RFP Solicitation 75P00124R00014_Revised_Amendment 0006.pdf

(x)

75P00124R00014 x x

1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted ; or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGEMENT TO BE

RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR

OFFER. If by virtue of this amendment you desire to change an offer already submitted , such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

x

Rockville MD 20857

OAMS

15E 10D 5600 Fishers Lane Office of Acquisition Management Services

OS/ASA/OAMS

04/08/20240006

13. THIS ITEM ONLY APPLIES TO MODIFICATION OF CONTRACTS/ORDERS. IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

12. ACCOUNTING AND APPROPRIATION DATA (If required) is not extended.is extended, Items 8 and 15, and returning

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended , by one of the following methods: (a) By completing

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

FACILITY CODE CODE

10B. DATED (SEE ITEM 13)

10A. MODIFICATION OF CONTRACT/ORDER NO.

9B. DATED (SEE ITEM 11)

9A. AMENDMENT OF SOLICITATION NO.

CODE

8. NAME AND ADDRESS OF CONTRACTOR (No., street, county, State and ZIP Code)

7. ADMINISTERED BY (If other than Item 6)CODE 6. ISSUED BY

PAGE OF PAGES

4. REQUISITION/PURCHASE REQ. NO.3. EFFECTIVE DATE2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO. (If applicable)

1. CONTRACT ID CODE

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

01/10/2024

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority) appropriation data, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

E. IMPORTANT: Contractor is not is required to sign this document and return __________________ copies to the issuing office.

ORDER NO. IN ITEM 10A.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

To All Interested Parties:

1. The Department of Health and Human Services (HHS) is in receipt of a protest to the agency related to Solicitation Number 75P00124R00014.

2. Pursuant to FAR 33.103 all potential Offerors are hereby notified that the award will be withheld pending disposition of the protest and that all interested parties will be notified promptly upon protest resolution.

3. The response period for solicitation 75P00124R00014 is hereby extended for an additional three (3) days, until April 15, 2024, to provide sufficient time to resolve this protest

Continued ...

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)15A. NAME AND TITLE OF SIGNER (Type or print)

15C. DATE SIGNED 16B. UNITED STATES OF AMERICA 15B. CONTRACTOR/OFFEROR 16C. DATE SIGNED

(Signature of person authorized to sign) (Signature of Contracting Officer)

STANDARD FORM 30 (REV. 11/2016)

Prescribed by GSA FAR (48 CFR) 53.243

Previous edition unusable

Except as provided herein, all terms and conditions of the document referenced in Item 9 A or 10A, as heretofore changed, remains unchanged and in full force and effect .

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NAME OF OFFEROR OR CONTRACTOR

2 120

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

75P00124R00014/0006 and make an award under this solicitation.

4. Please acknowledge receipt of Amendment 0006 providing responses to questions, the revised solicitation, the revised task order no. 1, and extension of the response time of the solicitation by signature on the appropriate lines below and attaching a signed copy of this letter to your Offer as one of the technical appendices.

SEE THE ATTACHED NOTICE.

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

Sponsored by GSA

FAR (48 CFR) 53.110

DEPARTMENT OF HEALTH & HUMAN SERVICES Office of Acquisition Management 5600 Fisher Lane Rockville, MD

04/08/2024

Subject: Notice of Protest to the Agency and Withholding of Award under Solicitation 75P00124R00014

To All Interested Parties:

1. The Department of Health and Human Services (HHS) is in receipt of a protest to the agency related to Solicitation Number 75P00124R00014.

2. Pursuant to FAR 33.103 all potential Offerors are hereby notified that the award will be withheld pending disposition of the protest and that all interested parties will be notified promptly upon protest resolution.

3. The response period for solicitation 75P00124R00014 is hereby extended for an additional three days (3) days, until April 15, 2024, to provide sufficient time to resolve this protest and make award under this solicitation.

4. Please acknowledge receipt of Amendment 0006 providing responses to questions, the revised solicitation, the revised task order no. 1, and extension of the response time of the solicitation by signature on the appropriate lines below and attaching a signed copy of this letter to your Offer as one of the technical appendices.

Sincerely, Saul Simmons Contracting Officer

Contractor Acknowledgement of Receipt

Contractor’s Signature Date

SECTION A - Solicitation/Contract Form

TABLE OF CONTENTS

Section Page No. Section Page No.

