Loading...
HomeMy WebLinkAbout294941 MEDI-CAL COUNTY INMATE PROGRAM AGREEMENT Article 1 – Parties A. The parties to this Agreement (Agreement) are Fresno (the County) and the California Department of Health Care Services (DHCS). B. The County may voluntarily choose to participate in the Medi-Cal County Inmate Program (MCIP) by entering into this Agreement as authorized by Welfare and Institutions Code sections 14053.7 and 14053.8, and Government Code sections 26605.6, 26605.7, and 26605.8. C. DHCS is the single state agency responsible for administering the California Medical Assistance Program (Medi–Cal), including MCIP, pursuant to California Welfare and Institutions Code section 14100.1. Article 2 – Purpose of the Agreement A. The purpose of this Agreement is to set forth the terms a County must abide by in order to participate in MCIP. If a County does not participate in MCIP or does not abide by the terms of this Agreement, the County remains responsible for arranging for and paying for medical care for its inmates. MCIP creates budgetary savings for the County for the medical care provided to its Medi-Cal eligible inmates. MCIP, makes federal financial participation (FFP) available for medical care provided to Medi-Cal eligible county inmates. The County receives budgetary savings because it does not fund from the federal share of MCIP services for their Medi-Cal eligible inmates. MCIP services are provided by Medi-Cal providers to Medi-Cal eligible inmates, for which FFP- may be claimed consistent with federal law, including but not limited to subparagraph (A) following paragraph (29) of Section 1905(a) of the Social Security Act. 1) MCIP allows the Medi-Cal providers to directly bill DHCS for MCIP services and DHCS will reimburse the Medi-Cal providers at their applicable Medi-Cal rate for the services rendered, to the extent FFP is available. DHCS will seek and retain FFP claimed for MCIP services and the County will reimburse DHCS any remaining balance for the claims paid by DHCS to the Medi-Cal provider for MCIP services, except for the MCIP services provided by public providers under the certified public expenditure (CPE) process. 2) When the Medi-Cal provider is a Designated Public Hospital (DPH) or other public provider that incurs the cost of the nonfederal share pursuant to the CPE process, the Medi-Cal provider shall receive the FFP resulting from expenditures for the MCIP services. Notwithstanding the sentence above, DPHs may claim under Subparagraph 1 for MCIP services that are Agreement No. 17-041 2 not claimed through the CPE process established in the Demonstration Project. B. The County shall reimburse DHCS its apportioned share of the nonfederal share of the administrative costs incurred for the administration of MCIP based on Addendum A. Article 3 – Term of the Agreement Subject to the provisions of this Agreement, the term of this Agreement shall be three months from April 1, 2017, through June 30, 2017. Article 4 – Maximum Payable Amount A. The amount under this Agreement that the County shall be obligated to reimburse DHCS for MCIP services paid by DHCS to Medi-Cal providers shall not exceed the nonfederal share of the Medi-Cal payments for MCIP services for the County’s inmates incurred by DHCS. The maximum payable amount shall not exceed: $575,000.00 This amount is subject to the annual limitations listed below: Year MCIP Services Total Nonfederal Share SFY 2016-17 $575,000.00 B. The amount that the County shall be obligated to pay DHCS for MCIP administrative services rendered under this Agreement shall not exceed its apportioned share of the nonfederal share of the federally claimable costs of administering MCIP incurred by DHCS. The maximum payable amount shall not exceed the County’s apportioned share, which shall be based on a methodology specified in Addendum A, which is: $1,780.08. This amount is subject to the annual limitations listed below: Year MCIP Administrative Services Total Nonfederal Share for the County SFY 2016-17 $ 1,780.08 C. The maximum payable amount under this Agreement shall not exceed $576,780.08 3 D. For future SFY periods not covered under this Agreement, the maximum payable amount will be determined through a new Agreement or an amendment to this Agreement. Article 5 – Contact Persons Any notice, request, demand or other communication required or permitted hereunder, shall be deemed to be properly given when deposited in the United States mail, postage prepaid, and addressed: In the case of the County, to: County Coordinator County of Fresno Department of Public Health Attn: David Pomaville, Director P.O. Box 11867 Fresno, CA 93775 Or to such person or address as the County may furnish in writing or e-mail to DHCS. In the case of DHCS, to: California Department of Health Care Services Safety Net Financing Division Medi-Cal Supplemental Payments Section Attn: Inmate Medi-Cal Claiming Unit 1501 Capitol Avenue, MS 4504 P.O. Box 997436 Sacramento, CA 95899-7436 Or to such person or address as DHCS may, from time to time, furnish in writing or email to County. Article 6 – Payment Terms and Invoicing A. General Terms 1) The County shall compensate DHCS for the County’s apportioned share of the nonfederal share of MCIP administrative services, and for the nonfederal share of MCIP services listed in Article 7, as required by Welfare and Institutions Code sections 14053.7 and 14053.8, and Government Code sections 26605.6, 26605.7, and 26605.8, within sixty (60) days of receipt of an invoice from DHCS, which specifies both the total federally claimable cost, and the nonfederal share of the total cost, for payments DHCS has made to providers, except that the County shall 4 not reimburse the state for the nonfederal share of services billed by Medi- Cal providers under a CPE process, as described in Articles 8 and 11, below. MCIP administrative services and MCIP services shall be separately invoiced by DHCS to the County. Addendum A attached to this Agreement includes details regarding the nonfederal share of administrative costs. If the County is found to have overpaid DHCS comparing its owed nonfederal share to payments actually made, DHCS shall refund the overpayment to the County within forty-five (45) days of an invoice from the County, containing the same information. This refund may be made by offsetting the amount against the County’s next quarterly payment due to DHCS. 2) Failure by the County to timely compensate DHCS pursuant to Paragraphs B and C shall constitute a material breach of this Agreement by the County, which, at DHCS’ discretion, may result in termination by DHCS pursuant to Article 10. The County may cure such breach by rendering payment of the amount owed to DHCS prior to the termination of this Agreement. 3) In no event shall payment be made by the County for any invoice or portion thereof exceeding the respective maximum annual Agreement amount specified in Article 4. Payment for any MCIP administrative services rendered by DHCS or MCIP services paid by DHCS exceeding the respective maximum annual Agreement amount shall require an amendment to this Agreement pursuant to Article 9. If the County fails to execute a retroactive amendment to the maximum payable amount under this Agreement, DHCS shall terminate the Agreement pursuant to Article 10. 4) Payments shall be sent to DHCS at the following address (or such other address as DHCS may specify in writing): California Department of Health Care Services Safety Net Financing Division Medi-Cal Supplemental Payments Section Attn: Inmate Medi-Cal Claiming Unit 1501 Capitol Avenue, MS 4504 P.O. Box 997436 Sacramento, CA 95899-7436 B. MCIP Services 1) DHCS shall submit to the County a quarterly invoice for MCIP services that identifies the nonfederal share amount, and a report that contains information regarding paid claims data for the quarter, including information identifying the provider of services and the beneficiary, the 5 recipient aid code, and amount of reimbursement, and other information that may be agreed to between the parties. 2) The DHCS invoice shall not contain and the County shall not compensate DHCS for MCIP services provided by Medi-Cal providers where the County incurs the cost of providing MCIP services and claims them through the CPE process. 3) If the Medi-Cal provider renders MCIP services that are not reimbursable under the CPE process established, then the invoice shall contain and the County shall reimburse DHCS for the nonfederal share of DHCS’ payments for these MCIP services. C. MCIP Administrative Services 1) DHCS shall submit to the County an annual invoice for the County’s apportioned share of the nonfederal share of MCIP administrative services based on Addendum A. The annual invoice for reimbursement identifies the following summarized categories of DHCS costs for the allocated SFY period billed: salary, benefits, operating expenses, and total costs. Costs shall be multiplied by one minus the Federal Medical Assistance Percentage applicable to such administrative costs subject to the limit on the amount reimbursable by the County under Article 4. For SFY 2016-17 and thereafter, DHCS shall submit annual invoices to the County no later than one hundred eighty (180) days following the close of the SFY. 2) The County shall not be obligated to pay DHCS for the MCIP administrative services covered by any invoice if DHCS presents the invoice to the County more than one (1) year after this Agreement terminates. Article 7 – DHCS Responsibilities A. MCIP Services 1) DHCS shall pay the appropriate Medi-Cal fee-for-service rate to Medi-Cal providers that directly bill DHCS for MCIP services rendered to the County’s MCIP-eligible inmates and shall seek FFP. DHCS shall be responsible to pay such providers only to the extent the County commits to reimburse DHCS the nonfederal share of all federally reimbursable MCIP claims and for which FFP is available and retained by DHCS for the MCIP service claims. 2) DHCS shall maintain accounting records to a level of detail which identifies the actual expenditures incurred for MCIP services, the services 6 provided, the county responsible, the specific inmate treated, the inmate’s aid code, and the specific provider billing. 3) DHCS shall submit claims in a timely manner to the federal Medicaid Program to draw down FFP for DHCS, and shall draw down and distribute FFP for MCIP services claimed through the CPE process. Such claims shall be submitted in compliance with all applicable laws and regulations. B. MCIP Administrative Services 1) DHCS shall administer MCIP and this Agreement for claiming federal reimbursement for MCIP services. It is understood by both the County and DHCS that other administrative activities including, but not limited to, transporting MCIP eligible beneficiaries, arranging for their care and for their incarceration remain the administrative responsibilities of the County. 2) DHCS shall maintain accounting records to a level of detail which identifies the actual expenditures incurred for personnel services which includes salary/wages, benefits, overhead costs for DHCS’s staff, as well as equipment and all related operating expenses applicable to these positions including, but not limited to, general expense, rent and supplies, and travel cost for identified staff and managerial staff working specifically on activities or assignments directly related to MCIP. C. General Responsibilities 1) DHCS shall: i. Ensure that an appropriate audit trail exists within DHCS records and accounting system and maintain expenditure data as indicated in this Agreement. ii. Designate a person to act as liaison with County with regard to issues concerning this Agreement. This person shall be identified to County’s contact person for this Agreement. iii. Provide a written response by email or mail to County’s contact person within thirty (30) days of receiving a written request for information related to MCIP. iv. With each quarterly invoice, provide paid claim analysis report to the County regarding MCIP claims submitted by providers for the County’s MCIP-eligible inmates, as used for the determination of the corresponding nonfederal share that is the County’s obligation under this Agreement, 7 2) Should the scope of work or services to be performed under this Agreement conflict with DHCS’ responsibilities under federal Medicaid law, the responsibilities under federal Medicaid law shall take precedence. 3) DHCS’ cessation of any activities due to federal Medicaid law responsibilities does not relinquish the obligation of the County to reimburse DHCS for MCIP administrative costs and MCIP services incurred by DHCS in connection with this Agreement for periods in which the County participated in the program. 4) DHCS agrees to provide to the County, or any federal or state department having monitoring or reviewing authority, access to and the right to examine its applicable records and documents for compliance with relevant federal and state statutes, rules and regulations, and this Agreement. Article 8 – County Responsibilities A. MCIP Services 1) Except as provided in (vi.) of this section, the County is responsible for reimbursing DHCS for the nonfederal share of MCIP services paid by DHCS to Medi-Cal providers rendering MCIP services to the County’s MCIP eligible beneficiaries. i. The County may pay a Medi-Cal provider to the extent required by or otherwise permitted by state and federal law to arrange for services for the MCIP individuals. Such additional amounts shall be paid entirely with County funds, and shall not be eligible for Social Security Act Title XIX FFP. ii. If DHCS pays the Medi-Cal provider more than what the county would have paid for services rendered, the county cannot request the difference from the Medi-Cal provider. iii. If the county would have paid the Medi-Cal provider less than what DHCS paid the Medi-Cal provider, the county is still obligated to reimburse DHCS for the nonfederal share of the payment from DHCS for MCIP services. iv. In the event that FFP is not available for any MCIP service claimed pursuant to this Agreement, the County shall be solely responsible for arranging and paying for any such MCIP service. v. If the Centers for Medicare & Medicaid Services (CMS) determines an overpayment has occurred for a payment made to a Medi-Cal 8 provider for MCIP services to the County’s MCIP-eligible inmate, including the application of any federal payment limit that reduces the amount of FFP available for MCIP services, then DHCS shall seek the overpayment amount from the provider and return the collected FFP to CMS and return the collected nonfederal share of the overpayment to the County. In the event that DHCS cannot recover from the Medi-Cal provider such overpayment, the County shall pay DHCS an amount equal to the FFP portion of the unrecovered amount to the extent that section 1903(d)(2)(D) of the Social Security Act is found not to apply. vi. The County is not responsible for reimbursing DHCS for the nonfederal share of expenditures for MCIP services provided by DPHs when those services are reimbursed under the CPE process because DHCS is not responsible for the nonfederal share of expenditures for MCIP services reimbursed in the CPE process. vii. The County is responsible for reimbursing DHCS for the nonfederal share of MCIP services provided by DPHs that are not reimbursed under the CPE process. 2) If CMS determines DHCS claimed a higher federal medical assistance percentage (FMAP) rate than is allowed and FFP is reduced by CMS for the MCIP services provided to a County’s MCIP-eligible inmate for MCIP services, then the County shall hold DHCS harmless for the return of the FFP to CMS. B. MCIP Administrative Services 1) As a condition of participating in MCIP, the County accepts its responsibility for reimbursing DHCS for the County’s apportioned share of the nonfederal share of costs of MCIP administrative services based on Addendum A, performed by DHCS in administering MCIP, so that there is no expenditure from the State General Fund. 2) The County shall reimburse DHCS its allotted portion of the nonfederal share of funding for compensation, associated operating expenses, equipment, and travel costs for no more than 3.50 full-time equivalent (FTE) positions composed of: one-half (0.50) FTE Staff Service Manager I, two (2) FTE Staff Services Analysts/Associate Governmental Program Analysts, one-half (0.50) FTE Attorney, and one-half (0.50) FTE Accounting Officer, to be established and housed at DHCS, to support the reported expenditures submission process for obtaining federal reimbursement under this Agreement. The County’s allotted portion shall be based on a methodology specified in Addendum A. 9 C. General Responsibilities 1) Upon the County’s compliance with all applicable provisions in this Agreement and applicable laws, the County may send its MCIP-eligible inmates to Medi-Cal providers to receive MCIP services. 2) The County shall reimburse DHCS pursuant to Paragraphs A and B with funds from the County’s General Fund, or from any other funds allowed under federal law and regulation, including but not limited to, Section 1903(w) of the Social Security Act and Code of Federal Regulations, title 42, part 433, subpart B. 3) In the event of any federal deferral or disallowance which is applicable to MCIP expenditures, the County shall provide all documents requested by DHCS within fourteen (14) days. 4) The County shall assist with the completion of and delivery of completed Medi-Cal applications to County Welfare Department (CWD) within 90 calendar days after the date of admission of the inmate to an Medi-Cal provider off of the grounds of the county correctional facility which results in an expected stay of more than 24 hours. Article 9 – Amendments A. Amendments to this Agreement shall be made only by a writing signed by the parties to this Agreement and, if required by state law, by approval of the California Department of General Services. Notwithstanding the previous sentence, any update made to the appropriate contact persons identified in Article 5 may be made by e-mail to the other contact person or persons and without formal amendment. B. This Agreement shall be amended pursuant to findings from the periodic assessment identified in Article 11.H, to accurately reflect the State’s administrative costs and MCIP medical care costs. Article 10 – Termination and Agreement Disputes A. This Agreement may be terminated by any party upon written notice given at least thirty (30) calendar days prior to the termination date. Notice shall be addressed to the respective parties as identified in Article 5 of this Agreement. The County shall remain obliged after the termination date to pay for all MCIP administrative costs and MCIP services incurred by DHCS for periods in which it participated in the program. 