3-Data Sharing Assessment.docx

DOCX document 29 KB Posted

Attached to
Printing Mailing and Fulfillment Services
Solicitation number
25-06629
Issued by
San Bernardino County, California

About this file

This is a Data Sharing Assessment Form for the Inland Empire Health Plan (IEHP) in California, designed to evaluate vendor and third-party access to sensitive organizational and member information. The form collects comprehensive information about service providers, including company details, primary contact information, estimated project start and end dates, and a detailed description of services to be provided to IEHP. The document establishes a framework for assessing how sensitive information will be transmitted, received, created, and maintained between IEHP and third-party vendors, and requires vendors to disclose whether they utilize offshore resources, subcontractors, or maintain a global workforce that could impact data security and compliance.

The assessment form categorizes the types of information that may be shared with vendors into two primary classifications: Personally Identifiable Information (PII) such as names, addresses, dates of birth, Social Security numbers, member health plan IDs, and biometric identifiers; and Medical or Behavioral Health Information including diagnoses, treatment records, prescriptions, healthcare payment information, and claims data. The form requires vendors to specify which categories of information they will access and the approximate number of individuals whose data will be handled, enabling IEHP to evaluate vendor compliance with local, state, and federal regulations governing protected health information and personally identifiable data. This assessment is particularly critical for the printing, mailing, and fulfillment services contract, as such vendors will likely handle enrollee-facing materials containing sensitive member information.

View the file

Other files

Show all 12

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Section A: IEHP Contact Information

IEHP Department(s) Using Service or Vendor

IEHP Point of Contact Name

IEHP Point of Contact Title

IEHP Point of Contact Extension

Section B: 3rd Party / Vendor Contact Information

Company Name:

Company Address:

Company Web Site:

Primary Contact Name:

Primary Contact phone number:

Primary Contact email address:

Estimated Start Date

Estimated End Date

Section C: Services Provided to IEHP (Please give detailed explanation)

Section D: How is/ will sensitive information be transmitted, received, created/ maintained between IEHP & 3rd Party/ Vendor? (Please give detailed explanation)

Section E: Will 3rd party/ Vendor use offshore resources/ subcontractor(s)/ have a global workforce? If Yes, please explain in detail regarding country/ countries & services that require this.

IEHP Da t a Sha r ing Ass e ssment F o r m

Section F: Identify the types of information that will be received, viewed, used, disclosed or handled by vendor

Personally Identifiable Information (PII)

WHO IS THE DATA ABOUT?

IEHP
IEHP Team
IEHP
Members
Members
Providers

Full first name

Full last name

Complete addresses smaller than a state

Date of Birth

Phone numbers

Fax numbers

Email addresses

Social Security numbers

Member health plan ID number

Banking or Financial accounts

Driver’s License numbers

Vehicle identifiers and serial numbers, including license plate numbers

Individual's Website URLs

Internet Protocol (IP) address numbers

Biometric identifiers, including finger, retinal and voice prints

Full face photographic images

Any other unique number characteristic or code directly related to an individual not listed above

Medical or Behavioral Health Information

WHO IS THE DATA ABOUT?

IEHP

IEHP Team Members

Members

Medical information including diagnosis, admission \ discharge dates, healthcare treatment, medical history, medical records, etc.

Prescriptions

Healthcare payment information including claims, bills, receipts and explanation of benefits

Ancillary services including x-rays and labs

Data or information related to the provision of health care to an individual not listed above

Section G: Number of persons information being shared Approximate number of persons whose information will be viewed, used, disclosed or handled

File details come from the government source that posted it. Updated .