgreement,CDPHmayatitsdiscretion,authorizethecontinueduseofstateequipmentand/orpropertyforperformanceofworkunderadifferentCDPHagreement.gMotorVehicles(Applicableonlyifmotorvehiclesarepurchased/reimbursedwithagreementfundsorfurnishedbyCDPHunderthisAgreement.)(1)Ifmotorvehiclesarepurchased/reimbursedorfurnishedbyCDPHunderthetermsofthisAgreement,withinthirty(30)calendardayspriortotheterminationorendofthisAgreement,theContractorshallreturnsuchvehiclestoCDPHandshalldeliverallnecessarydocumentsoftitleorregistrationtoenablethepropertransferofamarketabletitletoCDPH.(2)Ifmotorvehiclesarepurchased/reimbursedorfurnishedbyCDPHunderthetermsofthisAgreement,theStateofCaliforniashallbethelegalownerofsaidmotorvehiclesandtheContractorshallbetheregisteredownerTheContractorshallonlyusesaidvehiclesfortheperformanceunderthetermsofthisAgreement.(3)TheContractoragreethatalloperatorsofmotorvehicles,purchased/reimbursedorfurnishedbyCDPHunderthetermsofthisAgreement,shallholdavalidStateofCaliforniadriver'slicense.Intheeventthattenormorepassengersaretobetransportedinanyonevehicle,theoperatorshallalsoholdaStateofCaliforniaClassBdriver'slicense.(4)Ifanymotorvehicleispurchased/reimbursedorfurnishedbyCDPHunderthetermsofthisAgreement,theContractor,asapplicable,shallprovide,maintain,andcertifythat,ataminimum,thefollowingtypeandamountofautomobileliabilityinsuranceisineffectduringthetermofthisAgreementoranyextensionperiodduringwhichanyvehicleremainsintheContractor'spossession:AutomobileLiabilityInsurance(a)TheContractor,bysigningthisAgreement,herebycertifiesthatitpossessesorwillobtainautomobileliabilityinsuranceintheamountof$1,000,000peroccurrenceforbodilyinjuryandpropertydamagecombined.Saidinsurancemustbeobtainedandmadeeffectiveuponthedeliverydateofanymotorvehicle,purchased/reimbursedwithagreementfundsorfurnishedbyCDPHunderthetermsofthisAgreement,totheContractor.(b)TheContractorshall,assoonaspractical,furnishacopyofthecertificateofinsurancetotheCDPHProgramContractManager.ThecertificateofinsuranceshallidentifytheCDPHcontractoragreementnumberforwhichtheinsuranceapplies.(c)TheContractoragreethatbodilyinjuryandpropertydamageliabilityinsurance,asrequiredherein,shallremainineffectatalltimesduringthetermofthisAgreementoruntilsuchtimeasthemotorvehicleisreturnedtoCDPH.Page5of16 ExhibitDSpecialTermsandConditions(d)TheContractoragreetoprovide,atleastthirty(30)dayspriortotheexpirationdateofsaidinsurancecoverage,acopyofanewcertificateofinsuranceevidencingcontinuedcoverage,asindicatedherein,fornotlessthantheremainderofthetermofthisAgreement,thetermofanyextensionorcontinuationthereof,orforaperiodofnotlessthanone(1)year.(e)TheContractor,ifnotaself-insuredgovernmentand/orpublicentity,mustprovideevidence,thatanyrequiredcertificatesofinsurancecontainthefollowingprovisions:[1]Theinsurerwillnotcanceltheinsured'scoveragewithoutgivingthirty(30)calendardayspriorwrittennoticetotheState.[2]TheStateofCalifornia,itsofficers,agents,employees,andservantsareincludedasadditionalinsureds,butonlywithrespecttoworkperformedfortheStateunderthisAgreementandanyextensionorcontinuationofthisAgreement.[3]TheinsurancecarriershallnotifyCDPH,inwriting,oftheContractor'sfailuretopaypremiums;itscancellationofsuchpolicies;oranyothersubstantialchange,including,butnotlimitedto,thestatus,coverage,orscopeoftherequiredinsurance.Suchnoticesshallcontainareferencetoeachagreementnumberforwhichtheinsurancewasobtained.(f)TheContractorisherebyadvisedthatcopiesofcertificatesofinsurancemaybesubjecttoreviewandapprovalbytheDepartmentofGeneralServices(DGS),OfficeofRiskandInsuranceManagement.TheContractorshallbenotifiedbyCDPH,inwriting,ifthisprovisionisapplicabletothisAgreement.IfDGSapprovalofthecertificateofinsuranceisrequired,theContractoragreesthatnoworkorservicesshallbeperformedpriortoobtainingsaidapproval.(g)IntheeventtheContractorfailstokeepinsurancecoverage,asrequiredherein,ineffectatalltimesduringvehiclepossession,CDPHmay,inadditiontoanyotherremediesitmayhave,terminatethisAgreementupontheoccurrenceofsuchevent,3.SubcontractRequirements(Applicabletoagreementsunderwhichservicesaretobeperformedbysubcontractorsincludingindependentconsultants.)a.PriorwrittenauthorizationwillberequiredbeforetheContractorentersintoorisreimbursedforanysubcontractforservicesexceeding$5,000foranyartices,supplies,equipment,orservices.TheContractorshallobtainatleastthreecompetivequatationswhichshouldbesubmittedoradequatejustificationprovidedfortheabsenceofbidding.b.CDPHreservestherighttoapproveordisapprovetheselectionofsubcontractorsandwithadvancewrittennotice,requirethesubstitutionofsubcontractorsandrequiretheContractortoterminatesubcontractsenteredintoinsupportofthisAgreement.(1)UponreceiptofawrittennoticefromCDPHrequiringthesubstitutionand/orterminationofasubcontract,theContractorshalltakestepstoensurethecompletionofanyworkinprogressandselectareplacement,ifapplicable,within30calendardays,unlessalongerperiodisagreedtobyCDPH.Page6of16 ExhibitDSpecialTermsandConditionsc.Actualsubcontracts(i.e.,writtenagreementbetweentheContractorandasubcontractor)exceeding$5,000aresubjecttothepriorreviewandwrittenapprovalofCDPH.d.ContractorshallmaintainacopyofeachsubcontractenteredintoinsupportofthisAgreementandshall,uponrequestbyCDPH,makecopiesavailableforapproval,inspection,oraudit.e.CDPHassumesnoresponsibilityforthepaymentofsubcontractorsusedintheperformanceofthisAgreement.ContractoracceptssoleresponsibilityforthepaymentofsubcontractorsusedintheperformanceofthisAgreement.f.TheContractorisresponsibleforallperformancerequirementsunderthisAgreementeventhoughperformancemaybecarriedoutthroughasubcontract.g.TheContractorshallensurethatallsubcontractsforservicesincludeprovision(s)requiringcompliancewithapplicabletermsandconditionsspecifiedinthisAgreementandshallbethesubcontractor’ssolepointofcontactforallmattersrelatedtotheperformanceandpaymentduringthetermofthisAgreement.h.TheContractoragreestoincludethefollowingclause,relevanttorecordretention,inallsubcontractsforservices:"(SubcontractorName)agreestomaintainandpreserve,untilthreeyearsafterterminationof(AgreementNumber)andfinalpaymentfromCDPHtotheContractor,topermitCDPHoranydulyauthorizedrepresentative,tohaveaccessto,examineorauditanypertinentbooks,documents,papersandrecordsrelatedtothissubcontractandtoallowinterviewsofanyemployeeswhomightreasonablyhaveinformationrelatedtosuchrecords."4.IncomeRestrictionsUnlessotherwisestipulatedinthisAgreement,theContractoragreesthatanyrefunds,rebates,credits,orotheramounts(includinganyinterestthereon)accruingtoorreceivedbytheContractorunderthisAgreementshallbepaidbytheContractortoCDPH,totheextentthattheyareproperlyallocabletocostsforwhichtheContractorhasbeenreimbursedbyCDPHunderthisAgreement.5.SiteInspectionTheState,throughanyauthorizedrepresentatives,hastherightatallreasonabletimestoinspectorotherwiseevaluatetheworkperformedorbeingperformedhereunderincludingsubcontractsupportedactivitiesandthepremisesinwhichitisbeingperformed.IfanyinspectionorevaluationismadeofthepremisesoftheContractororSubcontractor,theContractorshallprovideandshallrequireSubcontractorstoprovideallreasonablefacilitiesandassistanceforthesafetyandconvenienceoftheauthorizedrepresentativesintheperformanceoftheirduties.Allinspectionsandevaluationsshallbeperformedinsuchamanneraswillnotundulydelaytheservicesperformed.6.IntellectualPropertyRightsa.OwnershipPage7of16 ExhibitDSpecialTermsandConditions(1)ExceptassetforthbelowandexceptwhereCDPHhasagreedinasignedwritingtoacceptalicense,CDPHshallbeandremain,withoutadditionalcompensation,thesoleownerofanyandallrights,titleandinterestinallIntellectualProperty,fromthemomentofcreation,whetherornotjointlyconceived,thataremade,conceived,derivedfrom,orreducedtopracticebyContractororCDPHandwhichresultdirectlyorindirectlyfromthisAgreement.NotwithstandingtheforegoingoranyotherlanguageinthisAgreement,ContractorandnotCDPGshallownIntellectualPropertyrelatingtoanyclinicallabtestorlabassaythatismade,conceived,derivedfromorrducedtopracticebycontractor,reqardlessofwhetheritresultsdirectly/indirectlyfromthisAgreement("ClinicalTestsorAssays")(2)ForthepurposesofthisAgreement,IntellectualPropertymeansrecognizedprotectablerightsandinterestsuchas:patents,(whetherornotissued)copyrights,trademarks,servicemarks,applicationsforanyoftheforegoing,inventions,tradesecrets,tradedress,logos,insignia,colorcombinations,slogans,moralrights,rightofpublicity,author’srights,contractandlicensingrights,works,maskworks,industrialdesignrights,rightsofpriority,knowhow,designflows,methodologies,devices,businessprocesses,developments,innovations,goodwillandallotherlegalrightsprotectingintangibleproprietaryinformationasmayexistnowand/orhereaftercomeintoexistence,andallrenewalsandextensions,regardlessofwhetherthoserightsariseunderthelawsoftheUnitedStates,oranyotherstate,countryorjurisdiction.(a)ForthepurposesofthedefinitionofIntellectualProperty,"works"meansallliteraryworks,writingsandprintedmatterincludingthemediumbywhichtheyarerecordedorreproduced,photographs,artwork,pictorialandgraphicrepresentationsandworksofasimilarnature,film,motionpictures,digitalimages,animationcells,andotheraudiovisualworksincludingpositivesandnegativesthereof,soundrecordings,tapes,educationalmaterials,interactivevideosandanyothermaterialsorproductscreated,produced,conceptualizedandfixedinatangiblemediumofexpression.Itincludespreliminaryandfinalproductsandanymaterialsandinformationdevelopedforthepurposesofproducingthosefinalproducts.Worksdoesnotincludearticlessubmittedtopeerrevieworreferencejournalsorindependentresearchprojects.(3)IntheperformanceofthisAgreement,ContractorwillexerciseandutilizecertainofitsIntellectualPropertyinexistencepriortotheeffectivedateofthisAgreement.Inaddition,underthisAgreement,ContractormayaccessandutilizecertainofCDPH'sIntellectualPropertyinexistencepriortotheeffectivedateofthisAgreement.Exceptasotherwisesetforthherein,ContractorshallnotuseanyofCDPH'sIntellectualPropertynowexistingorhereafterexistingforanypurposeswithoutthepriorwrittenpermissionofCDPH.Exceptasotherwisesetforthherein,neithertheContractornorCDPHshallgiveanyownershipinterestinorrightstoitsIntellectualPropertytotheotherParty.IfduringthetermofthisAgreement,Contractoraccessesanythird-partyIntellectualPropertythatislicensedtoCDPH,ContractoragreestoabidebyalllicenseandconfidentialityrestrictionsapplicabletoCDPHinthethird-party’slicenseagreement.(4)ContractoragreestocooperatewithCDPHinestablishingormaintainingCDPH'sexclusiverightsintheIntellectualProperty,andinassuringCDPH'ssolerightsagainstthirdpartieswithrespecttotheIntellectualProperty.IftheContractorentersintoanyagreementsorsubcontractswithotherpartiesinordertoperformthisAgreement,ContractorshallrequirethetermsoftheAgreement(s)toincludeallIntellectualPropertyprovisions.Suchtermsmustinclude,butarenotlimitedto,thesubcontractorassigningandagreeingtoassigntoCDPHallrights,titleandinterestinIntellectualPropertyotherthanClinicalTestsorLabeAssaysmade,conceived,derivedfrom,orreducedtopracticebythesubcontractor,Page8of16 ExhibitDSpecialTermsandConditionsContractororCDPHandwhichresultdirectlyorindirectlyfromthisAgreementoranysubcontract.(5)ContractorfurtheragreestoassistandcooperatewithCDPHinallreasonablerespects,andexecutealldocumentsand,subjecttoreasonableavailability,givetestimonyandtakeallfurtheractsreasonablynecessarytoacquire,transfer,maintain,andenforceCDPH’sIntellectualPropertyrightsandinterests.b.RetainedRights/LicenseRights(1)ContractorshallretaintitletoallofitsIntellectualPropertytotheextentsuchIntellectualPropertyisinexistencepriortotheeffectivedateofthisAgreement.(2)Nothinginthisprovisionshallrestrict,limit,orotherwisepreventContractorfromusinganyideas,concepts,know-how,methodologyortechniquesrelatedtoitsperformanceunderthisAgreement,providedthatContractor'susedoesnotinfringethepatent,copyright,trademarkrights,licenseorotherIntellectualPropertyrightsofCDPHorthirdparty,orresultinabreachordefaultofanyprovisionsofthisExhibitorresultinabreachofanyprovisionsoflawrelatingtoconfidentiality.c.Copyright(1)Contractoragreesthatforpurposesofcopyrightlaw,allworks[asdefinedinParagrapha,subparagraph(2)(a)ofthisprovision]ofauthorshipmadebyoronbehalfofContractorinconnectionwithContractor'sperformanceofthisAgreementshallbedeemed“worksmadeforhire".ContractorfurtheragreesthattheworkofeachpersonutilizedbyContractorinconnectionwiththeperformanceofthisAgreementwillbea“workmadeforhire,”whetherthatpersonisanemployeeofContractororthatpersonhasenteredintoanagreementwithContractortoperformthework.Contractorshallenterintoawrittenagreementwithanysuchpersonthat:(i)allworkperformedforContractorshallbedeemeda“workmadeforhire"undertheCopyrightActand(ii)thatpersonshallassignallright,title,andinteresttoCDPHtoanyworkproductmade,conceived,derivedfrom,orreducedtopracticebyContractororCDPHandwhichresultdirectlyorindirectlyfromthisAgreement.(2)Allmaterials,including,butnotlimitedto,visualworksortext,reproducedordistributedpursuanttothisAgreementthatincludeIntellectualPropertymade,conceived,derivedfrom,orreducedtopracticebyContractororCDPHandwhichresultdirectlyorindirectlyfromthisAgreement,shallincludeCDPH’snoticeofcopyright,whichshallreadin3mmorlargertypeface:“©[EnterCurrentYeare.g.,2014,etc.],DepartmentofPublicHealth.ThismaterialmaynotbereproducedordisseminatedwithoutpriorwrittenpermissionfromtheDepartmentofPublicHealth.”Thisnoticeshouldbeplacedprominentlyonthematerialsandsetapartfromothermatteronthepagewhereitappears.Audioproductionsshallcontainasimilaraudionoticeofcopyright.d.Third-PartyIntellectualPropertyExceptasprovidedherein,ContractoragreesthatitsperformanceofthisAgreementshallnotbedependentuponorincludeanyIntellectualPropertyofContractororthirdpartywithoutfirst:(i)obtainingCDPH'spriorwrittenapproval;and(ii)grantingtoorobtainingforCDPH,withoutadditionalcompensation,alicense,asdescribedinSectionbofthisprovision,foranyofContractor'sorthird-party'sIntellectualPropertyinexistencepriortotheeffectivedateofthisAgreement.Ifsuchalicenseuponthethesetermsisunattainable,andCDPHdeterminesthatPage9of16 ExhibitDSpecialTermsandConditionstheIntellectualPropertyshouldbeincludedinorisrequiredforContractor’sperformanceofthisAgreement,ContractorshallobtainalicenseundertermsacceptabletoCDPH.e.Warranties(1)Contractorrepresentsandwarrantsthat:(a)ItisfreetoenterintoandfullyperformthisAgreement.(b)IthassecuredandwillsecureallrightsandlicensesnecessaryforitsperformanceofthisAgreement.(c)NeitherContractor’sperformanceofthisAgreement,northeexercisebyeitherPartyoftherightsgrantedinthisAgreement,noranyuse,reproduction,manufacture,sale,offertosell,import,export,modification,publicandprivatedisplay/performance,distribution,anddispositionoftheIntellectualPropertymade,conceived,derivedfrom,orreducedtopracticebyContractororCDPHandwhichresultdirectlyorindirectlyfromthisAgreementwillinfringeuponorviolateanyIntellectualPropertyright,non-disclosureobligation,orotherproprietaryrightorinterestofanythird-partyorentitynowexistingunderthelawsof,orhereafterexistingorissuedby,anystate,theUnitedStates,oranyforeigncountry.ThereiscurrentlynoactualorthreatenedclaimbyanysuchthirdpartybasedonanallegedviolationofanysuchrightbyContractor.(d)NeitherContractor'sperformancenoranypartofitsperformancewillviolatetherightofprivacyof,orconstitutealibelorslanderagainstanypersonorentity.(e)IthassecuredandwillsecureallrightsandlicensesnecessaryforIntellectualPropertyincluding,butnotlimitedto,consents,waiversorreleasesfromallauthorsofmusicorperformancesused,andtalent(radio,televisionandmotionpicturetalent),ownersofanyinterestinandtorealestate,sites,locations,propertyorpropsthatmaybeusedorshown.(f)Ithasnotgrantedandshallnotgranttoanypersonorentityanyrightthatwouldormightderogate,encumber,orinterferewithanyoftherightsgrantedtoCDPHinthisAgreement.