10 B. This Agreement shall be terminated upon cessation of MCIP. The County shall remain obliged after the termination date to pay for all of the County’s apportioned share of MCIP administrative costs based on Addendum A and all of the County’s MCIP services incurred by DHCS for periods in which it participated in the program. C. An informal dispute resolution process shall be undertaken prior to the dispute resolution processes described in Subparagraphs 1 to 2, below. In case of a dispute there shall be a discussion between the County and DHCS staff, and if not resolved then the County shall address the issue to DHCS in a written letter. If unresolved then the dispute resolution processes in Subparagraphs 1 to 2 shall be undertaken as appropriate. 1) Nothing in this Agreement shall prevent the County from pursuing any other administrative and judicial review available to it under law. 2) Judicial review pursuant to Code of Civil Procedure section 1085 shall be available to resolve disputes relating to the terms, performance, or termination of this Agreement, or any act, failure to act, conduct, order, or decision of DHCS that violate this Agreement subject to Article 11.F. D. The terms of Article 6 (Payment Terms and Invoicing), Article 10 (Termination and Agreement Disputes), Article 11.B (Indemnification), and Article 11.D (Records) shall survive after the termination date. Article 11 – General Provisions A. Definitions. 1) The term “certified public expenditure process” or “CPE process” means the process established for the Medi-Cal program under state law (including but not limited to section 14166.1, et seq.), the California Medi- Cal state plan, and approved Medicaid demonstration projects and waivers through which public Medi-Cal providers claim federal financial participation for their allowable expenditures. 2) The term “days” as used in this Agreement shall mean calendar days unless specified otherwise. 3) The term “Demonstration Project” means the California Medi-Cal 2020 Demonstration, Number 11-W-00193/9, as approved by CMS effective beginning December 30, 2015. 4) The term “designated public hospital” is defined as set forth in the Demonstration Project, which shall be codified in state law at Welfare and 11 Institutions Code section 14184.10, subdivision (f) pursuant to SB 815 (2016), and as may be modified from time to time. 5) The term “inmate” as used in this Agreement includes the persons identified in Welfare and Institutions Code sections 14053.7(e)(2)(A) and 14053.8(k) “juvenile inmate,” and Government Code sections 26605.6(a) “prisoner,” 26605.7(a) “prisoner” and (d)(1) “probationer,” and 26605.8 “prisoner” and “probationer.” 6) The term “MCIP” or “Medi-Cal County Inmate Program” contains the following three components: the Adult County Inmate Program (ACIP), as authorized in state law pursuant to Welfare and Institutions Code section 14053.7 and Penal Code section 5072, the Juvenile County Ward Program (JCWP), as authorized in Welfare and Institutions Code section 14053.8, and the County Compassionate Release Program (CCRP) and County Medical Probation Program (CMPP), as authorized by Government Code sections 26605.6, 26605.7, and 26605.8. 7) “MCIP administrative services” means the administrative services provided by DHCS personnel for the administration of MCIP, which shall include, but not be limited to those services provided by the personnel in Article 8 when claiming federal reimbursement for MCIP services and seeking reimbursement for DHCS from the County. 8) “Medi-Cal provider” means, any individual, partnership, group association, corporation, institution, or entity and the officer, directors, owners, managing employees or agents of any partnership, group association, corporation, institution, or entity that provides services, goods, supplies, or merchandise, directly or indirectly, to a Medi-Cal beneficiary, and that has been enrolled in the Medi-Cal program. For purposes of MCIP, a Medi-Cal provider may claim for MCIP services rendered to the MCIP-eligible inmate depending on the MCIP component program. For example, a clinic cannot seek reimbursement from DHCS for outpatient services provided to an ACIP inmate because the outpatient services provided are not allowable as MCIP services for ACIP. A Medi- Cal provider does not go through a separate Medi-Cal enrollment or certification process to participate in MCIP. 9) “MCIP services” constitutes all of the following, only to the extent federal financial participation is available: a) in ACIP, Medi-Cal allowable inpatient hospital services, including inpatient psychiatric services, and physician services provided during the inpatient hospital service stay of adult inmates in county correctional facilities who are determined eligible for Medi-Cal pursuant to Welfare and Institutions Code section 14053.7; b) in the Compassionate Release Program pursuant to Government Code 12 section 26605.6 and Medical Probation Program pursuant to Government Code section 26605.7, full-scope Medi-Cal services; c) in JCWP, Medi- Cal allowable inpatient hospital services, including inpatient psychiatric services and physician services, of juvenile inmates in county correctional facilities who are determined eligible for Medi-Cal services pursuant to Welfare and Institutions Code section 14053.8; and, d) any other Medi-Cal program for which federal reimbursement is available for coverage of adult inmates and juvenile inmates in county correctional facilities, if authorized by law and agreed to by the County and DHCS by amending this Agreement. 10) The term “Medi-Cal rate” means the reimbursement determined by the reimbursement methodology approved for the Medi-Cal provider under the California State Plan, or Social Security Act section 1115 Demonstration Project or section 1915 waiver. 11) The State Fiscal Year (SFY) begins on July 1st of each year and ends on June 30th in the subsequent calendar year. B. Indemnification. It is agreed that the County shall defend, hold harmless, and indemnify DHCS, its officers, employees, and agents from any and all reported expenditures, liability, loss, or expense (including reasonable attorney fees) for injuries or damage to any person, any property, or both which arise out of the terms and conditions of this Agreement and the negligent or intentional acts or omissions of the County, its officers, employees, or agents. C. Severability. If any term, condition, or provision of this Agreement is held by a court of competent jurisdiction to be invalid, void, or unenforceable, the remaining provisions will nevertheless continue in full force and effect, and shall not be affected, impaired or invalidated in any way. Notwithstanding the previous sentence, if a decision by a court of competent jurisdiction invalidates, voids, or renders unenforceable a term, condition, or provision in this Agreement that is included in the purpose of this Agreement then the parties to this Agreement shall either amend this Agreement pursuant to Article 9, or it shall be terminated pursuant to Article 10. D. Records. DHCS and the County shall maintain and preserve all records relating to this Agreement for a period of three (3) years from DHCS’ receipt of the last payment of FFP, or until three years after all audit findings are resolved, whichever is later. This does not limit any responsibilities held by DHCS or the County provided for elsewhere in this Agreement, or in state or federal law. E. Compliance with Applicable Laws. All parties performance under this Agreement shall be in accordance with all applicable federal and state laws, including, but not limited to: 13 1) The Americans with Disabilities Act of 1990, as amended; 2) Section 504 of the Rehabilitation Act of 1973, as amended; 3) Title XIX of the Social Security Act; 4) Welfare and Institutions Code section 14000 et seq.; 5) Government Code section 53060; 6) The California Medicaid State Plan; 7) Laws and regulations including, but not limited to those related to licensure, certification, confidentiality of records, quality assurance, and nondiscrimination; 8) The Policy and Procedure Letters, and similar instructions, published with regulatory authority; 9) Government Code sections 26605.6, 2660.7, and 26605.8; 10) Penal Code section 5072; 11) Title 42 of the Code of Federal Regulations; and, 12) California Code of Regulations. F. Controlling Law and Venue. The validity of this Agreement and its terms or provisions, as well as the rights and duties of the parties hereunder, the interpretation and performance of this Agreement shall be governed by the laws of the State of California. Venue of any action brought with regards to this Agreement shall be in any county in which the Attorney General maintains an office. G. Integration Clause. 1) This Agreement and any exhibits and addendums attached hereto shall constitute the entire Agreement among the parties to it pertaining to the implementation of MCIP and supersedes any prior or contemporaneous understanding or agreement with respect to the subject matter of this Agreement. 2) Notwithstanding Subparagraph G.1., DHCS Form 9098 or DHCS Form 6208 (whichever is applicable) is incorporated by reference into this Agreement if the County has a DHCS Form 9098 or DHCS Form 6208 on record. Notwithstanding Subparagraph G.1., the terms of the DHCS Form 9098 or DHCS Form 6208 controls to the extent there is a conflict with this Agreement, except for Article 10 of this Agreement. If the DHCS Form 9098 or DHCS Form 6208 does not address a matter addressed by this Agreement, then this Agreement controls. H. Periodic Assessment. Pursuant to Welfare and Institutions Code sections 14053.7 and 14053.8, and Government Code sections 26605.6, 26605.7, and 26605.8, the County enters into this Agreement in order to implement MCIP under which the County may participate and for which the County will pay the nonfederal share of all federally reimbursable administrative costs and medical care costs incurred by DHCS performing activities described in Article 7. The 14 County agrees that DHCS, in its sole discretion, may conduct a periodic assessment in consultation with the counties, of such costs incurred by DHCS to determine compliance with Welfare and Institutions Code sections 14053.7 and 14053.8, Penal Code section 5072, and Government Code sections 26605.6, 26605.7, and 26605.8, and DHCS agrees to ensure that all invoicing as described in Article 6 and any other relevant documentation will be accordingly updated to ensure compliance with Welfare and Institutions Code sections 14053.7 and 14053.8, Penal Code section 5072, and Government Code sections 26605.6, 26605.7, and 26605.8. I. Conformance Clause. Any provision of this Agreement in conflict with present or future governing authorities is hereby amended to conform to those authorities and such amended provisions supersede any conflicting provisions in this Agreement. The governing authorities include, but are not limited to the authorities listed in Article 11.E. J. Waiver. No covenant, condition, duty, obligation, or undertaking made a part of this Agreement shall be waived except by amendment of the Agreement by the parties hereto, and forbearance or indulgence in any other form or manner by either party in any regard whatsoever shall not constitute a waiver of the covenant, condition, duty, obligation, or undertaking to be kept, performed, or discharged by the other party to which the same may apply; and, until performance or satisfaction of all covenants, duties, obligations, or undertakings is complete, the party shall have the right to invoke any remedy available under this Agreement, or under law, notwithstanding such forbearance or indulgence. K. Third Party Benefit. None of the provisions of this Agreement are or shall be construed as for the benefit of, or enforceable by, any person not a party to this Agreement. L. Conflict of Interest. The County is subject to the Medi-Cal Conflict of Interest Law, as applicable and set forth in Welfare and Institutions Code section 14022 and Article 1.1 (commencing with section 14030), and implemented pursuant to California Code of Regulations, title 22, section 51466. M. Budget Contingency Clause. 1) DHCS will seek an appropriation in the Budget Act each State fiscal year which would authorize DHCS to pay Medi-Cal providers for MCIP services. It is mutually agreed that if the State Budget Act of the current SFY or any subsequent SFYs covered under this Agreement does not appropriate any funds for MCIP, this Agreement shall be of no further force and effect. In this event, an Article 10.B termination shall be implemented and DHCS shall have no liability to pay any funds whatsoever to Medi-Cal providers for MCIP services for the County’s inmates rendered through the termination date of this Agreement. 15 2) If funding associated with MCIP for any SFY is reduced by the State Budget Act DHCS shall have the option to cancel this Agreement, with no liability occurring to the State. N. Limitation of State Liability. 1) Notwithstanding any other provision of this Agreement, DHCS shall be held harmless from any federal audit disallowance and interest resulting from payments made by the federal Medicaid program as reimbursement for claims providing services for MCIP, less the amounts already remitted to or recovered by DHCS for the disallowed claim. 2) To the extent that a federal audit disallowance and interest results from a claim or claims for which the Medi-Cal provider has received reimbursement for MCIP services under this Agreement, DHCS shall recoup from the Medi-Cal provider, upon written notice, amounts equal to the amount of the disallowance and interest in that fiscal year for the disallowed claim, less the amounts already remitted to or recovered by DHCS. All subsequent claims submitted to DHCS applicable to any previously disallowed claim, may be held in abeyance, with no payment made, until the federal disallowance issue is resolved. O. Exclusions. The County shall comply with the following requirements: 1) The conviction of an employee or subcontractor of the County, or of an employee of a subcontractor, of any felony or of a misdemeanor involving fraud, abuse of any Medi-Cal beneficiary, or abuse of the Medi-Cal program, shall result in the exclusion of that employee or subcontractor, or employee of a subcontractor, from participation in MCIP except as a beneficiary. 2) Exclusion after conviction described in Article 11.O.1 shall result regardless of any subsequent order under Penal Code section 1203.4 allowing a person to withdraw his or her plea of guilty and to enter a plea of not guilty, or setting aside the verdict of guilty, or dismissing the accusation, information, or indictment. 3) Suspension or exclusion of an employee or a subcontractor, or of an employee of a subcontractor, from participation in the Medi-Cal program, the Medicaid program, or the Medicare program, shall result in the exclusion of that employee or subcontractor, or employee of a subcontractor, from participation in MCIP, except as a beneficiary. 4) Revocation, suspension, or restriction of the license, certificate, or registration of any employee, subcontractor, or employee of a 16 subcontractor, shall result in exclusion from MCIP, when such license, certificate, or registration is required for the provision of services. P. Confidentiality. The County shall comply with the applicable confidentiality requirements as specified in Section 1902(a)(7) of the Social Security Act; Code of Federal Regulations, title 42, section 431.300; Welfare and Institutions Code section 14100.2; and California Code of Regulations, title 22, section 51009; and, the Business Associates Agreement attached and hereby incorporated by reference. Q. Data Sharing. 