SALT LAKE CITY VA LODGING BPA
Added: Sep 08, 2014 10:26 pm This is a combined synopsis/solicitation for Lodging and Billeting Services for the Veterans Integrated Service Network 19 with Veteran Affair Medical Center in Salt Lake City Utah located at 500 Foothill Drive, UT 84148-0001. This requirement for temporary, short term lodging is being procured IAW Federal Acquisition Regulation (FAR) 12.6, entitled "Streamlined Procedures for Evaluation and Solicitation for Commercial Items" as supplemented with additional information in this notice, and FAR 13.303 entitled "Blanket Purchase Agreements (BPA)". Prospective Offerors are encouraged to view the Federal Business Opportunities website, www.fedbizopps.gov, frequently for any amendment to the solicitation. The Government intends to satisfy existing requirements for temporary lodging services by awarding a Blanket Purchase Agreement to two or more hotels located within a 10 mile radius of the facility listed above. This announcement constitutes the only solicitation that will be issued. The period of performance will be from approximately Sept 24, 2014 tough Sept 23, 2019. Pricing will be set per year with up to five (5) period of performances with possible escalating costs. This procurement is issued on a 100% small business set-aside under the NAICS 721110 with a small business size standard of $30M. The areas of consideration for possible awards are the locations listed above. A pricing schedule identifying quantities and types of services is attached and shall be completed and returned. All quantities are estimated. Unit prices shall be inclusive of all applicable service fees, the federal government does not pay taxes. A statement of work describing the scope of work is attached and is hereby made part of this request for quotes. The company(ies) submitting quotes must be registered in SAM (System for Award Management) and their registration must be current; www.sam.gov. The Federal Acquisition Regulation (FAR) incorporates provision and clauses in effect tough Federal Acquisition Circular (FAC) 2005-72; effective 30 Jan 2014. The following provisions and clauses are applicable to this acquisition: FAR 52.212-1, 52.212-2, 52.212-3, 52.212-4, 52.216-18, 52.216-19, 52.216-22, 52.252-1, 52.252-2, and 52.212-5: full text language of provisions and clauses incorporated by reference can be located at http://farsite.hill.af.mil. The following clauses included in 52.212-5 are applicable: 52.204-10, 52.217-6, 52.217-8, 52.219-28, 52.222-3, 52.222-19, 52.222-21, 52.222-26, 52.222-36, 52.222-50, 52.223-18 and 52.232-34. The following Veterans Affairs Acquisition Regulation (VAAR), http://farsite.hill.af.mil/vfvara.htm clauses are applicable to this acquisition: 852.232-72, 852.203-70, 852.216-70. The successful offeror(s) will establish with the Veterans Administration a Business Associate Agreement in accordance with Veterans Healthcare Administration Directive 1600 and Handbook 1600.01 Business Associate Agreements. This BPA will be established on a fixed price basis and may be discontinued upon 30 days' written notice by either party. The BPA will be reviewed annually before the anniversary of its effective date and revised as necessary to conform to the requirements of the FAR and VAAR. This BPA can only be changed by modification of the agreement itself. Discontinuing or modifying this BPA shall not affect any prior contract incorporating this BPA. This BPA does NOT state or imply any agreement by the Government to place future contracts or orders with the contractor; or be used in any manner to restrict competition. All contracts and purchase orders using this BPA will be incorporated by specific reference, the BPA number and name when established. This BPA for temporary lodging services located within the local commuting area of the facility listed in this synopsis has a dollar limitation of $1000 for each individual purchase of lodging services. This BPA does not have a minimum purchase requirement. The Government is obligated only to the extent of authorized purchases actually made under this BPA. Contractors shall furnish services if and when requested by the Contracting Officer's Representative, COR, located at each Healthcare facility listed in this synopsis for the inclusive dates of this agreement. The names, contact information and the dollar limitation of the COR's will be provided to the successful contractors. Delivery / lodging tickets shall contain the following minimum information: name of supplier, BPA number, date of purchase/reservation, purchase number, itemized list with name of veteran, type of room and price, and dates service provided. Invoices shall be submitted at least monthly or upon expiration of the BPA, whichever occurs first, for all services during the billing period, identifying the delivery/lodging tickets covered therein, stating their total dollar value and