(g)IthasappropriatesystemsandcontrolsinplacetoensurethatstatefundswillnotbeusedintheperformanceofthisAgreementfortheacquisition,operationormaintenanceofcomputersoftwareinviolationofcopyrightlaws.(h)Ithasnoknowledgeofanyoutstandingclaims,licensesorothercharges,liens,orencumbrancesofanykindornaturewhatsoeverthatcouldaffectinanywayContractor'sperformanceofthisAgreement.(2)CDPHMAKESNOWARRANTYTHATTHEINTELLECTUALPROPERTYRESULTINGFROMTHISAGREEMENTDOESNOTINFRINGEUPONANYPATENT,TRADEMARK,COPYRIGHTORTHELIKE,NOWEXISTINGORSUBSEQUENTLYISSUED.f.IntellectualPropertyIndemnity(1)Contractorshallindemnify,defendandholdharmlessCDPHanditslicenseesandassignees,anditsofficers,directors,employees,agents,representatives,successors,andPage10of16 ExhibitDSpecialTermsandConditionsusersofitsproducts,("Indemnitees")fromandagainstallclaims,actions,damages,losses,liabilities(oractionsorproceedingswithrespecttoanythereof),whetherornotrightful,arisingfromanyandallactionsorclaimsbyanythirdpartyorexpensesrelatedthereto(including,butnotlimitedto,alllegalexpenses,courtcosts,andattorney’sfeesincurredininvestigating,preparing,servingasawitnessin,ordefendingagainst,anysuchclaim,action,orproceeding,commencedorthreatened)towhichanyoftheIndemniteesmaybesubject,whetherornotContractorisapartytoanypendingorthreatenedlitigation,whichariseoutoforarerelatedto(i)theincorrectnessorbreachofanyoftherepresentations,warranties,covenantsoragreementsofContractorpertainingtoIntellectualProperty;or(ii)anyIntellectualPropertyinfringement,oranyothertypeofactualorallegedinfringementclaim,arisingoutofCDPH’suse,reproduction,manufacture,sale,offertosell,distribution,import,export,modification,publicandprivateperformance/display,license,anddispositionoftheIntellectualPropertymade,conceived,derivedfrom,orreducedtopracticebyContractororCDPHandwhichresultdirectlyorindirectlyfromthisAgreement.Thisindemnityobligationshallapplyirrespectiveofwhethertheinfringementclaimisbasedonapatent,trademarkorcopyrightregistrationthatissuedaftertheeffectivedateofthisAgreement.CDPHreservestherighttoparticipateinand/orcontrol,atContractor’sexpense,anysuchinfringementactionbroughtagainstCDPH.(2)ShouldanyIntellectualPropertylicensedbytheContractortoCDPHunderthisAgreementbecomethesubjectofanIntellectualPropertyinfringementclaim,ContractorwillexerciseitsauthorityreasonablyandingoodfaithtopreserveCDPH’srighttousethelicensedIntellectualPropertyinaccordancewiththisAgreementatnoexpensetoCDPH.CDPHshallhavetherighttomonitorandappearthroughitsowncounsel(atContractor'sexpense)inanysuchclaimoraction.Inthedefenseorsettlementoftheclaim,ContractormayobtaintherightforCDPHtocontinueusingthelicensedIntellectualProperty;or,replaceormodifythelicensedIntellectualPropertysothatthereplacedormodifiedIntellectualPropertybecomesnon-infringingprovidedthatsuchreplacementormodificationisfunctionallyequivalenttotheoriginallicensedIntellectualProperty.Ifsuchremediesarenotreasonablyavailable,CDPHshallbeentitledtoarefundofallmoniespaidunderthisAgreement,withoutrestrictionorlimitationofanyotherrightsandremediesavailableatlaworinequity.(3)ContractoragreesthatdamagesalonewouldbeinadequatetocompensateCDPHforbreachofanytermofthisIntellectualPropertyExhibitbyContractor.ContractoracknowledgesCDPHwouldsufferirreparableharmintheeventofsuchbreachandagreesCDPHshallbeentitledtoobtainequitablerelief,includingwithoutlimitationaninjunction,fromacourtofcompetentjurisdiction,withoutrestrictionorlimitationofanyotherrightsandremediesavailableatlaworinequity.g.SurvivalTheprovisionssetforthhereinshallsurviveanyterminationorexpirationofthisAgreementoranyprojectschedule.7.PriorApprovalofTrainingSeminars,WorkshopsorConferencesContractorshallobtainpriorCDPHapprovalofthelocation,costs,dates,agenda,instructors,instructionalmaterials,andattendeesatanyreimbursabletrainingseminar,workshop,orconferenceconductedpursuanttothisAgreementandofanyreimbursablepublicityoreducationalmaterialstobemadeavailablefordistribution.TheContractorshallacknowledgethesupportoftheStatewheneverpublicizingtheworkunderthisAgreementinanymedia.ThisprovisiondoesPage11of16 ExhibitDSpecialTermsandConditionsnotapplytonecessarystaffmeetingsortrainingsessionsheldforthestaffoftheContractorinordertoconductroutinebusinessmatters.8.ConfidentialityofInformationTheContractoranditsemployees,agents,orsubcontractorsshall:a.ProtectfromunauthorizeddisclosurenamesandotheridentifyinginformationconcerningpersonseitherreceivingservicespursuanttothisAgreementorpersonswhosenamesoridentifyinginformationbecomeavailableoraredisclosedtotheContractor,itsemployees,agents,orsubcontractorsasaresultofservicesperformedunderthisAgreement,exceptforstatisticalinformationnotidentifyinganysuchperson.b.NotusesuchidentifyinginformationforanypurposeotherthancarryingouttheContractor'sobligationsunderthisAgreement.c.PromptlytransmittotheCDPHContractManagerallrequestsfordisclosureofsuchidentifyinginformationnotemanatingfromtheclientorperson.d.Notdisclose,exceptasotherwisespecificallypermittedbythisAgreementorauthorizedbytheclient,anysuchidentifyinginformationtoanyoneotherthanCDPHwithoutpriorwrittenauthorizationfromtheCDPHContractManager,exceptifdisclosureisrequiredbyStateorFederallaw.e.Forpurposesofthisprovision,identityshallinclude,butnotbelimitedtoname,identifyingnumber,symbol,orotheridentifyingparticularassignedtotheindividual,suchasfingerorvoiceprintoraphotograph.f.AsdeemedapplicablebyCDPH,thisprovisionmaybesupplementedbyadditionaltermsandconditionscoveringpersonalhealthinformation(PHI)orpersonal,sensitive,and/orconfidentialinformation(PSCI).SaidtermsandconditionswillbeoutlinedinoneormoreexhibitsthatwilleitherbeattachedtothisAgreementorincorporatedintothisAgreementbyreference.9.Documents,PublicationsandWrittenReports(Applicabletoagreementsover$5,000underwhichpublications,writtenreportsanddocumentsaredevelopedorproduced.GovernmentCodeSection7550.)Anydocument,publicationorwrittenreport(excludingprogressreports,financialreportsandnormalcontractualcommunications)preparedasarequirementofthisAgreementshallcontain,inaseparatesectionprecedingthemainbodyofthedocument,thenumberanddollaramountsofallcontractsoragreementsandsubcontractsrelatingtothepreparationofsuchdocumentorreport,ifthetotalcostforworkbynonemployeesoftheStateexceeds$5,000.10.DisputeResolutionProcessa.AContractorgrievanceexistswheneverthereisadisputearisingfromCDPH’sactionintheadministrationofanagreement.IfthereisadisputeorgrievancebetweentheContractorandCDPH,theContractormustseekresolutionusingtheprocedureoutlinedbelow.Page12of16 ExhibitDSpecialTermsandConditions(1)TheContractorshouldfirstinformallydiscusstheproblemwiththeCDPHProgramContractManager.Iftheproblemcannotberesolvedinformally,theContractorshalldirectitsgrievancetogetherwithanyevidence,inwriting,totheprogramBranchChief.Thegrievanceshallstatetheissuesindispute,thelegalauthorityorotherbasisfortheContractor'spositionandtheremedysought.TheBranchChiefshallrenderadecisionwithinten(10)workingdaysafterreceiptofthewrittengrievancefromtheContractor.TheBranchChiefshallrespondinwritingtotheContractorindicatingthedecisionandreasonstherefore.IftheContractordisagreeswiththeBranchChief’sdecision,theContractormayappealtothesecondlevel.(2)Whenappealingtothesecondlevel,theContractormustprepareanappealindicatingthereasonsfordisagreementwithBranchChief'sdecision.TheContractorshallincludewiththeappealacopyoftheContractor'soriginalstatementofdisputealongwithanysupportingevidenceandacopyoftheBranchChief’sdecision.TheappealshallbeaddressedtotheDeputyDirectorofthedivisioninwhichthebranchisorganizedwithinten(10)workingdaysfromreceiptoftheBranchChief'sdecision.TheDeputyDirectorofthedivisioninwhichthebranchisorganizedorhis/herdesigneeshallmeetwiththeContractortoreviewtheissuesraised.AwrittendecisionsignedbytheDeputyDirectorofthedivisioninwhichthebranchisorganizedorhis/herdesigneeshallbedirectedtotheContractorwithintwenty(20)workingdaysofreceiptoftheContractor'ssecondlevelappeal.b.IftheContractorwishestoappealthedecisionoftheDeputyDirectorofthedivisioninwhichthebranchisorganizedorhis/herdesignee,theContractorshallfollowtheproceduressetforthinDivision25.1(commencingwithSection38050)oftheHealthandSafetyCodeandtheregulationsadoptedthereunder.(Title1,Division2,Chapter2,Article3(commencingwithSection1140)oftheCaliforniaCodeofRegulations).c.Disputesarisingoutofanaudit,examinationofanagreementorotheractionnotcoveredbysubdivision(a)ofSection20204,ofChapter2.1,Title22,oftheCaliforniaCodeofRegulations,andforwhichnoproceduresforappealareprovidedinstatute,regulationortheAgreement,shallbehandledinaccordancewiththeproceduresidentifiedinSections51016through51047,Title22,CaliforniaCodeofRegulations.d.UnlessotherwisestipulatedinwritingbyCDPH,alldispute,grievanceand/orappealcorrespondenceshallbedirectedtotheCDPHContractManager.e.ThereareorganizationaldifferenceswithinCDPH'sfundingprogramsandthemanagementlevelsidentifiedinthisdisputeresolutionprovisionmaynotapplyineverycontractualsituation.Whenagrievanceisreceivedandorganizationaldifferencesexist,theContractorshallbenotifiedinwritingbytheCDPHContractManagerofthelevel,name,and/ortitleoftheappropriatemanagementofficialthatisresponsibleforissuingadecisionatagivenlevel.11.OfficialsNottoBenefitNomembersofordelegateofCongressortheStateLegislatureshallbeadmittedtoanyshareorpartofthisAgreement,ortoanybenefitthatmayarisetherefrom.ThisprovisionshallnotbeconstruedtoextendtothisAgreementifmadewithacorporationforitsgeneralbenefits.12.ProhibitedUseofStateFundsforSoftwarePage13of16 ExhibitDSpecialTermsandConditionsContractorcertifiesthatithasappropriatesystemsandcontrolsinplacetoensurethatstatefundswillnotbeusedintheperformanceofthisAgreementfortheacquisition,operationormaintenanceofcomputersoftwareinviolationofcopyrightlaws.13.ContractUniformity(FringeBenefitAllowability)(Applicableonlytononprofitorganizations.)PursuanttotheprovisionsofArticle7(commencingwithSection100525)ofChapter3ofPart1ofDivision101oftheHealthandSafetyCode,CDPHsetsforththefollowingpolicies,procedures,andguidelinesregardingthereimbursementoffringebenefits.a.Asusedhereinfringebenefitsshallmeananemploymentbenefitgivenbyone’semployertoanemployeeinadditiontoone’sregularornormalwagesorsalary.b.Asusedherein,fringebenefitsdonotinclude:(1)CompensationforpersonalservicespaidcurrentlyoraccruedbytheContractorforservicesofemployeesrenderedduringthetermofthisAgreement,whichisidentifiedasregularornormalsalariesandwages,annualleave,vacation,sickleave,holidays,jurydutyand/ormilitaryleave/training.(2)Director'sandexecutivecommitteemember’sfees.(3)Incentiveawardsand/orbonusincentivepay.(4)Allowancesforoff-sitepay.(5)Locationallowances.(6)Hardshippay.(7)Cost-of-livingdifferentialsc.Specificallowablefringebenefitsinclude:(1)Fringebenefitsintheformofemployercontributionsfortheemployer'sportionofpayrolltaxes(i.e.,FICA,SUI,SDI),employeehealthplans(i.e.,health,dentalandvision),unemploymentinsurance,worker'scompensationinsurance,andtheemployer'sshareofpension/retirementplans,providedtheyaregrantedinaccordancewithestablishedwrittenorganizationpoliciesandmeetalllegalandInternalRevenueServicerequirements.d.Tobeanallowablefringebenefit,thecostmustmeetthefollowingcriteria:(1)BenecessaryandreasonablefortheperformanceoftheAgreement.(2)Bedeterminedinaccordancewithgenerallyacceptedaccountingprinciples.(3)BeconsistentwithpoliciesthatapplyuniformlytoallactivitiesoftheContractor.e.Contractoragreesthatallfringebenefitsshallbeatactualcost.f.Earned/AccruedCompensation(1)Compensationforvacation,sickleaveandholidaysislimitedtothatamountearned/accruedwithintheagreementterm.Unusedvacation,sickleaveandholidaysearnedfromperiodspriortotheagreementtermcannotbeclaimedasallowablecosts.Seesectionf(3)(a)belowforanexample.Page14of16 ExhibitDSpecialTermsandConditions(2)Formultipleyearagreements,vacationandsickleavecompensation,whichisearned/accruedbutnotpaid,duetoemployee(s)nottakingtimeoffmaybecarriedoverandclaimedwithintheoveralltermofthemultipleyearsoftheAgreement.Holidayscannotbecarriedoverfromoneagreementyeartothenext.SeeProvisionf(3)(b)foranexample.(3)Forsingleyearagreements,vacation,sickleaveandholidaycompensationthatisearned/accruedbutnotpaid,duetoemployee(s)nottakingtimeoffwithinthetermoftheAgreement,cannotbeclaimedasanallowablecost.SeeProvisionf(3)(c)foranexample.(a)ExampleNo.1:Ifanemployee,JohnDoe,earns/accruesthreeweeksofvacationandtwelvedaysofsickleaveeachyear,thenthatisthemaximumamountthatmaybeclaimedduringaoneyearagreement.IfJohnDoehasfiveweeksofvacationandeighteendaysofsickleaveatthebeginningofanagreement,theContractorduringaone-yearbudgetperiodmayonlyclaimuptothreeweeksofvacationandtwelvedaysofsickleaveasactuallyusedbytheemployee.Amountsearned/accruedinperiodspriortothebeginningoftheAgreementarenotanallowablecost.(b)ExampleNo.2:Ifduringathree-year(multipleyear)agreement,JohnDoedoesnotusehisthreeweeksofvacationinyearone,orhisthreeweeksinyeartwo,buthedoesactuallyusenineweeksinyearthree;theContractorwouldbeallowedtoclaimallnineweekspaidforinyearthree.Thetotalcompensationoverthethree-yearperiodcannotexceed156weeks(3x52weeks).(c)ExampleNo.3:Ifduringasingleyearagreement,JohnDoeworksfiftyweeksandusedoneweekofvacationandoneweekofsickleaveandallfifty-twoweekshavebeenbilledtoCDPH,theremainingunusedtwoweeksofvacationandsevendaysofsickleavemaynotbeclaimedasanallowablecost.14.CancellationA.ThisagreementmaybecancelledbyCDPHwithoutcauseupon30calendardaysadvancewrittennoticetotheContractor.B.CDPHreservestherighttocancelorterminatethisagreementimmediatelyforcause.TheContractormaysubmitawrittenrequesttoterminatethisagreementonlyifCDPHsubstantiallyfailstoperformitsresponsibilitiesasprovidedherein.C.Theterm“forcause”shallmeanthattheContractorfailstomeettheterms,conditions,and/orresponsibilitiesofthisagreement.D.AgreementterminationorcancellationshallbeeffectiveasofthedateindicatedinCDPH’snotificationtotheContractor.Thenoticeshallstipulateanyfinalperformance,invoicingorpaymentrequirements.Page15of16 ExhibitDSpecialTermsandConditionsE.Uponreceiptofanoticeofterminationorcancellation,theContractorshalltakeimmediatestepstostopperformanceandtocancelorreducesubsequentagreementcosts.F.Intheeventofearlycancellationortermination,theContractorshallbeentitledtocompensationforservicesperformedsatisfactorilyunderthisagreementandexpensesincurreduptothedateofcancellationandanynon-cancelableobligationsincurredinsupportofthisagreement.Page16of16 