1) The County shall comply with all provisions of the current Business Associates Agreement (BAA) incorporated by reference and made part of this Agreement as Addendum B. 2) The County shall comply with all of the requirements imposed by DHCS as required by the Social Security Administration (SSA) Agreement between DHCS and the Social Security Administration, which is incorporated by reference and made part of this Agreement as Addendum C. i. Please note these documents are highly sensitive and confidential. Only the county Privacy and Security Officers or designee shall receive these documents, and disclosure shall be limited to the appropriate parties involved with Medi-Cal PII. These documents are not public and shall not be published on any website accessible by or otherwise made available to the public. R. Agreement Signature Certification. The person signing this Agreement on behalf of the County shall complete and sign the certification incorporated by reference and made part of this Agreement as Addendum D. ADDENDUM A: MCIP Administrative Costs The Medi-Cal County Inmate Program (MCIP) agreement is a one-year contract giving counties the option to participate on an annual basis. However, the agreement for SFY 2016-17, will be for services between April 2017-June 2017. Timelines for SFY 2016-17 and SFY 2017-18 have been revised; please see below. The methodology for calculating each county’s nonfederal share of administrative costs was developed by DHCS, in consultation with the California State Association of Counties, County Health Executives Association of California, California Association of Public Hospitals and Health Systems, and the California State Sheriffs’ Association. For SFY 2016-17 and SFY 2017-18 the nonfederal share of administrative costs allocated to each county will be based on the following: x 30% of the total administrative costs will be distributed evenly to participating counties over 50,000 in population. * x 70% of the total administrative costs will be allocated to participating counties pro-rata based on population. * *Population data will be obtained from the California Department of Finance, Demographic Estimates DHCS will invoice participating counties for the nonfederal share of administrative costs six months after the close of the SFY based on calculated administrative costs per the methodology above, not exceeding the estimated amounts in the MCIP agreements. Timeline: x November 10, 2016 – DHCS sent the MCIP agreements to all counties for the SFY 2016- 17. x December 21, 2016 – DHCS will send the MCIP agreement for SFY 2017-18 and County Participation Forms for SFY 2016-17 and SFY 2017-18 to all counties. Counties will certify participation or non-participation in the MCIP in order for DHCS to calculate the administrative costs for participating counties. x January 9, 2017–All Counties will submit their County Participation Form for SFY 2016- 17 and SFY 2017-18. x January 13, 2017 – DHCS will send out the nonfederal share of the administrative costs to participating Counties. x February 15, 2017- Participating Counties will submit the signed MCIP agreement for SFY 2016-17 and SFY 2017-18 to DHCS. x April 1, 2017- DHCS will ensure agreements are in place for counties participating SFY 2016-17. x May 1, 2017- DHCS will ensure agreements are in place for counties participating SFY 2017-18. Contractor Name XX-XXXXX Page 1 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 I. Recitals A. This Contract (Agreement) has been determined to constitute a business associate relationship under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191 (“HIPAA”), the Health Information Technology for Economic and Clinical Health Act, Public Law 111-005 ('the HITECH Act"), 42 U.S.C. section 17921 et seq., and their implementing privacy and security regulations at 45 CFR Parts 160 and 164 (“the HIPAA regulations”). B. The Department of Health Care Services (“DHCS”) wishes to disclose to Business Associate certain information pursuant to the terms of this Agreement, some of which may constitute Protected Health Information (“PHI”), including protected health information in electronic media (“ePHI”), under federal law, and personal information ("PI") under state law. C. As set forth in this Agreement, Contractor, here and after, is the Business Associate of DHCS acting on DHCS' behalf and provides services, arranges, performs or assists in the performance of functions or activities on behalf of DHCS and creates, receives, maintains, transmits, uses or discloses PHI and PI. DHCS and Business Associate are each a party to this Agreement and are collectively referred to as the "parties.” D. The purpose of this Addendum is to protect the privacy and security of the PHI and PI that may be created, received, maintained, transmitted, used or disclosed pursuant to this Agreement, and to comply with certain standards and requirements of HIPAA, the HITECH Act and the HIPAA regulations, including, but not limited to, the requirement that DHCS must enter into a contract containing specific requirements with Contractor prior to the disclosure of PHI to Contractor, as set forth in 45 CFR Parts 160 and 164 and the HITECH Act, and the Final Omnibus Rule as well as the Alcohol and Drug Abuse patient records confidentiality law 42 CFR Part 2, and any other applicable state or federal law or regulation. 42 CFR section 2.1(b)(2)(B) allows for the disclosure of such records to qualified personnel for the purpose of conducting management or financial audits, or program evaluation. 42 CFR Section 2.53(d) provides that patient identifying information disclosed under this section may be disclosed only back to the program from which it was obtained and used only to carry out an audit or evaluation purpose or to investigate or prosecute criminal or other activities, as authorized by an appropriate court order. E. The terms used in this Addendum, but not otherwise defined, shall have the same meanings as those terms have in the HIPAA regulations. Any reference to statutory or regulatory language shall be to such language as in effect or as amended. II. Definitions A. Breach shall have the meaning given to such term under HIPAA, the HITECH Act, the HIPAA regulations, and the Final Omnibus Rule. B. Business Associate shall have the meaning given to such term under HIPAA, the HITECH Act, the HIPAA regulations, and the final Omnibus Rule. C. Covered Entity shall have the meaning given to such term under HIPAA, the HITECH Act, the HIPAA regulations, and Final Omnibus Rule. D. Electronic Health Record shall have the meaning given to such term in the HITECH Act, including, but not limited to, 42 U.S.C Section 17921 and implementing regulations. Contractor Name XX-XXXXX Page 2 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 E. Electronic Protected Health Information (ePHI) means individually identifiable health information transmitted by electronic media or maintained in electronic media, including but not limited to electronic media as set forth under 45 CFR section 160.103. F. Individually Identifiable Health Information means health information, including demographic information collected from an individual, that is created or received by a health care provider, health plan, employer or health care clearinghouse, and relates to the past, present or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present, or future payment for the provision of health care to an individual, that identifies the individual or where there is a reasonable basis to believe the information can be used to identify the individual, as set forth under 45 CFR section 160.103. G. Privacy Rule shall mean the HIPAA Regulation that is found at 45 CFR Parts 160 and 164. H. Personal Information shall have the meaning given to such term in California Civil Code section 1798.29. I. Protected Health Information means individually identifiable health information that is transmitted by electronic media, maintained in electronic media, or is transmitted or maintained in any other form or medium, as set forth under 45 CFR section 160.103. J. Required by law, as set forth under 45 CFR section 164.103, means a mandate contained in law that compels an entity to make a use or disclosure of PHI that is enforceable in a court of law. This includes, but is not limited to, court orders and court-ordered warrants, subpoenas or summons issued by a court, grand jury, a governmental or tribal inspector general, or an administrative body authorized to require the production of information, and a civil or an authorized investigative demand. It also includes Medicare conditions of participation with respect to health care providers participating in the program, and statutes or regulations that require the production of information, including statutes or regulations that require such information if payment is sought under a government program providing public benefits. K. Secretary means the Secretary of the U.S. Department of Health and Human Services ("HHS") or the Secretary's designee. L. Security Incident means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of PHI or PI, or confidential data that is essential to the ongoing operation of the Business Associate’s organization and intended for internal use; or interference with system operations in an information system. M. Security Rule shall mean the HIPAA regulation that is found at 45 CFR Parts 160 and 164. N. Unsecured PHI shall have the meaning given to such term under the HITECH Act, 42 U.S.C. section 17932(h), any guidance issued pursuant to such Act, and the HIPAA regulations. III. Terms of Agreement A. Permitted Uses and Disclosures of PHI by Business Associate Permitted Uses and Disclosures. Except as otherwise indicated in this Addendum, Business Associate may use or disclose PHI only to perform functions, activities or services specified in this Agreement, for, or on behalf of DHCS, provided that such use or disclosure would not violate the HIPAA regulations, if done by DHCS. Any such use or disclosure must, to the extent practicable, be limited to the limited data set, as defined in 45 CFR section 164.514(e)(2), or, if needed, to the minimum necessary to accomplish Contractor Name XX-XXXXX Page 3 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 the intended purpose of such use or disclosure, in compliance with the HITECH Act and any guidance issued pursuant to such Act, the HIPAA regulations, the Final Omnibus Rule and 42 CFR Part 2. 1.Specific Use and Disclosure Provisions.Except as otherwise indicated in this Addendum, Business Associate may: a.Use and disclose for management and administration.Use and disclose PHI for the proper management and administration of the Business Associate provided that such disclosures are required by law, or the Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and will be used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware that the confidentiality of the information has been breached. b.Provision of Data Aggregation Services.Use PHI to provide data aggregation services to DHCS. Data aggregation means the combining of PHI created or received by the Business Associate on behalf of DHCS with PHI received by the Business Associate in its capacity as the Business Associate of another covered entity, to permit data analyses that relate to the health care operations of DHCS. B. Prohibited Uses and Disclosures 1. Business Associate shall not disclose PHI about an individual to a health plan for payment or health care operations purposes if the PHI pertains solely to a health care item or service for which the health care provider involved has been paid out of pocket in full and the individual requests such restriction, in accordance with 42 U.S.C. section 17935(a) and 45 CFR section 164.522(a). 2. Business Associate shall not directly or indirectly receive remuneration in exchange for PHI, except with the prior written consent of DHCS and as permitted by 42 U.S.C. section 17935(d)(2). C. Responsibilities of Business Associate Business Associate agrees: 1.Nondisclosure.Not to use or disclose Protected Health Information (PHI) other than as permitted or required by this Agreement or as required by law. 2. Safeguards.To implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of the PHI, including electronic PHI, that it creates, receives, maintains, uses or transmits on behalf of DHCS, in compliance with 45 CFR sections 164.308, 164.310 and 164.312, and to prevent use or disclosure of PHI other than as provided for by this Agreement. Business Associate shall implement reasonable and appropriate policies and procedures to comply with the standards, implementation specifications and other requirements of 45 CFR section 164, subpart C, in compliance with 45 CFR section 164.316. Business Associate shall develop and maintain a written information privacy and security program that includes administrative, technical and physical safeguards appropriate to the size and complexity of the Business Associate’s operations and the nature and scope of its activities, and which incorporates the requirements of section 3, Security, below. Business Associate will provide DHCS with its current and updated policies. Contractor Name XX-XXXXX Page 4 of 15 ADDENDUM B HIPAA Business Associate Addendum 3.Security.To take any and all steps necessary to ensure the continuous security of all computerized data systems containing PHI and/or PI, and to protect paper documents containing PHI and/or PI. These steps shall include, at a minimum: a. Complying with all of the data system security precautions listed in Attachment A, the Business Associate Data Security Requirements; b. Achieving and maintaining compliance with the HIPAA Security Rule (45 CFR Parts 160 and 164), as necessary in conducting operations on behalf of DHCS under this Agreement; c. Providing a level and scope of security that is at least comparable to the level and scope of security established by the Office of Management and Budget in OMB Circular No. A-130, Appendix III - Security of Federal Automated Information Systems, which sets forth guidelines for automated information systems in Federal agencies; and d. In case of a conflict between any of the security standards contained in any of these enumerated sources of security standards, the most stringent shall apply. The most stringent means that safeguard which provides the highest level of protection to PHI from unauthorized disclosure. Further, Business Associate must comply with changes to these standards that occur after the effective date of this Agreement. Business Associate shall designate a Security Officer to oversee its data security program who shall be responsible for carrying out the requirements of this section and for communicating on security matters with DHCS. D.Mitigation of Harmful Effects. To mitigate, to the extent practicable, any harmful effect that is known to Business Associate of a use or disclosure of PHI by Business Associate or its subcontractors in violation of the requirements of this Addendum. E.Business Associate’s Agents and Subcontractors. 1. To enter into written agreements with any agents, including subcontractors and vendors, to whom Business Associate provides PHI or PI received from or created or received by Business Associate on behalf of DHCS, that impose the same restrictions and conditions on such agents, subcontractors and vendors that apply to Business Associate with respect to such PHI and PI under this Addendum, and that comply with all applicable provisions of HIPAA, the HITECH Act the HIPAA regulations, and the Final Omnibus Rule, including the requirement that any agents, subcontractors or vendors implement reasonable and appropriate administrative, physical, and technical safeguards to protect such PHI and PI. Business associates are directly liable under the HIPAA Rules and subject to civil and, in some cases, criminal penalties for making uses and disclosures of protected health information that are not authorized by its contract or required by law. A business associate also is directly liable and subject to civil penalties for failing to safeguard electronic protected health information in accordance with the HIPAA Security Rule. A “business associate” also is a subcontractor that creates, receives, maintains, or transmits protected health information on behalf of another business associate. Business Associate shall incorporate, when applicable, the relevant provisions of this Addendum into each subcontract or subaward to such agents, subcontractors and vendors, including the requirement that any security incidents or breaches of unsecured PHI or PI be reported to Business Associate. DHCS HIPAA BAA 2/15 Contractor Name XX-XXXXX Page 5 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 2. In accordance with 45 CFR section 164.504(e)(1)(ii), upon Business Associate’s knowledge of a material breach or violation by its subcontractor of the agreement between Business Associate and the subcontractor, Business Associate shall: a. Provide an opportunity for the subcontractor to cure the breach or end the violation and terminate the agreement if the subcontractor does not cure the breach or end the violation within the time specified by DHCS; or b. Immediately terminate the agreement if the subcontractor has breached a material term of the agreement and cure is not possible. F.Availability of Information to DHCS and Individuals.To provide access and information: 1. To provide access as DHCS may require, and in the time and manner designated by DHCS (upon reasonable notice and during Business Associate’s normal business hours) to PHI in a Designated Record Set, to DHCS (or, as directed by DHCS), to an Individual, in accordance with 45 CFR section 164.524. Designated Record Set means the group of records maintained for DHCS that includes medical, dental and billing records about individuals; enrollment, payment, claims adjudication, and case or medical management systems maintained for DHCS health plans; or those records used to make decisions about individuals on behalf of DHCS. Business Associate shall use the forms and processes developed by DHCS for this purpose and shall respond to requests for access to records transmitted by DHCS within fifteen (15) calendar days of receipt of the request by producing the records or verifying that there are none. 2. If Business Associate maintains an Electronic Health Record with PHI, and an individual requests a copy of such information in an electronic format, Business Associate shall provide such information in an electronic format to enable DHCS to fulfill its obligations under the HITECH Act, including but not limited to, 42 U.S.C. section 17935(e). 