supported by receipt copies of the delivery/lodging tickets. Each offeror shall understand they will be paid electronically (VAAR 852.232-72). Award will be made to the lowest priced offer determined to be technically acceptable. To be determined technically acceptable, the following minimum requirements must be met: (1) Hotels must provide for complete and inclusive lodging services as prescribed in the performance work statement and by the attached pricing schedule. (2) Hotels must have free on-site parking and provide non-smoking rooms. (3) Hotels must be located within the local commuting area of the VA Healthcare Center; this is usually interpreted to be within 5 miles of the VA Healthcare Center. (4) Hotels must be FEMA approved. (5) Some Healthcare Centers may require local transportation back and forth for the Veteran from the lodging facility to the Healthcare Center. In order to determine if minimum requirement (1) can be met, all lodging requested must either be priced or annotated as provided at no additional cost on the attached pricing schedule. For minimum requirements (2), (3), & (4) offeror must provide a fact sheet which addresses each minimum requirement. The physical location of the proposed hotel facility must be provided to permit a determination to be made as if minimum requirement (3) can be met. Pricing shall be provided on attached B.1 Schedule of Services/Pricing. The government intends to make a multiple BPA awards; however, funds will NOT be committed or obligated until a call is placed against the BPA. For purposes of price evaluation, if there is a mathematical error in which the unit price multiplied by the quantity does not equal the extended total, the unit price will prevail and be used for evaluation and award purposes. Paragraph I of FAR Provision 52.212-1 encourages offerors to present alternative terms and conditions for satisfying the requirements of this solicitation. The solicitation is being issued on a competitive basis. The rate utilized for purposes of award will be the rates proposed by the offeror that is determined to offer the lowest technically acceptable offer. As stated in paragraph (g) of Federal Acquisition Regulation (FAR) Provision 52.212-1, included in this solicitation, the Government intends to evaluate offers and award a contract without discussions with offerors. Therefore, the offeror's initial proposal should contain the offerors best terms from a price and technical standpoint. All questions shall be submitted in writing and received prior to the time and date scheduled for receipt of quotes. Questions can be sent via email to: lisa.jobes@va.gov. QUOTES ARE DUE: Not later than 10:00 a.m. MST, Sept 17 2014. ? A complete proposal will consist of the following documents: -1 Completed B.1 Schedule of Services/Pricing -2 Confirmation the company is registered in SAM and registration is current; found at http://www.sam.gov in accordance with FAR 52.212.3. -3 Completed Business Associate Agreement -4 Signed Offerors Letter providing: Contractor's name, address, name of point of contact, phone numbers, email addresses, FAX number, DUNS number and Tax ID number. Insure the proposal number VA259-14-Q-0732 appears on all pages and documents in the proposal. Identify acceptable forms for payment, i.e. purchase card, electronic funds transfer, etc. Include the fact sheet describing the technical requirements. Submit Proposals To: Lisa Jobes, Contract Specialist via email to lisa.jobes@va.gov DEFINITIONS: Hotels - Refers to all commercial lodging facilities that provide rooms for short term use and would include hotels, motels, and bed and breakfast vendors. ? Business Associate Agreement Between the Department of Veterans Affair, Veterans Health Administration and ____________(Contractor) Whereas, (Business Associate) provides services to the Department of Veterans Affairs Veterans Health Administration (Covered Entity), and Whereas, in order for Business Associate to provide services to the Covered Entity, Covered Entity discloses to Business Associate Protected Health Information (PHI) and Electronic Protected Health Information (EPHI) that is subject to protection under regulations issued by the Department of Health and Human Services, as mandated by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), 45 CFR Parts 160 and 164, Subparts A and E, the Standards for Privacy of Individually Identifiable Health Information ("Privacy Rule"), and 45 CFR Parts 160 and 164, Subparts A and C, the Security Standard ("Security Rule"); and Whereas, Department of Veterans Affairs Veterans Health Administration is a "Covered Entity" as that term is defined in the HIPAA implementing regulations, 45 CFR 160.103, and Whereas, , as a recipient of PHI from Covered Entity in order to provide services to Covered Entity, is a "Business Associate" of Covered Entity as the term "Business Associate" is defined in the