CountyofFresno16-10769Page1of2ExhibitEAdditionalProvisions1.InsuranceRequirementsA.GeneralProvisionsApplyingtoAllPolicies1)CoverageTerm-CoverageneedstobeinforceforthecompletetermoftheAgreement.IfinsuranceexpiresduringthetermoftheAgreement,anewcertificateandrequiredendorsementsmustbereceivedbytheStateatleastten(10)dayspriortotheexpirationofthisinsurance.AnynewinsurancemustcomplywiththeoriginalAgreementterms.2)PolicyCancellationorTerminationandNoticeofNon-Renewal-ContractorshallprovidetotheCDPHwithinfive(5)businessdaysfollowingreceiptbyContractoracopyofanycancellationornon-renewalofinsurancerequiredbythisContract.IntheeventContractorfailstokeepineffectatalltimesthespecifiedinsurancecoverage,theCDPHmay,inadditiontoanyotherremediesitmayhave,terminatethisContractupontheoccurrenceofsuchevent,subjecttotheprovisionsofthisContract.3)Premiums,AssessmentsandDeductibles-Contractorisresponsibleforanypremiums,policyassessments,deductiblesorself-insuredretentionscontainedwithintheirinsuranceprogram.4)PrimaryClause-AnyrequiredinsurancecontainedinthisAgreementshallbeprimaryandnotexcessorcontributorytoanyotherinsurancecarriedbytheCDPH.5)InsuranceCarrierRequiredRating-AllinsurancecompaniesmustcarryanAMBestratingofatleast“A-"withafinancialcategoryratingofnolowerthanVI.IfContractorisself-insuredforaportionorallofitsinsurance,reviewoffinancialinformationincludingaletterofcreditmayberequired.6)Endorsements-AnyrequiredendorsementsrequestedbytheCDPHmustbephysicallyattachedtoallrequestedcertificatesofinsuranceandnotsubstitutedbyreferringtosuchcoverageonthecertificateofinsurance.7)InadequateInsurance-InadequateorlackofinsurancedoesnotnegateContractor'sobligationsundertheAgreement.8)UseofSubcontractors-InthecaseofContractor’sutilizationofSubcontractorstocompletethecontractedscopeofwork,ContractorshallincludeallSubcontractorsasinsuredunderContractor'sinsuranceorsupplyevidenceoftheSubcontractor'sinsurancetotheCDPHequaltopolicies,coverages,andlimitsrequiredofContractor.B.InsuranceCoverageRequirementsContractorshalldisplayevidenceofcertificateofinsuranceevidencingthefollowingcoverage:1)CommercialGeneralLiability-Contractorshallmaintaingeneralliabilitywithlimitsnotlessthan$1,000,000peroccurrenceforbodilyinjuryandpropertydamagecombinedwitha$2,000,000annualpolicyaggregate.Thepolicyshallincludecoverageforliabilitiesarisingoutofpremises,operations,independentContractors,products,completedoperations,personalandadvertisinginjury,andliabilityassumedunderaninsuredAgreement.ThisinsuranceshallapplyseparatelytoeachinsuredagainstwhomclaimismadeorsuitisbroughtsubjecttoContractor'slimitofliability. CountyofFresno16-10769Page2of2ExhibitEAdditionalProvisionsThepolicyshallbeendorsedtoinclude,"TheStateofCalifornia,itsofficers,agents,employees,andservantsasadditionalinsured,butonlyinsofarastheoperationsunderthisAgreementareconcerned."ThisendorsementmustbesuppliedunderformacceptabletotheOfficeofRiskandInsuranceManagement.2)AutomobileLiability(whenrequired)-Contractorshallmaintainmotorvehicleliabilityinsurancewithlimitsnotlessthan$1,000,000combinedsinglelimitperaccident.Suchinsuranceshallcoverliabilityarisingoutofamotorvehicleincludingowned,hiredandnon-ownedmotorvehicles.ShouldthescopeoftheAgreementinvolvetransportationofhazardousmaterials,evidenceofanMCS-90endorsementisrequired.Thepolicyshallbeendorsedtoinclude,“TheStateofCalifornia,itsofficers,agents,employees,andservantsasadditionalinsured,butonlyinsofarastheoperationsunderthisAgreementareconcerned.”ThisendorsementmustbesuppliedunderformacceptabletotheOfficeofRiskandInsuranceManagement.3)Worker'sCompensationandEmployer’sLiability(whenrequired)-Contractorshallmaintainstatutoryworker'scompensationandemployer’sliabilitycoverageforallitsemployeeswhowillbeengagedintheperformanceoftheAgreement.Employer'sliabilitylimitsof$1,000,000arerequired.WhenworkisperformedonStateownedorcontrolledpropertythepolicyshallcontainawaiverofsubrogationendorsementinfavoroftheState.ThisendorsementmustbesuppliedunderformacceptabletotheOfficeofRiskandInsuranceManagement.4)ProfessionalLiability(whenrequired)-Contractorshallmaintainprofessionalliabilitycoveringanydamagescausedbyanegligenterror;actoromissionwithlimitsnotlessthan$1,000,000peroccurrenceand$1,000,000policyaggregate.Thepolicy'sretroactivedatemustbedisplayedonthecertificateofinsuranceandmustbebeforethedatethisAgreementwasexecutedorbeforethebeginningofAgreementwork.5)Environmental/PollutionLiability(whenrequired)-Contractorshallmaintainpollutionliabilityforlimitsnotlessthan$1,000,000perclaimcoveringContractor'sliabilityforbodilyinjury,propertydamageandenvironmentaldamageresultingfrompollutionandrelatedcleanupcostsincurredarisingoutoftheworkorservicestobeperformedunderthisAgreement.Coverageshallbeprovidedforbothworkperformedonsiteaswellastransportationandproperdisposalofhazardousmaterials.Thepolicyshallbeendorsedtoinclude,"TheStateofCalifornia,itsofficers,agents,employees,andservantsasadditionalinsured,butonlyinsofarastheoperationsunderthisAgreementareconcerned."ThisendorsementmustbesuppliedunderformacceptabletotheOfficeofRiskandInsuranceManagement.6)AircraftLiability(whenrequired)-Contractorshallmaintainaircraftliabilitywithalimitnotlessthan$3,000,000.Thepolicyshallbeendorsedtoinclude,“TheStateofCalifornia,itsofficers,agents,employeesandservantsasadditionalinsured,butonlyinsofarastheoperationsunderthisAgreement."ThisendorsementmustbesuppliedunderformacceptabletotheOfficeofRiskandInsuranceManagement. |CountyofFresno16-10769Page1of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|ThisInformationPrivacyandSecurityRequirementsExhibit(ForNon-HIPAA/FIITECHActContracts)(hereinafterreferredtoas"thisExhibit”)setsforththeinformationprivacyandsecurityrequirementsContractorisobligatedtofollowwithrespecttoallpersonalandconfidentialinformation(asdefinedherein)disclosedtoContractor,orcollected,created,maintained,stored,transmittedorusedbyContractorfororonbehalfoftheCaliforniaDepartmentofPublicHealth(hereinafter“CDPH"),pursuanttoContractor’sagreementwithCDPH.(Suchpersonalandconfidentialinformationisreferredtohereincollectivelyas“CDPHPCI”.)CDPHandContractordesiretoprotecttheprivacyandprovideforthesecurityofCDPHPCIpursuanttothisExhibitandincompliancewithstateandfederallawsapplicabletotheCDPHPCI.I.OrderofPrecedence:WithrespecttoinformationprivacyandsecurityrequirementsforallCDPHPCI,thetermsandconditionsofthisExhibitshalltakeprecedenceoveranyconflictingtermsorconditionssetforthinanyotherpartoftheagreementbetweenContractorandCDPH,includingExhibitA(ScopeofWork),allotherexhibitsandanyotherattachments,andshallprevailoveranysuchconflictingtermsorconditions.II.Effectonlowertiertransactions:ThetermsofthisExhibitshallapplytoallcontracts,subcontracts,andsubawards,andtheinformationprivacyandsecurityrequirementsContractorisobligatedtofollowwithrespecttoCDPHPCIdisclosedtoContractor,orcollected,created,maintained,stored,transmittedorusedbyContractorfororonbehalfofCDPH,pursuanttoContractor’sagreementwithCDPH.WhenapplicabletheContractorshallincorporatetherelevantprovisionsofthisExhibitintoeachsubcontractorsubawardtoitsagents,subcontractors,orindependentconsultants.III.Definitions:ForpurposesoftheagreementbetweenContractorandCDPH,includingthisExhibit,thefollowingdefinitionsshallapply:A.Breach:"Breach”means:1.theunauthorizedacquisition,access,use,ordisclosureofCDPHPCIinamannerwhichcompromisesthesecurity,confidentialityorintegrityoftheinformation;or2.thesameasthedefinitionof"breachofthesecurityofthesystem"setforthinCaliforniaCivilCodesection1798.29(f).B.ConfidentialInformation:“Confidentialinformation”meansinformationthat:1.doesnotmeetthedefinitionof"publicrecords”setforthinCaliforniaGovernmentCodesection6252(e),orisexemptfromdisclosureunderanyoftheprovisionsofSection6250,etseq.oftheCaliforniaGovernmentCodeoranyotherapplicablestateorfederallaws;or2.iscontainedindocuments,files,folders,booksorrecordsthatareclearlylabeled,markedordesignatedwiththeword“confidential”byCDPH.C.Disclosure:“Disclosure”meanstherelease,transfer,provisionof,accessto,ordivulginginanymannerofinformationoutsidetheentityholdingtheinformation.CDPHIPSR(6-16) (CountyofFresno16-10769Page2of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|D.P£l:“PCI"means“personalinformation”and“confidentialinformation"(asthesetermsaredefinedherein:E.PersonalInformation:“Personalinformation”meansinformation,inanymedium(paper,electronic,oral)that:1.directlyorindirectlycollectivelyidentifiesoruniquelydescribesanindividual;or2.couldbeusedincombinationwithotherinformationtoindirectlyidentifyoruniquelydescribeanindividual,orlinkanindividualtotheotherinformation;or3.meetsthedefinitionof"personalinformation"setforthinCaliforniaCivilCodesection1798.3,subdivision(a)or4.isoneofthedataelementssetforthinCaliforniaCivilCodesection1798.29,subdivision(g)(1)or(g)(2);or5.meetsthedefinitionof"medicalinformation”setforthineitherCaliforniaCivilCodesection1798.29,subdivision(h)(2)orCaliforniaCivilCodesection56.05,subdivision(j);or6.meetsthedefinitionof"healthinsuranceinformation"setforthinCaliforniaCivilCodesection1798.29,subdivision(h)(3);or7.isprotectedfromdisclosureunderapplicablestateorfederallaw.F.SecurityIncident:"SecurityIncident”means:1.anattemptedbreach;or2.theattemptedorsuccessfulunauthorizedaccessordisclosure,modificationordestructionofCDPHPCI,inviolationofanystateorfederallaworinamannernotpermittedundertheagreementbetweenContractorandCDPH,includingthisExhibit;or3.theattemptedorsuccessfulmodificationordestructionof,orinterferencewith,Contractor'ssystemoperationsinaninformationtechnologysystem,thatnegativelyimpactstheconfidentiality,availabilityorintegrityofCDPHPCI;or4.anyeventthatisreasonablybelievedtohavecompromisedtheconfidentiality,integrity,oravailabilityofaninformationasset,system,process,datastorage,ortransmission.Furthermore,aninformationsecurityincidentmayalsoincludeaneventthatconstitutesaviolationorimminentthreatofviolationofinformationsecuritypoliciesorprocedures,includingacceptableusepolicies.G.Use:“Use”meansthesharing,employment,application,utilization,examination,oranalysisofinformation.IV.DisclosureRestrictions:TheContractoranditsemployees,agents,andsubcontractorsshallprotectfromunauthorizeddisclosureanyCDPHPCI.TheContractorshallnotdisclose,exceptasotherwisespecificallypermittedbytheagreementbetweenContractorandCDPH(includingthisExhibit),anyCDPHIPSR(6-16) |CountyofFresno16-10769Page3of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|CDPHPCItoanyoneotherthanCDPHpersonnelorprogramswithoutpriorwrittenauthorizationfromtheCDPHProgramContractManager,exceptifdisclosureisrequiredbyStateorFederallaw.V.UseRestrictions:TheContractoranditsemployees,agents,andsubcontractorsshallnotuseanyCDPHPCIforanypurposeotherthanperformingtheContractor'sobligationsunderitsagreementwithCDPH.VI.Safeguards:TheContractorshallimplementadministrative,physical,andtechnicalsafeguardsthatreasonablyandappropriatelyprotecttheprivacy,confidentiality,security,integrity,andavailabilityofCDPHPCI,includingelectronicorcomputerizedCDPHPCI.AteachlocationwherCDPHPCIexistsunderContractor’scontrol,theContractorshalldevelopandmaintainawritteninformationprivacyandsecurityprogramthatincludesadministrative,technicalandphysicalsafeguardsappropriatetothesizeandcomplexityoftheContractor’soperationsandthenatureandscopeofitsactivitiesinperformingitsagreementwithCDPH,includingthisExhibit,andwhichincorporatestherequirementsofSectionVII,Security,below.ContractorshallprovideCDPHwithContractor’scurrentandupdatedpolicieswithinfive(5)businessdaysofarequestbyCDPHforthepolicies.VII.Security:TheContractorshalltakeanyandallstepsreasonablynecessarytoensurethecontinuoussecurityofallcomputerizeddatasystemscontainingCDPHPCI.Thesestepsshallinclude,ataminimum,complyingwithallofthedatasystemsecurityprecautionslistedintheContractorDataSecurityStandardssetforthinAttachment1tothisExhibit.VIII.SecurityOfficer:AteachplacewhereCDPHPCIislocated,,theContractorshalldesignateaSecurityOfficertooverseeitscompliancewiththisExhibitandtocommunicatewithCDPHonmattersconcerningthisExhibit.IX.Training:TheContractorshallprovidetrainingonitsobligationsunderthisExhibit,atitsownexpense,toallofitsemployeeswhoassistintheperformanceofContractor’sobligationsunderContractor’sagreementwithCDPH,includingthisExhibit,orotherwiseuseordiscloseCDPHPCI.A.TheContractorshallrequireeachemployeewhoreceivestrainingtocertify,eitherinhardcopyorelectronicform,thedateonwhichthetrainingwascompleted.B.TheContractorshallretaineachemployee’scertificationsforCDPHinspectionforaperiodofthreeyearsfollowingcontractterminationorcompletion.C.ContractorshallprovideCDPHwithitsemployee’scertificationswithinfive(5)businessdaysofarequestbyCDPHfortheemployee’scertifications.X.EmployeeDiscipline:Contractorshallimposedisciplinethatitdeemsappropriate(initssolediscretion)onsuchemployeesandotherContractorworkforcemembersunderContractor'sdirectcontrolwhointentionallyornegligentlyviolateanyprovisionsofthisExhibit.CDPHIPSR(6-16) |CountyofFresno16-10769Page4of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|XI.BreachandSecurityIncidentResponsibilities:A.NotificationtoCDPHofBreachorSecurityIncident:TheContractorshallnotifyCDPHimmediatelybytelephonecallplusemailorfaxuponthediscoveryofabreach(asdefinedinthisExhibit),andwithintwenty-four(24)hoursbyemailorfaxofthediscoveryofanysecurityincident(asdefinedinthisExhibit),unlessalawenforcementagencydeterminesthatthenotificationwillimpedeacriminalinvestigation,inwhichcasethenotificationrequiredbythissectionshallbemadetoCDPHimmediatelyafterthelawenforcementagencydeterminesthatsuchnotificationwillnotcompromisetheinvestigation.NotificationshallbeprovidedtotheCDPHProgramContractManager,theCDPHPrivacyOfficerandtheCDPHChiefInformationSecurityOfficer,usingthecontactinformationlistedinSectionXI(F),below.IfthebreachorsecurityincidentisdiscoveredafterbusinesshoursoronaweekendorholidayandinvolvesCDPHPCIinelectronicorcomputerizedform,notificationtoCDPHshallbeprovidedbycallingtheCDPHInformationSecurityOfficeatthetelephonenumberslistedinSectionXI(F),below.ForpurposesofthisSection,breachesandsecurityincidentsshallbetreatedasdiscoveredbyContractorasofthefirstdayonwhichsuchbreachorsecurityincidentisknowntotheContractor,or,byexercisingreasonablediligencewouldhavebeenknowntotheContractor.Contractorshallbedeemedtohaveknowledgeofabreachifsuchbreachisknown,orbyexercisingreasonablediligencewouldhavebeenknown,toanyperson,otherthanthepersoncommittingthebreach,whoisaemployeeoragentoftheContractor.Contractorshalltake:1.promptcorrectiveactiontomitigateanyrisksordamagesinvolvedwiththebreachorsecurityincidentandtoprotecttheoperatingenvironment;and2.anyactionpertainingtoabreachrequiredbyapplicablefederalandstatelaws,including,specifically,CaliforniaCivilCodesection1798.29.B.InvestigationofBreachandSecurityIncidents:TheContractorshallimmediatelyinvestigatesuchbreachorsecurityincident.Assoonastheinformationisknownandsubjecttothelegitimateneedsoflawenforcement,ContractorshallinformtheCDPHProgramContractManager,theCDPHPrivacyOfficer,andtheCDPHChiefInformationSecurityOfficerof:1.whatdataelementswereinvolvedandtheextentofthedatadisclosureoraccessinvolvedinthebreach,including,specifically,thenumberofindividualswhosepersonalinformationwasbreached;and2.adescriptionoftheunauthorizedpersonsknownorreasonablybelievedtohaveimproperlyusedtheCDPHPCIand/oradescriptionoftheunauthorizedpersonsknownorreasonablybelievedtohaveimproperlyaccessedoracquiredtheCDPHPCI,ortowhomitisknownorreasonablybelievedtohavehadtheCDPHPCIimproperlydisclosedtothem;and3.adescriptionofwheretheCDPHPCIisbelievedtohavebeenimproperlyusedordisclosed;and4.adescriptionoftheprobableandproximatecausesofthebreachorsecurityincident;andCDPHIPSR(6-16) |CountyofFresno16-10769Page5of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|5.whetherCivilCodesection1798.29oranyotherfederalorstatelawsrequiringindividualnotificationsofbreacheshavebeentriggered.C.WrittenReport;TheContractorshallprovideawrittenreportoftheinvestigationtotheCDPHProgramContractManager,theCDPHPrivacyOfficer,andtheCDPHChiefInformationSecurityOfficerassoonaspracticableafterthediscoveryofthebreachorsecurityincident.Thereportshallinclude,butnotbelimitedto,theinformationspecifiedabove,aswellasacomplete,detailedcorrectiveactionplan,includinginformationonmeasuresthatweretakentohaltand/orcontainthebreachorsecurityincident,andmeasurestobetakentopreventtherecurrenceorfurtherdisclosureofdataregardingsuchbreachorsecurityincident.D.NotificationtoIndividuals:Ifnotificationtoindividualswhoseinformationwasbreachedisrequiredunderstateorfederallaw,andregardlessofwhetherContractorisconsideredonlyacustodianand/ornon-owneroftheCDPHPCI,Contractorshall,atitssoleexpense,andatthesoleelectionofCDPH,either:1.makenotificationtotheindividualsaffectedbythebreach(includingsubstitutenotification),pursuanttothecontentandtimelinessprovisionsofsuchapplicablestateorfederalbreachnoticelaws.ContractorshallinformtheCDPHPrivacyOfficerofthetime,mannerandcontentofanysuchnotifications,priortothetransmissionofsuchnotificationstotheindividuals;or2.cooperatewithandassistCDPHinitsnotification(includingsubstitutenotification)totheindividualsaffectedbythebreach.E.SubmissionofSampleNotificationtoAttorneyGeneral:Ifnotificationtomorethan500individualsisrequiredpursuanttoCaliforniaCivilCodesection1798.29,andregardlessofwhetherContractorisconsideredonlyacustodianand/ornon-owneroftheCDPHPCI,Contractorshall,atitssoleexpense,andatthesoleelectionofCDPH,either:1.electronicallysubmitasinglesamplecopyofthesecuritybreachnotification,excludinganypersonallyidentifiableinformation,totheAttorneyGeneralpursuanttotheformat,contentandtimelinessprovisionsofSection1798.29,subdivision(e).ContractorshallinformtheCDPHPrivacyOfficerofthetime,mannerandcontentofanysuchsubmissions,priortothetransmissionofsuchsubmissionstotheAttorneyGeneral;or2.cooperatewithandassistCDPHinitssubmissionofasamplecopyofthenotificationtotheAttorneyGeneral.F.CDPHContactInformation:TodirectcommunicationstotheabovereferencedCDPHstaff,theContractorshallinitiatecontactasindicatedherein.CDPHreservestherighttomakechangestothecontactinformationbelowbyverbalorwrittennoticetotheContractor.SaidchangesshallnotrequireanamendmenttothisExhibitortheagreementtowhichitisincorporated.CDPHIPSR(6-16) |CountyofFresno16-10769Page6of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|CDPHProgramContractManagerCDPHPrivacyOfficerCDPHChiefInformationSecurityOfficerSeetheScopeofWorkexhibitforProgramContractManagerPrivacyOfficerPrivacyOfficeOfficeofLegalServicesCaliforniaDept,ofPublicHealth1415LStreet,5thFloorSacramento,CA95814Email:Drivacv@cdDh.ca.qovTelephone:(877)421-9634ChiefInformationSecurityOfficerInformationSecurityOfficeCaliforniaDept,ofPublicHealthP.O.Box997377MS6302Sacramento,CA95899-7413Email:cdDhiso@cdDh.ca.oovTelephone:(855)500-0016XII.DocumentationofDisclosuresforRequestsforAccounting:ContractorshalldocumentandmakeavailabletoCDPHor(atthedirectionofCDPH)toanIndividualsuchdisclosuresofCDPHPCI,andinformationrelatedtosuchdisclosures,necessarytorespondtoaproperrequestbythesubjectIndividualforanaccountingofdisclosuresofpersonalinformationasrequiredbyCivilCodesection1798.25,oranyapplicablestateorfederallaw.XIII.RequestsforCDPHPCIbyThirdParties:TheContractoranditsemployees,agents,orsubcontractorsshallpromptlytransmittotheCDPHProgramContractManagerallrequestsfordisclosureofanyCDPHPCIrequestedbythirdpartiestotheagreementbetweenContractorandCDPH(exceptfromanIndividualforanaccountingofdisclosuresoftheindividual'spersonalinformationpursuanttoapplicablestateorfederallaw),unlessprohibitedfromdoingsobyapplicablestateorfederallaw.XIV.Audits.InspectionandEnforcementCDPHmayinspectthefacilities,systems,booksandrecordsofContractortomonitorcompliancewiththisExhibit.ContractorshallpromptlyremedyanyviolationofanyprovisionofthisExhibitandshallcertifythesametotheCDPHProgramContractManagerinwriting.XV.ReturnorDestructionofCDPHPCIonExpirationorTermination:UponexpirationorterminationoftheagreementbetweenContractorandCDPHforanyreason,ContractorshallsecurelyreturnordestroytheCDPHPCI.Ifreturnordestructionisnotfeasible,ContractorshallprovideawrittenexplanationtotheCDPHProgramContractManager,theCDPHPrivacyOfficerandtheCDPHChiefInformationSecurityOfficer,usingthecontactinformationlistedinSectionXI(F),above.A.RetentionRequiredbyLaw:Ifrequiredbystateorfederallaw,Contractormayretain,afterexpirationortermination,CDPHPCIforthetimespecifiedasnecessarytocomplywiththelaw.B.ObligationsContinueUntilReturnorDestruction;Contractor’sobligationsunderthisExhibitshallcontinueuntilContractorreturnsordestroystheCDPHPCIorreturnstheCDPHPCItoCDPH;providedhowever,thatonexpirationorterminationoftheagreementbetweenContractorandCDPH,ContractorshallnotfurtheruseordisclosetheCDPHPCIexceptasrequiredbystateorfederallaw.CDPHIPSR(6-16) |CountyofFresno16-10769Page7of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|C.NotificationofElectiontoDestroyCDPHPCI:IfContractorelectstodestroytheCDPHPCI,Contractorshallcertifyinwriting,totheCDPHProgramContractManager,theCDPHPrivacyOfficerandtheCDPHChiefInformationSecurityOfficer,usingthecontactinformationlistedinSectionXI(F),above,thattheCDPHPCIhasbeensecurelydestroyed.Thenoticeshallincludethedateandtypeofdestructionmethodused.XVI.Amendment:ThepartiesacknowledgethatfederalandstatelawsregardinginformationsecurityandprivacyrapidlyevolvesandthatamendmentofthisExhibitmayberequiredtoprovideforprocedurestoensurecompliancewithsuchlaws.ThepartiesspecificallyagreetotakesuchactionasisnecessarytoimplementnewstandardsandrequirementsimposedbyregulationsandotherapplicablelawsrelatingtothesecurityorprivacyofCDPHPCI.ThepartiesagreetopromptlyenterintonegotiationsconcerninganamendmenttothisExhibitconsistentwithnewstandardsandrequirementsimposedbyapplicablelawsandregulations.XVII.AssistanceinLitigationorAdministrativeProceedings:Contractorshallmakeitselfandanysubcontractors,workforceemployeesoragentsassistingContractorintheperformanceofitsobligationsundertheagreementbetweenContractorandCDPH,availabletoCDPHatnocosttoCDPHtotestifyaswitnesses,intheeventoflitigationoradministrativeproceedingsbeingcommencedagainstCDPH,itsdirector,officersoremployeesbaseduponclaimedviolationoflawsrelatingtosecurityandprivacy,whichinvolvesinactionsoractionsbytheContractor,exceptwhereContractororitssubcontractor,workforceemployeeoragentisanamedadverseparty.XVIII.NoThird-PartyBeneficiaries:NothingexpressorimpliedinthetermsandconditionsofthisExhibitisintendedtoconfer,norshallanythinghereinconfer,uponanypersonotherthanCDPHorContractorandtheirrespectivesuccessorsorassignees,anyrights,remedies,obligationsorliabilitieswhatsoever.XIX.Interpretation:ThetermsandconditionsinthisExhibitshallbeinterpretedasbroadlyasnecessarytoimplementandcomplywithregulationsandapplicableStatelaws.ThepartiesagreethatanyambiguityinthetermsandconditionsofthisExhibitshallberesolvedinfavorofameaningthatcompliesandisconsistentwithfederalandstatelawsandregulations.XX.Survival:IfContractordoesnotreturnordestroytheCDPHPCIuponthecompletionorterminationoftheAgreement,therespectiverightsandobligationsofContractorunderSectionsVI,VIIandXIofthisExhibitshallsurvivethecompletionorterminationoftheagreementbetweenContractorandCDPH.CDPHIPSR(6-16) |CountyofFresno16-10769Page8of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|Attachment1ContractorDataSecurityStandards1.GeneralSecurityControlsA.ConfidentialityStatement.AllpersonsthatwillbeworkingwithCDPHPCImustsignaconfidentialitystatement.Thestatementmustincludeataminimum,GeneralUse,SecurityandPrivacysafeguards,UnacceptableUse,andEnforcementPolicies.ThestatementmustbesignedbytheworkforcememberpriortoaccesstoCDPHPCI.Thestatementmustberenewedannually.TheContractorshallretaineachperson’swrittenconfidentialitystatementforCDPHinspectionforaperiodofthree(3)yearsfollowingcontracttermination.B.Backgroundcheck.BeforeamemberoftheContractor’sworkforcemayaccessCDPHPCI,Contractormustconductathoroughbackgroundcheckofthatworkerandevaluatetheresultstoassurethatthereisnoindicationthattheworkermaypresentariskfortheftofconfidentialdata.TheContractorshallretaineachworkforcemember'sbackgroundcheckdocumentationforaperiodofthree(3)yearsfollowingcontracttermination.C.Workstation/Laptopencryption.Allworkstationsandlaptopsthatprocessand/orstoreCDPHPCImustbeencryptedusingaFIPS140-2certifiedalgorithm,suchasAdvancedEncryptionStandard(AES),witha128bitkeyorhigher.TheencryptionsolutionmustbefulldiskunlessapprovedbytheCDPHInformationSecurityOffice.D.ServerSecurity.ServerscontainingunencryptedCDPHPCImusthavesufficientadministrative,physical,andtechnicalcontrolsinplacetoprotectthatdata,baseduponariskassessment/systemsecurityreview.E.MinimumNecessary.OnlytheminimumnecessaryamountofCDPHPCIrequiredtoperformnecessarybusinessfunctionsmaybecopied,downloaded,orexported.F.Removablemediadevices.AllelectronicfilesthatcontainCDPHPCIdatamustbeencryptedwhenstoredonanyremovablemediaorportabledevice(i.e.USBthumbdrives,floppies,CD/DVD,smartdevicestapesetc.).PCImustbeencryptedusingaFIPS140-2certifiedalgorithm,suchasAdvancedEncryptionStandard(AES),witha128bitkeyorhigherG.Antivirussoftware.Allworkstations,laptopsandothersystemsthatprocessand/orstoreCDPHPCImustinstallandactivelyuseacomprehensiveanti-virussoftwaresolutionwithautomaticupdatesscheduledatleastdaily.H.PatchManagement.Allworkstations,laptopsandothersystemsthatprocessand/orstoreCDPHPCImusthaveoperatingsystemandapplicationsecuritypatchesapplied,withsystemrebootifnecessary.Theremustbeadocumentedpatchmanagementprocesswhichdeterminesinstallationtimeframebasedonriskassessmentandvendorrecommendations.Atamaximum,allapplicablepatchesmustbeinstalledwithin30daysofvendorrelease.I.UserIDsandPasswordControls.AllusersmustbeissuedauniqueusernameforaccessingCDPHPCI.Usernamemustbepromptlydisabled,deleted,orthepasswordchangeduponthetransferorterminationofanemployeewithknowledgeofthepassword.Passwordsarenottobeshared.Mustbeatleasteightcharacters.Mustbeanon-dictionaryCDPHIPSR(6-16) [CountyofFresno16-10769Page9of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|word.Mustnotbestoredinreadableformatonthecomputer.Mustbechangedevery60days.Mustbechangedifrevealedorcompromised.Mustbecomposedofcharactersfromatleastthreeofthefollowingfourgroupsfromthestandardkeyboard:•Uppercaseletters(A-Z)•Lowercaseletters(a-z)•Arabicnumerals(0-9)•Non-alphanumericcharacters(punctuationsymbols)J.DataSanitization.AllCDPHPCImustbesanitizedusingNISTSpecialPublication800-88standardmethodsfordatasanitizationwhentheCDPHPCIisnolongerneeded.2.SystemSecurityControlsA.SystemTimeout.Thesystemmustprovideanautomatictimeout,requiringreauthenticationoftheusersessionafternomorethan20minutesofinactivity.B.WarningBanners.AllsystemscontainingCDPHPCImustdisplayawarningbannereachtimeauserattemptsaccess,statingthatdataisconfidential,systemsarelogged,andsystemuseisforbusinesspurposesonly.Usermustbedirectedtologoffthesystemiftheydonotagreewiththeserequirements.C.SystemLogging.ThesystemmustmaintainanautomatedaudittrailwhichcanidentifytheuserorsystemprocesswhichinitiatesarequestforCDPHPCI,orwhichaltersCDPHPCI.Theaudittrailmustbedateandtimestamped,mustlogbothsuccessfulandfailedaccesses,mustbereadonly,andmustberestrictedtoauthorizedusersThisloggingmustbeincludedforalluserprivilegelevelsincluding,butnotlimitedto,systemsadministrators.IfCDPHPCIisstoredinadatabase,databaseloggingfunctionalitymustbeenabled.Audittraildatamustbearchivedforatleast3yearsafteroccurrence.D.AccessControls.Thesystemmustuserolebasedaccesscontrolsforalluserauthentications,enforcingtheprincipleofleastprivilege.E.Transmissionencryption.AlldatatransmissionsofCDPHPCIoutsidethecontractor’ssecureinternalnetworkmustbeencryptedusingaFIPS140-2certifiedalgorithm,suchasAdvancedEncryptionStandard(AES),witha128bitkeyorhigher.Encryptioncanbeendtoendatthenetworklevel,orthedatafilescontainingCDPHPCIcanbeencrypted.ThisrequirementpertainstoanytypeofCDPHPCIinmotionsuchaswebsiteaccess,filetransfer,andE-Mail.F.IntrusionDetection.Allsystemsinvolvedinaccessing,holding,transporting,andprotectingCDPHPCIthatareaccessibleviatheInternetmustbeprotectedbyacomprehensiveintrusiondetectionandpreventionsolution.3.AuditControlsCDPHIPSR(6-16) |CountyofFresno16-10769Page10of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|A.SystemSecurityReview.Allsystemsprocessingand/orstoringCDPHPCImusthaveatleastanannualsystemriskassessment/securityreviewwhichprovidesassurancethatadministrative,physical,andtechnicalcontrolsarefunctioningeffectivelyandprovidingadequatelevelsofprotection.Reviewsshallincludevulnerabilityscanningtools.B.LogReviews.Allsystemsprocessingand/orstoringCDPHPCImusthavearoutineprocedureinplacetoreviewsystemlogsforunauthorizedaccess.C.ChangeControl.Allsystemsprocessingand/orstoringCDPHPCImusthaveadocumentedchangecontrolprocedurethatensuresseparationofdutiesandprotectstheconfidentiality,integrityandavailabilityofdata.4.BusinessContinuity/DisasterRecoveryControlsA.DisasterRecovery.ContractormustestablishadocumentedplantoenablecontinuationofcriticalbusinessprocessesandprotectionofthesecurityofelectronicCDPHPCIintheeventofanemergency.Emergencymeansanycircumstanceorsituationthatcausesnormalcomputeroperationstobecomeunavailableforuseinperformingtheworkrequiredunderthisagreementformorethan24hours.B.DataBackupPlan.ContractormusthaveestablisheddocumentedprocedurestosecurelybackupCDPHPCItomaintainretrievableexactcopiesofCDPHPCI.Thebackupsshallbeencrypted.Theplanmustincludearegularscheduleformakingbackups,storingbackupsoffsite,aninventoryofbackupmedia,andtheamountoftimetorestoreCDPHPCIshoulditbelost.Ataminimum,theschedulemustbeaweeklyfullbackupandmonthlyoffsitestorageofCDPHdata.5.PaperDocumentControlsA.SupervisionofData.CDPHPCIinpaperformshallnotbeleftunattendedatanytime,unlessitislockedinafilecabinet,fileroom,deskoroffice.Unattendedmeansthatinformationisnotbeingobservedbyanemployeeauthorizedtoaccesstheinformation.CDPHPCIinpaperformshallnotbeleftunattendedatanytimeinvehiclesorplanesandshallnotbecheckedinbaggageoncommercialairplanes.B.EscortingVisitors.VisitorstoareaswhereCDPHPCIiscontainedshallbeescortedandCDPHPHIshallbekeptoutofsightwhilevisitorsareinthearea.C.ConfidentialDestruction.CDPHPCImustbedisposedofthroughconfidentialmeans,usingNISTSpecialPublication800-88standardmethodsfordatasanitizationwhentheCDPHPSCIisnolongerneeded.D.RemovalofData.CDPHPCImustnotberemovedfromthepremisesoftheContractorexceptwithexpresswrittenpermissionofCDPH.E.Faxing.FaxescontainingCDPHPCIshallnotbeleftunattendedandfaxmachinesshallbeinsecureareas.FaxesshallcontainaconfidentialitystatementnotifyingpersonsreceivingCDPHIPSR(6-16) |CountyofFresno16-10769Page11of11ExhibitFInformationPrivacyandSecurityRequirements(ForNon-HIPAA/HITECHActContracts)|faxesinerrortodestroythem.Faxnumbersshallbeverifiedwiththeintendedrecipientbeforesending.F.Mailing.CDPHPCIshallonlybemailedusingsecuremethods.LargevolumemailingsofCDPHPHIshallbebyasecure,bondedcourierwithsignaturerequiredonreceipt.DisksandothertransportablemediasentthroughthemailmustbeencryptedwithaCDPHapprovedsolution,suchasasolutionusingavendorproductspecifiedontheCALIFORNIASTRATEGICSOURCINGINITIATIVE.CDPHIPSR(6-16) CountyofFresno16-10769Page1of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTThisCaliforniaHIV/AIDSCaseReportingSystemDataUseAndDisclosureAgreement(hereinafterreferredtoas“Agreement")setsforththeinformationprivacyandsecurityrequirementsthatCountyofAmador(hereinafter“DataRecipient”)isobligatedtofollowwithrespecttoallHIV/AIDSCaseReportingSystemdata,andotherpersonalandconfidentialinformation,(aseachofthesetypesofdataandinformationaredefinedherein),disclosedtoDataRecipientbytheCaliforniaDepartmentofPublicHealth(CDPH)(suchEnhancedHIV/AIDSCaseReportingSystem[eHARS]dataandotherpersonalandconfidentialinformationarealsoreferredtohereincollectivelyas"ProtectedData").ThisAgreementcoversProtectedDatainanymedium(paper,electronic,oral)theProtectedDataexistin.ByenteringintothisAgreement,CDPHandDataRecipientdesiretoprotecttheprivacyandprovideforthesecurityofallProtectedDataincompliancewithallstateandfederallawsapplicabletotheProtectedData.PermissiontoreceiveanduseProtectedDatarequiresexecutionofthisAgreementthatdescribestheterms,conditionsandlimitationsofDataRecipient’suseoftheProtectedData.I.Supersession:ThisAgreementsupersedesAgreementNumber175.datedbetweenCDPHandDataRecipient.II.Definitions:ForpurposesofthisAgreement,thefollowingdefinitionsshallapply:A.Breach:"Breach"means:1.Theacquisition,access,use,ordisclosureofProtectedData,inanymedium(paper,electronic,oral),inviolationofanystateorfederallaworinamannernotpermittedunderthisAgreement,thatcompromisestheprivacy,security,orintegrityoftheinformation.Forpurposesofthisdefinition,"compromisestheprivacy,securityorintegrityoftheinformation”meanstoposeasignificantriskoffinancial,reputational,orotherharmtoanindividualorindividuals;or2.Thesameasthedefinitionof"breachofthesecurityofthesystem"setforthinCaliforniaCivilCodeSection1798.29(d).B.ConfidentialInformation:“ConfidentialInformation"meansinformationthat:1.Doesnotmeetthedefinitionof"publicrecords"setforthinCaliforniaGovernmentCodeSection6252,subdivision(e),orisexemptfromdisclosureunderanyoftheprovisionsofSection6250,etseq.oftheCaliforniaGovernmentCodeoranyotherapplicablestateorfederallaws;or2.Meetsthedefinitionof"confidentialpublichealthrecord”setforthinCaliforniaHealthandSafetyCodeSection121035,subdivision(c);or3.Iscontainedindocuments,files,folders,books,orrecordsthatareclearlylabeled,marked,ordesignatedwiththeword“confidential”byCDPH.C.Disclosure:“Disclosure”meanstherelease,transfer,provisionof,accessto,ordivulginginanyothermannerofinformation."Disclosure"includesthedisclosure,release,transfer,dissemination,orcommunicationofalloranypartofanyconfidentialresearchrecordorally,inCDPH8713(Revised10/14) CountyofFresno16-10769Page2of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTwriting,orbyelectronicmeanstoanypersonorentity,orprovidingthemeansforobtainingtherecords(CaliforniaHealthandSafetyCodeSections121035and121125).D.eHARSData:"eHARSdata"meansdatainorfromthecentralregistrymaintainedbyCDPHofdemographic,clinical,HIVriskbehavior,vitalstatus,healthfacility,andadministrativeinformationonallreportedHIVinfectionsandAIDSdiagnosesinCalifornia,knownaseHARS.'