ADELANTE DATASHARE (00).PDF

Maricopa County — Formal (2018-06-13)

View PDF Item 60 Meeting page

Extracted text (via pymupdf_layout) 14694 characters
MEMORANDUM OF UNDERSTANDING
DATA SHARING AGREEMENT
BETWEEN
MARICOPA COUNTY DEPARTMENT OF PUBLIC HEALTH (MCDPH)
AND ADELANTE HEALTHCARE
1. TERM OF THE AGREEMENT:
The term of this Agreement shall become effective upon signature by all parties and shall remain in effect
until terminated, canceled or extended as otherwise provided herein.
2. TERMINATION OR AMENDMENT:
Each party shall have the right to terminate this Agreement by mailing the other party written notice of
termination by certified mail, return receipt requested, at least thirty (30) days prior to the termination
date. This Agreement may be modified at any time by mutual, written Amendment in order to
accommodate unforeseen circumstances by the authorized representative of the respective parties.
3. CONFIDENTIALITY:
A. Any information that may be exchanged through this Agreement shall not be used for purposes other
than those covered in the scope of work without prior approval of all parties to this Agreement.
B. No personally identifying information that may be exchanged through this Agreement shall be made
available for any political or commercial purpose, nor shall such information be used as basis for
determining eligibility for care or source of payment for care to any individual.
C. All data provided by ADELANTE HEALTHCARE to the MCDPH shall be used by the MCDPH only
for the official purposes of the MCDPH and will be accessible only to duly authorized persons. All
authorized persons shall understand and abide by the confidentiality requirements.
D. The MCDPH shall provide the names and addresses of any individuals or entities outside the MCDPH
who receive the data. The MCDPH shall assure Adelante Healthcare that the individuals or entities
outside the MCDPki will protect the confidentiality and security of the data and the MCDPH shall
monitor the individials or entities outside the MCDPH regarding the confidentiality and security of the
data.
E. All data provided by Adelante Healthcare to the MCDPH that is transmitted in emails shall be
encrypted.
F. All data provided by Adelante Healthcare to the MCDPH shall be stored on a secure server.
4. HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA) COMPLIANCE:
Both parties warrant that it is familiar with the requirements of HIPAA, as amended by the Health
Information Technology for Economic and Clinical Health Act (HITECH Act) of 2009, and accompanying
regulations and will comply with all applicable HIPAA requirements in the course of this Contract. Both
parties warrant that it will cooperate with the other party in the course of performance of the Contract so
that both parties will be in compliance with HIPAA, including, if necessary, cooperation and coordination
with the Government Information Technology Agency (GITA), Statewide Information Security and Privacy
Office (SISPO) Chief Privacy Officer and HIPAA Coordinator and other compliance officials required by
HIPAA and its regulations.
If requested by either party, the other party agrees to sign a "Pledge to Protect Confidential Information"
and to abide by the statements addressing the creation, use and disclosure of confidential information,