HIPAA implementing regulations, 45 CFR 160.103; and Whereas, pursuant to the Privacy and Security Rules, all Business Associates of Covered Entities must agree in writing to certain mandatory provisions regarding the Use and Disclosure of PHI and EPHI; and Whereas, the purpose of this Business Associate Agreement (BAA) is to comply with the requirements of the Privacy and Security Rules, including, but not limited to, the Business Associate Agreement requirements at 45 CFR 164.308(b), 164.314(a), 164.502(e), and 164.504(e), and as may be amended. NOW, THEREFORE, the Covered Entity and Business Associate agree as follows: 1. Definitions. Unless otherwise provided in this BAA, capitalized terms and pases that are defined in the Privacy and Security Rules have the same meanings as set forth in the Privacy and Security Rules. When the pase "Protected Health Information" and the abbreviation "PHI" are used in this BAA, they include the pase "Electronic Protected Health Information" and the abbreviation "EPHI". 2. Ownership of PHI. PHI provided by Covered Entity to Business Associate and its agents and subcontractors, or gathered by them on behalf of the Covered Entity, under this BAA are the property of Covered Entity. 3. Scope of Use and Disclosure by Business Associate of Protected Health Information A. Business Associate is permitted to make Use and Disclosure of PHI that is disclosed to it by Covered Entity, or received by Business Associate on behalf of Covered Entity, as necessary to perform its obligations under all applicable agreements and this BAA with covered entity, provided that the Covered Entity may make such Use or Disclosure under the Privacy and Security Rules, and the Use or Disclosure complies with the Covered Entity's minimum necessary policies and procedures. B. Unless otherwise limited herein, in addition to any other Uses and/or Disclosures permitted or authorized by this BAA or Required by Law, Business Associate may: (1) Use the PHI in its possession for its proper management and administration and to fulfill any legal responsibilities of Business Associate; (2) Make a Disclosure of the PHI in its possession to a third party for the purpose of Business Associate's proper management and administration or to fulfill any legal responsibilities of Business Associate; provided, however, that the Disclosure is permitted by the Privacy Rule if made by the Covered Entity, or Required by Law; and provided further that where the Disclosure is not permitted by the Privacy Rule, or Required by Law, Business Associate has received from the third party written assurances that (a) the information will be held confidentially and Used or further Disclosed only as Required By Law or for the purposes for which it was disclosed to the third party; and (b) the third party will notify the Business Associate of any instances of which it becomes aware in which the confidentiality of the information has been breached; (3) Engage in Data Aggregation activities, consistent with the Privacy Rule; and (4) De-identify any and all PHI created or received by Business Associate under this BAA; provided that the de-identification conforms to the requirements of the Privacy Rule. 4. Obligations of Business Associate. In connection with its Use and Disclosure of PHI under this BAA, Business Associate agrees that it will: A. Use or make further Disclosure of PHI only as permitted or required by the Privacy Rule, or this BAA or as Required by Law; B. Ensure any employee of BA, contractor, subcontractor or agent of BA receives at least annual privacy training that conforms to the requirements of VHA Privacy Training; C. Ensure any employee of BA, contractor, subcontractor or agent of BA, receives at least annual security awareness training that conforms to the requirements of the Department of Veterans Affairs Office of Cyber and Information Security Training; D. Use reasonable and appropriate safeguards to prevent Use or Disclosure of PHI other than as provided by this BAA; E. To the extent practicable, mitigate any harmful effect of a Use or Disclosure of PHI by Business Associate in violation of this BAA that is known to Business Associate; F. Maintain a system or process to account for any Security Incident, Privacy Incident, or Use or Disclosure of PHI not provided for by this BAA of which Business Associate becomes aware; G. Within 24 hours of Business Associate first becoming aware of a HIPAA Electronic Transactions and Code Sets, Privacy, Security or Standard Identifier Incident, or Use or Disclosure of PHI not provided for by this BAA, notify the Covered Entity and promptly provide a report to Covered Entity. (1) An incident will be considered any physical, technical or personal activity or event that increases the Covered Entity's risk to inappropriate or unauthorized use or disclosure of PHI or causes the Covered Entity to be considered non-compliant