A 1 H 54

B 2 I 60

C 5 J 76

D 43 K 77

E 44 L 97

F 45 M 107

G 49

SECTION B - Supplies or Services and Prices/Costs

B.1 BRIEF DESCRIPTION OF SERVICES

This IDIQ is to provide the Office of Civil Rights (OCR) support in executive and consultative services, strategic planning, program management, administrative services and all related advisory activities required by the OCR Director.

B.2 TYPE OF CONTRACT

The contract type awarded is Indefinite Delivery Indefinite Quantity (IDIQ).

B.3 TYPE OF ORDERS (IDIQ)

Task or delivery orders issued under this IDIQ contract shall be: firm fixed price, time & material, and labor hour orders.

B.4 MINIMUM AND MAXIMUM QUANTITIES (IDIQ)

During the contract period, the Government shall place orders totaling a minimum of

$10,0000.00. This reflects the contract minimum for the entire period of performance, including any options. The contract maximum for the entire period of performance, including any options, shall be for the placement of orders totaling a maximum of $36,846,300.00.

B.5 CONTRACT LINE-ITEM PRICING (IDIQ)

The Contractor will be reimbursed in accordance with pricing section of each task order for satisfactory performance of the work. The price for each task order will be based on the negotiated unit prices listed below and estimated level of effort, or firm fixed price amount, to be determined at the time of task order award.

The Contractor shall not exceed the maximum, fully loaded hourly rates (inclusive of wages, indirect costs such as fringe, overhead, general and administrative expenses, any other indirect costs for labor, and profit) for each category listed below for both fixed price and time and materials task orders.

For time and materials or labor hour task orders, in consideration of satisfactory performance of the work as described in the task order, the Contractor shall be paid for the specified categories of labor based on the number of actual hours incurred in the performance of the work specified.

For fixed price task orders, in consideration of satisfactory performance of the work as described in the task order, the Contractor shall be paid based on a payment schedule that will be negotiated for individual task orders.

Time and Material/Labor Hour Orders

The Contractor shall not exceed the maximum, fully loaded hourly rates (inclusive of wages, indirect costs such as fringe, overhead, general and administrative expenses, any other indirect costs for labor, and profit) for each category listed below.

Loaded Labor Rates*

SOW

Section

Labor Category

Base

Year

Option

Period 1

Option

Period 2

Option

Period 3

Option

Period 4

C.4.1.A Senior Advisor

C.4.1.B Senior Advisor (Disability)

C.4.1.C Senior Advisor (HIPAA)

C.4.1.D Senior Advisor (Language

Access)

C.4.1.E Executive Consultant/Program

Manager

C.4.1.F Statistician/Economist

C.4.2.A Management Analyst III

C.4.2.B

Management Analyst III

(Disability)

C.4.2.C Management Analyst III

(HIPAA)

C.4.2.D Management Analyst II

C.4.2.E Management Analyst I

C.4.3.A

HIPAA Subject Matter

Experts/Technical Analyst

C.4.3.B Forensic Expert

C.4.3.C Data Analytics – Data Analyst

C.4.3.D Investigatory Services II

C.4.3.E Investigatory Services I

C.4.4.A Senior Analyst (Outreach)

C.4.4.B

Management Analyst II

(Outreach)

C.4.4.C Management Analyst I

(Outreach)

C.4.4.D Web Content Services

C.4.4.E FOIA Processor

C.4.5.A Lead Analyst (Team Lead)

C.4.5.B Triage Analyst

C.4.5.C Case Management Analyst

C.4.5.D Document Management

Analyst

C.4.5.E Call Center Analyst

C.4.5.F Executive Assistant

C.4.5.G Administrative Assistant

*For task orders whose period of performance extends beyond Option Period 4, the

Contractor shall use the rates in Year 5 as adjusted based on changes to the Employment Cost

Index from the Bureau of Labor Statistics. The rate increase can be no more that the total compensation 12 month% change for civilian workers under “Latest Numbers” on http://www.bls.gov/ncs/ect

In the event that 52.217-8 is exercised, the ceiling rates during the extension period shall be the ceiling rates for the last optional ordering period exercised prior to the exercise of clause 52.217-8.

Firm Fixed Price Orders

Firm Fixed Price orders shall comply with the labor rate maximums for each category listed above. A payment schedule for Firm Fixed Price orders will be negotiated for individual task orders.