3. If Business Associate receives data from DHCS that was provided to DHCS by the Social Security Administration, upon request by DHCS, Business Associate shall provide DHCS with a list of all employees, contractors and agents who have access to the Social Security data, including employees, contractors and agents of its subcontractors and agents. G.Amendment of PHI.To make any amendment(s) to PHI that DHCS directs or agrees to pursuant to 45 CFR section 164.526, in the time and manner designated by DHCS. H.Internal Practices.To make Business Associate’s internal practices, books and records relating to the use and disclosure of PHI received from DHCS, or created or received by Business Associate on behalf of DHCS, available to DHCS or to the Secretary of the U.S. Department of Health and Human Services in a time and manner designated by DHCS or by the Secretary, for purposes of determining DHCS’ compliance with the HIPAA regulations. If any information needed for this purpose is in the exclusive possession of any other entity or person and the other entity or person fails or refuses to furnish the information to Business Associate, Business Associate shall so certify to DHCS and shall set forth the efforts it made to obtain the information. Contractor Name XX-XXXXX Page 6 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 I.Documentation of Disclosures.To document and make available to DHCS or (at the direction of DHCS) to an Individual such disclosures of PHI, and information related to such disclosures, necessary to respond to a proper request by the subject Individual for an accounting of disclosures of PHI, in accordance with the HITECH Act and its implementing regulations, including but not limited to 45 CFR section 164.528 and 42 U.S.C. section 17935(c). If Business Associate maintains electronic health records for DHCS as of January 1, 2009, Business Associate must provide an accounting of disclosures, including those disclosures for treatment, payment or health care operations, effective with disclosures on or after January 1, 2014. If Business Associate acquires electronic health records for DHCS after January 1, 2009, Business Associate must provide an accounting of disclosures, including those disclosures for treatment, payment or health care operations, effective with disclosures on or after the date the electronic health record is acquired, or on or after January 1, 2011, whichever date is later. The electronic accounting of disclosures shall be for disclosures during the three years prior to the request for an accounting. J.Breaches and Security Incidents.During the term of this Agreement, Business Associate agrees to implement reasonable systems for the discovery and prompt reporting of any breach or security incident, and to take the following steps: 1.Notice to DHCS.(1) To notify DHCS immediately upon the discovery of a suspected security incident that involves data provided to DHCS by the Social Security Administration. This notification will be by telephone call plus email or fax upon the discovery of the breach. (2) To notify DHCS within 24 hours by email or fax of the discovery of unsecured PHI or PI in electronic media or in any other media if the PHI or PI was, or is reasonably believed to have been, accessed or acquired by an unauthorized person, any suspected security incident, intrusion or unauthorized access, use or disclosure of PHI or PI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. A breach shall be treated as discovered by Business Associate as of the first day on which the breach is known, or by exercising reasonable diligence would have been known, to any person (other than the person committing the breach) who is an employee, officer or other agent of Business Associate. Notice shall be provided to the DHCS Program Contract Manager, the DHCS Privacy Officer and the DHCS Information Security Officer. If the incident occurs after business hours or on a weekend or holiday and involves data provided to DHCS by the Social Security Administration, notice shall be provided by calling the DHCS EITS Service Desk. Notice shall be made using the “DHCS Privacy Incident Report” form, including all information known at the time. Business Associate shall use the most current version of this form, which is posted on the DHCS Privacy Office website (www.dhcs.ca.gov, then select “Privacy” in the left column and then “Business Use” near the middle of the page) or use this link: http://www.dhcs.ca.gov/formsandpubs/laws/priv/Pages/DHCSBusinessAssociatesOnly.aspx Upon discovery of a breach or suspected security incident, intrusion or unauthorized access, use or disclosure of PHI or PI, Business Associate shall take: a. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment; and b. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations. Contractor Name XX-XXXXX Page 7 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 2.Investigation and Investigation Report.To immediately investigate such security incident, breach, or unauthorized access, use or disclosure of PHI or PI. If the initial report did not include all of the requested information marked with an asterisk, then within 72 hours of the discovery, Business Associate shall submit an updated “DHCS Privacy Incident Report” containing the information marked with an asterisk and all other applicable information listed on the form, to the extent known at that time, to the DHCS Program Contract Manager, the DHCS Privacy Officer, and the DHCS Information Security Officer: 3. Complete Report.To provide a complete report of the investigation to the DHCS Program Contract Manager, the DHCS Privacy Officer, and the DHCS Information Security Officer within ten (10) working days of the discovery of the breach or unauthorized use or disclosure. If all of the required information was not included in either the initial report, or the Investigation Report, then a separate Complete Report must be submitted. The report shall be submitted on the “DHCS Privacy Incident Report” form and shall include an assessment of all known factors relevant to a determination of whether a breach occurred under applicable provisions of HIPAA, the HITECH Act, the HIPAA regulations and/or state law. The report shall also include a full, detailed corrective action plan, including information on measures that were taken to halt and/or contain the improper use or disclosure. If DHCS requests information in addition to that listed on the ”DHCS Privacy Incident Report” form, Business Associate shall make reasonable efforts to provide DHCS with such information. If necessary, a Supplemental Report may be used to submit revised or additional information after the completed report is submitted, by submitting the revised or additional information on an updated “DHCS Privacy Incident Report” form. DHCS will review and approve or disapprove the determination of whether a breach occurred, is reportable to the appropriate entities, if individual notifications are required, and the corrective action plan. 4.Notification of Individuals. If the cause of a breach of PHI or PI is attributable to Business Associate or its subcontractors, agents or vendors, Business Associate shall notify individuals of the breach or unauthorized use or disclosure when notification is required under state or federal law and shall pay any costs of such notifications, as well as any costs associated with the breach. The notifications shall comply with the requirements set forth in 42 U.S.C. section 17932 and its implementing regulations, including, but not limited to, the requirement that the notifications be made without unreasonable delay and in no event later than 60 calendar days. The DHCS Program Contract Manager, the DHCS Privacy Officer, and the DHCS Information Security Officer shall approve the time, manner and content of any such notifications and their review and approval must be obtained before the notifications are made. 5.Responsibility for Reporting of Breaches.If the cause of a breach of PHI or PI is attributable to Business Associate or its agents, subcontractors or vendors, Business Associate is responsible for all required reporting of the breach as specified in 42 U.S.C. section 17932 and its implementing regulations, including notification to media outlets and to the Secretary. If a breach of unsecured PHI involves more than 500 residents of the State of California or its jurisdiction, Business Associate shall notify the Secretary of the breach immediately upon discovery of the breach. If Business Associate has reason to believe that duplicate reporting of the same breach or incident may occur because its subcontractors, agents or vendors may report the breach or incident to DHCS in addition to Business Associate, Business Associate shall notify DHCS, and DHCS and Business Associate may take appropriate action to prevent duplicate reporting. The breach reporting requirements of this paragraph are in addition to the reporting requirements set forth in subsection 1, above. 6.DHCS Contact Information.To direct communications to the above referenced DHCS staff, the Contractor shall initiate contact as indicated herein. DHCS reserves the right to make changes to the Contractor Name XX-XXXXX Page 8 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 contact information below by giving written notice to the Contractor. Said changes shall not require an amendment to this Addendum or the Agreement to which it is incorporated. DHCS Program DHCS Privacy Officer DHCS Information Security Officer Contract Manager See the Scope of Work Privacy Officer Information Security Officer exhibit for Program c/o: Office of HIPAA Compliance DHCS Information Security Office Contract Manager Department of Health Care Services P.O. Box 997413, MS 6400 information P.O. Box 997413, MS 4722 Sacramento, CA 95899-7413 Sacramento, CA 95899-7413 Email: iso@dhcs.ca.gov Email: privacyofficer@dhcs.ca.gov Fax: (916) 440-5537 Telephone: (916) 445-4646 Telephone: EITS Service Desk (916) 440-7000 or Fax: (916) 440-7680 (800) 579-0874 K.Termination of Agreement.In accordance with Section 13404(b) of the HITECH Act and to the extent required by the HIPAA regulations, if Business Associate knows of a material breach or violation by DHCS of this Addendum, it shall take the following steps: 1. Provide an opportunity for DHCS to cure the breach or end the violation and terminate the Agreement if DHCS does not cure the breach or end the violation within the time specified by Business Associate; or 2. Immediately terminate the Agreement if DHCS has breached a material term of the Addendum and cure is not possible. L.Due Diligence.Business Associate shall exercise due diligence and shall take reasonable steps to ensure that it remains in compliance with this Addendum and is in compliance with applicable provisions of HIPAA, the HITECH Act and the HIPAA regulations, and that its agents, subcontractors and vendors are in compliance with their obligations as required by this Addendum. M. Sanctions and/or Penalties. Business Associate understands that a failure to comply with the provisions of HIPAA, the HITECH Act and the HIPAA regulations that are applicable to Business Associate may result in the imposition of sanctions and/or penalties on Business Associate under HIPAA, the HITECH Act and the HIPAA regulations. IV. Obligations of DHCS DHCS agrees to: A.Notice of Privacy Practices.Provide Business Associate with the Notice of Privacy Practices that DHCS produces in accordance with 45 CFR section 164.520, as well as any changes to such notice. Visit the DHCS Privacy Office to view the most current Notice of Privacy Practices at: http://www.dhcs.ca.gov/formsandpubs/laws/priv/Pages/default.aspx or the DHCS website at www.dhcs.ca.gov (select “Privacy in the left column and “Notice of Privacy Practices” on the right side of the page). B.Permission by Individuals for Use and Disclosure of PHI. Provide the Business Associate with any changes in, or revocation of, permission by an Individual to use or disclose PHI, if such changes affect the Business Associate’s permitted or required uses and disclosures. Contractor Name XX-XXXXX Page 9 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 C.Notification of Restrictions.Notify the Business Associate of any restriction to the use or disclosure of PHI that DHCS has agreed to in accordance with 45 CFR section 164.522, to the extent that such restriction may affect the Business Associate’s use or disclosure of PHI. D.Requests Conflicting with HIPAA Rules.Not request the Business Associate to use or disclose PHI in any manner that would not be permissible under the HIPAA regulations if done by DHCS. V. Audits, Inspection and Enforcement A. From time to time, DHCS may inspect the facilities, systems, books and records of Business Associate to monitor compliance with this Agreement and this Addendum. Business Associate shall promptly remedy any violation of any provision of this Addendum and shall certify the same to the DHCS Privacy Officer in writing. The fact that DHCS inspects, or fails to inspect, or has the right to inspect, Business Associate’s facilities, systems and procedures does not relieve Business Associate of its responsibility to comply with this Addendum, nor does DHCS’: 1. Failure to detect or 2. Detection, but failure to notify Business Associate or require Business Associate’s remediation of any unsatisfactory practices constitute acceptance of such practice or a waiver of DHCS’ enforcement rights under this Agreement and this Addendum. B.If Business Associate is the subject of an audit, compliance review, or complaint investigation by the Secretary or the Office of Civil Rights, U.S. Department of Health and Human Services, that is related to the performance of its obligations pursuant to this HIPAA Business Associate Addendum, Business Associate shall notify DHCS and provide DHCS with a copy of any PHI or PI that Business Associate provides to the Secretary or the Office of Civil Rights concurrently with providing such PHI or PI to the Secretary. Business Associate is responsible for any civil penalties assessed due to an audit or investigation of Business Associate, in accordance with 42 U.S.C. section 17934(c). VI. Termination A.Term.The Term of this Addendum shall commence as of the effective date of this Addendum and shall extend beyond the termination of the contract and shall terminate when all the PHI provided by DHCS to Business Associate, or created or received by Business Associate on behalf of DHCS, is destroyed or returned to DHCS, in accordance with 45 CFR 164.504(e)(2)(ii)(I). B.Termination for Cause. In accordance with 45 CFR section 164.504(e)(1)(ii), upon DHCS’ knowledge of a material breach or violation of this Addendum by Business Associate, DHCS shall: 1. Provide an opportunity for Business Associate to cure the breach or end the violation and terminate this Agreement if Business Associate does not cure the breach or end the violation within the time specified by DHCS; or 2. Immediately terminate this Agreement if Business Associate has breached a material term of this Addendum and cure is not possible. Contractor Name XX-XXXXX Page 10 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 C.Judicial or Administrative Proceedings.Business Associate will notify DHCS if it is named as a defendant in a criminal proceeding for a violation of HIPAA. DHCS may terminate this Agreement if Business Associate is found guilty of a criminal violation of HIPAA. DHCS may terminate this Agreement if a finding or stipulation that the Business Associate has violated any standard or requirement of HIPAA, or other security or privacy laws is made in any administrative or civil proceeding in which the Business Associate is a party or has been joined. D.Effect of Termination.Upon termination or expiration of this Agreement for any reason, Business Associate shall return or destroy all PHI received from DHCS (or created or received by Business Associate on behalf of DHCS) that Business Associate still maintains in any form, and shall retain no copies of such PHI. If return or destruction is not feasible, Business Associate shall notify DHCS of the conditions that make the return or destruction infeasible, and DHCS and Business Associate shall determine the terms and conditions under which Business Associate may retain the PHI. Business Associate shall continue to extend the protections of this Addendum to such PHI, and shall limit further use of such PHI to those purposes that make the return or destruction of such PHI infeasible. This provision shall apply to PHI that is in the possession of subcontractors or agents of Business Associate. VII.Miscellaneous Provisions A.Disclaimer.DHCS makes no warranty or representation that compliance by Business Associate with this Addendum, HIPAA or the HIPAA regulations will be adequate or satisfactory for Business Associate’s own purposes or that any information in Business Associate’s possession or control, or transmitted or received by Business Associate, is or will be secure from unauthorized use or disclosure. Business Associate is solely responsible for all decisions made by Business Associate regarding the safeguarding of PHI. B.Amendment.The parties acknowledge that federal and state laws relating to electronic data security and privacy are rapidly evolving and that amendment of this Addendum may be required to provide for procedures to ensure compliance with such developments. The parties specifically agree to take such action as is necessary to implement the standards and requirements of HIPAA, the HITECH Act, the HIPAA regulations and other applicable laws relating to the security or privacy of PHI. Upon DHCS’ request, Business Associate agrees to promptly enter into negotiations with DHCS concerning an amendment to this Addendum embodying written assurances consistent with the standards and requirements of HIPAA, the HITECH Act, the HIPAA regulations or other applicable laws. DHCS may terminate this Agreement upon thirty (30) days written notice in the event: 1. Business Associate does not promptly enter into negotiations to amend this Addendum when requested by DHCS pursuant to this Section; or 2. Business Associate does not enter into an amendment providing assurances regarding the safeguarding of PHI that DHCS in its sole discretion, deems sufficient to satisfy the standards and requirements of HIPAA and the HIPAA regulations. C.Assistance in Litigation or Administrative Proceedings.Business Associate shall make itself and any subcontractors, employees or agents assisting Business Associate in the performance of its obligations under this