with the Administrative Simplification provisions of HIPAA as determined by the Department of Health and Human Services. (2) Notification will be made by Business Associate to the Director, Health Data & Informatics by telephone, 202-461-5839 or secure fax of any HIPAA Electronic Transactions and Code Sets, Privacy, Security or Standard Identifier Incident, or Use or Disclosure of PHI not provided for by this BAA. (3) A written report of the incident, submitted to the Director, Health Data & Informatics within ten (10) business days after initial notification, will document specifics surrounding the incident, what mitigation procedures were implemented to lessen the impact of the incident and what processes have been established to prevent the incident from occurring in the future (reasonable and appropriate safeguards). This report should be documented as a letter and sent to: Director, Health Data & Informatics Department of Veterans Affairs - Veterans Health Administration Office of Information (19F) 810 Vermont Avenue NW Washington, DC 20420 Phone: 202-461-5839 Fax: 202-273-9386 H. Require contractors, subcontractors or agents to whom Business Associate provides PHI received from the CE to agree to the same restrictions and conditions that apply to Business Associate pursuant to this BAA, including implementation of reasonable and appropriate safeguards to protect PHI. Such third party shall be required to adopt and implement information security controls and safeguards that comply with the Federal Information Security Management Act (FISMA), Title III, Pub. L. No. 107-347, codified at 44 U.S.C. § 3541, and other applicable laws pertaining to the VA, including, without limitation, 38 U.S.C. § 5725, together with applicable VA policies pertaining to safeguarding VA Sensitive Data. I. Make available to the Secretary of Health and Human Services Business Associate's internal practices, books and records, including policies and procedures, relating to the Use or Disclosure of PHI for purposes of determining Covered Entity's compliance with the Privacy and Security Rules, subject to any applicable legal privileges; J. If the Business Associate maintains PHI in a Designated Record Set, maintain the information necessary to document the Disclosures of PHI sufficient to make an accounting of those Disclosures as required under the Privacy rule and the Privacy Act, 5 USC 552a, and within ten (10) days of receiving a request from Covered Entity, make available the information necessary for Covered Entity to make an accounting of Disclosures of PHI about an individual in the Designated Record Set or Covered Entity's Privacy Act System of Records; K. If the Business Associate maintains PHI in a Designated Record Set or Privacy Act System of Records, within ten (10) days of receiving a written request from Covered Entity, make available PHI in the Designated Record Set or System of Records necessary for Covered Entity to respond to individuals' requests for access to PHI about them that is not in the possession of Covered Entity; L. If the Business Associate maintains PHI in a Designated Record Set or Privacy Act System of Records, within ten (10) days of receiving a written request from Covered Entity, incorporate any amendments or corrections to the PHI in the Designated Record Set or System of Records in accordance with the Privacy Rule and Privacy Act; M. Not make any Uses or Disclosures of PHI that Covered Entity would be prohibited from making. N. Utilize only contractors, subcontractors, or agents who are physically located within a jurisdiction subject to the laws of the United States. Business associate will ensure that it does not use or disclose PHI received from Covered Entity in any way that will remove the PHI from such jurisdiction. O. When Business Associate is uncertain whether it may make a particular Use or Disclosure of PHI in performance of this BAA, the Business Associate will consult with the Covered Entity before making the Use or Disclosure. P. The Business Associate will implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality and integrity, and availability of the PHI that Business Associate receives, maintains, or transmits on behalf of the Covered Entity as required by the Privacy and Security Rules and shall also be required to adopt and implement information security controls and safeguards that comply with FISMA, and other applicable laws pertaining to the VA, including, without limitation, 38 U.S.C. § 5725, together with applicable VA policies pertaining to safeguarding VA Sensitive Data. Q. The BA will provide satisfactory assurances that the confidentiality, integrity, and availability of the PHI, which it receives, creates, transmits or maintains, is reasonably and appropriately protected. R. The BA will provide satisfactory assurances that any agent, including a subcontractor, to whom it provides such information