B.6 ADDITIONS AND CHANGES TO LABOR CATEGORIES

It may be necessary to add or change labor categories during performance of this IDIQ in order to carry out the scope of services described in Section C. If new labor categories are added, or existing labor categories revised, the parties will negotiate the labor category(ies) and rates prior to the incorporation into the IDIQ.

http://www.bls.gov/ncs/ect

SECTION C - Description/Specifications/Statement of Work

Executive Services & Consulting

C.1 PROGRAM DESCRIPTION AND BACKGROUND

Background

The Office for Civil Rights (OCR), a staff division at the HHS Office of the Secretary, ensures that individuals receiving services from HHS-funded programs are not subject to unlawful discrimination, that civil rights laws promote health equity in HHS funded and administered by HHS to the extent possible, that regulated entities comply with applicable privacy and security requirements promulgated under HIPAA and HITECH, and individuals can exercise their rights to access their health information and can trust in the privacy and security of their health information. By rooting out insidious discrimination and removing unlawful barriers to HHS-funded services, OCR carries out the HHS mission of improving the health and well-being of all Americans and providing essential human services. By promoting health equity and protecting the right of individuals to access their health information while protecting the privacy and security of this information, OCR helps empower people’s health care decision-making and helps ensure the integrity of the health care system, both of which promote better health outcomes for the Nation.

OCR protects these rights by:

• Teaching health, social service workers, and other stakeholders about civil rights laws, health information privacy, and patient safety confidentiality laws.

• Educating communities about civil rights and health information privacy rights.

• Investigating civil rights, health information privacy, and patient safety confidentiality complaints to identify discrimination or violations of the law and taking action to correct problems up to and including enforcement actions, compliance actions, and imposing civil monetary penalties.

• Drafting regulations within the scope of applicable authorities.

Program Goals and Objectives

The Contractor will support the Office for Civil Rights (OCR) in obtaining highly skilled executive consultants and management/administrative analysts. These highly trained and highly skilled consultants and analysts are integral to the success and performance of OCR and further

OCR’s mission as described above thru various mission support activities.

C.2 SCOPE OF IDIQ

This contract is to provide OCR support in consultative services, strategic planning, program management, administrative services and all related advisory activities required by OCR as set forth in each task order.

C. 4 - TASK AREAS

Task Area 1 - Mission and Policy Subject Matter Experts: The Contractor shall provide mission support services for policy analysis and provide recommendations and advice regarding the development and implementation of OCR’s mission. The Contractor shall provide regulatory impact analysis (RIA) to support OCR through the decision-making process for promulgating new and existing regulations. The senior level categories described in this area assume a deep level of expertise which generally accompanies years of experience as a senior level employee (equivalent to a GS 15 or higher if federal) within an organization.

Task Area 2 – Investigation: The Contractor will provide subject matter experts in compliance investigations to carry out investigations of complaints and compliance reviews concerning Health and Human Services divisions, State and local governments, and private entities.

The Contractor will support regional and headquarter staff by independently reviewing and assessing information security data from HIPAA covered entities and business associates to assess the effectiveness of their security programs and safeguarding of protected health information

Task Area 3 – Outreach: The Contractor will provide expert advice regarding the quality of

OCR’s outreach activities and media relations. They shall assist with the development and implementation of outreach programs, provide mission support to intra- and inter-agency work groups in the development of Departmental policies, legislative and regulatory proposals, and special OCR initiatives that the OCR Director has determined should be implemented.

Task Area 4 – Administrative Support: The Contractor will provide general administrative and analytical support to headquarters and regional staff with minimal oversight. They will assist OCR federal staff with mission support activities and administrative support related to investigations of complaints and compliance reviews within OCR’s divisions, including regional offices. They will provide assistance with a wide variety of administrative tasks.

C.4.1 – Senior Advisor Labor Categories

C.4.1.A – Senior Advisor

1. Provides subject matter expert advice on mission support issues of policy, impact of administrative rules, compliance, and enforcement mechanisms to Deputy Directors. As directed by the COR, carries out activities in support of OCR’s mission, program goals, and strategic objectives

2. Provides expert consultation in the form of research, briefings, and written documents on regulatory impact analysis (RIA) to the OCR Director and Deputy Directors.

3. Provides recommendations regarding the application of OCR’s mission activities, program goals, and strategic objectives affecting OCR to the OCR Director and Deputy Directors.

4. Provides recommendations regarding improving the quality and efficiencies of OCR’s key projects, activities, and mission. and activities. Coordinates with OCR leaders to evaluate program efficiencies, identify areas of overlap, and provides recommendations for improvements and/or consolidation of workstreams.

5. Conducts outreach activities, such as outreach to stakeholders, media relations and special initiatives to maximize the impact of OCR’s mission activities, program goals and strategic objectives.