‘eHARSdata"specificallyincludesallinformationcontainedinorextractedfromthefollowing:1.TheCDPHHIV/AIDSConfidentialCaseReportForm,Adult(CDPH8641A);2.TheCDPHHIV/AIDSConfidentialCaseReportPediatricForm(CDPH8641P);3.Birthcertificatedocument;4.Deathdocument;5.Laboratorydocument;6.Pre-testdocument;7.Post-testdocument;or8.Administrativedata(documentidentification,systemdates)fromeHARS.E.PersonalInformation:"PersonalInformation"meansinformationthat:1.Byitself,directlyidentifies,oruniquelydescribesanindividual;or2.Createsasubstantialriskthatitcouldbeusedincombinationwithotherinformationtoindirectlyidentifyoruniquelydescribeanindividual,orlinkanindividualtotheotherinformation;or3.Meetsthedefinitionof“personalinformation"setforthinCaliforniaCivilCodesection1798.3,subdivision(a);or4.IsoneofthedataelementssetforthinCaliforniaCivilCodesection1798.29,subdivisions(e)(1),(2)or(3);or5.Meetsthedefinitionof“medicalinformation"setforthineitherCaliforniaCivilCodesection1798.29,subdivision(f)(2)orCaliforniaCivilCodesection56.05,subdivision(g);or6.Meetsthedefinitionof“healthinsuranceinformation"setforthinCaliforniaCivilCodesection1798.29,subdivision(f)(3).F.ProtectedData:"ProtectedData"meansdatathatconsistsofoneormoreofthefollowingtypesofinformation:1.“eHARSData",asdefinedabove;orCDPH8713(Revised10/14) CountyofFresno16-10769Page3of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENT2."ConfidentialInformation",asdefinedabove.3."PersonalInformation",asdefinedabove;orG.SecurityIncident:“SecurityIncident”means:1.Anattemptedbreach;or2.TheattemptedorsuccessfulmodificationordestructionofProtectedData,inviolationofanystateorfederallaworinamannernotpermittedunderthisAgreement;or3.Theattemptedorsuccessfulmodificationordestructionof,orinterferencewith,DataRecipient’ssystemoperationsinaninformationtechnologysystem,thatnegativelyimpactstheconfidentiality,availabilityorintegrityofProtectedData,orhindersormakesimpossibleDataRecipient’sreceipt,collection,creation,storage,transmissionoruseofProtectedDatabyDataRecipientpursuanttothisAgreement.H.Use:"Use"meansthesharing,employment,application,utilization,examination,oranalysisofinformation.III.BackgroundandPurpose:TheCDPH,OfficeofAIDS(OA)isdesignatedbytheCaliforniaHealthandSafetyCodeSection131019astheleadagencyforcoordinatingstateprograms,services,andactivitiesrelatingtoHIV/AIDS.TheprimarymissionofOAistoassess,prevent,andinterruptthetransmissionofHIVandtoprovidefortheneedsofinfectedCaliforniansbyidentifyingthescopeandextentofHIVinfection,providingfortheneedswhichitcreates,anddisseminatingtimelyandcompleteinformation.OAisresponsibleforoversightofHIV/AIDScasereportinginCaliforniaandassuch,maintainseHARS,aconfidential,centralregistryofdemographicandclinicalinformationonallreportedHIVinfectionsandAIDSdiagnosesinCalifornia.CasecountsgeneratedbythisreportingsystemareusedtoinformfundingallocationsforsuchprogramsandactivitiesastheRyanWhiteProgram,FederalCentersforDiseaseControlandPrevention(CDC)prevention,andsurveillance.TheHealthResourcesandServicesAdministrationusesHIVandAIDScasecountstodetermineRyanWhitefundinglevels.ThroughRyanWhite,Californiareceivesfundingforawidevarietyofhealthcareandsupportservices,whichidentifyandcoordinateeffortstoassistCalifornia'smostvulnerableHIV-positivepopulations.eHARScollectsdatatosupportHIV/AIDSsurveillanceaccordingtoCDCstandards.Thus,thesystemisdesignedtocollect,organize,manage,store,andretrievedataCDChasidentifiedasnecessarytoconductHIV/AIDScasesurveillancestatewide.ThepurposeofthisAgreementistopermitexchangeofeHARSinformationbetweenCalifornia'slocalhealthjurisdictionsandCDPH.ThisexchangeisnecessitatedbyCaliforniaCodeofRegulations(Title17,Sections2502,2505,and2641.5through2643.20),whichdictatesthatcasereportinformationfromlaboratoriesandhealthcareprovidersisreportabletothelocalhealthofficerwhothereafterreportsthisinformationtoCDPH(adecentralizedsystem).California’sdecentralizedeHARSthusfacilitateslocalaswellasCDPHaccesstoeHARSdatatofacilitatelocalcare,prevention,andsurveillanceactivity,includinglocalapplicationtoFederalRyanWhitePartAfundsandlocallytailoredpreventionservices.CDPH8713(Revised10/14) CountyofFresno16-10769Page4of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTIV.LegalAuthorityforDisclosureandUseofProtectedData:ThelegalauthorityforCDPHtocollect,use,anddiscloseProtectedData,andforDataRecipienttoreceiveanduseProtectedDataisasfollows:A.GeneralLegalAuthority:ListofReportableDiseasesandConditions:1.CaliforniaHealthandSafetyCodeSection120130providesinpartasfollows:“Thedepartmentshallestablishalistofreportablediseasesandconditions.Foreachreportablediseaseandcondition,thedepartmentshallspecifythetimelinessofrequirementsrelatedtothereportingofeachdiseaseandcondition,andthemechanismsrequiredfor,andthecontenttobeincludedin,reportsmadepursuanttothissection.Thelistofreportablediseasesandconditionsmayincludebothcommunicableandnoncommunicablediseases.Thosediseaseslistedasreportableshallbeproperlyreportedasrequiredtothedepartmentbythehealthofficer2.Title17,CaliforniaCodeofRegulations,Section2500,subdivision(g),providesinpartasfollows:“UpontheStateDepartmentofPublicHealth'srequest,alocalhealthdepartmentshallprovidetothedepartmenttheinformationreportedpursuanttothissectionB.CaliforniaHIV/AIDS-SpecificLegalAuthority:1.DisclosurePermittedforPublicHealthPurposes:CaliforniaHealthandSafetyCodeSection121025,subdivision(a)providesasfollows:“Publichealthrecordsrelatingto[HIV/AIDS],containingpersonallyidentifyinginformation,thatweredevelopedoracquiredbystateorlocalpublichealthagencies,oranagentofsuchanagency,shallbeconfidentialandshallnotbedisclosed,exceptasotherwiseprovidedbylawforpublichealthpurposes...”2.DisclosurePermittedtoCarryOuttheInvestigation,Control,orSurveillanceDutiesofCDPHandDataRecipient:CaliforniaHealthandSafetyCodeSection121025,subdivision(b),providesasfollows:"Inaccordancewithsubdivision(g)ofSection121022,astateorlocalpublichealthagency,oranagentofsuchanagency,maydisclosepersonallyidentifyinginformationinpublichealthrecords...tootherlocal,state,orfederalpublichealthagencies...whentheconfidentialinformationisnecessarytocarryoutthedutiesoftheagency...intheinvestigation,control,orsurveillanceofdisease,asdeterminedbythestateorlocalpublichealthagency."3.FurtherDisclosurePermittedForPublicHealthPurposes:CaliforniaHealthandSafetyCodeSection121025,subdivision(c)providesasfollows:"Exceptasprovidedinparagraphs(1)to(3),inclusive,anydisclosureauthorizedbysubdivision(a)or(b)shallincludeonlytheinformationnecessaryforthepurposeofthatdisclosureandshallbemadeonlyuponagreementthattheinformationwillbekeptconfidentialandwillnotbefurtherdisclosedwithoutwrittenauthorization,asdescribedinsubdivision(a)...CDPH8713(Revised10/14) CountyofFresno16-10769Page5of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENT4.OnlyMinimumNecessaryDisclosurePermitted:CaliforniaHealthandSafetyCodeSection121025,subdivision(c),providesasfollows:"Anydisclosureauthorized...shallincludeonlytheinformationnecessaryforthepurposeofthatdisclosure...5.AgreementRequired:CaliforniaHealthandSafetyCodeSection121025,subdivision(c),providesasfollows:“[Disclosure]shallbemadeonlyuponagreementthattheinformationwillbekeptconfidentialandwillnotbefurtherdisclosedwithoutwrittenauthorization[bythesubjectoftheinformation]6.NoLiabilityforHIV/AIDSReporting:CaliforniaHealthandSafetyCodeSection120980,subdivision(i),providesanexemptionfromliabilityfordisclosureofHIV/AIDSreporting:"NothinginthissectionimposesliabilityorcriminalsanctionfordisclosureofanHIVtest,asdefinedinsubdivision(c)ofSection120775,inaccordancewithanyreportingrequirementforacaseofHIVinfection,includingAIDSbythe[CaliforniaDepartmentofPublicHealth]7.AIDSReporting:Title17,CaliforniaCodeofRegulations,Section2502,subdivision(b),providesinpartasfollows:IndividualCaseandOutbreakReports:Forthediseaseslistedbelow,thelocalhealthofficershallprepareandsendtotheDepartmentalongwiththesummaryreportdescribedin(a)aboveanindividualcaseoroutbreakreportforeachindividualcase/outbreakofthosediseaseswhichtheDepartmenthasidentifiedasrequiringepidemiologicalanalysisreportedpursuanttoSection2500.Atthediscretionofthedirector,therequiredindividualcase/outbreakreportmaybeeitheraConfidentialMorbidityReport(PM-1101/90),itselectronicequivalentorahardcopy8.5x11inchindividualcase/outbreakreportform.TheWeeklyMorbiditybyPlaceofReportform(DHS824511/95)indicateswhichformattouse.Eachindividualcasereportshallincludethefollowing:1)verificationofinformationreportedpursuanttoSection2500;2)informationontheprobablesourceofinfection,ifknown;3)laboratoryorradiologicfindings,ifany;4)clinicalsignsand/orsymptoms,ifapplicable;and5)anyknownepidemiologicalriskfactors..."Anindividualcasereportisrequiredforthefollowingdiseases:AcquiredImmuneDeficiencySyndrome(AIDS)..8.HIVInfectionReporting:a.CaliforniaHealthandSafetyCodeSection121022,subdivision(a)provides:“ToensureknowledgeofcurrenttrendsintheHIVepidemicandtoassurethatCaliforniaremainscompetitiveforfederalHIVandAIDSfunding,healthcareprovidersandlaboratoriesshallreportcasesofHIVinfectiontothelocalhealthofficerusingpatientnames.LocalhealthofficersshallreportunduplicatedHIVcasesbynametothe[CaliforniaDepartmentofPublicHealth]."b.CaliforniaHealthandSafetyCodeSection121022,subdivision(f)provides:"Stateandlocalhealthdepartmentemployeesandcontractorsshallberequiredtosignconfidentialityagreementsdevelopedbythedepartmentthatincludeinformationrelatedtothepenaltiesforabreachofconfidentiality,andtheproceduresforreportingabreachofconfidentiality..."CDPH8713(Revised10/14) CountyofFresno16-10769Page6of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTc.CaliforniaHealthandSafetyCodeSection121023,subdivision(a)provides:“Subjecttosubdivision(b),eachclinicallaboratory,asdefinedinSection1206oftheBusinessandProfessionsCode,shallreportallCD4+T-CellTestresultstothelocalhealthofficerforthelocalhealthjurisdictionwherethehealthcareproviderfacilityislocatedwithinsevendaysofthecompletionoftheCD4+T-Celltest...d.Title17,CaliforniaCodeofRegulations,Section2643.15,providesinpartasfollows:"ThelocalhealthofficerorhisorherauthorizeddesigneeshallmatchandunduplicatelaboratoryreportsofconfirmedHIVtestswiththelocalhealthdepartmentHIV/AIDSregistrydatabaseandwithHIV/AIDScasereportsreceivedfromhealthcareprovidersandnotenteredintothedatabase.Thehealthofficerorhisorherauthorizeddesigneeshall,within45calendardaysofreceiptofalaboratoryreportofaconfirmedHIVtest,submitunduplicatedHIV/AIDScasereportstotheDepartment."C.HealthInsurancePortabilityandAccountabilityAct(HIPAA)Authority:1.CDPHHIPAAStatus:CDPHisa“hybridentity”forpurposesofapplicabilityofthefederalregulationsentitled,"StandardsforPrivacyofIndividuallyIdentifiableHealthInformation,"("PrivacyRule")(Title45,CodeofFederalRegulations,Parts160,162,and164)promulgatedpursuanttoHIPAA(Title42,UnitedStatesCode,Sections1320d-1320d-8).AlloftheCDPHprogramsthatcollect,use,ordiscloseProtectedDatahavebeendesignatedbyCDPHasHIPAA-covered"healthcarecomponents"ofCDPH.(Title45,CodeofFederalRegulations,Section164.504(c)(3)(iii).)2.PartiesAre“PublicHealthAuthorities:CDPHandDataRecipientareeacha“publichealthauthority”asthattermisdefinedinthePrivacyRule.(Title45,CodeofFederalRegulations,Sections164.501and164.512(b)(1)(i).)3.ProtectedDataUseandDisclosurePermittedbvHIPAA:TotheextentadisclosureoruseofProtectedDataisadisclosureoruseof"ProtectedHealthInformation”(PHI)ofanindividual,asthattermisdefinedinSection160.103ofTitle45,CodeofFederalRegulations,thefollowingPrivacyRuleprovisionsapplytopermitsuchProtectedDatadisclosureand/orusebyCDPHandDataRecipient,withouttheconsentorauthorizationoftheindividualwhoisthesubjectofthePHI:a.TheHIPAAPrivacyRulecreatesaspecialruleforasubsetofpublichealthdisclosureswherebyHIPAAcannotpreemptstatelawif,“[t]heprovisionofstatelaw,includingstateproceduresestablishedundersuchlaw,asapplicable,providesforthereportingofdiseaseorinjury,childabuse,birth,ordeath,orfortheconductofpublichealthsurveillance,investigation,orintervention."(Title45,CodeofFederalRegulations,Section160.203(c).)