Agreement, available to DHCS at no cost to DHCS to testify as witnesses, or otherwise, in the event of litigation or administrative proceedings being commenced against DHCS, its directors, officers or employees based upon claimed violation of HIPAA, the HIPAA regulations or other laws relating to security and privacy, which involves inactions or actions by the Business Associate, except where Business Associate or its subcontractor, employee or agent is a named adverse party. Contractor Name XX-XXXXX Page 11 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 D.No Third-Party Beneficiaries.Nothing express or implied in the terms and conditions of this Addendu is intended to confer, nor shall anything herein confer, upon any person other than DHCS or Busines Associate and their respective successors or assignees, any rights, remedies, obligations or liabilitie whatsoever. E.Interpretation. The terms and conditions in this Addendum shall be interpreted as broadly as necessar to implement and comply with HIPAA, the HITECH Act, the HIPAA regulations and applicable state laws The parties agree that any ambiguity in the terms and conditions of this Addendum shall be resolved i favor of a meaning that complies and is consistent with HIPAA, the HITECH Act and the HIPA regulations. F.Regulatory References.A reference in the terms and conditions of this Addendum to a section in th HIPAA regulations means the section as in effect or as amended. G.Survival.The respective rights and obligations of Business Associate under Section VI.D of thi Addendum shall survive the termination or expiration of this Agreement. H.No Waiver of Obligations. No change, waiver or discharge of any liability or obligation hereunder o any one or more occasions shall be deemed a waiver of performance of any continuing or othe obligation, or shall prohibit enforcement of any obligation, on any other occasion. m s s y . n A e s n r Contractor Name XX-XXXXX Page 12 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 Attachment A Business Associate Data Security Requirements I. Personnel Controls A. Employee Training. All workforce members who assist in the performance of functions or activities on behalf of DHCS, or access or disclose DHCS PHI or PI must complete information privacy and security training, at least annually, at Business Associate’s expense. Each workforce member who receives information privacy and security training must sign a certification, indicating the member’s name and the date on which the training was completed. These certifications must be retained for a period of six (6) years following contract termination. B. Employee Discipline. Appropriate sanctions must be applied against workforce members who fail to comply with privacy policies and procedures or any provisions of these requirements, including termination of employment where appropriate. C.Confidentiality Statement.All persons that will be working with DHCS PHI or PI must sign a confidentiality statement that includes, at a minimum, General Use, Security and Privacy Safeguards, Unacceptable Use, and Enforcement Policies. The statement must be signed by the workforce member prior to access to DHCS PHI or PI. The statement must be renewed annually. The Contractor shall retain each person’s written confidentiality statement for DHCS inspection for a period of six (6) years following contract termination. D. Background Check.Before a member of the workforce may access DHCS PHI or PI, a thorough background check of that worker must be conducted, with evaluation of the results to assure that there is no indication that the worker may present a risk to the security or integrity of confidential data or a risk for theft or misuse of confidential data. The Contractor shall retain each workforce member’s background check documentation for a period of three (3) years following contract termination. II. Technical Security Controls A. Workstation/Laptop encryption.All workstations and laptops that process and/or store DHCS PHI or PI must be encrypted using a FIPS 140-2 certified algorithm which is 128bit or higher, such as Advanced Encryption Standard (AES). The encryption solution must be full disk unless approved by the DHCS Information Security Office. B. Server Security.Servers containing unencrypted DHCS PHI or PI must have sufficient administrative, physical, and technical controls in place to protect that data, based upon a risk assessment/system security review. C. Minimum Necessary.Only the minimum necessary amount of DHCS PHI or PI required to perform necessary business functions may be copied, downloaded, or exported. D. Removable media devices.All electronic files that contain DHCS PHI or PI data must be encrypted when stored on any removable media or portable device (i.e. USB thumb drives, floppies, CD/DVD, smartphones, backup tapes etc.). Encryption must be a FIPS 140-2 certified algorithm which is 128bit or higher, such as AES. E. Antivirus software.All workstations, laptops and other systems that process and/or store DHCS PHI or PI must install and actively use comprehensive anti-virus software solution with automatic updates scheduled at least daily. Contractor Name XX-XXXXX Page 13 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 F. Patch Management.All workstations, laptops and other systems that process and/or store DHCS PHI or PI must have critical security patches applied, with system reboot if necessary. There must be a documented patch management process which determines installation timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable patches must be installed within 30 days of vendor release. G. User IDs and Password Controls. All users must be issued a unique user name for accessing DHCS PHI or PI. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee with knowledge of the password, at maximum within 24 hours. Passwords are not to be shared. Passwords must be at least eight characters and must be a non- dictionary word. Passwords must not be stored in readable format on the computer. Passwords must be changed every 90 days, preferably every 60 days. Passwords must be changed if revealed or compromised. Passwords must be composed of characters from at least three of the following four groups from the standard keyboard: x Upper case letters (A-Z) x Lower case letters (a-z) x Arabic numerals (0-9) x Non-alphanumeric characters (punctuation symbols) H. Data Destruction. When no longer needed, all DHCS PHI or PI must be cleared, purged, or destroyed consistent with NIST Special Publication 800-88, Guidelines for Media Sanitization such that the PHI or PI cannot be retrieved. I. System Timeout.The system providing access to DHCS PHI or PI must provide an automatic timeout, requiring re-authentication of the user session after no more than 20 minutes of inactivity. J. Warning Banners. All systems providing access to DHCS PHI or PI must display a warning banner stating that data is confidential, systems are logged, and system use is for business purposes only by authorized users. User must be directed to log off the system if they do not agree with these requirements. K. System Logging.The system must maintain an automated audit trail which can identify the user or system process which initiates a request for DHCS PHI or PI, or which alters DHCS PHI or PI. The audit trail must be date and time stamped, must log both successful and failed accesses, must be read only, and must be restricted to authorized users. If DHCS PHI or PI is stored in a database, database logging functionality must be enabled. Audit trail data must be archived for at least 3 years after occurrence. L. Access Controls.The system providing access to DHCS PHI or PI must use role based access controls for all user authentications, enforcing the principle of least privilege. Contractor Name XX-XXXXX Page 14 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 M. Transmission encryption.All data transmissions of DHCS PHI or PI outside the secure internal network must be encrypted using a FIPS 140-2 certified algorithm which is 128bit or higher, such as AES. Encryption can be end to end at the network level, or the data files containing PHI can be encrypted. This requirement pertains to any type of PHI or PI in motion such as website access, file transfer, and E-Mail. N. Intrusion Detection. All systems involved in accessing, holding, transporting, and protecting DHCS PHI or PI that are accessible via the Internet must be protected by a comprehensive intrusion detection and prevention solution. III. Audit Controls A.System Security Review.All systems processing and/or storing DHCS PHI or PI must have at least an annual system risk assessment/security review which provides assurance that administrative, physical, and technical controls are functioning effectively and providing adequate levels of protection. Reviews should include vulnerability scanning tools. B.Log Reviews. All systems processing and/or storing DHCS PHI or PI must have a routine procedure in place to review system logs for unauthorized access. C.Change Control. All systems processing and/or storing DHCS PHI or PI must have a documented change control procedure that ensures separation of duties and protects the confidentiality, integrity and availability of data. IV. Business Continuity / Disaster Recovery Controls A.Emergency Mode Operation Plan.Contractor must establish a documented plan to enable continuation of critical business processes and protection of the security of electronic DHCS PHI or PI in the event of an emergency. Emergency means any circumstance or situation that causes normal computer operations to become unavailable for use in performing the work required under this Agreement for more than 24 hours. B.Data Backup Plan.Contractor must have established documented procedures to backup DHCS PHI to maintain retrievable exact copies of DHCS PHI or PI. The plan must include a regular schedule for making backups, storing backups offsite, an inventory of backup media, and an estimate of the amount of time needed to restore DHCS PHI or PI should it be lost. At a minimum, the schedule must be a weekly full backup and monthly offsite storage of DHCS data. V. Paper Document Controls A.Supervision of Data.DHCS PHI or PI in paper form shall not be left unattended at any time, unless it is locked in a file cabinet, file room, desk or office. Unattended means that information is not being observed by an employee authorized to access the information. DHCS PHI or PI in paper form shall not be left unattended at any time in vehicles or planes and shall not be checked in baggage on commercial airplanes. B.Escorting Visitors. Visitors to areas where DHCS PHI or PI is contained shall be escorted and DHCS PHI or PI shall be kept out of sight while visitors are in the area. C.Confidential Destruction. DHCS PHI or PI must be disposed of through confidential means, such as cross cut shredding and pulverizing. Contractor Name XX-XXXXX Page 15 of 15 ADDENDUM B HIPAA Business Associate Addendum DHCS HIPAA BAA 2/15 D.Removal of Data.DHCS PHI or PI must not be removed from the premises of the Contractor except with express written permission of DHCS. E.Faxing.Faxes containing DHCS PHI or PI shall not be left unattended and fax machines shall be in secure areas. Faxes shall contain a confidentiality statement notifying persons receiving faxes in error to destroy them. Fax numbers shall be verified with the intended recipient before sending the fax. F.Mailing.Mailings of DHCS PHI or PI shall be sealed and secured from damage or inappropriate viewing of PHI or PI to the extent possible. Mailings which include 500 or more individually identifiable records of DHCS PHI or PI in a single package shall be sent using a tracked mailing method which includes verification of delivery and receipt, unless the prior written permission of DHCS to use another method is obtained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³6RFLDO6HFXULW\FUHGLWV´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¶VUHFRUGVLV GLVFORVHGE\66$XQGHUWKH&KLOGUHQ¶V+HDOWK,QVXUDQFH3URJUDP5HDXWKRUL]DWLRQ$FWRI 3XE/RQO\IRUWKHSXUSRVHRIGHWHUPLQLQJHQWLWOHPHQWWR0HGLFDLGDQG &+,3SURJUDPIRUQHZDSSOLFDQWV  1RWH ,QFDVHVZKHUHRQHRIWKHVHGDWDH[FKDQJHV\VWHPVDUHQRWXVHGDFXVWRPH[FKDQJHPD\  EHSXWLQSODFH                  (/(&7521,&,1)250$7,21(;&+$1*(6(&85,7< 5(48,5(0(176$1'352&('85(6 )25 67$7($1'/2&$/$*(1&,(6(;&+$1*,1*(/(&7521,& ,1)250$7,21:,7+7+(62&,$/6(&85,7< $'0,1,675$7,21         6(16,7,9('2&80(17        9HUVLRQ -XO\ TSSR-Version 7.0 Page 2  7$%/(2)&217(176 ,QWURGXFWLRQ  (OHFWURQLF,QIRUPDWLRQ([FKDQJH (,( 'HILQLWLRQ  5ROHVDQG5HVSRQVLELOLWLHV  *HQHUDO6\VWHPV6HFXULW\6WDQGDUGV  6\VWHPV6HFXULW\5HTXLUHPHQWV 2YHUYLHZ *HQHUDO6\VWHP6HFXULW\'HVLJQDQG2SHUDWLQJ(QYLURQPHQW 6\VWHP$FFHVV&RQWURO $XWRPDWHG$XGLW7UDLO 3HUVRQDOO\,GHQWLILDEOH,QIRUPDWLRQ 3,,  0RQLWRULQJDQG$QRPDO\'HWHFWLRQ 0DQDJHPHQW2YHUVLJKWDQG4XDOLW\$VVXUDQFH 'DWDDQG&RPPXQLFDWLRQV6HFXULW\ ,QFLGHQW5HSRUWLQJ 6HFXULW\$ZDUHQHVVDQG(PSOR\HH6DQFWLRQV &RQWUDFWRUVRI(OHFWURQLF,QIRUPDWLRQ([FKDQJH3DUWQHUV &ORXG6HUYLFH3URYLGHUV &63 IRU(OHFWURQLF,QIRUPDWLRQ([FKDQJH3DUWQHUV  6HFXULW\&HUWLILFDWLRQDQG&RPSOLDQFH5HYLHZ3URJUDPV 7KH6HFXULW\&HUWLILFDWLRQ3URJUDP 'RFXPHQWLQJ6HFXULW\&RQWUROVLQWKH6HFXULW\'HVLJQ3ODQ 6'3  :KHQWKH6'3LV5HTXLUHG 7KH&HUWLILFDWLRQ3URFHVV 7KH&RPSOLDQFH5HYLHZ3URJUDPDQG3URFHVV (,(3&RPSOLDQFH5HYLHZ3DUWLFLSDWLRQ 6FKHGXOLQJWKH2QVLWH5HYLHZ  $GGLWLRQDO'HILQLWLRQV  5HJXODWRU\5HIHUHQFHV  )UHTXHQWO\$VNHG4XHVWLRQV    TSSR-Version 7.0 – 07/2015 Page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³VWDWH DJHQF\´RU³VWDWHDJHQF\FRQWUDFWRU V DQGDJHQW V ´IRUFODULW\0RVWVWDWH RIILFLDOVDQGDJUHHPHQWVLJQDWRULHVDUHQRWIDPLOLDUZLWKWKHDFURQ\P(,(3 WKHUHIRUH66$ZLOOFRQWLQXHWRXVHWKHWHUPV³VWDWHDJHQF\´RU³VWDWHDJHQF\ FRQWUDFWRU V DQGDJHQW V ´LQWKHVDPHPDQQHUDVWKH&RPSXWHU0DWFKLQJDQG 3ULYDF\3URWHFWLRQ$FW &033$ DQG,QIRUPDWLRQ([FKDQJH$JUHHPHQWV ,($  7KLVDOORZVIRUHDVLHUDOLJQPHQWDQGPDSSLQJEDFNWRRXUGDWDH[FKDQJH DJUHHPHQWVEHWZHHQVWDWHDJHQFLHVDQG66$,WZLOODOVRSURYLGHDPRUH³XVHU IULHQGO\´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¶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¶VUHTXLUHPHQWVPLUURUWKH1,67 GHILQHGPDQDJHPHQWRSHUDWLRQDODQGWHFKQLFDOFRQWUROVOLVWHGLQWKHYDULRXV1,67 6SHFLDO3XEOLFDWLRQV 63 OLEUDULHVRIWHFKQLFDOJXLGDQFHGRFXPHQWV  7RJDLQHOHFWURQLFDFFHVVWR66$SURYLGHGLQIRUPDWLRQXQGHUWKHDXVSLFHVRIDGDWD H[FKDQJHDJUHHPHQW(,(3¶VPXVWFRPSO\ZLWK66$¶VPRVWFXUUHQW7HFKQLFDO 6\VWHP6HFXULW\5HTXLUHPHQWV KHUHDIWHUUHIHUUHGWRDV7665V WRJDLQDFFHVVWR 66$SURYLGHGLQIRUPDWLRQ7KLVGRFXPHQWLVV\QRQ\PRXVZLWKWKH(OHFWURQLF ,QIRUPDWLRQ([FKDQJH6HFXULW\5HTXLUHPHQWVDQG3URFHGXUHVIRU6WDWHDQG   TSSR-Version 7.0 – 07/2015 Page 4 /RFDO$JHQFLHV([FKDQJLQJ(OHFWURQLF,QIRUPDWLRQZLWKWKH6RFLDO6HFXULW\ $GPLQLVWUDWLRQLQWKHDJUHHPHQWV7KH7665VSHFLILHVPLQLPDOO\DFFHSWDEOHOHYHOV RIVHFXULW\VWDQGDUGVDQGFRQWUROVWRSURWHFW66$SURYLGHGLQIRUPDWLRQ66$ PDLQWDLQVWKH7665DVDOLYLQJGRFXPHQW²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¶VVWDQGDUGIRUFDWHJRUL]DWLRQRILQIRUPDWLRQ 0RGHUDWH DQGLQIRUPDWLRQV\VWHPV LVWRSURYLGHDSSURSULDWHOHYHOVRIVHFXULW\DFFRUGLQJWRULVNOHYHO$GGLWLRQV GHOHWLRQVRUPRGLILFDWLRQRIVHFXULW\FRQWUROVGLUHFWO\DIIHFWWKHOHYHORIVHFXULW\DQG GXHGLOLJHQFH66$UHTXLUHV(,(3VXVHWRPLWLJDWHULVNV7KHHPHUJHQFHRIQHZ WKUHDWVDWWDFNPHWKRGVDQGWKHGHYHORSPHQWRIQHZWHFKQRORJ\ZDUUDQWVIUHTXHQW UHYLHZVDQGUHYLVLRQVWRRXU7665&RQVHTXHQWO\(,(3VVKRXOGH[SHFW66$¶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¶VVHFXULW\UHYLHZVHQVXUHWKDWH[WHUQDOV\VWHPVUHFHLYLQJ LQIRUPDWLRQIURP66$DUHVHFXUHDQGRSHUDWHLQDPDQQHUFRQVLVWHQWZLWK66$¶V ,QIRUPDWLRQ7HFKQRORJ\ ,7 VHFXULW\SROLFLHVDQGLQFRPSOLDQFHZLWKWKHWHUPVRI HOHFWURQLFGDWDH[FKDQJHDJUHHPHQWVH[HFXWHGE\66$ZLWKRXWVLGHHQWLWLHV:LWKLQ WKHFRQWH[WRI66$¶VVHFXULW\SROLFLHVDQGWKHWHUPVRIWKHHOHFWURQLFGDWDH[FKDQJH   TSSR-Version 7.0 – 07/2015 Page 5 DJUHHPHQWVZLWK66$¶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¶VFRQWUDFWRURUDJHQWEHFRPHVDZDUHRIVXVSHFWHGRUDFWXDOORVVRI66$ SURYLGHGLQIRUPDWLRQ  E66$UHTXLUHV(,(3VWRDGKHUHWRWKHVWDQGDUGVUHTXLUHPHQWVDQGSURFHGXUHV SXEOLVKHGLQWKLV7665GRFXPHQW  x³3HUVRQDOO\,GHQWLILDEOH,QIRUPDWLRQ 3,, ´FRYHUHGXQGHUVHYHUDO)HGHUDO ODZVDQGVWDWXWHVUHIHUVWRVSHFLILFLQIRUPDWLRQDERXWDQLQGLYLGXDOXVHGWR WUDFHWKDWLQGLYLGXDO¶VLGHQWLW\,QIRUPDWLRQVXFKDVKLVKHUQDPH6RFLDO 6HFXULW\1XPEHU 661 GDWHDQGSODFHRIELUWKPRWKHU¶VPDLGHQQDPHRU ELRPHWULFUHFRUGVDORQHRUZKHQFRPELQHGZLWKRWKHUSHUVRQDORU LGHQWLI\LQJLQIRUPDWLRQLVOLQNDEOHRUOLQHGWRDVSHFLILFLQGLYLGXDO¶V PHGLFDOHGXFDWLRQDOILQDQFLDODQGHPSOR\PHQWLQIRUPDWLRQ  x7KHGDWD ODVWGLJLWVRIWKH661 WKDW66$SURYLGHVWRLWV(,(3VIRU SXUSRVHVRIWKH+HOS$PHULFD9RWH$FW +$9$ GRHVQRWLGHQWLI\D VSHFLILFLQGLYLGXDOWKHUHIRUHLVQRW³3,,´DVGHILQHGE\WKH$FW  x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ersion 7.0 – 07/2015 Page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ெV DELOLW\WR  xVDIHJXDUGWKHLQIRUPDWLRQLQFRQIRUPDQFHZLWK66$UHTXLUHPHQWV xHIILFLHQWO\LQYHVWLJDWHIUDXGGDWDEUHDFKHVRUVHFXULW\HYHQWVWKDWLQYROYH 66$SURYLGHGLQIRUPDWLRQ xGHWHFWLQVWDQFHVRIPLVXVHRUDEXVHRI66$SURYLGHGLQIRUPDWLRQ  )RUH[DPSOH8WLOL]DWLRQRIFORXGFRPSXWLQJPD\KDYHWKHSRWHQWLDOWR MHRSDUGL]HDQ(,(3¶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µ&RQWUDFWRUVRI(OHFWURQLF,QIRUPDWLRQ([FKDQJH3DUWQHUVLQ WKH6\VWHPV6HFXULW\5HTXLUHPHQWVIRUDGGLWLRQDOLQIRUPDWLRQ (,(3VPXVWVWRUHLQIRUPDWLRQUHFHLYHGIURP66$LQDPDQQHUWKDWDWDOOWLPHVLV   TSSR-Version 7.0 – 07/2015 Page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ersion 7.0 – 07/2015 Page 8 6\VWHPV6HFXULW\5HTXLUHPHQWV  2YHUYLHZ  66$¶V7665UHSUHVHQWWKHFXUUHQWLQGXVWU\VWDQGDUGIRUVHFXULW\FRQWUROV VDIHJXDUGVDQGFRXQWHUPHDVXUHVUHTXLUHGIRU)HGHUDOLQIRUPDWLRQV\VWHPVE\ )HGHUDOUHJXODWLRQVVWDWXWHVVWDQGDUGVDQGJXLGHOLQHV$GGLWLRQDOO\66$¶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¶V(,(3V 66$UHTXLUHV(,(3VWRPDLQWDLQDQRUJDQL]DWLRQDODFFHVVFRQWUROVWUXFWXUHWKDW DGKHUHVWRDWKUHHWLHUHGEHVWSUDFWLFHVPRGHO7KH66$UHFRPPHQGHGPRGHOLV ³VHSDUDWLRQRIGXWLHV´³QHHGWRNQRZ´DQG³OHDVWSULYLOHJH´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ersion 7.0 – 07/2015 Page 9  (PSOR\HHDQG(QG8VHU6DQFWLRQV3ROLF\  &RQWLQJHQF\3ODQQLQJDQG'LVDVWHU5HFRYHU\   ,QFLGHQW5HVSRQVH3ROLF\DQG   