Education: Minimum educational experience is a law degree (J.D.) from a law school accredited by the American Bar Association (ABA) or a Master’s degree from an accredited university, plus four years of specialized experience in a health or human services related field which equips the applicant with the knowledge, skills, and abilities necessary to do the work of the position.

Combination of Education and Experience: A combination of education and experience may be used to qualify for this position. Experience must be equivalent to four years specialized experience equivalent to the GS-15 level in the Federal Government.

C.4.1.B – Senior Advisor (Disability) administrative rules, compliance, and enforcement mechanisms for OCR’s disability portfolio, including Section 504 of the Rehabilitation Act, the Americans with Disabilities

Act, or the Olmstead/community integration initiative. As directed by the COR, carries out activities in support of OCR’s mission, program goals, and strategic objectives

OCR’s disability portfolio for the OCR Director and Deputy Directors.

3. Provides recommendations on OCR’s disability portfolio applying OCR’s mission activities, program goals, and strategic objectives affecting OCR to the OCR Director and

Deputy Directors.

4. Provides recommendations regarding improving the quality and efficiencies of OCR’s

Olmstead/community integration initiative or other disability nondiscrimination projects, activities, and mission. Coordinates with OCR leaders to evaluate program efficiencies, identify areas of overlap, and provides and implements recommendations for improvements and/or consolidation of workstreams.

5. Conducts outreach activities on OCR’s disability portfolio such as outreach to stakeholders, media relations and special initiatives to maximize the impact of OCR’s mission activities, program goals and strategic objectives.

Education: Minimum educational experience is a law degree (J.D.) from a law school accredited by the American Bar Association (ABA) or a Master’s degree from an accredited university, plus four years of specialized experience addressing disability discrimination and related matters. For example, state Medicaid programs and waivers that support home and community-based services, experience with working as an expert consultant or expert witness in an Olmstead matter, or experience in the federal rulemaking process. Must have expert understanding of disability discrimination or the service needs of a person with disabilities.

Combination of Education and Experience: A combination of education and experience may be used to qualify for this position. Experience must be equivalent to at least four years

C.4.1.C – Senior Advisor (HIPAA) administrative rules, compliance, and enforcement mechanisms related to OCR’s HIPAA

Privacy and Security Rules and Cyber Security initiative. As directed, carries out activities in support of OCR’s mission, program goals, and strategic objectives.

OCR’s HIPAA Privacy and Security Rules and Cyber Security for regulatory impact analysis

(RIA) to the OCR Director and Deputy Directors.

3. Provides recommendations related to OCR’s HIPAA Privacy and Security Rules and

Cyber Security initiative applying OCR’s mission activities, program goals, and strategic objectives affecting OCR to the OCR Director and Deputy Directors.

4. Provides recommendations regarding improving the quality and efficiencies of OCR’s

HIPAA and Cyber Security projects, activities, and mission. Coordinates with OCR leaders to evaluate program efficiencies, identify areas of overlap, and provides recommendations for improvements and/or consolidation of workstreams.

5. Conducts outreach activities on OCR’s HIPAA and Cyber Security initiatives such as outreach to stakeholders, media relations and special initiatives to maximize the impact of

OCR’s mission activities, program goals and strategic objectives.

Education: Minimum educational experience is a master’s degree from an accredited university with the focus on Cybersecurity, Computer Science, Information Sciences, or other comparable fields of study, plus four years of specialized experience with Cyber Security equivalent to the GS-15 level in the Federal Government. Preference will be given to candidates with relevant industry certifications from CISSP, CISM, CIPP/CIPT/CIPT.

be used to qualify for this position. Experience must be equivalent to four years specialized experience equivalent to the GS-15 level in the Federal Government.

C.4.1.D – Senior Advisor (Language Access)

1. Lead efforts to establish language access compliance policies and processes, including procurement, software and web development, content development and publication, and oversight of HHS websites and other digital properties.

2. Review and provide feedback and guidance on Operating and Staff Divisions’ proposed language access policies, procedures, and activities.

3. Centralize language access resources and promoting language access directives across the

Department; improving awareness by staff of the Department’s telephonic language service, translation services, and other language services and contracts that may be used by all HHS

Operating and Staff Divisions; working with public-facing components to provide assistance in making programs more language accessible; and ensuring appropriate Department-wide consistency in the language access policy.

4. Collaborate with HHS Operating and Staff Divisions in developing and overseeing the creation of:

• a centralized unit for HHS Operating and Staff Divisions to obtain interpreters or translations, including an inventory of internal resources such as existing translation and interpretation contracts.

• an intra-agency working group on language access, with representatives from HHS

Operating and Staff Divisions that most commonly interact with the public, to ensure a consistent approach to providing language assistance.