MEMORANDUM OF UNDERSTANDING
including information designated as protected health information and all other confidential or sensitive
information as defined in policy. In addition, if requested, both parties agree to attend or participate in
HIPAA training or provide written verification that the party has attended or participated in job related
HIPAA training that is: (1) intended to make the Contractor proficient in HIPAA for purposes of performing
the services required and (2) presented by a HIPAA Privacy Officer or other person or program
knowledgeable and experienced in HIPAA.
5. APPLICABLE LAW:
Arizona Law. Applicable law of Arizona applies to this Agreement including, where applicable, the
Uniform Commercial Code as adopted by the State of Arizona.
6. CONFLICT OF INTEREST:
Pursuant to A.R.S. §38-511, the State, its political subdivisions or any department or agency of either
may, within three (3) years after its execution, cancel any Agreement, without penalty or further obligation,
made by the State, its political subdivisions, or any of the departments or agencies of either if any person
significantly involved in initiating, negotiating, securing, drafting or creating the Agreement on behalf of
the State, its political subdivisions or any of the departments or agencies of either is, at any time while
the Agreement or any extension of the Agreement is in effect, an employee or agent of any other party
to the Agreement in any capacity or a consultant to any other party of the Agreement with respect to the
subject matter of the Agreement. A cancellation made pursuant to this provision shall be effective when
both parties to this Agreement receive written notice of the cancellation unless the notice specifies a later
time.
7. ARBITRATION:
Pursuant to A.R.S. § 12-1518, disputes under this Agreement shall be resolved through the use of
arbitration as follows:
A. Cases under the Jurisdictional Limit. In all cases filed in superior court in which the court finds or the
parties agree that the amount in controversy does not exceed the jurisdictional limit, arbitration shall
be used, unless all parties file a written stipulation waiving the arbitration requirement, and the court
waives the arbitration requirement on a showing of good cause.
8. FUNDING:
This Agreement is not an obligation of or a Commitment of funds, or a basis for a transfer of funds, but
rather a statement of understanding between the Parties concerning the sharing and use of confidential
information related to the purposes of this Agreement. Expenditures by each party are subject to that
party's budgetary processes and to the availability of funds and resources pursuant to applicable laws,
regulations, and policies of the respective parties.
9. INSURANCE
Maricopa County Department of Public Health and its representatives are self-insured under Maricopa
County's Declaration of Trust for Maricopa County, Arizona, Self-Insured Risk Trust Fund.
10. NON-DISCRIMINATION
Both parties shall comply with Executive Order 2009-09, which mandates that all persons regardless of race,
color, religion, sex, age, national origin or political affiliation, shall have equal access to employment
opportunities, and all other applicable State and Federal employment laws, rules and regulations, including
the Americans with Disabilities Act. All parties shall take affirmative action to ensure that applicants for
employment and employees are not discriminated against due to race, creed, color, religion, sex, national
origin or disability.

MEMORANDUM OF UNDERSTANDING
11. AMENDMENTS
Any Amendments to this Agreement must be in writing and signed by both parties.
12. BACKGROUND:
The MCDPH is seeking data from the Adelante Healthcare related to indicators of the latent tuberculosis
infection cascade of care related to testing, diagnosis, and treatment practices. The MCDPH is currently
working on measures to identify Latent Tuberculosis Infection (LTBI) among populations at high risk in
order to accelerate progress towards TB elimination. The data will be solely used for the official purposes
of the MCDPH.
13. PURPOSE:
This Agreement establishes the basis for the sharing of public health statistics information on
Tuberculosis and Latent Tuberculosis infection testing and treatment practices between Adelante
Healthcare and the MCDPH. The information will be used for the official purposes of the MCDPH. (See
Exhibits A and B).
The sharing of this data will be in accordance with the Terms and Conditions stated in this Agreement
and predicated on the mutual assurance that all unique identifiers in this data will be protected and kept
strictly confidential.
14. SCOPE OF WORK:
A. Adelante Healthcare agrees to provide the MCDPH with the data described in Exhibits A and B.
1.1 The above noted data will be made available to the MCDPH within 60 days from the date of
execution of the Agreement and forward.
1.2 The above noted data will be made available to the MCDPH by supplying the information
requested in the questionnaire (Exhibit B). The information will be entered in a Microsoft
Word document and can be sent by an encrypted email or provided to Maricopa County in a
protected CD. The information can also be provided in hard copy form. If the information is
provided in hard copy form, Maricopa County will enter the information in the Word document
(Exhibit B) within 7 business days of receipt. The information shall be stored in a secured
server. MCDPH will destroy the hard copy form within 7 business days of receipt.
1.3 The above noted data will be provided as requested for the data sets and time periods
specified.
1.4 Following signature of this Agreement by both parties, the above noted data, if available for
release, will be provided within sixty (60) days of receipt by Adeiante Healthcare of the
specific request.
B. Confidential Information:
1. The MCDPH agrees that the name of the institution providing the aggregate information shall not
be released outside MCDPH. However, the aggregate information collected in Exhibit B,
excluding the name of the provider of the information, will be shared with the Centers for Disease
Control and Prevention Tuberculosis Epidemiologic Studies Consortium.
2. The MCDPH shall not use, or disclose to any third party, any data of Adelante healthcare in any
manner whatsoever except for the various aspects of MCDPH work, and will require that its
employees and agents who have access to such information maintain the same strict confidence
after the termination of this Agreement; provided that the MCDPH's obligations hereunder shall
not apply to information that:

MEMORANDUM OF UNDERSTANDING
a. Was already known to the receiving party prior to the time of first disclosure, as demonstrated
by contemporaneous, written documentation;
b. At the time of disclosure is in the public domain, or after the date of the disclosure, lawfully
becomes a part of the public domain other than through breach of this Agreement by the
receiving party;
c. Is received without any obligation of confidentiality from a third party having a legal right to
disclose the same;
d. Is independently developed by the receiving party by individuals without access to such
information, as demonstrated by contemporaneous, written documentation; or
e. Is required to be disclosed by the receiving party pursuant to a legally enforceable order,
subpoena, or other regulation (ORDER), provided, however, that the receiving party promptly
notifies the disclosing party in advance of such disclosure and discloses only that
INFORMATION necessary to comply with said ORDER.
C. The Parties agree to:
1. Carefully restrict use and access of information to those designated by the MCDPH. Any vital
records provided by Adetante Healthcare are for the use of the MCDPH only and no copies may
be made of such records to provide to other individuals or entities for other purposes.
2. Prohibit identifying information about a person that was supplied under the terms of this
Agreement, from being released to anyone not working on MCDPH data collection and analysis.
3. Require all officers, agents and employees to keep all such shared information strictly
confidential.
4. Communicate the requirements for this section to all officers, agents, and employees; discipline
all persons who may violate the requirements of this section; and notify the originating party in
writing within forty-eight (48) hours of any violation and corrective actions to be taken.
5. The MCDPH shall provide a copy of their written procedure for notification of the actual or
reasonable belief of a data breach to Adelante Healthcare upon signature by both parties to the
Agreement. The procedure shall require users of the data to immediately notify a designated
individual at the MCDPH and Adelante Healthcare. Breach is defined as unauthorized access,
use, secondary disclosure, loss, theft, alteration or destruction of the data. Pursuant to A.R.S. §
44-7501, The MCDPH and Adetante Healthcare shall collaborate with each other on the
investigation, mitigation, remediation and, if necessary, breach notification of citizens. Pursuant
to A.R.S. § 41-3507, the MCDPH and Adelante Healthcare shall notify the Arizona Government
Information Technology Agency (GITA) Statewide Information Security and Privacy Office
(SISPO) immediately of any breach.
6. Pursuant to Paragraph Four (4), all parties that have access to the data will participate in any
training that may be required or shall sign any documents that are reasonably necessary to keep
both parties in compliance with HIPAA, including but not limited to, business associate
agreement, user confidentiality affirmation statement, HIPAA training certification or other HIPAA
related compliance documents.
7. The data shall only be accessed at locations which are considered physically secure for data
access and use including but not limited to, specified MCDPH offices or other authorized
locations. The data shall not be accessed at any public venue.
8. The MCDPH shall maintain a log of all encrypted devices and identification numbers of those
devices that are authorized to transmit, receive or store the information until the data is destroyed.
Adelante Healthcare may request a copy of the log at any time during the term of the Agreement

MEMORANDUM OF UNDERSTANDING
or until the data is destroyed or returned to Adelante Healthcare. The MCDPH is prohibited from
storing the data on non-encrypted flash drives, CDs, external drives, smart phones or other non-
networked hard drives.
15. NOTICES, CORRESPONDENCE AND REPORTS:
. Notices, correspondence and reports from the MCDPH to Aolante Healthcare shall be sent to,
Carol McNally, RN, MSN, CIC
Infection Control Manager
9520 W. Palm Lane, Suite 200
Phoenix, AZ 85037
Phone: (623) 583-3001 Ext. 1225
Cell: (602) 980-3872
B. Notices, correspondence and reports from Adelante Healthcare to the MCDPH shall be sent to:
Maricopa County Department of Public Health
Division of Clinical Services - TBESC
Senior Research Epidemiologist
1645 E. Roosevelt Street
Phoenix, AZ 85006
602-372-7413

MEMORANDUM OF UNDERSTANDING
SIGNATURES/APPROVALS:
FOR AD9..ANTE HEALTH AR
Robert Babyar, Chief Medical Cffficer
Date:
Eric Bettis, 'Chief Administrative Officer
Date:
FOR AND ON BEHALF OF MARICOPA COUNTY BY AND THROUGH ITS
DEPARTMENT OF PUBLIC HEALTH
By
Steve Chucri
Chairman, Board of Supervisors
Date
ATTEST:
By
Clerk of the Board
Date
APPROVED AS TO FORM:
Attorney for Maricopa County
Date