7KHGLVSRVDORISURWHFWHGLQIRUPDWLRQDQGVHQVLWLYHGRFXPHQWVGHULYHGIURP WKHV\VWHPRUVXEV\VWHPVRQWKHQHWZRUN   7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page 10  *HQHUDO6\VWHP6HFXULW\'HVLJQDQG2SHUDWLQJ(QYLURQPHQW 3ODQQLQJ 3/ )DPLO\± 6\VWHP6HFXULW\3ODQ &RQWLQJHQF\3ODQ &3  )DPLO\3K\VLFDODQG(QYLURQPHQWDO 3( )DPLO\ 1,6763UHY    ,QDFFRUGDQFHZLWKWKH1,67VXLWHRI6SHFLDO3XEOLFDWLRQV 63  HJ HWF 66$UHTXLUHVWKH(,(3WRPDLQWDLQSROLFLHVSURFHGXUHV GHVFULSWLRQVDQGH[SODQDWLRQVRIWKHLURYHUDOOV\VWHPGHVLJQFRQILJXUDWLRQ VHFXULW\IHDWXUHVDQGRSHUDWLRQDOHQYLURQPHQW7KH\VKRXOGLQFOXGH H[SODQDWLRQVRIKRZWKH\FRQIRUPWR66$¶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¶VQHWZRUNLQIUDVWUXFWXUHDQGIRUSURWHFWLQJ66$SURYLGHG LQIRUPDWLRQZKLOHLQWUDQVLWLQXVHZLWKLQDSURFHVVRUDSSOLFDWLRQ DQGDWUHVW  I DVHQLRUPDQDJHPHQWDSSURYHG,QIRUPDWLRQ6\VWHP&RQWLQJHQF\ 3ODQ ,6&3 WKDWDGGUHVVHVERWKLQWHUQDODQGH[WHUQDOWKUHDWV66$ UHTXLUHVWKH,6&3WRLQFOXGHGHWDLOVUHJDUGLQJWKHRUJDQL]DWLRQDO EXVLQHVVFRQWLQXLW\SODQ %&3 DQGDEXVLQHVVLPSDFWDQDO\VHV %,$ WKDWDGGUHVVHVWKHVHFXULW\RI66$SURYLGHGLQIRUPDWLRQLID GLVDVWHURFFXUV66$UHFRPPHQGVWKDWVWDWHDJHQFLHVSHUIRUP GLVDVWHUH[HUFLVHVDWOHDVWRQFHDQQXDOO\    TSSR-Version 7.0 – 07/2015 Page 11 J KRZWKH(,(3SUHYHQWVXQDXWKRUL]HGUHWULHYDORI66$SURYLGHG LQIRUPDWLRQE\FRPSXWHUUHPRWHWHUPLQDORURWKHUPHDQVLQFOXGLQJ GHVFULSWLRQVRIVHFXULW\VRIWZDUHRWKHUWKDQDFFHVVFRQWUROVRIWZDUH HJVHFXULW\SDWFKDQGDQWLPDOZDUHVRIWZDUHLQVWDOODWLRQDQG PDLQWHQDQFHHWF   K KRZWKHFRQILJXUDWLRQVRIGHYLFHV HJVHUYHUVZRUNVWDWLRQV SRUWDEOHGHYLFHV LQYROYLQJ66$SURYLGHGLQIRUPDWLRQFRPSOLHV ZLWKUHFRJQL]HGLQGXVWU\VWDQGDUGV LH1,6763¶V DQG66$¶V 7665DQG  L RUJDQL]DWLRQDOVWUXFWXUHRIWKHDJHQF\QXPEHURIXVHUVDQGDOO H[WHUQDOHQWLWLHVWKDWZLOOKDYHDFFHVVWRWKHV\VWHPDQGRU DSSOLFDWLRQWKDWGLVSOD\VWUDQVPLWVDQGRUDSSOLFDWLRQWKDWGLVSOD\V WUDQVPLWVDQGRUVWRUHV66$SURYLGHGLQIRUPDWLRQ  1RWH$WLWVGLVFUHWLRQ66$RUDWKLUGSDUW\ LHFRQWUDFWRU PXVW KDYHWKHRSWLRQWRFRQGXFWRQVLWHVHFXULW\UHYLHZVRUPDNHRWKHU SURYLVLRQVWRHQVXUHWKDW(,(3VPDLQWDLQDGHTXDWHVHFXULW\FRQWUROV WRVDIHJXDUGWKHLQIRUPDWLRQZHSURYLGH   7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page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¶VSDVVZRUGSROLFLHVPXVWUHTXLUHVWULQJHQWSDVVZRUGFRQVWUXFWLRQDV VXSSRUWHGE\FXUUHQW1,67JXLGHOLQHVIRUWKHXVHUDFFRXQWVRISHUVRQV SURFHVVHVRUGHYLFHVZKRVHIXQFWLRQVUHTXLUHDFFHVVSULYLOHJHVDERYHWKRVHRI RUGLQDU\XVHUV66$VWURQJO\UHFRPPHQGV7ZR)DFWRU$XWKHQWLFDWLRQ   7KH(,(3¶VLPSOHPHQWDWLRQRIWKHFRQWUROVRIWZDUHPXVWFRPSO\ZLWK UHFRJQL]HGLQGXVWU\VWDQGDUGV3DVVZRUGSROLFLHVVKRXOGHQIRUFHVXIILFLHQW FRQVWUXFWLRQVWUHQJWK OHQJWKDQGFRPSOH[LW\ WRGHIHDWRUPLQLPL]HULVNEDVHG LGHQWLILHGYXOQHUDELOLWLHVDQGHQVXUHOLPLWDWLRQVIRUSDVVZRUGUHSHWLWLRQ 7HFKQLFDOFRQWUROVVKRXOGHQIRUFHSHULRGLFSDVVZRUGFKDQJHVEDVHGRQDULVN EDVHGVWDQGDUG HJPD[LPXPSDVVZRUGDJHRIGD\VPLQLPXPSDVVZRUG DJHRI±GD\V DQGHQIRUFHDXWRPDWLFGLVDEOLQJRIXVHUDFFRXQWVWKDWKDYH EHHQLQDFWLYHIRUDVSHFLILHGSHULRGRIWLPH HJGD\V   7KH(,(3¶VSDVVZRUGSROLFLHVPXVWUHTXLUHVWULQJHQWSDVVZRUGFRQVWUXFWLRQ HJSDVVZRUGVJUHDWHUWKDQHLJKWFKDUDFWHUVLQOHQJWKUHTXLULQJXSSHUDQGORZHU FDVHOHWWHUVQXPEHUVDQGRUVSHFLDOFKDUDFWHUVSDVVZRUGSKUDVHV IRUWKHXVHU DFFRXQWVRISHUVRQVSURFHVVHVRUGHYLFHVZKRVHIXQFWLRQVUHTXLUHDFFHVV SULYLOHJHVLQH[FHVVRIWKRVHRIRUGLQDU\XVHUV       TSSR-Version 7.0 – 07/2015 Page 13 ,QDGGLWLRQ66$KDVWKHIROORZLQJVSHFLILFUHTXLUHPHQWVLQWKHDUHDRI$FFHVV &RQWURO  8SRQKLULQJRUEHIRUHJUDQWLQJDFFHVVWR66$SURYLGHGLQIRUPDWLRQ (,(3VVKRXOGYHULI\WKHLGHQWLWLHVRIDQ\HPSOR\HHVFRQWUDFWRUVDQG DJHQWVZKRZLOOKDYHDFFHVVWR66$SURYLGHGLQIRUPDWLRQLQ DFFRUGDQFHZLWKWKHDSSOLFDEOHDJHQF\RUVWDWH¶V³SHUVRQQHOLGHQWLW\ YHULILFDWLRQSROLF\´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¶VEXVLQHVV QHHGV66$DOVRUHTXLUHVWKDW(,(3VSHULRGLFDOO\UHYLHZHPSOR\HHV FRQWUDFWRUVDQGDJHQW¶VV\VWHPDFFHVVWRGHWHUPLQHLIWKHVDPH OHYHOVDQGW\SHVRIDFFHVVUHPDLQDSSOLFDEOH  ,IDQ(,(3HPSOR\HHFRQWUDFWRURUDJHQWLVVXEMHFWWRDQDGYHUVH DGPLQLVWUDWLYHDFWLRQE\WKH(,(3 HJUHGXFWLRQLQSD\ GLVFLSOLQDU\DFWLRQWHUPLQDWLRQRIHPSOR\PHQW 66$UHFRPPHQGV WKH(,(3UHPRYHKLVRUKHUDFFHVVWR66$SURYLGHGLQIRUPDWLRQLQ DGYDQFHRIWKHDGYHUVHDFWLRQWRUHGXFHWKHSRVVLELOLW\WKDWZLOOWKH HPSOR\HHZLOOSHUIRUPXQDXWKRUL]HGDFWLYLWLHVWKDWLQYROYH66$ SURYLGHGLQIRUPDWLRQ    TSSR-Version 7.0 – 07/2015 Page 14 66$UHTXLUHVWKDWZRUNDWKRPHUHPRWHDFFHVVDQGRU,QWHUQHW DFFHVVFRPSO\ZLWKDSSOLFDEOH)HGHUDODQGVWDWHVHFXULW\SROLF\DQG VWDQGDUGV)XUWKHUPRUHWKH(,(3VDFFHVVFRQWUROSROLF\PXVWGHILQH WKHVDIHJXDUGVLQSODFHWRDGHTXDWHO\SURWHFW66$SURYLGHG LQIRUPDWLRQIRUZRUNDWKRPHUHPRWHDFFHVVDQGRU,QWHUQHWDFFHVV  66$UHTXLUHV(,(3VWRGHVLJQWKHLUV\VWHPZLWKORJLFDOFRQWURO V  WKDWSUHYHQWXQDXWKRUL]HGEURZVLQJRI66$SURYLGHGLQIRUPDWLRQ 66$UHIHUVWRWKLVVHWXSDVD3HUPLVVLRQ0RGXOH7KHWHUP ³3HUPLVVLRQ0RGXOH´VXSSRUWVDEXVLQHVVUXOHDQGV\VWHPDWLF FRQWUROWKDWSUHYHQWVXVHUVIURPEURZVLQJDV\VWHPWKDWFRQWDLQV 66$SURYLGHGLQIRUPDWLRQ,WDOVRVXSSRUWVWKHSULQFLSOHRI UHIHUHQWLDOLQWHJULW\,WVKRXOGSUHYHQWQRQEXVLQHVVUHODWHGRU XQRIILFLDODFFHVVWR66$SURYLGHGLQIRUPDWLRQ%HIRUHDXVHURU SURFHVVUHTXHVWV66$SURYLGHGLQIRUPDWLRQIRUYHULILFDWLRQWKH V\VWHPVKRXOGYHULI\LWLVDQDXWKRUL]HGWUDQVDFWLRQ6RPH RUJDQL]DWLRQVXVHWKHWHUP³UHIHUHQWLDOLQWHJULW\´WRGHVFULEHWKH YHULILFDWLRQVWHS$SURSHUO\FRQILJXUHG3HUPLVVLRQ0RGXOHVKRXOG SUHYHQWDXVHUIURPSHUIRUPLQJDQ\DFWLRQVQRWFRQVLVWHQWZLWKD QHHGWRNQRZEXVLQHVVSURFHVV,IDORJLFDOSHUPLVVLRQPRGXOH FRQILJXUDWLRQLVQRWSRVVLEOHWKHVWDWHDJHQF\PXVWHQIRUFHLWV $FFHVV&RQWURO/LVW $&/ LQDFFRUGDQFHZLWKWKHSULQFLSOHRIOHDVW SULYLOHJH7KHRQO\DFFHSWDEOHFRPSHQVDWLQJFRQWUROIRUDV\VWHP WKDWODFNVDSHUPLVVLRQPRGXOHLVDUHYLHZRIDOO WUDQVDFWLRQVWKDWLQYROYH66$SURYLGHGLQIRUPDWLRQ    7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<     TSSR-Version 7.0 – 07/2015 Page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¶V$76FUHDWHDQDXGLWUHFRUGZKHQXVHUVYLHZ VFUHHQVWKDWFRQWDLQ66$SURYLGHGLQIRUPDWLRQ,IDQ67&KDQGOHVDQGDXGLWV WKH(,(3¶VWUDQVDFWLRQVZLWK66$WKH(,(3LVUHVSRQVLEOHIRUHQVXULQJWKDWWKH 67&¶VDXGLWFDSDELOLWLHVPHHW1,67¶VJXLGHOLQHVIRUDQDXWRPDWHGDXGLWWUDLO V\VWHP7KH(,(3PXVWDOVRHVWDEOLVKDSURFHVVWRREWDLQVSHFLILFDXGLW LQIRUPDWLRQIURPWKH67&UHJDUGLQJWKH(,(3¶V66$WUDQVDFWLRQV  66$UHTXLUHVWKDW(,(3VKDYHDXWRPDWHGUHWULHYDODQGFROOHFWLRQRIDXGLW UHFRUGV6XFKDXWRPDWHGIXQFWLRQVFDQEHYLDRQOLQHTXHULHVDXWRPDWHGUHSRUWV EDWFKSURFHVVLQJRUDQ\RWKHUORJLFDOPHDQVRIGHOLYHULQJDXGLWUHFRUGVLQDQ H[SHGLWLRXVPDQQHU,QIRUPDWLRQLQWKHDXGLWILOHPXVWEHUHWULHYDEOHE\DQ DXWRPDWHGPHWKRGDQGPXVWDOORZWKH(,(3WKHFDSDELOLW\WRPDNHWKHP DYDLODEOHWR66$XSRQUHTXHVW  $FFHVVWRWKHDXGLWILOHPXVWEHUHVWULFWHGWRDXWKRUL]HGXVHUVZLWKD³QHHGWR NQRZ´DXGLWILOHGDWDPXVWEHXQDOWHUDEOH UHDGRQO\ DQGPDLQWDLQHGIRUD PLQLPXPRIWKUHH   SUHIHUDEO\VHYHQ  \HDUV,QIRUPDWLRQLQWKHDXGLWILOH PXVWEHUHWULHYDEOHE\DQDXWRPDWHGPHWKRGDQGPXVWDOORZWKH(,(3WKH FDSDELOLW\WRPDNHWKHPDYDLODEOHWR66$XSRQUHTXHVW7KH(,(3PXVWEDFNXS DXGLWWUDLOUHFRUGVRQDUHJXODUEDVLVWRHQVXUHLWVDYDLODELOLW\(,(3VPXVWDSSO\ WKHVDPHOHYHORISURWHFWLRQWREDFNXSDXGLWILOHVWKDWDSSO\WRWKHRULJLQDOILOHV WRHQVXUHWKHLQWHJULW\RIWKHGDWD    TSSR-Version 7.0 – 07/2015 Page 16  ,IWKH(,(3UHWDLQV66$SURYLGHGLQIRUPDWLRQLQDGDWDEDVH HJ$FFHVV GDWDEDVH6KDUH3RLQWHWF RULIFHUWDLQGDWDHOHPHQWVZLWKLQWKH(,(3¶VV\VWHP LQGLFDWHVWRXVHUVWKDW66$YHULILHGWKHLQIRUPDWLRQWKH(,(3¶VV\VWHPPXVWDOVR FDSWXUHDQDXGLWWUDLOUHFRUGRIXVHUVZKRYLHZ66$SURYLGHGLQIRUPDWLRQVWRUHG ZLWKLQWKH(,(3¶VV\VWHP7KHUHWULHYDOUHTXLUHPHQWVIRU66$SURYLGHG LQIRUPDWLRQDWUHVWDQGWKHUHWULHYDOUHTXLUHPHQWVIRUUHJXODUWUDQVDFWLRQVDUH LGHQWLFDO6LPLODUWRWKH3HUPLVVLRQ0RGXOHUHTXLUHPHQWDERYHWKHRQO\ DFFHSWDEOHFRPSHQVDWLQJFRQWUROIRUDV\VWHPWKDWODFNVDQ$XWRPDWHG $XGLW7UDLO6\VWHP $76 LVDUHYLHZRIDOOWUDQVDFWLRQVWKDWLQYROYH 66$SURYLGHGLQIRUPDWLRQ       7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page 17  3HUVRQDOO\,GHQWLILDEOH,QIRUPDWLRQ 3,,  7KH3ULYDF\$FWRI(*RYHUQPHQW$FWRI 3/ DQG $3)DPLO\±$XWKRULW\DQG3XUSRVH 3ULYDF\&RQWUROV  1,6763UHY   3HUVRQDOO\,GHQWLILDEOH,QIRUPDWLRQ 3,, LVLQIRUPDWLRQXVHGWRGLVWLQJXLVK RUWUDFHDQLQGLYLGXDO¶VLGHQWLW\VXFKDVWKHLUQDPH6RFLDO6HFXULW\1XPEHU ELRPHWULFUHFRUGVDORQHRUZKHQFRPELQHGZLWKRWKHUSHUVRQDORULGHQWLI\LQJ LQIRUPDWLRQOLQNHGRUOLQNDEOHWRDVSHFLILFLQGLYLGXDO$QLWHPVXFKDVGDWH DQGSODFHRIELUWKPRWKHU¶VPDLGHQQDPHRUIDWKHU¶VVXUQDPHLV3,, UHJDUGOHVVRIZKHWKHUFRPELQHGZLWKRWKHUGDWD  66$GHILQHVD3,,ORVVDVDFLUFXPVWDQFHZKHQDQ(,(3HPSOR\HH FRQWUDFWRURUDJHQWKDVUHDVRQWREHOLHYHWKDWLQIRUPDWLRQRQKDUGFRS\RULQ HOHFWURQLFIRUPDWZKLFKFRQWDLQV3,,SURYLGHGE\66$OHIWWKH(,(3¶V FXVWRG\RUWKH(,(3GLVFORVHGLWWRDQXQDXWKRUL]HGLQGLYLGXDORUHQWLW\3,, ORVVLVDUHSRUWDEOHLQFLGHQW66$UHTXLUHVWKDWFRQWUDFWVIRUSHULRGLF GLVSRVDOGHVWUXFWLRQRIFDVHILOHVRURWKHUSULQWPHGLDFRQWDLQDQRQGLVFORVXUH DJUHHPHQWVLJQHGE\DOOSHUVRQQHOZKRZLOOHQFRXQWHUSURGXFWVWKDWFRQWDLQ 66$SURYLGHGLQIRUPDWLRQ  ,ID3,,ORVVLQYROYLQJ66$SURYLGHGLQIRUPDWLRQRFFXUVRULVVXVSHFWHG WKH(,(3PXVWEHDEOHWRTXDQWLI\WKHH[WHQWRIWKHORVVDQGFRPSLOHD FRPSOHWHOLVWRIWKHLQGLYLGXDOVSRWHQWLDOO\DIIHFWHGE\WKHLQFLGHQW UHIHUWR ,QFLGHQW5HSRUWLQJ   7KH(,(3VKRXOGKDYHSURFHGXUDOGRFXPHQWVWRGHVFULEHPHWKRGVDQG FRQWUROVIRUVDIHJXDUGLQJ66$SURYLGHG3,,ZKLOHLQXVHDWUHVWGXULQJ WUDQVPLVVLRQRUDIWHUDUFKLYLQJ7KHGRFXPHQWVKRXOGH[SODLQKRZWKH (,(3PDQDJHVDQGKDQGOHV66$SURYLGHGLQIRUPDWLRQRQSULQWPHGLDDQG H[SODLQKRZWKHPHWKRGVDQGFRQWUROVFRQIRUPWR1,67UHTXLUHPHQWV 66$UHTXLUHVWKDWSULQWHGLWHPVWKDWFRQWDLQ66$SURYLGHG3,,DOZD\V UHPDLQLQWKHFXVWRG\RIDXWKRUL]HG(,(3HPSOR\HHVFRQWUDFWRUVRU DJHQWV66$DOVRUHTXLUHVWKDWWKHDJHQF\GHVWUR\WKHLWHPVZKHQQR ORQJHUUHTXLUHGIRUWKH(,(3¶VEXVLQHVVSURFHVV,IUHWDLQHGLQSDSHUILOHV IRUHYLGHQWLDU\SXUSRVHVWKH(,(3VKRXOGVDIHJXDUGVXFK3,,LQDPDQQHU WKDWSUHYHQWVXQDXWKRUL]HGSHUVRQQHOIURPDFFHVVLQJVXFKPDWHULDOV$OO DJHQFLHVWKDWUHFHLYH66$SURYLGHGLQIRUPDWLRQPXVWPDLQWDLQDQ LQYHQWRU\RIDOOGRFXPHQWVWKDWRXWOLQHVWDWHZLGHRUDJHQF\SROLF\DQG SURFHGXUHVUHJDUGLQJWKHVDPH   TSSR-Version 7.0 – 07/2015 Page 18  0RQLWRULQJDQG$QRPDO\'HWHFWLRQ ,QIRUPDWLRQ6HFXULW\&RQWLQXRXV0RQLWRULQJ ,6&0 IRU)HGHUDO ,QIRUPDWLRQ6\VWHPVDQG2UJDQL]DWLRQV1,6763(*RYHUQPHQW $FWRI 3/ DQG6HFXULW\$VVHVVPHQWDQG$XWKRUL]DWLRQ &$ DQG5LVN$VVHVVPHQW 5$ )DPLOLHV1,6763UHY   66$UHTXLUHVWKDWWKH(,(3VXVHDQ,QWUXVLRQ3URWHFWLRQ6\VWHP ,36 RU DQ,QWUXVLRQ'HWHFWLRQ6\VWHP ,'6 7KH(,(3PXVWHVWDEOLVKDQGRU PDLQWDLQFRQWLQXRXVPRQLWRULQJRILWVQHWZRUNLQIUDVWUXFWXUHDQGDVVHWVWR HQVXUHWKDW   WKH(,(3¶VVHFXULW\FRQWUROVFRQWLQXHWREHHIIHFWLYHRYHUWLPH   WKH(,(3XVHVLQGXVWU\VWDQGDUG6HFXULW\,QIRUPDWLRQ(YHQW 0DQDJHU 6,(0 WRROVDQWLPDOZDUHVRIWZDUHDQGHIIHFWLYH DQWLYLUXVSURWHFWLRQ   RQO\DXWKRUL]HGLQGLYLGXDOVGHYLFHVDQGSURFHVVHVKDYHDFFHVVWR 66$SURYLGHGLQIRUPDWLRQ   WKH(,(3GHWHFWVHIIRUWVE\H[WHUQDODQGLQWHUQDOHQWLWLHVGHYLFHVRU SURFHVVHVWRSHUIRUPXQDXWKRUL]HGDFWLRQV HJGDWDEUHDFKHV PDOLFLRXVDWWDFNVDFFHVVWRQHWZRUNDVVHWVVRIWZDUHKDUGZDUH LQVWDOODWLRQVHWF DVVRRQDVWKH\RFFXU   WKHQHFHVVDU\SDUWLHVDUHLPPHGLDWHO\DOHUWHGWRXQDXWKRUL]HGDFWLRQV SHUIRUPHGE\H[WHUQDODQGLQWHUQDOHQWLWLHVGHYLFHVRUSURFHVVHV   XSRQGHWHFWLRQRIXQDXWKRUL]HGDFWLRQVPHDVXUHVDUHLPPHGLDWHO\ LQLWLDWHGWRSUHYHQWRUPLWLJDWHDVVRFLDWHGULVN   LQWKHHYHQWRIDGDWDEUHDFKRUVHFXULW\LQFLGHQWWKH(,(3FDQ HIILFLHQWO\GHWHUPLQHDQGLQLWLDWHQHFHVVDU\UHPHGLDODFWLRQVDQG   WUHQGVSDWWHUQVRUDQRPDORXVRFFXUUHQFHVDQGEHKDYLRULQXVHURU QHWZRUNDFWLYLW\WKDWPD\EHLQGLFDWLYHRISRWHQWLDOVHFXULW\LVVXHV DUHUHDGLO\GLVFHUQLEOH      TSSR-Version 7.0 – 07/2015 Page 19 7KH(,(3¶VV\VWHPPXVWLQFOXGHWKHFDSDELOLW\WRSUHYHQWXVHUVIURP XQDXWKRUL]HGEURZVLQJRI66$UHFRUGV66$UHTXLUHVWKHXVHRIDWUDQVDFWLRQ GULYHQSHUPLVVLRQPRGXOHGHVLJQZKHUHE\HPSOR\HHVDUHXQDEOHWRLQLWLDWH WUDQVDFWLRQVQRWDVVRFLDWHGZLWKWKHQRUPDOEXVLQHVVSURFHVV,IWKH(,(3XVHV VXFKDGHVLJQWKH\DOVRPXVWKDYHDQRPDO\GHWHFWLRQWRPRQLWRUDQ HPSOR\HH¶VXQDXWKRUL]HGDWWHPSWVWRJDLQDFFHVVWR66$SURYLGHGLQIRUPDWLRQ DQGDWWHPSWVWRREWDLQLQIRUPDWLRQIURP66$IRUFOLHQWVQRWLQWKH(,(3¶V FOLHQWV\VWHP7KH(,(3VKRXOGHPSOR\PHDVXUHVWRHQVXUHWKHSHUPLVVLRQ PRGXOH¶VLQWHJULW\8VHUVVKRXOGQRWEHDEOHWRFUHDWHDERJXVFDVHDQG VXEVHTXHQWO\GHOHWHLWLQVXFKDPDQQHUWKDWLWJRHVXQGHWHFWHG7KH66$ SHUPLVVLRQPRGXOHGHVLJQHPSOR\VERWKUROHDQGUXOHVEDVHGORJLFDODFFHVV FRQWUROUHVWULFWLRQV 5HIHUWR$FFHVV&RQWURO   ,IWKH(,(3¶VGHVLJQGRHVQRWXVHDSHUPLVVLRQPRGXOHDQGLVQRWWUDQVDFWLRQ GULYHQXQWLODWOHDVWRQHRIWKHVHVHFXULW\IHDWXUHVH[LVWVWKH(,(3PXVWGHYHORS DQGLPSOHPHQWFRPSHQVDWLQJVHFXULW\FRQWUROVWRGHWHUHPSOR\HHVIURP EURZVLQJ66$UHFRUGV7KHVHFRQWUROVPXVWLQFOXGHPRQLWRULQJDQGDQRPDO\ GHWHFWLRQIHDWXUHVVXFKDVV\VWHPDWLFPDQXDORUDFRPELQDWLRQWKHUHRI6XFK IHDWXUHVPXVWLQFOXGHWKHFDSDELOLW\WRGHWHFWDQRPDOLHVLQWKHYROXPHDQGRU W\SHRIWUDQVDFWLRQVRUTXHULHVUHTXHVWHGRULQLWLDWHGE\LQGLYLGXDOVDQGLQFOXGH V\VWHPDWLFRUPDQXDOSURFHGXUHVIRUYHULI\LQJWKDWUHTXHVWVDQGTXHULHVRI 66$SURYLGHGLQIRUPDWLRQFRPSO\ZLWKYDOLGRIILFLDOEXVLQHVVSXUSRVHV  5LVN0DQDJHPHQW3URJUDP  66$UHFRPPHQGVWKDW(,(3VGHYHORSDQGPDLQWDLQDSXEOLVKHG5LVN $VVHVVPHQW3ROLF\DQG3URFHGXUHVGRFXPHQW$5LVN0DQDJHPHQW 3URJUDPPD\LQFOXGHEXWLVQRWOLPLWHGWRWKHIROORZLQJ  $ULVNDVVHVVPHQWSROLF\WKDWDGGUHVVHVSXUSRVHVFRSHUROHV UHVSRQVLELOLWLHVPDQDJHPHQWFRPPLWPHQWFRRUGLQDWLRQDPRQJ RUJDQL]DWLRQDOHQWLWLHVDQGFRPSOLDQFH  3URFHGXUHVWRIDFLOLWDWHWKHLPSOHPHQWDWLRQRIWKHULVNDVVHVVPHQW SROLF\DQGDVVRFLDWHGULVNDVVHVVPHQWFRQWUROV  $IXQFWLRQWKDWFRQGXFWVDQDVVHVVPHQWRIULVNLQFOXGLQJWKHOLNHOLKRRG DQGPDJQLWXGHRIKDUPIURPWKHXQDXWKRUL]HGDFFHVVXVHGLVFORVXUH GLVUXSWLRQPRGLILFDWLRQRUGHVWUXFWLRQRIWKHLQIRUPDWLRQV\VWHPDQG WKHLQIRUPDWLRQLWSURFHVVHVVWRUHVRUWUDQVPLWV  $QLQGHSHQGHQWIXQFWLRQWKDWFRQGXFWVYXOQHUDELOLW\DQGULVN DVVHVVPHQWVUHYLHZVULVNDVVHVVPHQWUHVXOWVDQGGLVVHPLQDWHVVXFK LQIRUPDWLRQWRVHQLRUPDQDJHPHQW  $ILUPFRPPLWPHQWIURPVHQLRUPDQDJHPHQWWRXSGDWHWKHULVN DVVHVVPHQWZKHQHYHUWKHUHDUHVLJQLILFDQWFKDQJHVWRWKHLQIRUPDWLRQ   TSSR-Version 7.0 – 07/2015 Page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¶VGHFLVLRQWRLQLWLDWHRUPDLQWDLQDQRIILFLDO5LVN 0DQDJHPHQW3URJUDPDQGHVWDEOLVKDIRUPDO5LVN$VVHVVPHQW 6WUDWHJ\IRUPLWLJDWLQJULVNLVVWULFWO\YROXQWDU\EXWKLJKO\ UHFRPPHQGHGE\66$  7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<                                  TSSR-Version 7.0 – 07/2015 Page 21 0DQDJHPHQW2YHUVLJKWDQG4XDOLW\$VVXUDQFH 7KH3ULYDF\$FWRI(*RYHUQPHQW$FWRI 3/ DQG WKH$&±$FFHVV&RQWURO 30±3URJUDP0DQDJHPHQW)DPLOLHV1,67 63UHY   66$UHTXLUHVWKH(,(3WRHVWDEOLVKDQGRUPDLQWDLQRQJRLQJPDQDJHPHQW RYHUVLJKWDQGTXDOLW\DVVXUDQFHFDSDELOLWLHVWRHQVXUHWKDWRQO\DXWKRUL]HG XVHUVKDYHDFFHVVWR66$SURYLGHGLQIRUPDWLRQ7KLVZLOOHQVXUHWKHUHLV RQJRLQJFRPSOLDQFHZLWKWKHWHUPVRIWKH(,(3¶VHOHFWURQLFLQIRUPDWLRQ VKDULQJDJUHHPHQWZLWK66$DQGWKH7665VHVWDEOLVKHGIRUDFFHVVWR66$ SURYLGHGLQIRUPDWLRQ7KHHQWLW\UHVSRQVLEOHIRUPDQDJHPHQWRYHUVLJKWVKRXOG FRQVLVWRIRQHRUPRUHRIWKH(,(3¶VPDQDJHPHQWRIILFLDOVZKRVHMREIXQFWLRQV LQFOXGHUHVSRQVLELOLW\WRHQVXUHWKDWWKH(,(3RQO\JUDQWVDFFHVVWRWKH DSSURSULDWHXVHUVDQGSRVLWLRQW\SHV OHDVWSULYLOHJH ZKLFKUHTXLUHWKH66$ SURYLGHGLQIRUPDWLRQWRGRWKHLUMREV QHHGWRNQRZ   66$UHTXLUHVWKH(,(3WRHQVXUHWKDWXVHUVJUDQWHGDFFHVVWR66$SURYLGHG LQIRUPDWLRQUHFHLYHDGHTXDWHWUDLQLQJRQWKHVHQVLWLYLW\RIWKHLQIRUPDWLRQ DVVRFLDWHGVDIHJXDUGVRSHUDWLQJSURFHGXUHVDQGWKHFLYLODQGFULPLQDO FRQVHTXHQFHVRUSHQDOWLHVIRUPLVXVHRULPSURSHUGLVFORVXUH  66$UHTXLUHVWKDW(,(3VHVWDEOLVKWKHIROORZLQJMREIXQFWLRQVDQGUHTXLUHWKDW RQO\XVHUVZKRVHMREIXQFWLRQVDUHVHSDUDWHIURPSHUVRQQHOZKRUHTXHVWRUXVH 66$SURYLGHGLQIRUPDWLRQ   66$UHTXLUHVWKDW(,(3VHVWDEOLVKWKHIROORZLQJMREIXQFWLRQVVHSDUDWH IURPSHUVRQQHOZKRUHTXHVWRUXVH66$SURYLGHGLQIRUPDWLRQ  D 3HUIRUPSHULRGLFVHOIUHYLHZVWRPRQLWRUWKH(,(3¶VRQJRLQJXVDJHRI66$ SURYLGHGLQIRUPDWLRQ  E 3HUIRUPUDQGRPVDPSOLQJRIZRUNDFWLYLW\WKDWLQYROYHV66$SURYLGHG LQIRUPDWLRQWRGHWHUPLQHLIWKHDFFHVVDQGXVDJHFRPSO\ZLWK66$¶V UHTXLUHPHQWV 66$UHTXLUHVWKH(,(3¶VV\VWHPWRSURGXFHUHSRUWVWKDWDOORZPDQDJHPHQW DQGRUVXSHUYLVRUVWRPRQLWRUXVHUDFWLYLW\7KH(,(3PXVWKDYHDSURFHVVIRU GLVWULEXWLQJWKHVHPRQLWRULQJDQGH[FHSWLRQUHSRUWVWRDSSURSULDWHORFDO PDQDJHUVVXSHUYLVRUVRUWRORFDOVHFXULW\RIILFHUV7KHSURFHVVPXVWHQVXUH WKDWRQO\WKRVHZKRVHUHVSRQVLELOLWLHVLQFOXGHPRQLWRULQJDQRPDORXVDFWLYLW\ RIXVHUVWRLQFOXGHWKRVHZKRKDYHH[FHSWLRQDOV\VWHPULJKWVDQGSULYLOHJHV XVHWKHUHSRUWV      TSSR-Version 7.0 – 07/2015 Page 22 8VHU,'([FHSWLRQ5HSRUWV  7KLVW\SHRIUHSRUWFDSWXUHVLQIRUPDWLRQDERXWXVHUVZKRHQWHULQFRUUHFW XVHU,'VZKHQDWWHPSWLQJWRJDLQDFFHVVWRWKHV\VWHPRUWRDWUDQVDFWLRQ WKDW LQLWLDWHV UHTXHVWV IRU LQIRUPDWLRQ IURP 66$ LQFOXGLQJ IDLOHG DWWHPSWVWRHQWHUDSDVVZRUG  ,QTXLU\0DWFK([FHSWLRQ5HSRUWV  7KLV W\SH RI UHSRUW FDSWXUHV LQIRUPDWLRQ DERXW XVHUV ZKR LQLWLDWH WUDQVDFWLRQVIRU661VWKDWKDYHQRFOLHQWFDVHDVVRFLDWLRQZLWKLQWKH (,(3¶VV\VWHP WKH(,(3¶VPDQDJHPHQWPXVWUHYLHZRIWKHVH FDVHV   6\VWHP(UURU([FHSWLRQ5HSRUWV  7KLVW\SHRIUHSRUWFDSWXUHVLQIRUPDWLRQDERXWXVHUVZKRPD\QRW XQGHUVWDQGRUPD\EHYLRODWLQJSURSHUSURFHGXUHVIRUDFFHVVWR66$ SURYLGHGLQIRUPDWLRQ  ,QTXLU\$FWLYLW\6WDWLVWLFDO5HSRUWV  7KLVW\SHRIUHSRUWFDSWXUHVLQIRUPDWLRQDERXWWUDQVDFWLRQXVDJH SDWWHUQVDPRQJDXWKRUL]HGXVHUVDQGLVDWRROWKDWHQDEOHVWKH(,(3¶V PDQDJHPHQWWRPRQLWRUW\SLFDOXVDJHSDWWHUQVLQFRQWUDVWWR H[WUDRUGLQDU\XVDJHSDWWHUQV  7KH(,(3PXVWKDYHDSURFHVVIRUGLVWULEXWLQJWKHVHPRQLWRULQJDQG H[FHSWLRQUHSRUWVWRDSSURSULDWHORFDOPDQDJHUVVXSHUYLVRUVRUWRORFDO VHFXULW\RIILFHUV7KHSURFHVVPXVWHQVXUHWKDWRQO\WKRVHZKRVH UHVSRQVLELOLWLHVLQFOXGHPRQLWRULQJDQRPDORXVDFWLYLW\RIXVHUVWRLQFOXGH WKRVHZKRKDYHH[FHSWLRQDOV\VWHPULJKWVDQGSULYLOHJHVXVHWKHUHSRUWV 7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<   TSSR-Version 7.0 – 07/2015 Page 23  'DWDDQG&RPPXQLFDWLRQV6HFXULW\ 7KH3ULYDF\$FWRI(*RYHUQPHQW$FWRI 3/ DQG WKH$FFHVV&RQWURO $& &RQILJXUDWLRQ0DQDJHPHQW &0 0HGLD 3URWHFWLRQ 03 DQG6\VWHPDQG&RPPXQLFDWLRQ 6& )DPLOLHV1,67 63UHY   66$UHTXLUHV(,(3VWRHQFU\SW3,,DQG66$SURYLGHGLQIRUPDWLRQZKHQ WUDQVPLWWLQJDFURVVGHGLFDWHGFRPPXQLFDWLRQVFLUFXLWVEHWZHHQLWVV\VWHPV LQWUDVWDWHFRPPXQLFDWLRQVEHWZHHQLWVORFDORIILFHORFDWLRQVDQGRQWKH(,(3¶V PRELOHFRPSXWHUVGHYLFHVDQGUHPRYDEOHPHGLD7KH(,(3¶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¶VPDWFKHGUHFRUGIURPDSUHH[LVWLQJGDWDVRXUFH)HGHUDOODZ SURKLELWVGXSOLFDWLRQDQGUHGLVFORVXUHRI66$SURYLGHGLQIRUPDWLRQZLWKRXW ZULWWHQDSSURYDOIURP66$      TSSR-Version 7.0 – 07/2015 Page 24 7KLVSURKLELWLRQDSSOLHVWRERWKLQWHUQDODQGH[WHUQDOVRXUFHVZKRGRQRWKDYHD ³QHHGWRNQRZ´66$UHFRPPHQGVWKDW(,(3VXVHHLWKHU7UXVWHG3ODWIRUP 0RGXOH 730 RU+DUGZDUH6HFXULW\0RGXOH +60 WHFKQRORJ\VROXWLRQV WRHQFU\SWGDWDDWUHVWRQKDUGGULYHVDQGRWKHUGDWDVWRUDJHPHGLD  66$UHTXLUHV(,(3VWRSUHYHQWXQDXWKRUL]HGGLVFORVXUHRI66$SURYLGHG LQIRUPDWLRQDIWHUWKH\FRPSOHWHSURFHVVLQJDQGDIWHUWKH(,(3QRORQJHU UHTXLUHVWKHLQIRUPDWLRQ7KH(,(3¶VRSHUDWLRQDOSURFHVVHVPXVWHQVXUHWKDWQR UHVLGXDO66$SURYLGHGLQIRUPDWLRQUHPDLQVRQWKHKDUGGULYHVRIXVHU¶V ZRUNVWDWLRQVDIWHUWKHXVHUH[LWVWKHDSSOLFDWLRQ V WKDWXVH66$SURYLGHG LQIRUPDWLRQ,IWKH(,(3PXVWVHQGDFRPSXWHUKDUGGULYHRURWKHUFRPSXWLQJ RUVWRUDJHGHYLFHRIIVLWHIRUUHSDLUWKH(,(3PXVWKDYHDQRQGLVFORVXUHFODXVH LQWKHLUFRQWUDFWZLWKWKHYHQGRU,IWKH(,(3XVHGWKHLWHPLQFRQQHFWLRQZLWK DEXVLQHVVSURFHVVWKDWLQYROYHG66$SURYLGHGLQIRUPDWLRQDQGWKHYHQGRUZLOO UHWULHYHRUPD\YLHZ66$SURYLGHGLQIRUPDWLRQGXULQJVHUYLFLQJ66$UHVHUYHV