• an internal repository of commonly translated documents.

• a department-wide translation glossary of common legal terms in at least the top 15 languages spoken by LEP individuals.

• standard language assistance notices, flyers, and posters for use by HHS Operating and

Staff Divisions.

• template web pages or web standards to help HHS Operating and Staff Divisions post translated content for LEP communities.

• guidance on identifying documents for translation and targeting languages for translation.

• translations of the Department’s most common publicly accessed webpages into Spanish, and will consider translation into additional common languages of LEP individuals in the

United States, in the relevant geographic region, or in the relevant subject matter audience;

and

• guidance and technical assistance for HHS Operating and Staff Divisions, as appropriate, on their ongoing language access needs.

5. Establish partnerships with other language access coordinators throughout the federal government to assist in meeting language access goals and objectives.

6. Coordinate outreach regarding language access services and develop and deliver language access training to ensure staff receive appropriate role-based training.

7. Coordinate and facilitate meetings of the HHS Language Access Steering Committee

(LASC); oversee deliverables from the LASC; field questions from LASC subcommittees;

and support implementation and updating efforts regarding the HHS Language Access Plan and the language access plans of HHS Operating and Staff Divisions.

8. Provide guidance to technology providers, acquisition teams, communications and training groups, civil rights and language access officials, human resources staff, legal staff, and other

Federal language access services contacts.

Education: Minimum educational experience is a bachelor’s degree from an accredited university with the focus on international relations, plus at least four years of relevant, Certifications in translations and interpretations preferable.

experience equivalent to the GS-15 level in the Federal Government.

C.4.1.E - Executive Consultant/Program Manager

1. Serves as the Point of Contact with the Contracting Officer and Contracting Officer

Representative when issues or projects require the designation of a team lead for work areas as referenced elsewhere in this SOW.

2. Provides consultation regarding policy development, administrative rule making, compliance and enforcement activities, inter- and intra-agency coordination, outreach to stakeholders, media relations and special initiatives that provide creative and effective ways to maximize impact in these areas.

3. Supports the OCR Director in garnering support for OCR’s mission activities, program goals, and strategic objectives.

4. Advises senior policy officials within OCR and throughout HHS on mission activities and policies. Coordinates with OCR leaders to identify areas of overlap and ensure integration of the office’s mission in day-to-day operations.

5. As needed and directed by the COR, conducts outreach actives described in section

C.4.4.A.

6. Manages contractor staff when designated and conducts mission support activities as described in labor categories C.4.1.A – C.4.6.F

Education: Minimum educational experience is a law degree (J.D.) from a law school accredited by the American Bar Association (ABA) or a Bachelor’s degree from an accredited university, plus four years of specialized experience in a field which equips the applicant with the knowledge, skills, and abilities necessary to do the work of the position.

experience equivalent to the GS-15 or SES level in the Federal Government.

C.4.1.F - Statistician/Economist

1. Performs multiple, varying, and complex assignments under the direction of the COR.

Acts as a contributing specialist on large work activities or individually perform single or small work activities.

2. Applies experience and advanced technical knowledge of economic theory and statistical techniques to perform regulatory impact analyses, economic analyses, and benefit-cost analyses of proposed and final regulations or other cross-cutting policy initiatives to support

OCR policies, goals, and priorities.

3. Provides subject matter expertise to ensure that regulatory impact analyses meet legal and analytical requirements as established under the Administrative Procedure Act, the Regulatory

Flexibility Act, the Paperwork Reduction Act, the Unfunded Mandates Reform Act, Executive Order 12866 Regulatory Planning and Review, and OMB Circular A-4.

4. Develops plans, methods, and other data and statistics to support regulatory impact analyses of rulemaking to advance the mission of OCR; develops improvements in economic methods, techniques, and models to improve regulatory and economic analyses of OCR policies.

5. Contributes to the preparation of management/technical reports and communicates the overall results of a project or work activity to the COR.

6. Communicates highly technical quantitative concepts and procedures focused on programs and policies, broadly defined (i.e., as above) through written materials and in face-to-face briefings for senior policy officials and non-technical audiences.

7. May serve as the subject matter expert on key economic on interdisciplinary rulemaking workgroups and committees.

8. In accordance with the Paperwork Reduction Act, coordinate outreach and develop surveys to gather data and information on potential impacts.

9. Resolves all but unique technical problems without the intervention of management or a more experienced technical specialist.

10. Identifies, develops and recommends techniques to address problem situations;

participates in developing process improvements, procedures, and templates for regulatory analyses.