[NOTE:SeeSectionsIV.AandIV.B,above.];b.AcoveredentitymaydisclosePHItoa"publichealthauthority”carryingoutpublichealthactivitiesauthorizedbylaw;(Title45,CodeofFederalRegulations,Section164.512(b).);andCDPH8713(Revised10/14) CountyofFresno16-10769Page7of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTc.Other,non-publichealth-specificprovisionsofHIPAAmayalsoprovidethelegalbasisforallorspecificProtectedDatausesanddisclosures.V.DisclosureRestrictions:TheDataRecipient,anditsemployeesoragents,shallprotectfromunauthorizeddisclosureanyProtectedData.TheDataRecipientshallnotdisclose,exceptasotherwisespecificallypermittedbythisAgreement,anyProtectedDatatoanyoneotherthanCDPH,exceptifdisclosureisallowedorrequiredbystateorfederallaw.VI.UseRestrictions:TheDataRecipient,anditsemployeesoragents,shallnotuseanyProtectedDataforanypurposeotherthancarryingouttheDataRecipient'sobligationsunderthestatutesandregulationssetforthinSectionIV,above,orasotherwiseallowedorrequiredbystateorfederallaw.VII.Safeguards:DataRecipientshallimplementadministrative,physical,andtechnicalsafeguardsthatreasonablyandappropriatelyprotecttheprivacy,confidentiality,security,integrity,andavailabilityofProtectedData,includingelectronicorcomputerizedProtectedData.TheDataRecipientshalldevelopandmaintainawritteninformationprivacyandsecurityprogramthatincludesadministrative,technicalandphysicalsafeguardsappropriatetothesizeandcomplexityoftheDataRecipient’soperationsandthenatureandscopeofitsactivitiesinperformingitslegalobligationsandduties(includingperformanceofitsdutiesandobligationsunderthisAgreement),andwhichincorporatestherequirementsofSectionVIII,Security,below.DataRecipientshallprovideCDPHwithDataRecipient’scurrentandupdatedpolicies.VIII.Security:TheDataRecipientshalltakeallstepsnecessarytoensurethecontinuoussecurityofallcomputerizeddatasystemscontainingProtectedData.Thesestepsshallinclude,ataminimum:A.ComplyingwithailofthedatasystemsecurityprecautionslistedintheDataRecipientDataSecurityStandardssetforthinAttachmentAtothisAgreement;B.ProvidingalevelandscopeofsecuritythatisatleastcomparabletothelevelandscopeofsecurityestablishedbytheOfficeofManagementandBudget(OMB)inOMBCircularNo.A-130,AppendixIII-SecurityofFederalAutomatedInformationSystems,whichsetsforthguidelinesforautomatedinformationsystemsinFederalagencies;andIncaseofaconflictbetweenanyofthesecuritystandardscontainedinanyoftheaforementionedsourcesofsecuritystandards,themoststringentshallapply.ThemoststringentmeansthatsafeguardwhichprovidesthehighestlevelofprotectiontoProtectedDatafrombreachesandsecurityincidents.IX.SecurityOfficer:TheDataRecipientshalldesignateaSecurityOfficertooverseeitscompliancewiththisAgreementandforcommunicatingwithCDPHonmattersconcerningthisAgreement.X.Training:TheDataRecipientshallprovidetrainingonitsobligationsunderthisAgreement,atitsownexpense,toallofitsemployeeswhoassistintheperformanceofDataRecipient'sobligationsunderthisAgreement,orotherwiseuseordiscloseProtectedData.A.TheDataRecipientshallrequireeachemployeewhoreceivestrainingtosignacertification,indicatingtheemployee'snameandthedateonwhichthetrainingwascompleted.CDPH8713(Revised10/14) CountyofFresno16-10769Page8of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTB.TheDataRecipientshallretaineachemployee’swrittencertificationsforCDPHinspectionforaperiodofthreeyearsfollowingcontracttermination.XI.EmployeeDiscipline:DataRecipientshalldisciplinesuchemployeesandotherDataRecipientworkforcememberswhointentionallyviolateanyprovisionsofthisAgreement,including,ifwarranted,byterminationofemployment.XII.Emplovee/ContractorSecurityandConfidentialityAgreement:Priortoaccessingprotecteddata,DataRecipientemployeesandcontractorswillsignCDPH'sconfidentialityagreement,providesignedcopiesoftheseagreementstoCDPHandreviewtheseagreementsannuallyasrequiredbylaw(SeeAttachmentB,"AgreementbyEmployee/ContractortoComplywithConfidentialityRequirements"(CDPH8689)).XIII.BreachandSecurityIncidentResponsibilities:A.NotificationtoCDPHofBreachorSecurityIncident:TheDataRecipientshallnotifyCDPHimmediatelybytelephonecallpluse-mailorfaxuponthediscoveryofabreach(asdefinedinthisAgreement),orwithin24hoursbye-mailorfaxofthediscoveryofanysecurityincident(asdefinedinthisAgreement).NotificationshallbeprovidedtotheCDPHProgramManager,theCDPHPrivacyOfficer,andtheCDPHChiefInformationSecurityOfficer,usingthecontactinformationlistedinSectionXII(E),below.IfthebreachorsecurityincidentoccursafterbusinesshoursoronaweekendorholidayandinvolvesProtectedDatainelectronicorcomputerizedform,notificationtoCDPHshallbeprovidedbycallingtheCDPHInformationTechnologyServiceDeskatthetelephonenumberslistedinSectionXII(E),below.Forpurposesofthissection,breachesandsecurityincidentsshallbetreatedasdiscoveredbyDataRecipientasofthefirstdayonwhichsuchbreachorsecurityincidentisknowntotheDataRecipient,or,byexercisingreasonablediligencewouldhavebeenknowntotheDataRecipient.DataRecipientshallbedeemedtohaveknowledgeofabreachorsecurityincidentifsuchbreachorsecurityincidentisknown,orbyexercisingreasonablediligencewouldhavebeenknown,toanyperson,otherthanthepersoncommittingthebreachorsecurityincident,whoisanemployeeoragentoftheDataRecipient.DataRecipientshalltake:1.Promptcorrectiveactiontomitigateanyrisksordamagesinvolvedwiththebreachorsecurityincidentandtoprotecttheoperatingenvironment;and2.Anyactionpertainingtoabreachrequiredbyapplicablefederalandstatelaws,including,specifically,CaliforniaCivilCodeSection1798.29.B.InvestigationofBreach:TheDataRecipientshallimmediatelyinvestigatesuchbreachorsecurityincident,andwithin72hoursofthediscovery,shallinformtheCDPHProgramManager,theCDPHPrivacyOfficer,andtheCDPHChiefInformationSecurityOfficerof:CDPH8713(Revised10/14) CountyofFresno16-10769Page9of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENT1.Whatdataelementswereinvolvedandtheextentofthedatainvolvedinthebreach,including,specifically,thenumberofindividualswhosepersonalinformationwasbreached;and2.AdescriptionoftheunauthorizedpersonsknownorreasonablybelievedtohaveimproperlyusedtheProtectedDataand/oradescriptionoftheunauthorizedpersonsknownorreasonablybelievedtohaveimproperlyaccessedoracquiredtheProtectedData,ortowhomitisknownorreasonablybelievedtohavehadtheProtectedDataimproperlydisclosedtothem;and3.AdescriptionofwheretheProtectedDataisbelievedtohavebeenimproperlyusedordisclosed;and4.Adescriptionoftheprobablecausesofthebreachorsecurityincident;and5.WhetherCaliforniaCivilCodeSection1798.29oranyotherfederalorstatelawsrequiringindividualnotificationsofbreacheshavebeentriggered.C.WrittenReport:TheDataRecipientshallprovideawrittenreportoftheinvestigationtotheCDPHProgramManager,theCDPHPrivacyOfficer,andtheCDPHChiefInformationSecurityOfficerwithinfiveworkingdaysofthediscoveryofthebreachorsecurityincident.Thereportshallinclude,butnotbelimitedto,theinformationspecifiedabove,aswellasafull,detailedcorrectiveactionplan,includinginformationonmeasuresthatweretakentohaltand/orcontainthebreachorsecurityincident,andmeasurestobetakentopreventtherecurrenceofsuchbreachorsecurityincident.D.NotificationtoIndividuals:Ifnotificationtoindividualswhoseinformationwasbreachedisrequiredunderstateorfederallaw,andregardlessofwhetherDataRecipientisconsideredonlyacustodianand/ornon-owneroftheProtectedData,DataRecipientshall,atitssoleexpense,andatthesoleelectionofCDPH,either:1.Makenotificationtotheindividualsaffectedbythebreach(includingsubstitutenotification),pursuanttothecontentandtimelinessprovisionsofsuchapplicablestateorfederalbreachnoticeoflaws.TheCDPHPrivacyOfficershallapprovethetime,mannerandcontentofanysuchnotifications,priortothetransmissionofsuchnotificationstotheindividuals;or2.CooperatewithandassistCDPHinitsnotification(includingsubstitutenotification)totheindividualsaffectedbythebreach.E.CDPHContactInformation:TodirectcommunicationstotheabovereferencedCDPHstaff,theDataRecipientshallinitiatecontactasindicatedherein.CDPHreservestherighttomakechangestothecontactinformationbelowbygivingwrittennoticetotheDataRecipient.SaidchangesshallnotrequireanamendmenttothisAgreement.CDPH8713(Revised10/14) CountyofFresno16-10769Page10of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTCDPHProgramManagerCDPHPrivacyOfficerCDPHChiefInformationSecurityOfficer(andCDPHITServiceDesk)JulianaGrant,Surveillance,ResearchandEvaluationBranchChiefOfficeofAIDS,CDPH,MS7700,P.O.Box997426Sacramento,CA95899-7426Juliana.Grant@cdDh.ca.qovTelephone:(916)341-7016Fax:(916)449-5861PrivacyOfficerPrivacyOffice,OfficeofLegalServices,CDPH1415LStreet,Suite600Sacramento,CA95814Drivacv@cdDh.ca.aovTelephone:(877)421-9634ChiefInformationSecurityOfficerInformationSecurityOffice,CDPH,MS6302P.O.Box997377Sacramento,CA95899-7377cdDhiso@cdDh.ca.aovTelephone:ITServiceDesk(916)440-7000or(800)579-0874XIV.Indemnification:DataRecipientshallindemnify,holdharmlessanddefendCDPHfromandagainstanyandallclaims,losses,liabilities,damages,costsandotherexpenses(includingattorneysfees)thatresultfromorarisedirectlyorindirectlyoutoforinconnectionwithanynegligentactoromissionorwillfulmisconductofDataRecipient,itsofficers,employeesoragentsrelativetotheProtectedData,includingwithoutlimitation,anyviolationsofDataRecipient'sresponsibilitiesunderthisAgreement.XV.TermofAgreement:ThisAgreementshallremainineffectforthreeyearsafterthelatestsignaturedateinthesignatureblockbelow.Afterthreeyears,thisAgreementwillexpirewithoutfurtheraction.IfthepartieswishtoextendthisAgreement,theymaydosobyreviewing,updating,andreauthorizingthisAgreement.ThenewlysignedagreementshouldexplicitlysupersedethisAgreement,whichshouldbereferencedbyAgreementNumberanddateinSectionIofthenewAgreement.IfoneorbothofthepartieswishtoterminatethisAgreementprematurely,theymaydosoupon30daysadvancednotice.CDPHmayalsoterminatethisAgreementpursuanttoSectionXVorXVII,below.XVI.TerminationforCause:A.TerminationUponBreach:AbreachbyDataRecipientofanyprovisionofthisAgreement,asdeterminedbyCDPH,shallconstituteamaterialbreachoftheAgreementandgroundsforimmediateterminationoftheAgreementbyCDPH.Atitssolediscretion,CDPHmaygiveDataRecipient30daystocurethebreach.B.JudicialorAdministrativeProceedings:DataRecipientwillnotifyCDPHifitisnamedasadefendantinacriminalproceedingrelatedtoaviolationofthisAgreement.CDPHmayterminatetheAgreementifDataRecipientisfoundguiltyofacriminalviolationrelatedtoaviolationofthisAgreement.CDPHmayterminatetheAgreementifafindingorstipulationthattheDataRecipienthasviolatedanysecurityorprivacylawsismadeinanyadministrativeorcivilproceedinginwhichtheDataRecipientisapartyorhasbeenjoined.XVII.ReturnorDestructionofProtectedDataonExpirationorTermination:OnexpirationorterminationoftheagreementbetweenDataRecipientandCDPHforanyreason,DataRecipientshallreturnordestroytheProtectedData.Ifreturnordestructionisnotfeasible,DataRecipientshallexplaintoCDPH8713(Revised10/14) CountyofFresno16-10769Page11of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTCDPHwhy,inwriting,totheCDPHProgramManager,theCDPHPrivacyOfficer,andtheCDPHChiefInformationSecurityOfficer,usingthecontactinformationlistedinSectionXIII(E),above.A.RetentionRequiredbvLaw:Ifrequiredbystateorfederallaw,DataRecipientmayretain,afterexpirationortermination,ProtectedDataforthetimespecifiedasnecessarytocomplywiththelaw.B.ObligationsContinueUntilReturnorDestruction:DataRecipient’sobligationsunderthisAgreementshallcontinueuntilDataRecipientdestroystheProtectedDataorreturnstheProtectedDatatoCDPH;providedhowever,thatonexpirationorterminationoftheAgreement,DataRecipientshallnotfurtheruseordisclosetheProtectedDataexceptasrequiredbystateorfederallaw.C.NotificationofElectiontoDestroyProtectedData:IfDataRecipientelectstodestroytheProtectedData,DataRecipientshallcertifyinwriting,totheCDPHProgramManager,theCDPHPrivacyOfficer,andtheCDPHChiefInformationSecurityOfficer,usingthecontactinformationlistedinSectionXIII(E),above,thattheProtectedDatahasbeendestroyed.XVIII.Amendment:ThepartiesacknowledgethatfederalandstatelawsrelatingtoinformationsecurityandprivacyarerapidlyevolvingandthatamendmentofthisAgreementmayberequiredtoprovideforprocedurestoensurecompliancewithsuchlaws.ThepartiesspecificallyagreetotakesuchactionasisnecessarytoimplementnewstandardsandrequirementsimposedbyregulationsandotherapplicablelawsrelatingtothesecurityorprivacyofProtectedData.UponCDPHrequest,DataRecipientagreestopromptlyenterintonegotiationswithCDPHconcerninganamendmenttothisAgreementembodyingwrittenassurancesconsistentwithnewstandardsandrequirementsimposedbyregulationsandotherapplicablelaws.CDPHmayterminatethisAgreementupon30-dayswrittennoticeintheevent:A.DataRecipientdoesnotpromptlyenterintonegotiationstoamendthisAgreementwhenrequestedbyCDPHpursuanttothissection;orB.DataRecipientdoesnotenterintoanamendmentprovidingassurancesregardingthesafeguardingofProtectedDatathatCDPHinitssolediscretiondeemssufficienttosatisfythestandardsandrequirementsofapplicablelawsandregulationsrelatingtothesecurityorprivacyofProtectedData.XIX.AssistanceinLitigationorAdministrativeProceedings:DataRecipientshallmakeitselfandanyemployeesoragentsassistingDataRecipientintheperformanceofitsobligationsunderthisAgreement,availabletoCDPHatnocosttoCDPHtotestifyaswitnesses,orotherwise,intheeventoflitigationoradministrativeproceedingsbeingcommencedagainstCDPH,itsdirector,officersoremployeesbaseduponclaimedviolationoflawsrelatingtosecurityandprivacy,whichinvolvesinactionsoractionsbytheDataRecipient,exceptwhereDataRecipientoritsemployeeoragentisanamedadverseparty.XX.Disclaimer:CDPHmakesnowarrantyorrepresentationthatcompliancebyDataRecipientwiththisAgreementwillbeadequateorsatisfactoryforDataRecipient’sownpurposesorthatanyinformationinDataRecipient'spossessionorcontrol,ortransmittedorreceivedbyDataRecipient,isorwillbeCDPH8713(Revised10/14) Exhibit G County of Fresno 16-10769 Page 12 of 18 CALIFORNIA ENHANCED HIVIAIDS CASE REPORTING SYSTEM DATA USE AND DISCLOSURE AGREEMENT secure from unauthorized use or disclosure. Data Recipient is solely responsible for all decisions made by Data Recipient regarding the safeguarding of Protected Data. XXL Transfer of Rights: Data Recipient has no right and shall not subcontract, delegate, assign, or otherwise transfer or delegate any of its rights or obligations under this Agreement to any other person or entity. Any such transfer of rights shall be null and void. XXII. No Third-Party Beneficiaries: Nothing expressed or implied in the terms and conditions of this Agreement is intended to confer, nor shall anything herein confer, upon any person other than CDPH or Data Recipient and their respective successors or assignees, any rights, remedies. obligations or liabilities, whatsoever. XXIII. Interpretation: The terms and conditions in this Agreement shall be interpreted as broadly as necessary to implement and comply with regulations and applicable State and Federal laws. The parties agree that any ambiguity in the terms and conditions of this Agreement shall be resolved in favor of a meaning that complies and is consistent with federal and state laws. XXIV. Survival: The respective rights and obligations of Data Recipient under Sections VII, VIII and XII of this Agreement shall survive the termination or expiration of this Agreement . XXV. Entire Agreement: This Agreement constitutes the entire agreement between CDPH and Data Recipient. Any and all modifications of this Agreement must be in writing and signed by all parties. Any oral representations or agreements between the parties shall be of no force or effect. XXVI. Severability: The invalidity in whole or in part of any provisions of this Agreement shall not void or affect the validity of any other provisions of this Agreement. XXVII. Signatures: IN WITNESS, WHEREOF. the Parties have executed this Agreement as follows: On behalf of the Data Recipient, [insert name of LHO, LHD or other recipient of data] , the undersigned individual hereby attests that he or she is authorized to enter into this Agreement and agrees to abide by and enforce all the terms specified herein. Brian Pacheco {Name of Representative of [insert name of LHO, LHD or other recipient of data)} Chairman, Board of Supervisors (Signature) COPH 8713 (ReVised 10/14) ATTEST: BERNICE E. SEIDEL. Clerk Board of Supervisors By~l)~, ('~ De ut CountyofFresno16-10769Page13of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTOnbehalfofCDPH,theundersignedindividualherebyatteststhatheorsheisauthorizedtoenterintothisAgreementandagreestoallthetermsspecifiedherein.