agrees to implement reasonable and appropriate safeguards to protect the data. S. Upon completion of the applicable contract(s) or agreement(s), the Business Associate shall return and/or destroy the PHI gathered, created, received or processed during the performance of the contract(s) or agreement(s), and no data will be retained by the Business Associate, or any agents or subcontractors of the Business Associate, unless retention is required by law or regulation. The Business Associate shall assure that all PHI has been returned to the Covered Entity, destroyed by the Business Associate, or both; as deemed appropriate by the Covered Entity. If immediate return or destruction of all data is not possible, the Business Associate shall assure that all PHI retained will be safeguarded to prevent unauthorized Uses or Disclosures. Until the Business Associate provides assurance, Covered Entity may withhold 15% of the final payment of the contract(s) or agreement(s). 5. Obligations of Covered Entity. Covered Entity agrees that it: A. Has obtained, and will obtain, from Individuals any consents, authorizations and other permissions necessary or required by laws applicable to Covered Entity for Business Associate and Covered Entity to fulfill their obligations under this BAA. B. Will promptly notify Business Associate in writing of any restrictions on the Use and Disclosure of PHI about Individuals that Covered Entity has agreed to that may affect Business Associate's ability to perform its obligations under this BAA; C. Will promptly notify Business Associate in writing of any change in, or revocation of, permission by an Individual to use or disclose PHI, if such change or revocation may affect Business Associate's ability to perform its obligations under this BAA. 6. Material Breach of the BAA. Upon Covered Entity's determination of a material breach of this BAA by Business Associate, Covered Entity shall provide an opportunity for Business Associate to cure the breach; and if cure is not possible, Covered Entity shall report the violation to the Secretary of Health and Human Services. 7. Termination. A. Termination for Cause. Upon Covered Entity's knowledge of a material breach by Business Associate, Covered Entity shall either: (1) Provide an opportunity for Business Associate to cure the breach or end the violation and terminate this Agreement and underlying contract(s) if Business Associate does not cure the breach or end the violation within the time specified by Covered Entity; (2) Immediately terminate this Agreement and underlying contract(s) if Business Associate has breached a material term of this Agreement and cure is not possible; (3) If neither termination nor cure is feasible, Covered Entity shall report the violation to the Secretary of Health and Human Services. (4) This BAA may be terminated by the Covered Entity, if appropriate, upon review as defined in Section 13 of this BAA. B. Automatic Termination. This Agreement will automatically terminate upon completion of the Business Associate's duties under all underlying agreements or by mutual written agreement to terminate underlying agreements. C. Effect of Termination. Termination of this Agreement will result in cessation of activities by the Business Associate, and any agents or subcontractors of it involving PHI under this Agreement. 8. Amendment. Business Associate and Covered Entity agree to take such action as is necessary to amend this BAA for Covered Entity to comply with the requirements of the Privacy and Security Rules or other applicable law. 9. No Third Party Beneficiaries. Nothing expressed or implied in this BAA is intended to confer, nor shall anything herein confer, upon any person other than the parties and their respective successors or assigns, any rights, remedies, obligations or liabilities whatsoever. 10. Other Applicable Law. This BAA does not, and is not intended to, abrogate any responsibilities of the parties under any other applicable law. 11. Effect of Agreement. With respect solely to the subject matter herein, in the case of any conflict in terms between this BAA and any other previous agreement or addendum between the parties, the terms of this BAA shall control and supersede and nullify any conflicting terms as it relates to the parties in a business associate relationship. 12. Effective Date. This BAA shall be effective on _____________________. 13. Review Date. The provisions of this BAA will be reviewed by the Covered Entity every two years from Effective Date to determine the applicability of the agreement based on the relationship of the parties at the time of review. Department of Veterans Affairs COMPANY/ORGANIZATION Veterans Health Administration ADDRESS CITY, STATE ZIP By: By: Name: Name: Title: Title: Date: Date:
VA25914Q0732 Department of Veterans Affairs Veterans Health Administration Veterans Integrated Service Network 19
9/8/14, 10:26 PM