11. Interfaces with appropriate governmental staff as well as federal and state agencies and other regulated entities and stakeholders as required.

Minimum educational experience is a master’s degree from an accredited university plus three years of specialized experience in economic analysis and regulatory impact analysis equivalent to the GS-14 level in the Federal Government.

C.4.2 – Program Area support Labor Categories

C.4.2.A - Management Analyst III

1. Provides project management and develops and implements processes to improve OCR’s compliance and enforcement authorities regarding case investigations, conduct of compliance reviews, and case resolution and enforcement strategies concerning Health and Human

Services divisions, State and local governments, and private entities.

2. Provides mission support, policy, and regulatory analysis to the OCR Director and

Division Directors on issues of policy, impact of administrative rules, compliance, and enforcement mechanisms.

3. Provides policy on the implementation of policies and procedures under OCR’s compliance and enforcement authorities.

4. Provides high-quality research and analysis by processing and investigating cases, conducting compliance reviews in support of OCR’s nationwide goals.

5. Supports OCR officials’ intra- and inter-agency efforts to develop, coordinate and implement OCR mission activities pertaining to enforcement.

6. Interfaces with appropriate governmental staff as well as federal and state agencies and other regulated entities, complainants, covered entities and business associates, advocacy groups, and other stakeholders as required.

7. Provides outreach activities, such as outreach to stakeholders, media relations and special initiatives, in support of OCR’s mission activities, program goals and strategic objectives.

accredited by the American Bar Association (ABA) or a Master’s degree from an accredited university, plus three years of specialized experience in a health or human services-related field which equips the applicant with the knowledge, skills, and abilities necessary to do the work of the position.

be used to qualify for this position. Experience must be equivalent to four years of specialized experience equivalent to the GS-13/14 level in the Federal Government.

C.4.2.B - Management Analyst III (Disability) disability portfolio, including under Section 504 of the Rehabilitation Act, the ADA, or the

Olmstead/community integration initiative, compliance and enforcement authorities regarding case investigations, conduct of compliance reviews, and case resolution and enforcement strategies concerning Health and Human Services divisions, State and local governments, and private entities, or related policy goals.

2. Provides mission support, policy, and regulatory analysis on OCR’s disability portfolio to the OCR Director and Deputy Directors on issues of policy, impact of administrative rules, compliance, and enforcement mechanisms.

3. Provides input for OCR’s disability portfolio on the implementation of policies and procedures under OCR’s compliance and enforcement authorities.

4. Provides high-quality research and analysis for OCR’s disability portfolio by processing and investigating cases, conducting compliance reviews in support of OCR’s nationwide goals.

5. Supports OCR officials’ intra- and inter-agency efforts regarding OCR’s disability portfolio to develop, coordinate and implement mission activities.

7. Provides outreach activities on OCR’s disability portfolio such as outreach to stakeholders, media relations and special initiatives to maximize the impact of OCR’s mission activities, program goals and strategic objectives.

Education: Minimum educational experience is a law degree (J.D.) from a law school accredited by the American Bar Association (ABA) or a Master’s degree from an accredited university, plus at least three years of specialized experience with addressing disability discrimination and related matters. For example, state Medicaid programs and waivers that support home and community-based services, experience with working as an expert consultant or expert witness in an Olmstead matter, or experience in the federal rulemaking process. Must have expert understanding of disability discrimination or the service needs of a person with disabilities.

be used to qualify for this position. Experience must be equivalent to at least four years of

C.4.2.C - Management Analyst III (HIPAA)

HIPAA and Cyber Security initiatives for compliance and enforcement authorities regarding case investigations, conduct of compliance reviews, and case resolution and enforcement strategies concerning Health and Human Services divisions, State and local governments, and private entities.

2. Provides mission support, policy, and regulatory analysis on OCR’s HIPAA and Cyber

Security initiatives to the OCR Director and Deputy Directors on issues of policy, impact of administrative rules, compliance, and enforcement mechanisms.

3. Provides input for OCR’s HIPAA and Cyber Security initiatives on the implementation of policies and procedures under OCR’s compliance and enforcement authorities.

4. Provides high-quality research and analysis for OCR’s HIPAA and Cyber Security initiatives by processing and investigating cases, conducting compliance reviews in support of

OCR’s nationwide goals.

5. Supports OCR officials’ intra- and inter-agency efforts regarding OCR’s HIPAA and

Cyber Security initiatives to develop, coordinate and implement mission activities pertaining to enforcement.