WKHULJKWWRLQVSHFWWKH(,(3¶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ersion 7.0 – 07/2015 Page 25 3K\VLFDOGHVWUXFWLRQ  1,67JXLGHOLQHVUHTXLUHSK\VLFDOGHVWUXFWLRQZKHQGHJDXVVLQJRURYHU ZULWLQJFDQQRWEHDFFRPSOLVKHG IRUH[DPSOH&'VIORSSLHV'9'V GDPDJHGWDSHVKDUGGULYHVGDPDJHG86%IODVKGULYHVHWF  ([DPSOHV RISK\VLFDOGHVWUXFWLRQLQFOXGHVKUHGGLQJSXOYHUL]LQJDQGEXUQLQJ  6WDWHDJHQFLHVPD\UHWDLQ66$SURYLGHGLQIRUPDWLRQLQKDUGFRS\RQO\LI UHTXLUHGWRIXOILOOHYLGHQWLDU\UHTXLUHPHQWVSURYLGHGWKHDJHQFLHVUHWLUHVXFK GDWDLQDFFRUGDQFHZLWKDSSOLFDEOHVWDWHODZVJRYHUQLQJVWDWHDJHQF\¶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¶UHWHQWLRQRIUHFRUGV  127( +DQGWHDULQJRUOLQLQJWKURXJKGRFXPHQWVWRREVFXUH LQIRUPDWLRQGRHVQRWPHHW66$¶VUHTXLUHPHQWVIRUDSSURSULDWHGHVWUXFWLRQ RI3,,  7KH(,(3PXVWHPSOR\PHDVXUHVWRHQVXUHWKDWFRPPXQLFDWLRQVDQGGDWD IXUQLVKHGWR66$FRQWDLQQRYLUXVHVRURWKHUPDOZDUH6SHFLDO1RWHUHJDUGLQJ&ORXG6HUYLFH3URYLGHUV   ,IWKH(,(3ZLOOVWRUH66$SURYLGHGLQIRUPDWLRQWKURXJKD&ORXG6HUYLFH 3URYLGHUSOHDVHSURYLGHWKHQDPHDQGDGGUHVVRIWKHFORXGSURYLGHU 'HVFULEHWKHVHFXULW\UHVSRQVLELOLWLHVWKHFRQWUDFWUHTXLUHVWRSURWHFW66$ SURYLGHGLQIRUPDWLRQ  66$ZLOODVNIRUGHWDLOHGGHVFULSWLRQVRIWKHVHFXULW\IHDWXUHVFRQWUDFWXDOO\ UHTXLUHGRIWKHFORXGSURYLGHUDQGLQIRUPDWLRQUHJDUGLQJKRZWKH\ZLOO SURWHFW66$SURYLGHGLQIRUPDWLRQDWUHVWDQGZKHQLQWUDQVLW  (,(3VFDQQRWOHJDOO\SURFHVVWUDQVPLWRUVWRUH66$SURYLGHG LQIRUPDWLRQLQDFORXGHQYLURQPHQWZLWKRXWH[SOLFLWSHUPLVVLRQIURP 66$¶V&KLHI,QIRUPDWLRQ2IILFHU  7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page 26 ,QFLGHQW5HSRUWLQJ 7KH3ULYDF\$FWRI(*RYHUQPHQW$FWRI 3/  DQGWKH,QFLGHQW5HVSRQVH ,5 )DPLO\1,6763UHY    ),60$1,67*XLGHOLQHVDQG)HGHUDO/DZUHTXLUHWKH(,(3WRGHYHORSDQG LPSOHPHQWSROLFLHVDQGSURFHGXUHVWRUHVSRQGWRSRWHQWLDOGDWDEUHDFKHVRU 3,,ORVHV(,(3VPXVWDUWLFXODWHLQZULWLQJKRZWKHSROLFLHVDQGSURFHGXUHV FRQIRUPWR66$¶VUHTXLUHPHQWV7KHSURFHGXUHVPXVWLQFOXGHWKHIROORZLQJ LQIRUPDWLRQ  ,I\RXUDJHQF\H[SHULHQFHVRUVXVSHFWVDEUHDFKRUORVVRI3,,RUD VHFXULW\LQFLGHQWZKLFKLQFOXGHV66$SURYLGHGLQIRUPDWLRQWKH\PXVW QRWLI\WKH6WDWHRIILFLDOUHVSRQVLEOHIRU6\VWHPV6HFXULW\GHVLJQDWHGLQWKH DJUHHPHQW7KDW6WDWHRIILFLDORUGHOHJDWHPXVWWKHQQRWLI\WKH66$ 5HJLRQDO2IILFH&RQWDFWRUWKH66$6\VWHPV6HFXULW\&RQWDFWLGHQWLILHGLQ WKHDJUHHPHQW,IIRUDQ\UHDVRQWKHUHVSRQVLEOH6WDWHRIILFLDORU GHOHJDWHLVXQDEOHWRQRWLI\WKH66$5HJLRQDO2IILFHRUWKH66$6\VWHPV 6HFXULW\&RQWDFWZLWKLQRQHKRXUWKHUHVSRQVLEOH6WDWH$JHQF\RIILFLDORU GHOHJDWHPXVWUHSRUWWKHLQFLGHQWE\FRQWDFWLQJ66$¶V1DWLRQDO1HWZRUN 6HUYLFH&HQWHU 116& WROOIUHHDW VHOHFW³6HFXULW\DQG 3,,5HSRUWLQJ´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ersion 7.0 – 07/2015 Page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¶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ersion 7.0 – 07/2015 Page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x7KHVHQVLWLYLW\RI66$SURYLGHGLQIRUPDWLRQDQGDGGUHVVWKH 3ULYDF\$FWDQGRWKHU)HGHUDODQGVWDWHODZVJRYHUQLQJLWVXVHDQG PLVXVH  x5XOHVRIEHKDYLRUFRQFHUQLQJXVHDQGVHFXULW\LQV\VWHPV SURFHVVLQJ66$SURYLGHGLQIRUPDWLRQ  x5HVWULFWLRQVRQYLHZLQJDQGRUFRS\LQJ66$SURYLGHGLQIRUPDWLRQ  x7KHHPSOR\HHFRQWUDFWRUDQGDJHQW¶VUHVSRQVLELOLW\IRUSURSHUXVH DQGSURWHFWLRQRI66$SURYLGHGLQIRUPDWLRQ  x3URSHUGLVSRVDORI66$SURYLGHGLQIRUPDWLRQ  x6HFXULW\LQFLGHQWUHSRUWLQJSURFHGXUHV  x%DVLFXQGHUVWDQGLQJRISURFHGXUHVWRSURWHFWWKHQHWZRUNIURP PDOZDUHDWWDFNV     TSSR-Version 7.0 – 07/2015 Page 29 x6SRRILQJ3KLVKLQJDQG3KDUPLQJVFDPSUHYHQWLRQ  x7KHSRVVLEOHVDQFWLRQVDQGSHQDOWLHVIRUPLVXVHRI66$SURYLGHG LQIRUPDWLRQ  7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page 30  &RQWUDFWRUVRI(OHFWURQLF,QIRUPDWLRQ([FKDQJH3DUWQHUV 7KH3ULYDF\$FWRI(*RYHUQPHQW$FWRI 3/  DQG5LVN$VVHVVPHQW 5$ 6\VWHPDQG6HUYLFHV$FTXLVLWLRQ 6$  $ZDUHQHVVDQG7UDLQLQJ $7 3HUVRQQHO6HFXULW\ 36 DQG3URJUDP 0DQDJHPHQW 30 )DPLOLHV1,6763UHY    7KHVWDWHDJHQF\¶VHPSOR\HHVFRQWUDFWRUVDQGDJHQWVZKRDFFHVVXVHRU GLVFORVH66$GDWDLQDPDQQHURUSXUSRVHQRWDXWKRUL]HGE\WKH$JUHHPHQW PD\EHVXEMHFWWRERWKFLYLODQGFULPLQDOVDQFWLRQVSXUVXDQWWRDSSOLFDEOH )HGHUDOVWDWXWHV7KHVWDWHDJHQF\ZLOOSURYLGHLWVFRQWUDFWRUVDQGDJHQWVZLWK FRSLHVRIWKH$JUHHPHQWUHODWHG,($VDQGDOOUHODWHGDWWDFKPHQWVEHIRUH LQLWLDOGLVFORVXUHRI66$GDWDWRVXFKFRQWUDFWRUVDQGDJHQWV3ULRUWRVLJQLQJ WKH$JUHHPHQWDQGWKHUHDIWHUDW66$¶VUHTXHVWWKHVWDWHDJHQF\ZLOOREWDLQ IURPLWVFRQWUDFWRUVDQGDJHQWVDFXUUHQWOLVWRIWKHHPSOR\HHVRIVXFK FRQWUDFWRUVDQGDJHQWVZLWKDFFHVVWR66$GDWDDQGSURYLGHVXFKOLVWVWR66$  &RQWUDFWRUVRIWKHVWDWHDJHQF\PXVWDGKHUHWRWKHVDPHVHFXULW\ UHTXLUHPHQWVDVHPSOR\HHVRIWKHVWDWHDJHQF\7KHVWDWHDJHQF\LV UHVSRQVLEOHIRUWKHRYHUVLJKWRILWVFRQWUDFWRUVDQGWKHFRQWUDFWRU¶V FRPSOLDQFHZLWKWKHVHFXULW\UHTXLUHPHQWV7KHVWDWHDJHQF\PXVWHQWHULQWR DZULWWHQDJUHHPHQWZLWKHDFKRILWVFRQWUDFWRUVDQGDJHQWVZKRQHHG66$ GDWDWRSHUIRUPWKHLURIILFLDOGXWLHV6XFKFRQWUDFWRUVRUDJHQWVDJUHHWR DELGHE\DOOUHOHYDQW)HGHUDOODZVUHVWULFWLRQVRQDFFHVVXVHGLVFORVXUHDQG WKHVHFXULW\UHTXLUHPHQWVFRQWDLQHGZLWKLQWKHVWDWHDJHQF\¶VDJUHHPHQWZLWK 66$  7KHVWDWHDJHQF\PXVWSURYLGHSURRIRIWKHFRQWUDFWXDODJUHHPHQWZLWKDOO FRQWUDFWRUVDQGDJHQWVZKRHQFRXQWHU66$SURYLGHGLQIRUPDWLRQDVSDUWRI WKHLUGXWLHV,IWKHFRQWUDFWRUSURFHVVHVKDQGOHVRUWUDQVPLWVLQIRUPDWLRQ SURYLGHGWRWKHVWDWHDJHQF\E\66$RUKDVDXWKRULW\WRSHUIRUPRQWKHVWDWH DJHQF\¶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¶VGDWDH[FKDQJHDJUHHPHQWZLWK66$7KH VWDWHDJHQF\PXVWDOVRPDNHFHUWDLQWKDWWKHFRQWUDFWRUDQGDJHQW¶VHPSOR\HHV UHFHLYHWKHVDPHVHFXULW\DZDUHQHVVWUDLQLQJDVWKHVWDWHDJHQF\¶VHPSOR\HHV 7KHVWDWHDJHQF\WKHFRQWUDFWRUDQGWKHDJHQWVKRXOGPDLQWDLQDZDUHQHVV WUDLQLQJUHFRUGVIRUWKHLUHPSOR\HHVDQGUHTXLUHWKHVDPHPDQGDWRU\DQQXDO   TSSR-Version 7.0 – 07/2015 Page 31 FHUWLILFDWLRQSURFHGXUHV  66$UHTXLUHVWKHVWDWHDJHQF\WRVXEMHFWWKHFRQWUDFWRUWRRQJRLQJVHFXULW\ FRPSOLDQFHUHYLHZVWKDWPXVWPHHW66$VWDQGDUGV7KHVWDWHDJHQF\ZLOO FRQGXFWFRPSOLDQFHUHYLHZVDWOHDVWWULHQQLDOO\FRPPHQFLQJQRODWHUWKDQWKUHH  \HDUVDIWHUWKHDSSURYHGLQLWLDOVHFXULW\FHUWLILFDWLRQWR66$7KHVWDWH DJHQFLHVZLOOSURYLGH66$ZLWKGRFXPHQWDWLRQRIWKHLUUHFXUULQJFRPSOLDQFH UHYLHZVRIWKHLUFRQWUDFWRUVDQGDJHQWV7KHVWDWHDJHQFLHVZLOOSURYLGHWKH GRFXPHQWDWLRQWR66$GXULQJWKHLUVFKHGXOHGFRPSOLDQFHDQGFHUWLILFDWLRQ UHYLHZVRUXSRQ66$¶VUHTXHVW  ,IWKHVWDWHDJHQF\¶VFRQWUDFWRUZLOOEHLQYROYHGZLWKWKHSURFHVVLQJKDQGOLQJ RUWUDQVPLVVLRQRILQIRUPDWLRQSURYLGHGWRWKH(,(3E\66$RIIVLWHIURPWKH (,(3WKH(,(3PXVWKDYHWKHFRQWUDFWXDORSWLRQWRSHUIRUPRQVLWHUHYLHZVRI WKDWRIIVLWHIDFLOLW\WRHQVXUHWKDWWKHIROORZLQJPHHW66$¶VUHTXLUHPHQWV   D VDIHJXDUGVIRUVHQVLWLYHLQIRUPDWLRQ  E WHFKQRORJLFDOVDIHJXDUGVRQFRPSXWHU V WKDWKDYHDFFHVVWR66$ SURYLGHGLQIRUPDWLRQ  F VHFXULW\FRQWUROVDQGPHDVXUHVWRSUHYHQWGHWHFWDQGUHVROYH XQDXWKRUL]HGDFFHVVWRXVHRIDQGUHGLVFORVXUHRI66$SURYLGHG LQIRUPDWLRQDQG  G FRQWLQXRXVPRQLWRULQJRIWKH(,(3FRQWUDFWRUVRUDJHQW¶VQHWZRUN LQIUDVWUXFWXUHVDQGDVVHWV  7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page 32  &ORXG6HUYLFH3URYLGHUV &63 IRU(OHFWURQLF,QIRUPDWLRQ([FKDQJH 3DUWQHUV 1,67631,67631,676320%0HPR0 1,6763  7KH1DWLRQDO,QVWLWXWHRI6WDQGDUGVDQG7HFKQRORJ\ 1,67 6SHFLDO3XEOLFDWLRQ 63 GHILQHV&ORXG&RPSXWLQJDV³DPRGHOIRUHQDEOLQJXELTXLWRXV FRQYHQLHQWRQGHPDQGQHWZRUNDFFHVVWRDVKDUHGSRRORIFRQILJXUDEOHFRPSXWLQJ UHVRXUFHV HJQHWZRUNVVHUYHUVVWRUDJHDSSOLFDWLRQVDQGVHUYLFHV WKDWFDQEH UDSLGO\SURYLVLRQHGDQGUHOHDVHGZLWKPLQLPDOPDQDJHPHQWHIIRUWRUVHUYLFH SURYLGHULQWHUDFWLRQ7KLVFORXGPRGHOLVFRPSRVHGRIILYHHVVHQWLDOFKDUDFWHULVWLFV WKUHHVHUYLFHPRGHOVDQGIRXUGHSOR\PHQWPRGHOV´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³GHIDFWR´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ersion 7.0 – 07/2015 Page 33  6HFXULW\&HUWLILFDWLRQDQG&RPSOLDQFH5HYLHZ3URJUDPV 1,6763±6\VWHP6HFXULW\3ODQVDQG3ODQQLQJ 3/ )DPLO\1,67 63UHY   66$¶VVHFXULW\FHUWLILFDWLRQDQGFRPSOLDQFHUHYLHZSURJUDPVDUHGLVWLQFWSURFHVVHV 7KHFHUWLILFDWLRQSURJUDPLVDXQLTXHHSLVRGLFSURFHVVZKHQDQ(,(3LQLWLDOO\UHTXHVWV HOHFWURQLFDFFHVVWR66$SURYLGHGLQIRUPDWLRQRUPDNHVVXEVWDQWLYHFKDQJHVWR H[LVWLQJH[FKDQJHSURWRFROGHOLYHU\PHWKRGLQIUDVWUXFWXUHRUSODWIRUP7KH FHUWLILFDWLRQSURFHVVHQWDLOVWZRVWDJHV UHIHUWRIRUGHWDLOV LQWHQGHGWRHQVXUHWKDW PDQDJHPHQWRSHUDWLRQDODQGWHFKQLFDOVHFXULW\PHDVXUHVZRUNDVGHVLJQHG66$ PXVWHQVXUHWKDWWKH(,(3VIXOO\FRQIRUPWR66$¶VVHFXULW\UHTXLUHPHQWVDWWKHWLPHRI FHUWLILFDWLRQDQGVDWLVI\ERWKVWDJHVRIWKHFHUWLILFDWLRQSURFHVVEHIRUH66$ZLOOSHUPLW RQOLQHDFFHVVWRLWVGDWDLQDSURGXFWLRQHQYLURQPHQW  7KHFRPSOLDQFHUHYLHZSURJUDPHQWDLOVF\FOLFDOVHFXULW\UHYLHZRIWKH(,(3SHUIRUPHG E\RURQEHKDOIRI66$7KHSXUSRVHRIWKHUHYLHZLVWRWRDVVHVVDQ(,(3¶VFRQIRUPDQFH WR66$¶VFXUUHQWVHFXULW\UHTXLUHPHQWVDWWKHWLPHRIWKHUHYLHZHQJDJHPHQW7KH FRPSOLDQFHUHYLHZSURJUDPDSSOLHVWRERWKRQOLQHDQGEDWFKDFFHVVWR66$SURYLGHG LQIRUPDWLRQ 8QGHUWKHFRPSOLDQFHUHYLHZSURJUDP(,(3VDUHVXEMHFWWRRQJRLQJDQG SHULRGLFVHFXULW\UHYLHZVE\66$   7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page 34 7KH6HFXULW\&HUWLILFDWLRQ3URJUDP 1,6763±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¶VSUHSDUDWLRQDQGPDLQWHQDQFHRIDFXUUHQW6'3ZLOO DLGWKHPLQGHWHUPLQLQJSRWHQWLDOFRPSOLDQFHLVVXHVSULRUWR UHYLHZVDVVXULQJFRQWLQXHGFRPSOLDQFHZLWK66$¶V7665VDQG SURYLGLQJIRUPRUHHIILFLHQWVHFXULW\UHYLHZV  E 3KDVH 7KH66$2QVLWH&HUWLILFDWLRQLVDIRUPDOVHFXULW\UHYLHZ FRQGXFWHGE\66$RURQLWVEHKDOIWRH[DPLQHWKHIXOOVXLWHRI PDQDJHPHQWRSHUDWLRQDODQGWHFKQLFDOVHFXULW\FRQWUROVLPSOHPHQWHGE\ WKH(,(3WRVDIHJXDUGGDWDREWDLQHGIURP66$HOHFWURQLFDOO\ UHIHUWR 7KH&HUWLILFDWLRQ3URFHVV    7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page 35 'RFXPHQWLQJ6HFXULW\&RQWUROVLQWKH6'3 1,6763±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¶VRUJDQL]DWLRQDO VWUXFWXUHWHFKQLFDOSURFHVVHVRSHUDWLRQDOHQYLURQPHQWRUVHFXULW\ LPSOHPHQWDWLRQVSODQQHGRUPDGHVLQFHDSSURYDORIWKHLUPRVWUHFHQW6'3 RURIWKHLUPRVWUHFHQWVXFFHVVIXOO\FRPSOHWHGVHFXULW\UHYLHZ  H WRFRQILUPFRPSOLDQFHZKHQRQHRUPRUHVHFXULW\EUHDFKHVRULQFLGHQWV LQYROYLQJ66$SURYLGHGLQIRUPDWLRQRFFXUUHGVLQFHDSSURYDORIWKH(,(3¶V PRVWUHFHQW6'3RURIWKHLUPRVWUHFHQWVXFFHVVIXOO\FRPSOHWHGVHFXULW\ UHYLHZ  I WRGRFXPHQWGHVFULSWLRQVDQGH[SODQDWLRQVRIPHDVXUHVLPSOHPHQWHGDVWKH UHVXOWRIDGDWDEUHDFKRUVHFXULW\LQFLGHQW  J WRGRFXPHQWGHVFULSWLRQVDQGH[SODQDWLRQVRIPHDVXUHVLPSOHPHQWHGWR UHVROYHQRQFRPSOLDQF\LVVXH V DQG  K WRREWDLQDQHZDSSURYDODIWHU66$UHYRNHGDSSURYDORIWKHPRVWUHFHQW 6'3   66$PD\UHTXLUHDQHZ6'3LIFKDQJHVRFFXUUHG RWKHUWKDQWKRVHOLVWHG DERYH WKDWPD\DIIHFWWKHWHUPVRIWKH(,(3¶VGDWDH[FKDQJHDJUHHPHQW ZLWK66$    TSSR-Version 7.0 – 07/2015 Page 36 66$ZLOOQRWDSSURYHWKH6'3RUDOORZWKHLQLWLDWLRQRIWUDQVDFWLRQV DQGRUDFFHVVWR66$SURYLGHGLQIRUPDWLRQEHIRUHWKH(,(3FRPSOLHV ZLWKWKH7665V   127( (,(3VWKDWIXQFWLRQRQO\DVDQ67&WUDQVIHUULQJ66$ SURYLGHGLQIRUPDWLRQWRRWKHU(,(3VPXVWSHUWKHWHUPVRIWKHLU DJUHHPHQWVZLWK66$DGKHUHWR66$¶V7665DQGH[HUFLVHWKHLU UHVSRQVLELOLWLHVUHJDUGLQJSURWHFWLRQRI66$SURYLGHGLQIRUPDWLRQ  6HH3DJH'HILQLWLRQRI67&   7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page 37  7KH&HUWLILFDWLRQ3URFHVV 1,6763±6\VWHP6HFXULW\3ODQV6HFXULW\$VVHVVPHQWDQG$XWKRUL]DWLRQ&RQWUROV &$ DQG3ODQQLQJ 3/ )DPLOLHV1,6763UHY   2QFHWKH(,(3KDVVXFFHVVIXOO\VDWLVILHG3KDVH66$ZLOOFRQGXFWDQRQVLWH FHUWLILFDWLRQUHYLHZ7KHREMHFWLYHRIWKHRQVLWHUHYLHZLVWRHQVXUHWKH(,(3¶V PDQDJHPHQWRSHUDWLRQDODQGWHFKQLFDOFRQWUROVVDIHJXDUGLQJ66$SURYLGHG LQIRUPDWLRQIURPPLVXVHDQGLPSURSHUGLVFORVXUHDQGWKDWWKRVHVDIHJXDUGV IXQFWLRQDQGZRUNDVLQWHQGHG  $WLWVGLVFUHWLRQ66$PD\UHTXHVWWKH(,(3WRSDUWLFLSDWHLQDQRQVLWHUHYLHZDQG FRPSOLDQFHFHUWLILFDWLRQRIWKHLUVHFXULW\LQIUDVWUXFWXUH  7KHRQVLWHUHYLHZPD\DGGUHVVDQ\RUDOORI66$¶VVHFXULW\UHTXLUHPHQWVDQG LQFOXGHZKHQDSSURSULDWH   DGHPRQVWUDWLRQRIWKH(,(3¶VLPSOHPHQWDWLRQRIHDFKVHFXULW\UHTXLUHPHQW   DSK\VLFDOUHYLHZRISHUWLQHQWVXSSRUWLQJGRFXPHQWDWLRQWRYHULI\WKH DFFXUDF\RIUHVSRQVHVLQWKH6'3   DGHPRQVWUDWLRQRIWKHIXQFWLRQDOLW\RIWKHVRIWZDUHLQWHUIDFHIRUWKHV\VWHP WKDWZLOOUHFHLYHSURFHVVDQGVWRUH66$SURYLGHGLQIRUPDWLRQ   DGHPRQVWUDWLRQRIWKH$XWRPDWHG$XGLW7UDLO6\VWHP $76    DZDONWKURXJKRIWKH(,(3¶VGDWDFHQWHUWRREVHUYHDQGGRFXPHQWSK\VLFDO VHFXULW\VDIHJXDUGV   DGHPRQVWUDWLRQRIWKH(,(3¶VLPSOHPHQWDWLRQRIHOHFWURQLFH[FKDQJHRI GDWDZLWK66$   DGLVFXVVLRQVZLWKPDQDJHUVVXSHUYLVRUVLQIRUPDWLRQVHFXULW\RIILFHUV V\VWHPDGPLQLVWUDWRUVRURWKHUVWDWHVWDNHKROGHUV   DQH[DPLQDWLRQRIPDQDJHPHQWFRQWUROSURFHGXUHVDQGUHSRUWVSHUWDLQLQJWR DQRPDO\GHWHFWLRQRUDQRPDO\SUHYHQWLRQ   DGHPRQVWUDWLRQRIWHFKQLFDOWRROVSHUWDLQLQJWRXVHUDFFHVVFRQWURODQGLI DSSURSULDWHEURZVLQJSUHYHQWLRQ    TSSR-Version 7.0 – 07/2015 Page 38  DGHPRQVWUDWLRQRIWKHSHUPLVVLRQPRGXOHRUVLPLODUGHVLJQWRVKRZKRZ WKHV\VWHPWULJJHUVUHTXHVWVIRULQIRUPDWLRQIURP66$   DGHPRQVWUDWLRQRIKRZWKHSURFHVVIRUUHTXHVWVIRU66$SURYLGHG LQIRUPDWLRQSUHYHQWV661VQRWSUHVHQWLQWKH(,(3¶VV\VWHPIURPVHQGLQJ UHTXHVWVWR66$  :HPD\DWWHPSWWRREWDLQLQIRUPDWLRQIURP66$XVLQJDWOHDVWRQH UDQGRPO\FUHDWHGILFWLWLRXVQXPEHUQRWNQRZQWRWKH(,(3VV\VWHP  'XULQJDFHUWLILFDWLRQRUFRPSOLDQFHUHYLHZ66$RUDFHUWLILHUDFWLQJRQLWVEHKDOI PD\UHTXHVWDGHPRQVWUDWLRQRIWKH(,(3¶V$76DQGLWVUHFRUGUHWULHYDOFDSDELOLW\ 66$RUDFHUWLILHUPD\UHTXHVWDGHPRQVWUDWLRQRIWKH$76¶FDSDELOLW\WRWUDFNWKH DFWLYLW\RIHPSOR\HHVZKRKDYHWKHSRWHQWLDOWRDFFHVV66$SURYLGHGLQIRUPDWLRQ ZLWKLQWKH(,(3¶VV\VWHP7KHFHUWLILHUPD\UHTXHVWPRUHLQIRUPDWLRQIURPWKRVH (,(3VZKRXVHDQ67&WRKDQGOHDQGDXGLWWUDQVDFWLRQV66$RUDFHUWLILHUPD\ FRQGXFWDGHPRQVWUDWLRQWRVHHKRZWKH(,(3REWDLQVDXGLWLQIRUPDWLRQIURPWKH 67&UHJDUGLQJWKH(,(3¶V66$WUDQVDFWLRQV  ,IDQ67&KDQGOHVDQGDXGLWVDQ(,(3¶VWUDQVDFWLRQV66$UHTXLUHVWKH(,(3WR GHPRQVWUDWHERWKWKHLULQKRXVHDXGLWFDSDELOLWLHVDQGWKHSURFHVVXVHGWRREWDLQ DXGLWLQIRUPDWLRQIURPWKH67&  ,IWKH(,(3HPSOR\VDFRQWUDFWRURUDJHQWZKRSURFHVVHVKDQGOHVRUWUDQVPLWV WKH(,(3¶V66$SURYLGHGLQIRUPDWLRQRIIVLWH66$DWLWVGLVFUHWLRQPD\UHTXHVW WRLQFOXGHWKHFRQWUDFWRU¶VIDFLOLW\LQWKHRQVLWHFHUWLILFDWLRQUHYLHZ 7KH LQVSHFWLRQPD\RFFXUZLWKRUZLWKRXWDUHSUHVHQWDWLYHRIWKH(,(3  8SRQVXFFHVVIXOFRPSOHWLRQRIWKHRQVLWHFHUWLILFDWLRQUHYLHZ66$ZLOO DXWKRUL]HHOHFWURQLFDFFHVVWRSURGXFWLRQGDWDE\WKH(,(366$ZLOOSURYLGH ZULWWHQQRWLILFDWLRQRILWVFHUWLILFDWLRQWRWKH(,(3DQGDOODSSURSULDWHLQWHUQDO 66$FRPSRQHQWV  7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<    TSSR-Version 7.0 – 07/2015 Page 39 7KH&RPSOLDQFH5HYLHZ3URJUDPDQG3URFHVV 1,6763±6\VWHP6HFXULW\3ODQV&RQILJXUDWLRQ0DQDJHPHQW &0 6HFXULW\$VVHVVPHQWDQG$XWKRUL]DWLRQ&RQWUROV &$ DQG3ODQQLQJ 3/ )DPLOLHV1,6763UHY   6LPLODUWRWKHFHUWLILFDWLRQSURFHVVWKHFRPSOLDQFHUHYLHZSURJUDPHQWDLOVD SURFHVVLQWHQGHGWRHQVXUHWKDW(,(3VWKDWUHFHLYHHOHFWURQLFLQIRUPDWLRQIURP66$ DUHLQIXOOFRPSOLDQFHZLWKWKH66$¶V7665V 66$UHTXLUHV(,(3VWRFRPSOHWH DQGVXEPLW EDVHGRQDWLPHOLQHDJUHHGXSRQE\66$DQG(,(3¶VVWDNHKROGHUV D &RPSOLDQFH5HYLHZ4XHVWLRQQDLUH &54 7KH&54 VLPLODUWRWKH6'3  GHVFULEHVWKH(,(3¶VPDQDJHPHQWRSHUDWLRQDODQGWHFKQLFDOFRQWUROVXVHGWR SURWHFW66$SURYLGHGLQIRUPDWLRQIURPPLVXVHDQGLPSURSHUGLVFORVXUH:HDOVR ZDQWWRYHULI\WKDWWKRVHVDIHJXDUGVIXQFWLRQDQGZRUNDVLQWHQGHG  $VDSUDFWLFH66$DWWHPSWVWRFRQGXFWFRPSOLDQFHUHYLHZVIROORZLQJD\HDU SHULRGLFUHYLHZVFKHGXOH+RZHYHUDVFLUFXPVWDQFHVZDUUDQWDUHYLHZPD\WDNH SODFHDWDQ\WLPH 7KUHHSURPLQHQWH[DPSOHVWKDWZRXOGWULJJHUDQDGKRFUHYLHZ DUH  $DVLJQLILFDQWFKDQJHLQWKHRXWVLGH(,(3¶VFRPSXWLQJSODWIRUP  %DYLRODWLRQRIDQ\RI66$¶V7665VRU  C.DQXQDXWKRUL]HGGLVFORVXUHRI66$SURYLGHGLQIRUPDWLRQE\WKH(,(3  66$PD\FRQGXFWRQVLWHFRPSOLDQFHUHYLHZVDQGLQFOXGHERWKWKH(,(3¶VPDLQ IDFLOLW\DQGDILHOGRIILFH 66$PD\DWLWVGLVFUHWLRQUHTXHVWWKDWWKH(,(3SDUWLFLSDWHLQDQRQVLWHFRPSOLDQFH UHYLHZRIWKHLUVHFXULW\LQIUDVWUXFWXUHWRFRQILUPWKHLPSOHPHQWDWLRQRI66$¶V VHFXULW\UHTXLUHPHQWV  7KHRQVLWHUHYLHZPD\DGGUHVVDQ\RUDOORI66$¶VVHFXULW\UHTXLUHPHQWVDQG LQFOXGHZKHUHDSSURSULDWH  'DGHPRQVWUDWLRQRIWKH(,(3¶VLPSOHPHQWDWLRQRIHDFKUHTXLUHPHQW  (DUDQGRPVDPSOLQJRIDXGLWUHFRUGVDQGWUDQVDFWLRQVVXEPLWWHGWR66$  )DZDONWKURXJKRIWKH(,(3¶VGDWDFHQWHUWRREVHUYHDQGGRFXPHQWSK\VLFDO VHFXULW\VDIHJXDUGV  *DGHPRQVWUDWLRQRIWKH(,(3¶VLPSOHPHQWDWLRQRIRQOLQHH[FKDQJHRIGDWD ZLWK66$   TSSR-Version 7.0 – 07/2015 Page 40  +DGLVFXVVLRQZLWKPDQDJHUVVXSHUYLVRUVLQIRUPDWLRQVHFXULW\RIILFHUV V\VWHPDGPLQLVWUDWRUVRURWKHUVWDWHVWDNHKROGHUV  ,DQH[DPLQDWLRQRIPDQDJHPHQWFRQWUROSURFHGXUHVDQGUHSRUWVSHUWDLQLQJWR DQRPDO\GHWHFWLRQDQGSUHYHQWLRQUHSRUWV  -DGHPRQVWUDWLRQRIWHFKQLFDOWRROVSHUWDLQLQJWRXVHUDFFHVVFRQWURODQGLI DSSURSULDWHEURZVLQJSUHYHQWLRQ  .DGHPRQVWUDWLRQRIKRZDSHUPLVVLRQPRGXOHRUVLPLODUGHVLJQWULJJHUV UHTXHVWVIRULQIRUPDWLRQIURP66$DQG  /DGHPRQVWUDWLRQRIKRZDSHUPLVVLRQPRGXOHSUHYHQWVWKH(,(3¶VV\VWHP IURPSURFHVVLQJ661VQRWSUHVHQWLQWKH(,(3¶VV\VWHP   :HFDQDFFRPSOLVKWKLVE\DWWHPSWLQJWRREWDLQLQIRUPDWLRQIURP66$ XVLQJDWOHDVWRQHUDQGRPO\FUHDWHGILFWLWLRXVQXPEHUQRWNQRZQWR WKH(,(3¶VV\VWHP  66$PD\SHUIRUPDQRQVLWHRUUHPRWHUHYLHZIRUUHDVRQVLQFOXGLQJEXWQRW OLPLWHGWRWKHIROORZLQJ D WKH(,(3KDVH[SHULHQFHGDVHFXULW\EUHDFKRULQFLGHQWLQYROYLQJ66$ SURYLGHGLQIRUPDWLRQ  E WKH(,(3KDVXQUHVROYHGQRQFRPSOLDQF\LVVXH V   F WRUHYLHZDQRIIVLWHFRQWUDFWRU¶VIDFLOLW\WKDWSURFHVVHV66$ SURYLGHGLQIRUPDWLRQ  G WKH(,(3LVDOHJDF\RUJDQL]DWLRQWKDWKDVQRW\HWEHHQWKURXJK66$V VHFXULW\FHUWLILFDWLRQDQGFRPSOLDQFHUHYLHZSURJUDPV  H WKH(,(3UHTXHVWHGWKDW66$SHUIRUPDQ,9 9 ,QGHSHQGHQW 9HULILFDWLRQDQG9DOLGDWLRQUHYLHZ   'XULQJWKHFRPSOLDQFHUHYLHZ66$RUDFHUWLILHUDFWLQJRQLWVEHKDOIPD\UHTXHVW DGHPRQVWUDWLRQRIWKHV\VWHP¶VDXGLWWUDLODQGUHWULHYDOFDSDELOLW\7KHFHUWLILHU PD\UHTXHVWDGHPRQVWUDWLRQRIWKHV\VWHP¶VFDSDELOLW\IRUWUDFNLQJWKHDFWLYLW\RI HPSOR\HHVZKRYLHZ66$SURYLGHGLQIRUPDWLRQZLWKLQWKH(,(3¶VV\VWHP7KH FHUWLILHUPD\UHTXHVW(,(3VWKDWKDYH67&VWKDWKDQGOHDQGDXGLWWUDQVDFWLRQVZLWK 66$WRGHPRQVWUDWHWKHSURFHVVXVHGWRREWDLQDXGLWLQIRUPDWLRQIURPWKH67&  ,IDQ67&KDQGOHVDQGDXGLWVWKH(,(3¶VWUDQVDFWLRQVZLWK66$ZHPD\UHTXLUHWKH (,(3WRGHPRQVWUDWHERWKWKHLULQKRXVHDXGLWFDSDELOLWLHVDQGWKHSURFHVVHVXVHGWR   TSSR-Version 7.0 – 07/2015 Page 41 REWDLQDXGLWLQIRUPDWLRQIURPWKH67&UHJDUGLQJWKH(,(3¶VWUDQVDFWLRQVZLWK66$  ,IWKH(,(3HPSOR\VDFRQWUDFWRUZKRZLOOSURFHVVKDQGOHRUWUDQVPLWWKH(,(3¶V 66$SURYLGHGLQIRUPDWLRQRIIVLWH66$DWLWVGLVFUHWLRQPD\UHTXHVWWRLQFOXGHLQ WKHRQVLWHFRPSOLDQFHUHYLHZDQRQVLWHLQVSHFWLRQRIWKHFRQWUDFWRU¶VIDFLOLW\ 7KH LQVSHFWLRQPD\RFFXUZLWKRUZLWKRXWDUHSUHVHQWDWLYHRIWKH(,(37KHIRUPDWRI WKHUHYLHZLQURXWLQHFLUFXPVWDQFHV HJWKHFRPSOLDQFHUHYLHZLVQRWEHLQJ FRQGXFWHGWRDGGUHVVDVSHFLDOFLUFXPVWDQFHVXFKDVDGLVFORVXUHYLRODWLRQHWF  ZLOOJHQHUDOO\FRQVLVWRIUHYLHZLQJDQGXSGDWLQJWKH(,(3¶VFRPSOLDQFHZLWKWKH V\VWHPVVHFXULW\UHTXLUHPHQWVGHVFULEHGDERYHLQWKLVGRFXPHQW $WWKHFRQFOXVLRQ RIWKHUHYLHZ66$ZLOOLVVXHDIRUPDOUHSRUWWRDSSURSULDWH(,(3SHUVRQQHO7KH &RPSOLDQFH5HSRUWZLOODGGUHVVILQGLQJVDQGUHFRPPHQGDWLRQVIURP66$¶V FRPSOLDQFHUHYLHZZKLFKLQFOXGHVDSODQIRUPRQLWRULQJHDFKLVVXHXQWLOFORVXUH  127( 66$ZLOOQHYHUUHTXHVWGRFXPHQWDWLRQIRUFRPSOLDQFHUHYLHZVXQOHVV QHFHVVDU\WRDVVHVVWKH(,(3¶VVHFXULW\SRVWXUH 7KHLQIRUPDWLRQLVRQO\ DFFHVVLEOHWRDXWKRUL]HGLQGLYLGXDOVZKRKDYHDQHHGIRUWKHLQIRUPDWLRQDVLW UHODWHVWRWKH(,(3¶VFRPSOLDQFHZLWKLWVHOHFWURQLFGDWDH[FKDQJHDJUHHPHQW ZLWK66$DQGWKHDVVRFLDWHGV\VWHPVHFXULW\UHTXLUHPHQWVDQGSURFHGXUHV 66$ ZLOOQRWUHWDLQWKH(,(3¶VGRFXPHQWDWLRQDQ\ORQJHUWKDQUHTXLUHG66$ZLOO GHOHWHSXUJHRUGHVWUR\WKHGRFXPHQWDWLRQZKHQWKHUHWHQWLRQUHTXLUHPHQW