(NameofCDPHRepresentative)(Title)(Signature)(Date)CDPH8713(Revised10/14) CountyofFresno16-10769Page14of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTAttachmentADataRecipientDataSecurityStandards1.GeneralSecurityControlsa.ConfidentialityStatement.AllpersonsthatwillbeworkingwithProtectedDatamustsignaconfidentialitystatement.Thestatementmustincludeataminimum,GeneralUse,SecurityandPrivacySafeguards,UnacceptableUse,andEnforcementPolicies.ThestatementmustbesignedbytheworkforcememberpriortoaccesstoProtectedData.Thestatementmustberenewedannually.TheDataRecipientshallretaineachperson’swrittenconfidentialitystatementforCDPHinspectionforaperiodofthreeyearsfollowingcontracttermination.b.Backgroundcheck.BeforeamemberoftheDataRecipient'sworkforcemayaccessProtectedData,DataRecipientmustconductathoroughbackgroundcheckofthatworkerandevaluatetheresultstoassurethatthereisnoindicationthattheworkermaypresentariskfortheftofconfidentialdata.TheDataRecipientshallretaineachworkforcemember’sbackgroundcheckdocumentationforaperiodofthreeyearsfollowingcontracttermination.c.Workstation/Laptopencryption.Allworkstationsandlaptopsthatprocessand/orstoreProtectedDatamustbeencryptedusingaFIPS140-2certifiedalgorithm,suchasAdvancedEncryptionStandard(AES),witha128bitkeyorhigher.TheencryptionsolutionmustbefulldiskunlessapprovedbytheCDPHInformationSecurityOffice.d.ServerSecurity.ServerscontainingunencryptedProtectedDatamusthavesufficientadministrative,physical,andtechnicalcontrolsinplacetoprotectthatdata,baseduponariskassessment/systemsecurityreview.e.MinimumNecessary.OnlytheminimumnecessaryamountofProtectedDatarequiredtoperformnecessarybusinessfunctionsmaybecopied,downloaded,orexported.f.Removablemediadevices.AllelectronicfilesthatcontainProtectedDatamustbeencryptedwhenstoredonanyremovablemediaorportabledevice(i.e.,USBthumbdrives,floppies,CD/DVD,Blackberry,back-uptapes,etc.).MustbeencryptedusingaFIPS140-2certifiedalgorithm,suchasAES,witha128bitkeyorhigher.g.Antivirussoftware.Allworkstations,laptops,andothersystemsthatprocessand/orstoreProtectedDatamustinstallandactivelyuseacomprehensiveanti-virussoftwaresolutionwithautomaticupdatesscheduledatleastdaily.h.PatchManagement.Allworkstations,laptops,andothersystemsthatprocessand/orstoreProtectedDatamusthavesecuritypatchesapplied,withsystemrebootifnecessary.Theremustbeadocumentedpatchmanagementprocesswhichdeterminesinstallationtimeframebasedonriskassessmentandvendorrecommendations.Atamaximum,allapplicablepatchesmustbeinstalledwithin30daysofvendorrelease.CDPH8713(Revised10/14) CountyofFresno16-10769Page15of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTi.UserIDsandPasswordControls.AllusersmustbeissuedauniqueusernameforaccessingProtectedData.Usernamemustbepromptlydisabled,deleted,orthepasswordchangeduponthetransferorterminationofanemployeewithknowledgeofthepassword.Passwords:arenottobeshared;mustbeatleasteightcharacters;mustbeanon-dictionaryword;mustnotbestoredinreadableformatonthecomputer;mustbechangedevery60days;mustbechangedifrevealedorcompromisedandmustbecomposedofcharactersfromatleastthreeofthefollowingfourgroupsfromthestandardkeyboard:•Uppercaseletters(A-Z);•Lowercaseletters(a-z);•Arabicnumerals(0-9);and•Non-alphanumericcharacters(punctuationsymbols).j.DataSanitization.AllProtectedDatamustbesanitizedusingNISTSpecialPublication800-88standardmethodsfordatasanitizationwhentheCDPHPSCIisnolongerneeded.2.SystemSecurityControlsa.SystemTimeout.Thesystemmustprovideanautomatictimeout,requiringre¬authenticationoftheusersessionafternomorethan20minutesofinactivity.b.WarningBanners.AllsystemscontainingProtectedDatamustdisplayawarningbannerstatingthatdataisconfidential,systemsarelogged,andsystemuseisforbusinesspurposesonly.Usermustbedirectedtologoffthesystemiftheydonotagreewiththeserequirements.c.SystemLogging.ThesystemmustmaintainanautomatedaudittrailwhichcanidentifytheuserorsystemprocesswhichinitiatesarequestforProtectedData,orwhichaltersProtectedData.Theaudittrailmustbedateandtimestamped,mustlogbothsuccessfulandfailedaccesses,mustbereadonly,andmustberestrictedtoauthorizedusers.IfProtectedDataisstoredinadatabase,databaseloggingfunctionalitymustbeenabled.Audittraildatamustbearchivedforatleastthreeyearsafteroccurrence.d.AccessControls.Thesystemmustuserolebasedaccesscontrolsforalluserauthentications,enforcingtheprincipleofleastprivilege.e.Transmissionencryption.AlldatatransmissionsofProtectedDataoutsidethesecureinternalnetworkmustbeencryptedusingaFIPS140-2certifiedalgorithm,suchasAES,witha128bitkeyorhigher.Encryptioncanbeendtoendatthenetworklevel,orthedatafilescontainingProtectedDatacanbeencrypted.ThisrequirementpertainstoanytypeofProtectedDatainmotionsuchaswebsiteaccess,filetransfer,ande-mail.f.IntrusionDetection.Allsystemsinvolvedinaccessing,holding,transporting,andprotectingProtectedDatathatareaccessibleviatheInternetmustbeprotectedbyacomprehensiveintrusiondetectionandpreventionsolution.CDPH8713(Revised10/14) CountyofFresno16-10769Page16of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENT3.AuditControlsa.SystemSecurityReview.Allsystemsprocessingand/orstoringProtectedDatamusthaveatleastanannualsystemriskassessment/securityreviewwhichprovidesassurancethatadministrative,physical,andtechnicalcontrolsarefunctioningeffectivelyandprovidingadequatelevelsofprotection.Reviewsshallincludevulnerabilityscanningtools.b.LogReviews.Allsystemsprocessingand/orstoringProtectedDatamusthavearoutineprocedureinplacetoreviewsystemlogsforunauthorizedaccess.c.ChangeControl.Allsystemsprocessingand/orstoringProtectedDatamusthaveadocumentedchangecontrolprocedurethatensuresseparationofdutiesandprotectstheconfidentiality,integrityandavailabilityofdata.4.BusinessContinuity/DisasterRecoveryControlsa.DisasterRecovery.DataRecipientmustestablishadocumentedplantoenablecontinuationofcriticalbusinessprocessesandprotectionofthesecurityofelectronicProtectedDataintheeventofanemergency.Emergencymeansanycircumstanceorsituationthatcausesnormalcomputeroperationstobecomeunavailableforuseinperformingtheworkrequiredunderthisagreementformorethan24hours.b.DataBackupPlan.DataRecipientmusthaveestablisheddocumentedprocedurestoback-upProtectedDatatomaintainretrievableexactcopiesofProtectedData.Theplanmustincludearegularscheduleformakingbackups,storingbackupsoffsite,aninventoryofback-upmedia,andtheamountoftimetorestoreProtectedDatashoulditbelost.Ataminimum,theschedulemustbeaweeklyfullbackupandmonthlyoffsitestorageofCDPHdata.5.PaperDocumentControlsa.SupervisionofData.ProtectedDatainpaperformshallnotbeleftunattendedatanytime,unlessitislockedinafilecabinet,fileroom,deskoroffice.Unattendedmeansthatinformationisnotbeingobservedbyanemployeeauthorizedtoaccesstheinformation.ProtectedDatainpaperformshallnotbeleftunattendedatanytimeinvehicles,planes,trains,oranyothermodesoftransportationandshallnotbecheckedinbaggageoncommercialairplanes.b.EscortingVisitors.VisitorstoareaswhereProtectedDataiscontainedshallbeescortedandCDPHPHIshallbekeptoutofsightwhilevisitorsareinthearea.c.ConfidentialDestruction.ProtectedDatamustbedisposedofthroughconfidentialmeans,usingNISTSpecialPublication800-88standardmethodsfordatasanitizationwhentheCDPHPSCIisnolongerneeded.CDPH8713(Revised10/14) CountyofFresno16-10769Page17of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTd.RemovalofData.ProtectedDatamustnotberemovedfromthepremisesoftheDataRecipientexceptwithexpresswrittenpermissionofCDPH.e.Faxing.FaxescontainingProtectedDatashallnotbeleftunattendedandfaxmachinesshallbeinsecureareas.Faxesshallcontainaconfidentialitystatementnotifyingpersonsreceivingfaxesinerrortodestroythem.Faxnumbersshallbeverifiedwiththeintendedrecipientbeforesending.f.Mailing.ProtectedDatashallonlybemailedusingsecuremethods.LargevolumemailingsofCDPHPHIshallbebyasecure,bondedcourierwithsignaturerequiredonreceipt.DisksandothertransportablemediasentthroughthemailmustbeencryptedwithaCDPH-approvedsolution,suchasasolutionusingavendorproductspecifiedontheCSSI.CDPH8713(Revised10/14) CountyofFresno16-10769Page18of18ExhibitGCALIFORNIAENHANCEDHIV/AIDSCASEREPORTINGSYSTEMDATAUSEANDDISCLOSUREAGREEMENTAttachmentBAgreementbyEmployee/ContractortoComplywithConfidentialityRequirementsSummaryofStatutesPertainingtoConfidentialPublicHealthRecordsandPenaltiesforDisclosureAllHIV/AIDScasereportsandanyinformationcollectedormaintainedinthecourseofsurveillance-relatedactivitiesthatmaydirectlyorindirectlyidentifyanindividualareconsideredconfidentialpublichealthrecord(s)underCaliforniaHealthandSafetyCode(HSC),Section121035(c)andmustbehandledwiththeutmostconfidentiality.Furthermore,HSC§121025(a)prohibitsthedisclosureofHIV/AIDS-relatedpublichealthrecordsthatcontainanypersonallyidentifyinginformationtoanythirdparty,unlessauthorizedbylawforpublichealthpurposes,orbythewrittenconsentoftheindividualidentifiedintherecordorhis/herguardian/conservator.Exceptaspermittedbylaw,anypersonwhonegligentlydisclosesinformationcontainedinaconfidentialpublichealthrecordtoathirdpartyissubjecttoacivilpenaltyofupto$5,000pluscourtcosts,asprovidedinHSC§121025(e)(1).Anypersonwhowillfullyormaliciouslydisclosesthecontentofapublichealthrecord,exceptasauthorizedbylaw,issubjecttoacivilpenaltyof$5,000-$25,000pluscourtcostsasprovidedbyHSC§121025(e)(2).Anywillful,malicious,ornegligentdisclosureofinformationcontainedinapublichealthrecordinviolationofstatelawthatresultsineconomic,bodily,orpsychologicalharmtothepersonnamedintherecordisamisdemeanor,punishablebyimprisonmentforaperiodofuptooneyearand/orafineofupto$25,000pluscourtcosts(HSC§121025(e)(3)).Anypersonwhoisguiltyofaconfidentialityinfringementoftheforegoingtypemaybesuedbytheinjuredpartyandshallbepersonallyliableforallactualdamagesincurredforeconomic,bodily,orpsychologicalharmasaresultofthebreach(HSC§121025(e)(4)).EachdisclosureinviolationofCalifornialawisaseparate,actionableoffense(HSC§121025(e)(5)).BecauseanassuranceofcaseconfidentialityistheforemostconcernoftheCaliforniaDepartmentofPublicHealth,OfficeofAIDS(CDPH/OA),anyactualorpotentialbreachofconfidentialityshallbeimmediatelyreported.Intheeventofanysuspectedbreach,staffshallimmediatelynotifythedirectororsupervisorofthelocalhealthdepartment'sHIV/AIDSsurveillanceunitwhointurnshallnotifytheCDPH/OASurveillanceSectionChiefordesignee.CDPH/OA,inconjunctionwiththelocalhealthdepartmentandthelocalhealthofficershallpromptlyinvestigatethesuspectedbreach.Anyevidenceofanactualbreachshallbereportedtothelawenforcementagencythathasjurisdiction.EmployeeConfidentialityPledgeIrecognizethatincarryingoutmyassignedduties,ImayobtainaccesstoprivateinformationaboutpersonsdiagnosedwithHIVorAIDSthatwasprovidedunderanassuranceofconfidentiality.IunderstandthatIamprohibitedfromdisclosingorotherwisereleasinganypersonallyidentifyinginformation,eitherdirectlyorindirectly,aboutanyindividualnamedinanyHIV/AIDSconfidentialpublichealthrecord.ShouldIberesponsibleforanybreachofconfidentiality,Iunderstandthatciviland/orcriminalpenaltiesmaybebroughtagainstme.Iacknowledgethatmyresponsibilitytoensuretheprivacyofprotectedhealthinformationcontainedinanyelectronicrecords,paperdocuments,orverbalcommunicationstowhichImaygainaccessshallnotexpire,evenaftermyemploymentoraffiliationwiththeDepartmenthasterminated.Bymysignature,IacknowledgethatIhaveread,understand,andagreetocomplywiththetermsandconditionsabove.Employeename(print)EmployeeSignatureDateSupervisorname(print)SupervisorSignatureDateNameofEmployerP L E A S ER E T A I NAC O P YO FT H I SD O C U M E N TF O RY O U RR E C O R D S.CDS©89(Revised10/12)CDPH8713(Revised10/14) CountyofFresno16-10769ExhibitHHIV/AIDSConfidentialityAgreementSummaryofStatutesPertainingtoConfidentialPublicHealthRecordsandPenaltiesforDisclosureAllHIV/AIDScasereportsandanyinformationcollectedormaintainedinthecourseofsurveillance-relatedactivitiesthatmaydirectlyorindirectlyidentifyanindividualareconsideredconfidentialpublichealthrecord(s)underCaliforniaHealthandSafetyCode(HSC)Section121035(c)andmustbehandledwiththeutmostconfidentiality.Furthermore,HSC§121025(a)prohibitsthedisclosureofHIV/AIDS-relatedpublichealthrecordsthatcontainanypersonallyidentifyinginformationtoanythirdparty,unlessauthorizedbylawforpublichealthpurposes,orbythewrittenconsentoftheindividualidentifiedintherecordorhis/herguardian/conservator.Exceptaspermittedbylaw,anypersonwhonegligentlydisclosesinformationcontainedinaconfidentialpublichealthrecordtoathirdpartyissubjecttoacivilpenaltyofupto$2,500pluscourtcosts,asprovidedinHSC§121025(e)(1).Anypersonwhowillfullyormaliciouslydisclosesthecontentofapublichealthrecord,exceptasauthorizedbylaw,issubjecttoacivilpenaltyof$5,000-$10,000pluscourtcostsasprovidedbyHSC§121025(e)(2).Anywillful,malicious,ornegligentdisclosureofinformationcontainedinapublichealthrecordinviolationofstatelawthatresultsIneconomic,bodily,orpsychologicalharmtothepersonnamedintherecordisamisdemeanor,punishablebyimprisonmentforaperiodofuptooneyearand/orafineofupto$25,000pluscourtcosts(HSC§121025(e)(3)).Anypersonwhoisguiltyofaconfidentialityinfringementoftheforegoingtypemaybesuedbytheinjuredpartyandshallbepersonallyliableforallactualdamagesincurredforeconomic,bodily,orpsychologicalharmasaresultofthebreach(HSC§121025(e)(4)).EachdisclosureinviolationofCalifornialawisaseparate,actionableoffense(HSC§121025(e)(5)).BecauseanassuranceofcaseconfidentialityistheforemostconcernoftheCaliforniaDepartmentofHealthServices,OfficeofAIDS(OA),anyactualorpotentialbreachofconfidentialityshallbeimmediatelyreported.Intheeventofanysuspectedbreach,staffshallimmediatelynotifythedirectororsupervisorofthelocalhealthdepartment'sHIV/AIDSsurveillanceunitwhointurnshallnotifytheChiefoftheHIV/AIDSCaseRegistrySectionordesignee.OA,inconjunctionwiththelocalhealthdepartmentandthelocalhealthofficershallpromptlyinvestigatethesuspectedbreach.Anyevidenceofanactualbreachshallbereportedtothelawenforcementagencythathasjurisdiction.EmployeeConfidentialityPledgeIrecognizethatincarryingoutmyassignedduties,ImayobtainaccesstoprivateinformationaboutpersonsdiagnosedwithHIVorAIDSthatwasprovidedunderanassuranceofconfidentiality.IunderstandthatIamprohibitedfromdisclosingorotherwisereleasinganypersonallyidentifyinginformation,eitherdirectlyorindirectly,aboutanyindividualnamedinanyHIV/AIDSconfidentialpublichealthrecord.ShouldIberesponsibleforanybreachofconfidentiality,Iunderstandthatciviland/orcriminalpenaltiesmaybebroughtagainstme.Iacknowledgethatmyresponsibilitytoensuretheprivacyofprotectedhealthinformationcontainedinanyelectronicrecords,paperdocuments,orverbalcommunicationstowhichImaygainaccessshallnotexpire,evenaftermyemploymentoraffiliationwiththeDepartmenthasterminated.Bymysignature,IacknowledgethatIhaveread,understand,andagreetocomplywiththetermsandconditionsofthisConfidentialityAgreement.Employeename(printed)EmployeesignatureDateSupervisorname(printed)SupervisorsignatureDateChiefname(printed)ChiefsignatureDateHIV/AIDSCaseRegistrySectionOfficeofAIDSCaliforniaDepartmentofHealthServicesDH88689(10/06) StaleofCalifornia—HealthandHumanServicesAgencyCaliforniaDepartmentofPublicHealthContractor’sReleaseExhibitIInstructionstoContractor:Withfinalinvoico(s)submitone(1)originalandone(1)copy.TheoriginalmustbeartheoriginalsignatureofapersonauthorizedtobindtheContractor.Theadditionalcopymaybearphotocopiedsignatures.SubmissionofFinalInvoicePursuanttocontractnumber16-10769enteredintobetweentheStateofCaliforniaDepartmentofPublicHealth(CDPI-I)andtheContractor(identifiedbelow),theContractordoesacknowledgethatfinalpaymenthasbeenrequestedviainvoicenumber(s),intheamount(s)of$anddatedIfnecessary,enter"SeeAttached"intheappropriateblocksandattachalistofinvoicenumbers,dollaramountsandinvoicedates,ReleaseofallObligationsBysigningthisform,anduponreceiptoftheamountspecifiedintheinvoicenumber(s)referencedabove,theContractordoesherebyreleaseanddischargetheState,itsofficers,agentsandemployeesofandfromanyandallliabilities,obligations,claims,anddemandswhatsoeverarisingfromtheabovereferencedcontract.RepaymentsDuetoAuditExceptions/RecordRetentionBysigningthisform,Contractoracknowledgesthatexpensesauthorizedforreimbursementdoesnotguaranteefinalallowabilityofsaidexpenses.ContractoragreesthattheamountofanysustainedauditexceptionsresultingfromanysubsequentauditmadeafterfinalpaymentwillberefundedtotheState,Allexpenseandaccountingrecordsrelatedtotheabovereferencedcontractmustbemaintainedforauditpurposesfornolessthanthreeyearsbeyondthedateoffinalpayment,unlessalongertermIsstatedinsaidcontract,RecycledProductUseCertificationBysigningthisform,Contractorcertifiesunderpenaltyofperjurythataminimumof0%unlessotherwisespecifiedinwritingofpostconsumermaterial,asdefinedinthePublicContractCodeSection12200,inproducts,materials,goods,orsuppliesofferedorsoldtotheStateregardlessofwhetheritmeetstherequirementsofPublicContractCodeSection12209.ContractorspecifiesthatprinterorduplicationcartridgesofferedorsoldtotheStatecomplywiththerequirementsofSection12156(e).RemindertoReturnStateEquipment/Property(IfApplicable)(AppliesonlyIfequipmentwasprovidedbyCDPHorpurchasedwithorreimbursedbycontractfunds)UnlessCDPHhasapprovedthecontinueduseandpossessionofStateequipment(asdefinedintheabovereferencedcontract)foruseinconnectionwithanotherCDPHagreement,ContractoragreestopromptlyinitiatearrangementstoaccountforandreturnsaidequipmenttoCDPH,atCDPH'sexpense,Ifsaidequipmenthasnotpasseditsusefullifeexpectancyasdefinedintheabovereferencedcontract.Patents/OtherIssuesBysigningthisform,Contractorfurtheragrees,inconnectionwithpatentmattersandwithanyclaimsthatarenotspecificallyreleasedassetforthabove,thatitwillcomplywithalloftheprovisionscontainedintheabovereferencedcontract,including,butnotlimitedto,thoseprovisionsrelatingtonotificationtotheStateandrelatedtothedefenseorprosecutionoflitigation.ONLYSIGNANDDATETHISDOCUMENTWHENATTACHINGTOTHEFINALINVOICEContractor'sLegalName(asoncontract):CountyofFresnoSignatureofContractororOfficialDesignee:Date:PrintedName/TitleofPersonSigning:CDPHDistribution:Accounting(Original)ProgramCDPH2352(//07) CCC-307 CERTlFICA TION 1, the official named below, CERTIFY Ul\DER PE~ALTY OF PERJURY that I am duly authorized to legally bind the prospecLive Contractor to the clause(s) listed below. Tlris certi iication is made under the lav·lS of the State of California. I Contractor/Bidd;; Firm Name (Printed) Federal ID Number 2 ATTEST: BERNICE E. SEIDEL, Clerk Board of Supervisors .