7. Provides outreach activities on OCR’s HIPAA and Cyber Security initiatives such as outreach to stakeholders, media relations and special initiatives to maximize the impact of

OCR’s mission activities, program goals and strategic objectives.

Education: Minimum educational experience is master’s degree from an accredited university with the focus on Cybersecurity, Computer Science, Information Sciences, or other comparable fields of study, plus three years of specialized experience with Cyber Security equivalent to the GS-13/14 level in the Federal Government. Preference will be given to

C.4.2.D - Management Analyst II

1. Provide mission support and policy analysis services to OCR Deputy Directors and/or

Regional Mangers in developing case-related guidance for front-line OCR investigators and makes recommendations regarding regional operations to ensure consistency in compliance activities and application of policies.

2. Makes recommendations to OCR Deputy Directors and/or Regional Managers about the findings and disposition of cases and compliance reviews.

3. Provides mission support and policy analysis on issues of policy, impact of administrative rules, compliance, and enforcement mechanisms.

4. Provides research and recommendations regarding implementation of policies and procedures under OCR’s compliance and enforcement authorities.

5. Conducts and analyses HHS program-related research.

6. Assists with analyzing clearances implicating the office’s mission and makes recommendations to the COR for processing.

7. Provides outreach activities, such as outreach to stakeholders, media relations and special initiatives, in support of OCR’s mission activities, program goals and strategic objectives.

accredited by the American Bar Association (ABA) or a bachelor’s degree from an accredited university, plus two years of specialized experience in a health or human services-related field specialized experience equivalent to the GS-12 level in the Federal Government.

C.4.2.E - Management Analyst I

1. Provide mission support and policy analysis services to the COR in developing case-related guidance for front-line OCR investigators and makes recommendations regarding regional operations to ensure consistency in compliance activities and application of policies and administration.

2. Conducts and analyses HHS program-related research.

3. Provides general administrative and analytical support to the divisions and/or regions.

4. Develops a system for tracking the goals and accomplishments of the divisions and/or regions.

5. Develops spreadsheets, analyzes information, and provides reports. The spreadsheets should track complaints, information about covered entities and relevant stakeholders, and information needed to meet reporting requirements for OCR.

6. Interfaces with appropriate staff within OCR to get needed information and arrange meetings.

7. Provides logistical support for division and/or regional activities.

Education: Minimum educational experience is an associate degree from an accredited university, plus one year of specialized experience in a field which equips the applicant with specialized experience equivalent to the GS-9/11 level in the Federal Government.

C.4.3 – Investigatory Labor Categories

C.4.3.A – HIPAA Subject Matter Experts/Technical Analyst

1. Reviews security and privacy complaints, data breach notification and cybersecurity incident reports, and other correspondence and evidence to determine whether the complaint, self-report or breach notification report indicates non-compliance with the HIPAA Security

Rule. Reviews data provided by the healthcare organizations across the nation to assess the overall impact of security and privacy incidents.

2. Provides subject matter expertise with evaluating and determining the technical sufficiency of submissions from HIPAA covered entities and business associates in response to data and documentation requests (i.e. Assessing reports related to security baselines, penetration tests, vulnerability assessments, and digital forensics).

3. Document processes, standard operating procedures and system requirements; develops reports summarizing the analysis along with formulating recommendations for OCR to consider for future action.

4. Develops written reports with technical security analyses, summaries, and recommendations for action, reports on root causes of problems, efficiency, and support needs.

5. Provides expertise in the development and evaluation of health information privacy policies and technologies, specifically regarding protected health information; de-identified / re-identified health information; limited data sets.

6. Provides subject matter expert analysis, evaluation, and recommendations based on national security standards (NIST), industry best practices (ISO) and implementation specifications of the HIPAA Security Rule.

7. Provides expert guidance in designing, implementing, and managing information security, data protection, and risk management programs, including policies, procedures, and controls for protected health information based on HIPAA requirements.

8. Provides advisory expertise in the areas of risk analyses, vulnerability assessments, incident response, security architecture, physical security, business continuity and disaster recovery, enterprise mobility, threat intelligence and analysis, security awareness and online safety, and resolution of highly.

Education: Minimum educational experience is bachelor’s degree from an accredited university with the focus on Cybersecurity, Computer Science, Information Sciences, or other comparable fields of study, plus two years of specialized experience with Cyber Security equivalent to the GS-13/14 level in the Federal Government. Preference will be given to

C.4.3.B – Forensic Expert

1. Provide analytical services by identifying, designing, and conducting analyses of program data using advanced program tools such as SAS (Statistical Analysis Software) and other computational methods to implement the desired analyses.