H[SLUHV  &RPSOLDQFH5HYLHZVDUHHLWKHURQVLWHRUUHPRWHUHYLHZV+LJKULVNUHYLHZVPXVW EHRQVLWHUHYLHZVPHGLXPULVNUHYLHZVDUHXVXDOO\RQVLWHDQGORZULVNUHYLHZV PD\TXDOLI\IRUDUHPRWHUHYLHZYLDWHOHSKRQH7KHSDVWSHUIRUPDQFHRIWKHHQWLUH VWDWHGHWHUPLQHVZKHWKHUDUHYLHZLVRQVLWHRUUHPRWH66$GHWHUPLQHVDVWDWH¶V ULVNOHYHOEDVHGRQWKH³KLJKZDWHUPDUNSULQFLSOH´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ersion 7.0 – 07/2015 Page 42 %/RZ5LVN&ULWHULD   QRSULRUUHYLHZILQGLQJ V RUSULRUILQGLQJ V GRFXPHQWHGDVFORVHG   QRLPSOHPHQWDWLRQRIWHFKQLFDORSHUDWLRQDOFRQWUROVWKDWLPSDFW VHFXULW\RI66$SURYLGHG   LQIRUPDWLRQ HJLPSOHPHQWDWLRQRIQHZGDWDDFFHVVPHWKRG QR UHSRUWHG3,,EUHDFK  (,(3&RPSOLDQFH5HYLHZ3DUWLFLSDWLRQ  66$PD\UHTXHVWWRPHHWZLWKWKHIROORZLQJVWDNHKROGHUVGXULQJWKH FRPSOLDQFHUHYLHZ  D DVDPSOHRIPDQDJHUVVXSHUYLVRUVLQIRUPDWLRQVHFXULW\RIILFHUV V\VWHPDGPLQLVWUDWRUVHWFUHVSRQVLEOHIRUHQIRUFLQJDQG PRQLWRULQJRQJRLQJFRPSOLDQFHWRVHFXULW\UHTXLUHPHQWVDQG SURFHGXUHVWRDVVHVVWKHLUOHYHORIWUDLQLQJWRPRQLWRUWKHLU HPSOR\HH¶VXVHRI66$SURYLGHGLQIRUPDWLRQDQGIRUUHYLHZLQJ UHSRUWVDQGWDNLQJQHFHVVDU\DFWLRQ  E WKHLQGLYLGXDOVUHVSRQVLEOHIRUSHUIRUPLQJVHFXULW\DZDUHQHVVDQG HPSOR\HHVDQFWLRQIXQFWLRQVWROHDUQKRZ(,(3VIXOILOOWKLV UHTXLUHPHQW  F DVDPSOHRIWKH(,(3¶VHPSOR\HHVWRDVVHVVWKHLUOHYHORIWUDLQLQJ DQGXQGHUVWDQGLQJRIWKHUHTXLUHPHQWVDQGSRWHQWLDOVDQFWLRQV DSSOLFDEOHWRWKHXVHDQGPLVXVHRI66$SURYLGHGLQIRUPDWLRQ  G WKHLQGLYLGXDO V UHVSRQVLEOHIRUPDQDJHPHQWRYHUVLJKWDQGTXDOLW\ DVVXUDQFHIXQFWLRQVWRFRQILUPKRZWKH(,(3DFFRPSOLVKHVWKLV UHTXLUHPHQW   H DQ\DGGLWLRQDOLQGLYLGXDOVDVGHHPHGDSSURSULDWHE\66$ LH DQDO\VWV3URMHFW3URJUDP0DQDJHUFODLPVUHSVHWF     7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<           TSSR-Version 7.0 – 07/2015 Page 43 6FKHGXOLQJWKH2QVLWH5HYLHZ  66$ZLOOQRWVFKHGXOHWKHRQVLWHUHYLHZXQWLO66$DSSURYHVWKH(,(3¶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¶VZRUNORDGDQGUHVRXUFHFRQVLGHUDWLRQV  7+(5(672)7+,63$*(+$6%((1/()7%/$1.,17(17,21$//<     TSSR-Version 7.0 – 07/2015 Page 44  $GGLWLRQDO'HILQLWLRQV  %DFN%XWWRQ 5HIHUVWRDEXWWRQRQDZHEEURZVHU¶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ersion 7.0 – 07/2015 Page 45 5HVRXUFHSRROLQJ7KHSURYLGHU¶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¶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ersion 7.0 – 07/2015 Page 46 FRPPXQLW\RIFRQVXPHUVIURPRUJDQL]DWLRQVWKDWKDYHVKDUHGFRQFHUQV HJPLVVLRQVHFXULW\ UHTXLUHPHQWVSROLF\DQGFRPSOLDQFHFRQVLGHUDWLRQV ,WPD\EHRZQHGPDQDJHGDQGRSHUDWHGE\ RQHRUPRUHRIWKHRUJDQL]DWLRQVLQWKHFRPPXQLW\DWKLUGSDUW\RUVRPHFRPELQDWLRQRIWKHPDQG LWPD\H[LVWRQRURIISUHPLVHV 3XEOLFFORXG7KHFORXGLQIUDVWUXFWXUHLVSURYLVLRQHGIRURSHQXVHE\WKHJHQHUDOSXEOLF,WPD\EH RZQHGPDQDJHGDQGRSHUDWHGE\DEXVLQHVVDFDGHPLFRUJRYHUQPHQWRUJDQL]DWLRQRUVRPH FRPELQDWLRQRIWKHP,WH[LVWVRQWKHSUHPLVHVRIWKHFORXGSURYLGHU +\EULGFORXG7KHFORXGLQIUDVWUXFWXUHLVDFRPSRVLWLRQRIWZRRUPRUHGLVWLQFWFORXG LQIUDVWUXFWXUHV SULYDWHFRPPXQLW\RUSXEOLF WKDWUHPDLQXQLTXHHQWLWLHVEXWDUHERXQGWRJHWKHU E\VWDQGDUGL]HGRUSURSULHWDU\WHFKQRORJ\WKDWHQDEOHVGDWDDQGDSSOLFDWLRQSRUWDELOLW\ HJFORXG EXUVWLQJIRUORDGEDODQFLQJEHWZHHQFORXGV  BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB 7\SLFDOO\WKLVLVGRQHRQDSD\SHUXVHRUFKDUJHSHUXVHEDVLV $FORXGLQIUDVWUXFWXUHLVWKHFROOHFWLRQRIKDUGZDUHDQGVRIWZDUHWKDWHQDEOHVWKHILYHHVVHQWLDO FKDUDFWHULVWLFVRIFORXGFRPSXWLQJ7KHFORXGLQIUDVWUXFWXUHFDQEHYLHZHGDVFRQWDLQLQJERWKDSK\VLFDO OD\HUDQGDQDEVWUDFWLRQOD\HU7KHSK\VLFDOOD\HUFRQVLVWVRIWKHKDUGZDUHUHVRXUFHVWKDWDUHQHFHVVDU\WR VXSSRUWWKHFORXGVHUYLFHVEHLQJSURYLGHGDQGW\SLFDOO\LQFOXGHVVHUYHUVWRUDJHDQGQHWZRUNFRPSRQHQWV 7KHDEVWUDFWLRQOD\HUFRQVLVWVRIWKHVRIWZDUHGHSOR\HGDFURVVWKHSK\VLFDOOD\HUZKLFKPDQLIHVWVWKH HVVHQWLDOFORXGFKDUDFWHULVWLFV&RQFHSWXDOO\WKHDEVWUDFWLRQOD\HUVLWVDERYHWKHSK\VLFDOOD\HU 7KLVFDSDELOLW\GRHVQRWQHFHVVDULO\SUHFOXGHWKHXVHRIFRPSDWLEOHSURJUDPPLQJODQJXDJHVOLEUDULHV VHUYLFHVDQGWRROVIURPRWKHUVRXUFHV   &ORXG'ULYH $FORXGGULYHLVD:HEEDVHGVHUYLFHWKDWSURYLGHVVWRUDJHVSDF HRQDUHPRWHVHUYHU  &ORXG$XGLW &ORXG$XGLWLVDVSHFLILFDWLRQGHYHORSHGDW&LVFR6\VWHPV,QFWKDWSURYLGHVFORXG FRPSXWLQJVHUYLFHSURYLGHUVDVWDQGDUGZD\WRSUHVHQWDQGVKDUHGHWDLOHG DXWRPDWHGVWDWLVWLFVDERXWSHUIRUPDQFHDQGVHFXULW\  7KH)HGHUDO5LVNDQG$XWKRUL]DWLRQ3URJUDP )HG5$03  )HG5$03LVDULVNPDQDJHPHQWSURJUDPWKDWSURYLGHVDVWDQGDUGL]HGDSSURDFK IRUDVVHVVLQJDQGPRQLWRULQJWKHVHFXULW\RIFORXGSURGXFWVDQGVHUYLFHV  &RPPLQJOLQJ &RPPLQJOLQJLVWKHFUHDWLRQRIDFRPPRQGDWDEDVHRUUHSRVLWRU\WKDWVWRUHVDQG PDLQWDLQVERWK66$SURYLGHGLQIRUPDWLRQDQGSUHH[LVWLQJ(,(33,,       TSSR-Version 7.0 – 07/2015 Page 47 'DWD([FKDQJH 'DWD([FKDQJHLVDORJLFDOWUDQVIHURILQIRUPDWLRQIURPRQHJRYHUQPHQWHQWLW\¶V V\VWHPVRIUHFRUGV 625 WRDQRWKHUDJHQF\¶VDSSOLFDWLRQRUPDLQIUDPHWKURXJKD VHFXUHDQGH[FOXVLYHFRQQHFWLRQ  'HJDXVVLQJ 'HJDXVVLQJLVWKHPHWKRGRIXVLQJD³VSHFLDOGHYLFH´ LHDGHYLFHWKDWJHQHUDWHVD PDJQHWLFILHOG LQRUGHUWRGLVUXSWPDJQHWLFDOO\UHFRUGHGLQIRUPDWLRQ 'HJDXVVLQJ FDQEHHIIHFWLYHIRUSXUJLQJGDPDJHGPHGLDDQGPHGLDZLWKH[FHSWLRQDOO\ODUJH VWRUDJHFDSDFLWLHV 'HJDXVVLQJLVQRWHIIHFWLYHIRUSXUJLQJQRQPDJQHWLFPHGLD HJ RSWLFDOGLVFV   )XQFWLRQ 2QHRUPRUHSHUVRQVRURUJDQL]DWLRQDOFRPSRQHQWVDVVLJQHGWRVHUYHDSDUWLFXODU SXUSRVHRUSHUIRUPDSDUWLFXODUUROH7KHSXUSRVHDFWLYLW\RUUROHDVVLJQHGWRRQH RUPRUHSHUVRQVRURUJDQL]DWLRQDOFRPSRQHQWV  +XE $VLWUHODWHVWRHOHFWURQLFGDWDH[FKDQJHZLWK66$DKXELVDQRUJDQL]DWLRQZKLFK VHUYHVDVDQHOHFWURQLFLQIRUPDWLRQFRQGXLWRUGLVWULEXWLRQFROOHFWLRQSRLQW7KH WHUP+XELVLQWHUFKDQJHDEOHZLWKWKHWHUPV³6WDWH7UDQVPLVVLRQ&RPSRQHQW´ ³6WDWH7UDQVIHU&RPSRQHQW´RU³67&´  ,&21 ,QWHUVWDWH&RQQHFWLRQ1HWZRUN YDULRXVHQWLWLHVXVH &RQQHFWLYLW\ UDWKHUWKDQ &RQQHFWLRQ   ,9 9 ,QGHSHQGHQW9HULILFDWLRQDQG9DOLGDWLRQ  /HJDF\6\VWHP  $WHUPXVXDOO\UHIHUULQJWRDFRUSRUDWHRURUJDQL]DWLRQDOFRPSXWHUV\VWHPRU QHWZRUNWKDWXWLOL]HVRXWPRGHGSURJUDPPLQJODQJXDJHVVRIWZDUHDQGRUKDUGZDUH WKDWW\SLFDOO\QRORQJHUUHFHLYHVVXSSRUWIURPWKHRULJLQDOYHQGRUVRUGHYHORSHUV  0DQXDO7UDQVDFWLRQ $XVHULQLWLDWHGRSHUDWLRQ DOVRUHIHUUHGWRDVD³XVHULQLWLDWHGWUDQVDFWLRQெ 7KLVLV WKHRSSRVLWHRIDV\VWHPJHQHUDWHGDXWRPDWHGSURFHVV  ([DPSOH $XVHUHQWHUVDFOLHQW¶VLQIRUPDWLRQLQFOXGLQJWKHFOLHQW¶V661DQG SUHVVHVWKH³(17(5ெNH\WRDFNQRZOHGJHWKDWLQSXWRIGDWDLVFRPSOHWH $QHZ VFUHHQDSSHDUVZLWKPXOWLSOHRSWLRQVZKLFKLQFOXGH³9(5,)<661ெDQG ³&217,18(ெ7KHXVHUKDVWKHRSWLRQWRYHULI\WKHFOLHQW¶V661RUSHUIRUP DOWHUQDWLYHDFWLRQV       TSSR-Version 7.0 – 07/2015 Page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¶VQRUPDORSHUDWLQJ HQYLURQPHQW  L 'HJDXVVLQJLVDOVRDQH[DPSOHRIDQDFFHSWDEOHPHWKRGIRUSXUJLQJ PDJQHWLFPHGLD7KH(,(3VKRXOGGHVWUR\PHGLDLISXUJLQJLVQRWD YLDEOHPHWKRGIRUVDQLWL]DWLRQ  x'HVWUXFWLRQ3K\VLFDOGHVWUXFWLRQRIPHGLDLVWKHPRVWHIIHFWLYHIRUPRI VDQLWL]DWLRQ0HWKRGVRIGHVWUXFWLRQLQFOXGHEXUQLQJSXOYHUL]LQJDQG VKUHGGLQJ$Q\UHVLGXDOPHGLXPVKRXOGEHDEOHWRZLWKVWDQGDODERUDWRU\ DWWDFN         TSSR-Version 7.0 – 07/2015 Page 49 3HUPLVVLRQPRGXOH $XWLOLW\RUVXESURJUDPZLWKLQDQDSSOLFDWLRQZKLFKDXWRPDWLFDOO\HQIRUFHVWKH UHODWLRQVKLSRIDUHTXHVWIRURUTXHU\RI66$SURYLGHGLQIRUPDWLRQWRDQ DXWKRUL]HGSURFHVVRUWUDQVDFWLRQEHIRUHLQLWLDWLQJDWUDQVDFWLRQ7KH6\VWHP ZLOOQRWDOORZDXVHUWRUHTXHVWLQIRUPDWLRQIURP66$XQOHVVWKH(,(3¶VFOLHQW V\VWHPFRQWDLQVDUHFRUGRIWKHVXEMHFWLQGLYLGXDO¶V661$SURSHUO\FRQILJXUHG 3HUPLVVLRQ0RGXOHDOVRHQIRUFHVUHIHUHQWLDOLQWHJULW\DQGSUHYHQWVXQDXWKRUL]HG UDQGRPEURZVLQJRI3,, 6FUHHQ6FUDSLQJ 6FUHHQVFUDSLQJLVQRUPDOO\DVVRFLDWHGZLWKWKHSURJUDPPDWLFFROOHFWLRQRIYLVXDO GDWDIURPDVRXUFH 2ULJLQDOO\VFUHHQVFUDSLQJUHIHUUHGWRWKHSUDFWLFHRIUHDGLQJ WH[WGDWDIURPDFRPSXWHUGLVSOD\WHUPLQDO¶VVFUHHQ7KLVLQYROYHVUHDGLQJWKH WHUPLQDO VPHPRU\WKURXJKLWVDX[LOLDU\SRUWRUE\FRQQHFWLQJWKHWHUPLQDORXWSXW SRUWRIRQHFRPSXWHUV\VWHPWRDQLQSXWSRUWRQDQRWKHU7KHWHUPVFUHHQVFUDSLQJLV V\QRQ\PRXVZLWKWKHWHUPELGLUHFWLRQDOH[FKDQJHRIGDWD  $VFUHHQVFUDSHUPLJKWFRQQHFWWRDOHJDF\V\VWHPYLD7HOQHWHPXODWHWKHNH\VWURNHV QHHGHGWRQDYLJDWHWKHOHJDF\XVHULQWHUIDFHSURFHVVWKHUHVXOWLQJGLVSOD\RXWSXW H[WUDFWWKHGHVLUHGGDWDDQGSDVVLWRQWRDPRGHUQV\VWHP 0RUHPRGHUQVFUHHQVFUDSLQJWHFKQLTXHVLQFOXGHFDSWXULQJWKHELWPDSGDWDIURP DVFUHHQDQGUXQQLQJLWWKURXJKDQRSWLFDOFKDUDFWHUUHDGHUHQJLQHRULQWKHFDVH RIJUDSKLFDOXVHULQWHUIDFHDSSOLFDWLRQVTXHU\LQJWKHJUDSKLFDOFRQWUROVE\ SURJUDPPDWLFDOO\REWDLQLQJUHIHUHQFHVWRWKHLUXQGHUO\LQJSURJUDPPLQJREMHFWV  6HFXULW\%UHDFK$QDFWIURPRXWVLGHDQRUJDQL]DWLRQWKDWE\SDVVHVRUYLRODWHVVHFXULW\SROLFLHV SUDFWLFHVRUSURFHGXUHV  6HFXULW\,QFLGHQW$VHFXULW\LQFLGHQWKDSSHQVZKHQDIDFWRUHYHQWVLJQLILHVWKHSRVVLELOLW\WKDWDEUHDFK RIVHFXULW\PD\EHWDNLQJSODFHRUPD\KDYHWDNHQSODFH $OOWKUHDWVDUHVHFXULW\ LQFLGHQWVEXWQRWDOOVHFXULW\LQFLGHQWVDUHWKUHDWV  6HFXULW\9LRODWLRQ $QDFWIURPZLWKLQDQRUJDQL]DWLRQWKDWE\SDVVHVRUGLVREH\VVHFXULW\SROLFLHV SUDFWLFHVRUSURFHGXUHV            TSSR-Version 7.0 – 07/2015 Page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³66$VXSSOLHGGDWDLQIRUPDWLRQெGHILQHVLQIRUPDWLRQXQGHUWKH FRQWURORI66$SURYLGHGWRDQH[WHUQDOHQWLW\XQGHUWKHWHUPVRIDQLQIRUPDWLRQ H[FKDQJH DJUHHPHQW ZLWK 66$ 7KH IROORZLQJ DUH H[DPSOHV RI 66$SURYLGHG GDWDLQIRUPDWLRQ  x66$¶VUHVSRQVHWRDUHTXHVWIURPDQ(,(3IRULQIRUPDWLRQIURP66$ HJ GDWHRIGHDWK   x66$¶VUHVSRQVHWRDTXHU\IURPDQ(,(3IRUYHULILFDWLRQRIDQ661  66$GDWDLQIRUPDWLRQ 7KLVWHUPVRPHWLPHVXVHGLQWHUFKDQJHDEO\ZLWK³66$SURYLGHGGDWDLQIRUPDWLRQெ GHQRWHVLQIRUPDWLRQXQGHUWKHFRQWURORI66$SURYLGHGWRDQH[WHUQDOHQWLW\XQGHUWKH WHUPVRIDQLQIRUPDWLRQH[FKDQJHDJUHHPHQWZLWK66$ +RZHYHU³66$ GDWDLQIRUPDWLRQ´DOVRLQFOXGHVLQIRUPDWLRQSURYLGHGWRWKH(,(3E\DVRXUFHRWKHU WKDQ66$EXWZKLFKWKH(,(3DWWHVWVWRWKDW66$YHULILHGLWRUWKH(,(3FRXSOHVWKH LQIRUPDWLRQZLWKGDWDIURP66$DVWRWRFHUWLI\WKHDFFXUDF\RIWKHLQIRUPDWLRQ7KH IROORZLQJDUHH[DPSOHVRI66$LQIRUPDWLRQ  x66$¶VUHVSRQVHWRDUHTXHVWIURPDQ(,(3IRULQIRUPDWLRQIURP66$ HJ GDWHRIGHDWK   x66$¶VUHVSRQVHWRDTXHU\IURPDQ(,(3IRUYHULILFDWLRQRIDQ661     TSSR-Version 7.0 – 07/2015 Page 51 x'LVSOD\E\WKH(,(3RI66$¶VUHVSRQVHWRDTXHU\IRU YHULILFDWLRQRIDQ661DQGWKHDVVRFLDWHG661SURYLGHGE\66$ x'LVSOD\E\WKH(,(3RI66$¶VUHVSRQVHWRDTXHU\IRU YHULILFDWLRQRIDQ661DQGWKHDVVRFLDWHG661SURYLGHGWRWKH (,(3E\DVRXUFHRWKHUWKDQ66$  x(OHFWURQLFUHFRUGVWKDWFRQWDLQRQO\66$¶VUHVSRQVHWRDTXHU\IRU YHULILFDWLRQRIDQ661DQGWKHDVVRFLDWHG661ZKHWKHUSURYLGHGWRWKH (,(3E\66$RUDVRXUFHRWKHUWKDQ66$   661 6RFLDO6HFXULW\1XPEHU  67& $6WDWH7UDQVPLVVLRQ7UDQVIHU&RPSRQHQWLVDQRUJDQL]DWLRQZKLFKSHUIRUPVDVDQ HOHFWURQLFLQIRUPDWLRQFRQGXLWRUFROOHFWLRQSRLQWIRURQHRUPRUHRWKHUHQWLWLHV DOVR UHIHUUHGWRDVDKXE   6\VWHPJHQHUDWHGWUDQVDFWLRQ $WUDQVDFWLRQDXWRPDWLFDOO\WULJJHUHGE\DQDXWRPDWHGV\VWHPSURFHVV  ([DPSOH $XVHUHQWHUVDFOLHQW¶VLQIRUPDWLRQLQFOXGLQJWKHFOLHQW¶V661RQDQ LQSXWVFUHHQDQGSUHVVHVWKH³(17(5ெNH\WRDFNQRZOHGJHWKDWLQSXWRIGDWDLV FRPSOHWH$QDXWRPDWHGSURFHVVWKHQPDWFKHVWKH661DJDLQVWWKHRUJDQL]DWLRQ¶V GDWDEDVHDQGZKHQWKHV\VWHPVILQGVQRPDWFKDXWRPDWLFDOO\VHQGVDQHOHFWURQLF UHTXHVWIRUYHULILFDWLRQRIWKH661WR66$  6\VWHPVSURFHVV 6\VWHPV3URFHVVUHIHUVWRDVRIWZDUHSURJUDPPRGXOHWKDWUXQVLQWKH EDFNJURXQGZLWKLQDQDXWRPDWHGEDWFKRQOLQHRURWKHUSURFHVV  7KLUG3DUW\ 7KLUG3DUW\SHUWDLQVWRDQHQWLW\ SHUVRQRURUJDQL]DWLRQ SURYLGHGDFFHVVWR66$ SURYLGHGLQIRUPDWLRQE\DQ(,(3RURWKHU66$EXVLQHVVSDUWQHUIRUZKLFKRQHRU PRUHRIWKHIROORZLQJDSSO\ xLVQRWVWLSXODWHGDFFHVVWR66$SURYLGHGLQIRUPDWLRQE\DQLQIRUPDWLRQ VKDULQJDJUHHPHQWEHWZHHQDQ(,(3DQG66$xKDVQRGDWDH[FKDQJHDJUHHPHQWZLWK66$x66$GRHVQRWGLUHFWO\DXWKRUL]HDFFHVVWR66$SURYLGHGLQIRUPDWLRQ  7UDQVDFWLRQGULYHQ 7KLVWHUPSHUWDLQVWRDQDXWRPDWLFDOO\LQLWLDWHGRQOLQHTXHU\RIRUUHTXHVWIRU66$ LQIRUPDWLRQE\DQDXWRPDWHGWUDQVDFWLRQSURFHVV HJGULYHUOLFHQVHLVVXDQFH HWF 7KHTXHU\RUUHTXHVWZLOORQO\RFFXUWKHDXWRPDWHGSURFHVVPHHWVSUHVFULEHG FRQGLWLRQV   TSSR-Version 7.0 – 07/2015 Page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¶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ersion 7.0 – 07/2015 Page 53 5HYLHZ" $ 5HIHUWR6FKHGXOLQJWKH2QVLWH5HYLHZ    4 :KDWLVD³3HUPLVVLRQ0RGXOH"´ $$XWLOLW\RUVXESURJUDPZLWKLQDQDSSOLFDWLRQZKLFKDXWRPDWLFDOO\ HQIRUFHVWKHUHODWLRQVKLSRIDUHTXHVWIRURUTXHU\RI66$SURYLGHG LQIRUPDWLRQWRDQDXWKRUL]HGSURFHVVRUWUDQVDFWLRQEHIRUHLQLWLDWLQJ DWUDQVDFWLRQ)RUH[DPSOHLIUHTXHVWVIRUYHULILFDWLRQRIDQ661 IRULVVXDQFHRIDGULYHU¶VOLFHQVHKDSSHQVDXWRPDWLFDOO\IURPZLWKLQ DVWDWHGULYHU¶VOLFHQVHDSSOLFDWLRQ7KH6\VWHPZLOOQRWDOORZD XVHUWRUHTXHVWLQIRUPDWLRQIURP66$XQOHVVWKH(,(3¶VFOLHQW V\VWHPFRQWDLQVDUHFRUGRIWKHVXEMHFWLQGLYLGXDO¶V661   4 :KDW³6FUHHQ6FUDSLQJ"´ $ 6FUHHQVFUDSLQJLVQRUPDOO\DVVRFLDWHGZLWKWKHSURJUDPPDWLF FROOHFWLRQRIYLVXDOGDWDIURPDVRXUFH 2ULJLQDOO\VFUHHQVFUDSLQJ UHIHUUHGWRWKHSUDFWLFHRIUHDGLQJWH[WGDWDIURPDFRPSXWHUGLVSOD\ WHUPLQDO¶VVFUHHQ7KLVLQYROYHVUHDGLQJWKHWHUPLQDO VPHPRU\WKURXJK LWVDX[LOLDU\SRUWRUE\FRQQHFWLQJWKHWHUPLQDORXWSXWSRUWRIRQH FRPSXWHUV\VWHPWRDQLQSXWSRUWRQDQRWKHU7KHWHUPVFUHHQVFUDSLQJ LVV\QRQ\PRXVZLWKWKHWHUPELGLUHFWLRQDOH[FKDQJHRIGDWD  $VFUHHQVFUDSHUPLJKWFRQQHFWWRDOHJDF\V\VWHPYLD7HOQHWHPXODWH WKHNH\VWURNHVQHHGHGWRQDYLJDWHWKHOHJDF\XVHULQWHUIDFHSURFHVV WKHUHVXOWLQJGLVSOD\RXWSXWH[WUDFWWKHGHVLUHGGDWDDQGSDVVLWRQWR DPRGHUQV\VWHP  0RUHPRGHUQVFUHHQVFUDSLQJWHFKQLTXHVLQFOXGHFDSWXULQJWKH ELWPDSGDWDIURPDVFUHHQDQGUXQQLQJLWWKURXJKDQRSWLFDO FKDUDFWHUUHDGHUHQJLQHRULQWKHFDVHRIJUDSKLFDOXVHULQWHUIDFH DSSOLFDWLRQVTXHU\LQJWKHJUDSKLFDOFRQWUROVE\SURJUDPPDWLFDOO\ REWDLQLQJUHIHUHQFHVWRWKHLUXQGHUO\LQJSURJUDPPLQJREMHFWV   4 :KHQGRHVDQ(,(3KDYHWRVXEPLWDQ6'3" $ 5HIHUWR:KHQWKH6'3LV5HTXLUHG    4 'RHVDQ(,(3KDYHWRVXEPLWDQ6'3ZKHQWKHDJUHHPHQWLVUHQHZHG" $ 7KH(,(3GRHVQRWKDYHWRVXEPLWDQ6'3EHFDXVHWKHDJUHHPHQW EHWZHHQWKH(,(3DQG66$ZDVUHQHZHG 7KHUHDUHKRZHYHU FLUFXPVWDQFHVWKDWUHTXLUHDQ(,(3WRVXEPLWDQ6'3  5HIHUWR:KHQWKH6'3LV5HTXLUHG   4 ,VLWDFFHSWDEOHWRVDYH66$SURYLGHGLQIRUPDWLRQZLWKDYHULILHG LQGLFDWRURQD (,(3 ZRUNVWDWLRQLIWKH(,(3XVHVDQHQFU\SWHGKDUG GULYH" ,IQRWZKDWRSWLRQVGRHVWKHDJHQF\KDYH" $7KHUHLVQRSUREOHPZLWKDQ(,(3VDYLQJ66$SURYLGHGLQIRUPDWLRQRQ WKHHQFU\SWHGKDUGGULYHVRIFRPSXWHUVXVHGWRSURFHVV66$SURYLGHG LQIRUPDWLRQLIWKH(,(3UHWDLQVWKHLQIRUPDWLRQRQO\DVSURYLGHGIRULQ   TSSR-Version 7.0 – 07/2015 Page 54 WKH(,(3¶VGDWDVKDULQJDJUHHPHQWZLWK66$  5HIHUWR'DWDDQG&RPPXQLFDWLRQV6HFXULW\   4 'RHV66$DOORZ(,(3VWRXVHFDFKLQJRI66$SURYLGHGLQIRUPDWLRQRQ WKH(,(3¶VZRUNVWDWLRQV" $ &DFKLQJGXULQJSURFHVVLQJLVQRWDSUREOHP +RZHYHU66$SURYLGHG LQIRUPDWLRQPXVWFOHDUIURPWKHFDFKHZKHQWKHXVHUH[LWVWKH DSSOLFDWLRQ5HIHUWR'DWDDQG&RPPXQLFDWLRQV6HFXULW\   4 :KDWGRHVWKHWHUP³LQWHUFRQQHFWLRQVWRRWKHUV\VWHPV´P HDQ" $ $VXVHGLQ66$¶VV\VWHPVHFXULW\UHTXLUHPHQWVGRFXPHQWWKHWHUP ³LQWHUFRQQHFWLRQV´LVWKHVDPHDVWKHWHUP³FRQQHFWLRQV´   4 ,VLWDFFHSWDEOHWRVXEPLWWKH6'3DVD3')ILOH" $ 1RLWLVQRW7KHGRFXPHQWPXVWUHPDLQHGLWDEOH   4 6KRXOGWKH(,(3ZULWHWKH6'3IURPWKHVWDQGSRLQWRIWKH(,(369(6 RUDSSOLFDEOHGDWDHOHPHQW DFFHVVLWVHOIRUIURPWKHVWDQGSRLQWRI DFFHVVWRDOOGDWDSURYLGHGWRWKH(,(3E\66$" $ 7KH6'3LVWRHQFRPSDVVWKH(,(3¶VHQWLUHHOHFWURQLFDFFHVVWR66$ SURYLGHGLQIRUPDWLRQDVSHUWKHHOHFWURQLFGDWDH[FKDQJHDJUHHPHQW EHWZHHQWKH(,(3DQG66$ 5HIHUWR'HYHORSLQJWKH6'3   4 ,IWKH(,(3KDVD³WUDQVDFWLRQGULYHQ´V\VWHPGRHVWKH(,(3VWLOO QHHGDSHUPLVVLRQPRGXOH",IHPSOR\HHVFDQQRWLQLWLDWHDTXHU\WR 66$ZK\ZRXOGWKH(,(3QHHGWKHSHUPLVVLRQPRGXOH" $ ³7UDQVDFWLRQGULYHQ´PHDQVWKDWTXHULHVVXEPLWUHTXHVWV DXWRPDWLFDOO\ DQGLWPLJKWGHSHQGRQWKHWUDQVDFWLRQ  'HSHQGLQJRQ WKHV\VWHP¶VGHVLJQTXHULHVPLJKWQRWEHDXWRPDWLFRULWPD\VWLOOSHUPLW PDQXDOWUDQVDFWLRQV$V\VWHPPD\UHTXLUHPDQXDOWUDQVDFWLRQVWR FRUUHFWDQHUURU66$GRHVQRWSURKLELWPDQXDOWUDQVDFWLRQVLIDQ$76 SURSHUO\WUDFNVVXFKWUDQVDFWLRQV,ID³WUDQVDFWLRQGULYHQ´V\VWHP SHUPLWVDQ\W\SHRIDOWHUQDWHDFFHVVLWVWLOOUHTXLUHVDSHUPLVVLRQPRGXOHHYHQ LILWUHVWULFWVXVHUVIURPSHUIRUPLQJPDQXDOWUDQVDFWLRQV,IWKHV\VWHPGRHV QRWUHTXLUHWKHXVHUWREHLQDSDUWLFXODUDSSOLFDWLRQDQGRUWKHTXHU\WR EHIRUDQH[LVWLQJUHFRUGLQWKH(,(3¶VV\VWHPEHIRUHWKHV\VWHPZLOO DOORZDTXHU\WRJRWKURXJKWR66$LWZRXOGVWLOOQHHGDSHUPLVVLRQ PRGXOH   4 :KDWLVDQ2QVLWH&RPSOLDQFH5HYLHZ" $ 7KH2QVLWH&RPSOLDQFH5HYLHZLV66$¶VSHULRGLFVLWHYLVLWV WRLWV (OHFWURQLF,QIRUPDWLRQ([FKDQJH3DUWQHUV (,(3 WRFHUWLI\ZKHWKHUWKH (,(3¶VPDQDJHPHQWRSHUDWLRQDODQGWHFKQLFDOVHFXULW\PHDVXUHVIRU SURWHFWLQJGDWDREWDLQHGHOHFWURQLFDOO\IURP66$FRQWLQXHWRFRQIRUPWR WKHWHUPVRIWKH(,(3¶VGDWDVKDULQJDJUHHPHQWVZLWK66$DQG66$¶V DVVRFLDWHGV\VWHPVHFXULW\UHTXLUHPHQWVDQGSURFHGXUHV  5HIHUWRWKH&RPSOLDQFH5HYLHZ3URJUDPDQG3URFHVV    TSSR-Version 7.0 – 07/2015 Page 55   4 :KDWDUHWKHFULWHULDIRUSHUIRUPLQJDQ2QVLWH&RPSOLDQFH5HYLHZ" $ 7KHIROORZLQJDUHFULWHULDIRUSHUIRUPLQJWKH2QVLWH &RPSOLDQFH5HYLHZ  R(,(3LQLWLDWLQJQHZDFFHVVRUQHZDFFHVVPHWKRGIRUREWDLQLQJ LQIRUPDWLRQIURP66$  R(,(3¶VF\FOLFDOUHYLHZ SUHYLRXVUHYLHZZDVSHUIRUPHGUHPRWHO\   R(,(3KDVPDGHVLJQLILFDQWFKDQJH V LQLWVRSHUDWLQJRUVHFXULW \ SODWIRUPLQYROYLQJ66$SURYLGHGLQIRUPDWLRQ  R(,(3H[SHULHQFHGDEUHDFKRI66$SURYLGHGSHUVRQDOO\ LGHQWLI\LQJLQIRUPDWLRQ 3,,  R(,(3KDVEHHQGHWHUPLQHGWREHKLJKULVN  4 :KDWLVD5HPRWH&RPSOLDQFH5HYLHZ" $ 7KH5HPRWH&RPSOLDQFH5HYLHZLVZKHQ66$FRQGXFWVWKHPHHWLQJV UHPRWHO\ HJYLDFRQIHUHQFHFDOOV 66$VFKHGXOHVFRQIHUHQFHFDOOVZLWK LWV(,(3VWRGHWHUPLQHZKHWKHUWKH(,(3VWHFKQLFDOPDQDJHULDODQG RSHUDWLRQDOVHFXULW\PHDVXUHVIRUSURWHFWLQJGDWDREWDLQHGHOHFWURQLFDOO\ IURP66$FRQWLQXHWRFRQIRUPWRWKHWHUPVRIWKH(,(3¶VGDWDVKDULQJ DJUHHPHQWVZLWK66$DQG66$ெVDVVRFLDWHGV\VWHPVHFXULW\UHTXLUHPHQWV DQGSURFHGXUHV 5HIHUWRWKH&RPSOLDQFH5HYLHZ3URJUDPDQG3URFHVV   4 :KDWDUHWKHFULWHULDIRUSHUIRUPLQJD5HPRWH&RPSOLDQFH5HYLHZ" $ 7KH(,(3PXVWVDWLVI\WKHIROORZLQJFULWHULDWRTXDOLI\IRUD5HPRWH &RPSOLDQFH5HYLHZ  R(,(3¶VF\FOLFDOUHYLHZ 66$¶VSUHYLRXVUHYLHZ\LHOGHGQR ILQGLQJVRUWKH(,(3VDWLVIDFWRULO\UHVROYHGFLWHGILQGLQJV   R(,(3KDVPDGHQRVLJQLILFDQWFKDQJH V LQLWVRSHUDWLQJ RUVHFXULW\SODWIRUPLQYROYLQJ66$SURYLGHGLQIRUPDWLRQ R(,(3KDVQRWH[SHULHQFHGDEUHDFKRI66$SURYLGHG SHUVRQDOO\LGHQWLI\LQJLQIRUPDWLRQ 3,, VLQFHLWV SUHYLRXVFRPSOLDQFHUHYLHZ R66$UDWHVWKH(,(3DVDORZULVNDJHQF\RUVWDWH      i)HCS State of California-Health and Human Services Agency Department of Health Care Services JENNIFER KENT DIRECTOR EDMUND G. BROWN JR. GOVERNOR ADDENDUM 0: Medi..Cal County Inmate Program (MCIP} FY 2016-17 Agreement County Certification Form I hereby certify, under penalty of perjury, that I am the County Representative and have the authority to sign on behalf of the County of Fresno , for the period of 4 I 1 I 2017 through 6 I 30 I 2017 . County Official Name:_....:B::..:r:..::i:.=a.=.n....:P:..:a:.::c.::h.:::.;ec::.:o=------- County Official Title: Chairman, Board of Supervisors ATIEST: BERNICE E. SEIDEL, Clerk Board of Supervisors B~~~puty County Officiai __ {L_ .. -~~---------Date \=~1 120(\ Signature 0 Primary Contact: David Pomaville Alternate Contact: Evelyn Reimer Phone: (559) 600-3200 Email: dpomavUle@co. fresno .ca .us Submit completed form to: DEPARTMENT OF HEALTH CARE SERVICES INMATE MEDI~CAL CLAIMING UNIT P.O. BOX 997436, MS 4504 SACRAMENTO, CA 95899-7436 EMAIL: DHCSIMCU@dhcs.ca.gov Phone: Email: Department of Health Care Services Inmate Medi-Cal Claiming Unit, MS 4504 P.O. Box 997436. Sacramento, CA 95899-7436 E-Mail Address: DHCSIMCU@dhcs.ca.gov (559) 600-7090 ereimer@co.fresno.ca.us