(j\.~ .. ~ D y Printed Name and Title ofPerson Signing B ·an Pacheco Chairman ervisors Date E.r:ecuted Executed in the County £~( CONTRACTOR CERTIFICATIOK CLAUSES 1. STATEMENT OF COrvlPLIAI'\CE: Contractor has, unless exempted, complied with the nondiscrimination program requirements. (Gov. Code § 12990 (a-t) and CCR, Title 2, Section 81 03) (Not applicable to public entities.) 2. DRUG-FREE WORKPJ_,ACE REQUIREMENTS: Contractor will comply with the requirements of the Drug-Free Workplace Act of 1990 and will provide a drug-free workplace by taking the following actions: a. Publish a statement notifying employees that unlawful manufacture, distribution, dispensation. possession or use of a controlled substance is prohibited and specifYing actions to be taken against employees for violations. b. Establish a Drug-Free Awareness Program to inH.1m1 employees about: I) the dangers of drug abuse in the workplace~ 2) the person's or organization's policy of maintaining a drug-free workplace; 3) any available counseling, rehabilitation and employee assistance programs; and, 4) penalties that may be imposed upon employees for drug abuse violations. c. Every employee who works on the proposed Agreement will: 1) receive a copy of the company's drug-free workplace policy statement~ and, 2) agree to abide by the terms of the company's statement as a condition of employment on the Agreement. Failure to comply with these requirements may result in suspension of payments under the Agreement or termination of the Agreement or both and Contractor may be ineligible for award of any future State agreements if the department determines that any of the following has occurred: the Contractor has made fabe certification, or violated the certificationbyfailingtocarryouttherequirementsasnotedabove.(Gov.Code§8350etseq.)3.NATIONALLABORRELATIONSBOARDCERTIFICATION:Contractorcertifiesthatnomorethanone(1)finalunappealablefindingofcontemptofcourtbyaFederalcourthasbeenissuedagainstContractorwithintheimmediatelyprecedingtwo-yearperiodbecauseofContractor'sfailuretocomplywithanorderofaFederalcourt,whichordersContractortocomplywithanorderoftheNationalLaborRelationsBoard.(Pub.ContractCode§10296)(Notapplicabletopublicentities.)4.CONTRACTSFORLEGALSERVICES$50.000ORMORE-PROBONOREQUIREMENT:ContractorherebycertifiesthatcontractorwillcomplywiththerequirementsofSection6072oftheBusinessandProfessionsCode,effectiveJanuary1,2003.Contractoragreestomakeagoodfaithefforttoprovideaminimumnumberofhoursofprobonolegalservicesduringeachyearofthecontractequaltothelessorof30multipliedbythenumberoffulltimeattorneysinthefirm’sofficesintheState,withthenumberofhoursproratedonanactualdaybasisforanycontractperiodoflessthanafullyearor10%ofitscontractwiththeState.Failuretomakeagoodfaitheffortmaybecausefornon-renewalofastatecontractforlegalservices,andmaybetakenintoaccountwhendeterminingtheawardoffuturecontractswiththeStateforlegalservices.5.EXPATRIATECORPORATIONS:ContractorherebydeclaresthatitisnotanexpatriatecorporationorsubsidiaryofanexpatriatecorporationwithinthemeaningofPublicContractCodeSection10286and10286.1,andiseligibletocontractwiththeStateofCalifornia.6.SWEATFREECODEOFCONDUCT:a.AllContractorscontractingfortheprocurementorlaunderingofapparel,garmentsorcorrespondingaccessories,ortheprocurementofequipment,materials,orsupplies,otherthanprocurementrelatedtoapublicworkscontract,declareunderpenaltyofperjurythatnoapparel,garmentsorcorrespondingaccessories,equipment,materials,orsuppliesfurnishedtothestatepursuanttothecontracthavebeenlaunderedorproducedinwholeorinpartbysweatshoplabor,forcedlabor,convictlabor,indenturedlaborunderpenalsanction,abusiveformsofchildlabororexploitationofchildreninsweatshoplabor,orwiththebenefitofsweatshoplabor,forcedlabor,convictlabor,indenturedlaborunderpenalsanction,abusiveformsofchildlabororexploitationofchildreninsweatshoplabor.ThecontractorfurtherdeclaresunderpenaltyofperjurythattheyadheretotheSweatfreeCodeofConductassetforthontheCaliforniaDepartmentofIndustrialRelationswebsitelocatedatwww.dir.ca.gov.andPublicContractCodeSection6108.b.Thecontractoragreestocooperatefullyinprovidingreasonableaccesstothecontractor’srecords,documents,agentsoremployees,orpremisesifreasonablyrequiredbyauthorizedofficialsofthecontractingagency,theDepartmentofIndustrialRelations, ortheDepartmentofJusticetodeterminethecontractor’scompliancewiththerequirementsunderparagraph(a).7.DOMESTICPARTNERS:Forcontractsover$100,000executedoramendedafterJanuary1,2007,thecontractorcertifiesthatcontractorisincompliancewithPublicContractCodesection10295.3.DOINGBUSINESSWITHTHESTATEOFCALIFORNIAThefollowinglawsapplytopersonsorentitiesdoingbusinesswiththeStateofCalifornia.1.CONFLICTOFINTEREST:Contractorneedstobeawareofthefollowingprovisionsregardingcurrentorformerstateemployees.IfContractorhasanyquestionsonthestatusofanypersonrenderingservicesorinvolvedwiththeAgreement,theawardingagencymustbecontactedimmediatelyforclarification.CurrentStateEmployees(Pub.ContractCode§10410):1).Noofficeroremployeeshallengageinanyemployment,activityorenterprisefromwhichtheofficeroremployeereceivescompensationorhasafinancialinterestandwhichissponsoredorfundedbyanystateagency,unlesstheemployment,activityorenterpriseisrequiredasaconditionofregularstateemployment.2).Noofficeroremployeeshallcontractonhisorherownbehalfasanindependentcontractorwithanystateagencytoprovidegoodsorservices.FormerStateEmployees(Pub.ContractCode§10411):1).Forthetwo-yearperiodfromthedateheorsheleftstateemployment,noformerstateofficeroremployeemayenterintoacontractinwhichheorsheengagedinanyofthenegotiations,transactions,planning,arrangementsoranypartofthedecision-makingprocessrelevanttothecontractwhileemployedinanycapacitybyanystateagency.2).Forthetwelve-monthperiodfromthedateheorsheleftstateemployment,noformerstateofficeroremployeemayenterintoacontractwithanystateagencyifheorshewasemployedbythatstateagencyinapolicy-makingpositioninthesamegeneralsubjectareaastheproposedcontractwithinthe12-monthperiodpriortohisorherleavingstateservice.IfContractorviolatesanyprovisionsofaboveparagraphs,suchactionbyContractorshallrenderthisAgreementvoid.(Pub.ContractCode§10420)Membersofboardsandcommissionsareexemptfromthissectioniftheydonotreceivepaymentotherthanpaymentofeachmeetingoftheboardorcommission,paymentforpreparatorytimeandpaymentforperdiem.(Pub.ContractCode§10430(e)) 2.LABORCODE/WORKERS'COMPENSATION:ContractorneedstobeawareoftheprovisionswhichrequireeveryemployertobeinsuredagainstliabilityforWorker'sCompensationortoundertakeself-insuranceinaccordancewiththeprovisions,andContractoraffirmstocomplywithsuchprovisionsbeforecommencingtheperformanceoftheworkofthisAgreement.(LaborCodeSection3700)3.AMERICANSWITHDISABILITIESACT:ContractorassurestheStatethatitcomplieswiththeAmericanswithDisabilitiesAct(ADA)of1990,whichprohibitsdiscriminationonthebasisofdisability,aswellasallapplicableregulationsandguidelinesissuedpursuanttotheADA.(42U.S.C.12101etscq.)4.CONTRACTORNAMECHANGE:AnamendmentisrequiredtochangetheContractor'snameaslistedonthisAgreement.UponreceiptoflegaldocumentationofthenamechangetheStatewillprocesstheamendment.Paymentofinvoicespresentedwithanewnamecannotbepaidpriortoapprovalofsaidamendment.5.CORPORATEQUALIFICATIONSTODOBUSINESSINCALIFORNIA:a.Whenagreementsaretobeperformedinthestatebycorporations,thecontractingagencieswillbeverifyingthatthecontractoriscurrentlyqualifiedtodobusinessinCaliforniainordertoensurethatallobligationsduetothestatearefulfilled.b."Doingbusiness"isdefinedinR&TCSection23101asactivelyengaginginanytransactionforthepurposeoffinancialorpecuniarygainorprofit.Althoughtherearesomestatutoryexceptionstotaxation,rarelywillacorporatecontractorperformingwithinthestatenotbesubjecttothefranchisetax.c.Bothdomesticandforeigncorporations(thoseincorporatedoutsideofCalifornia)mustbeingoodstandinginordertobequalifiedtodobusinessinCalifornia.AgencieswilldeterminewhetheracorporationisingoodstandingbycallingtheOfficeoftheSecretaryofState.6.RESOLUTION:Acounty,city,district,orotherlocalpublicbodymustprovidetheStatewithacopyofaresolution,order,motion,orordinanceofthelocalgoverningbodywhichbylawhasauthoritytoenterintoanagreement,authorizingexecutionoftheagreement.7.AIRORWATERPOLLUTIONVIOLATION:UndertheStatelaws,theContractorshallnotbe:(1)inviolationofanyorderorresolutionnotsubjecttoreviewpromulgatedbytheStateAirResourcesBoardoranairpollutioncontroldistrict;(2)subjecttoceaseanddesistordernotsubjecttoreviewissuedpursuanttoSection13301oftheWaterCodeforviolationofwastedischargerequirementsordischargeprohibitions;or(3)finallydeterminedtobeinviolationofprovisionsoffederallawrelatingtoairorwaterpollution.8.PAYEEDATARECORDFORMSTD.204:Thisformmustbecompletedbyallcontractorsthatarenotanotherstateagencyorothergovernmentalentity. Darfur Contracting Act C~l~o:nia Dl>pl!l'fmorr. of P • .oho Horuc' Corr.roots &nd Pure'lsslr>J s ...... oo• Sed.loo Pursuant to Publlc Contract Code (PCC) sections 10475-10481, the Darfur Contracting Act's intent is to preclude State agencies from contracting with scrutinized companies that do business in the African nation of Sudan. A scrutinized company is a company doing specified types of business in Sudan as defined in PCC section 10476. Scrutinized companies are ineligible to, and cannot, contract with a State agency for goods or services {PCC section 10477(a}) unless obtaining permission from the Department of General Services according to the criteria set forth in PCC section 10477(b). Therefore, to be eligible to contract with the California Department of Public Health, please initial one of the following three paragraphs and complete the certification below: 1. BP Initials 2. Initials 3. Initials CERTIFICATION We do not currently have, or we have not had within the previous three years, business activities or other operations outsrde of the United States. OR We are a scrutinized company as defined in Public Contract Code section 10476, but we have received written permission from the Department of General Services (DGS) to submit a bid or proposal pursuant to Public Contract Code section 1 0477{b) or submit a contract/purchase order. A copy of the written permission from DGS is included with our bld, proposal or contract/purchase order. OR We currently have, or we have had within the previous three years, business activities or other operations outside of the United States, but we certify below that we are not a scrutinized company as defined in Public Contract Code section 10476. I, the official named below, CERTIFY UNDER PENALTY OF PERJURY that I am duly authorized to legally bind this company to the clause listed above. This certification is made under the laws of the State of California. fo';;';p';ny"N~m.; (Printed} -lfFe'deral io Number .~,,_~-····c":"o""'u=-:n:-;t~y=o==f":"F""'re ... s:""n""'o==-======"""""';:;;;:=""""'===·~.=·=l~-'"""'"" =""'~=6=o==o ... o ... s ... 1=2="'"""= ...... ~l [By (Authon[· ed Signature) ; . I r ATTEST: ;L PtJ_ BERNICE E. SEIDEL, Clerk I --.. ,, ·-· -Boa~d f SupeQtisors : Printed Name and Title of Person Signing " ,... I ~ ~u~~ Brian Pacheco, Chairman, Board of Supervisors --ep ty Date Executed !fExecWed i~ th; Co~tY ~nd State of L Fresno California ~~~~~~~~~=-==·-1:...~=-=--=-=~···-'·"-'il.."--'• STATE OF CALIFORNIA CALIFORNIA CIVIL RIGHTS LAWS ATTACHMENT DGS OLS 04 (Rev. 01117) DEPARTMENT OF GENERAL SERVICES OFFICE OF LEGAL SERVICES Pursuant to Public Contract Code section 2010, a person that submits a bid or proposal to, or otherwise proposes to enter into or renew a contract with, a state agency with respect to any contract in the amount of $100,000 or above shall certify, under penalty perjury, at the time the bid or proposal is submitted or the contract is renewed. all of the following: 1. CALIFORNIA CIVIL RIGHTS LAWS: For contracts executed or renewed after January 1, 2017, the contractor certifies compliance with the Unruh Civil Rights Act (Section 51 of the Civil Code) and the Fair Employment and Housing Act (Section 12960 of the Government Code); and 2. EMPLOYER DISCRIMINATORY POLICIES: For contracts executed or renewed after January 1, 2017, if a Contractor has an internal policy against a sovereign nation or peoples recognized by the United States government, the Contractor certifies that such policies are not used Jn violation of the Unruh Civil Rights Act (Section 51 of the Civil Code) or the Fair Employment and Housing Act (Section 12960 of the Government Code). CERTIFICATION ,--------------------------------------------------------r----------------------1 1 I, the official named below, certify under penalty of perjury under 1 FederaiiD Number I ! the laws of the State of California that the foregoing is true and I 1 1 correct. j 1 I 946000512 I I I I I Proposer/Bidder Finn Name (Printed) l l I I I I County of Fresno I I ~-------------------------------------------------· . ! :,• By (Aut1o.nrized Signature) ATIEST: tl:. ~j_ BERNICE E. SEIDEL, Clerk ~:OrintecFNameanCTritTioTP"e7Sons79~n9______________ 8 80?of ~u~;rvisAs I Yln* l & + ·tt-l Brian Pacheco, Chairman, Board of Supervisors o ty r--------------------------------r----------------------------------------------1 1 Date Executed 1 Executed in the County and State of 1 I I F c l"f . I L~~~:l,~r:l _________ i ____ ~~:~~----------------a-~~~~~-------------J Figure 1: HIV/AIDS annual incidence trend, 2006-2016, in Fresno County. *Data for 2016 is preliminary and subject to change. Figure 2: HIV/AIDS annual incidence trend by age group, 2006-2016, in Fresno County. Note 1: *Data for 2016 is preliminary and subject to change. 0 2 4 6 8 10 12 14 0 20 40 60 80 100 120 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016*Annual Incidence (per 100,000 population)Number of CasesYear Cases Rate 11 17 28 16 24 27 24 19 29 32 25 52 54 44 79 77 86 80 70 83 70 73 0 2 4 6 8 10 12 14 0 20 40 60 80 100 120 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016*Annual Incidence (per 100,000 population)Number of CasesYear 25 years or younger Older than 25 years Rate ATTACHMENT A Figure 3: Total Living HIV/AIDS Cases by Age Group as of December 31, 2016, in Fresno County. 11 77 309 281 242 168 56 1222 177 318 583 432 139 24 0 100 200 300 400 500 600 700 0-14 15-24 25-34 35-44 45-54 55-64 65-74 75+Number of CasesAge Groups HIV AIDS