2. Uses descriptive or inferential statistical methods to collect, explore and present large amounts of data to discover underlying patterns and trends.

3. Obtain data for program analyses from the Program Information Management System

(PIMS) and internal Electronic Document Management System (EDMS) used to track and store data regarding OCR’s programs.

4. Knowledge of the principles, methods, and processes used to conduct a systematic and objective inquiry; including study design, collection, analysis, and interpretation of data; and the reporting of results.

5. Identify significant factors that may affect results from analysis of the data. Ensure all findings are reported, including factors that may affect results, in all written and analytical reports provided.

Education: Minimum educational experience is a bachelor’s degree from an accredited university, plus two years of specialized experience in a health or human services-related field experience equivalent to the GS-12 level in the Federal Government.

C.4.3.C – Data Analytics-Data Analyst

1. Provide analytical services by identifying, designing, and conducting analyses of program data using advanced program tools and other computational methods to implement the desired analyses.

2. Uses descriptive or inferential statistical methods to collect, explore and present large amounts of data to discover underlying patterns and trends.

3. Obtain case management data from OCR’s Program Information Management System

(PIMS) relational database which is used to track and store data regarding OCR’s programs.

4. Provide visual aids, which may include detailed reports, dashboards, or charts using

Tableau or other Data Visualization techniques to aid management in making decisions.

5. Identify significant factors that may affect results from analysis of the data. Ensure all findings are reported, including factors that may affect results, in all written and analytical reports provided.

6. Use knowledge of principles, methods, and processes used to conduct a systematic and objective inquiry to conduct study design, collection, analysis and interpretation of data, and report results.

7. Use knowledge of Oracle SQL Developer, database development and administration plus familiarity with object-oriented languages such as Python, Java, C++ or C# to support data analytics tasks.

university, plus two years of specialized experience using data visualization tools such as

Tableau, PowerBI, Microsoft Excel and working with clients to develop Key Performance

Indicator (KPI) dashboards. Familiarity with the Stata and R statistical programming language and with working with large (i.e.: tens or hundreds of millions of rows) healthcare claims data sets is necessary. Prior experience with multi-level modeling, including random effects models, and econometric methods is preferred.

specialized experience equivalent to the GS-12 level in the Federal Government.

C.4.3.D – Investigatory Services II

Works independently or as a team leader as required.

1. Provide mission support to OCR regional offices to ensure compliance by the regulated community with the HIPAA Rules and applicable federal civil rights, conscience and religious freedom regulations.

2. Evaluate complaints to identify potential violations of HIPAA Rules and/or applicable federal civil rights, conscience and religious freedom regulations. Provides written comments to the COR.

3. Timely respond to correspondence and phone calls related to complaints and requests for technical assistance.

4. Draft all documents related to complaint resolution, including investigative strategies, notification and data requests, closure letters, voluntary resolution agreements, and corrective action plans.

5. Conduct interviews of complainants and witnesses.

6. Review and analyze policies and procedures, medical records, reports of information system activity, computer audits, the internet, and financial reports.

7. Demonstrate proficiency in English grammar and punctuation.

8. Preference should be given to individuals with a knowledge of the application of nondiscrimination and conscience regulations, the HIPAA Rules, court decisions, agency case precedent, theories, concepts, and principles to investigation, enforcement, and compliance work.

university, plus two years of specialized experience in a field which equips the applicant with

C.4.3.E – Investigatory Services I

1. Provide mission support to OCR regional offices to ensure compliance by the regulated community with the HIPAA Rules and applicable federal civil rights, conscience and religious freedom regulations.

2. Evaluate complaints to identify potential violations of HIPAA Rules and/or applicable federal civil rights, conscience and religious freedom regulations. Provides written comments to the COR.

3. Timely respond to correspondence and phone calls related to complaints and requests for technical assistance.

4. Draft all documents related to complaint resolution, including investigative strategies, notification and data requests, closure letters, voluntary resolution agreements, and corrective action plans.

5. Conduct interviews of complainants and witnesses.

6. Review and analyze policies and procedures, medical records, reports of information system activity, computer audits, the internet, and financial reports.

7. Demonstrate proficiency in English grammar and punctuation.

8. Preference should be given to individuals with a knowledge of the application of nondiscrimination and conscience regulations, the HIPAA Rules, court decisions, agency case precedent, theories, concepts, and principles to investigation, enforcement, and compliance work.

specialized experience equivalent to the GS-11/12 level in the Federal Government.

C.4.4 – Outreach Support Labor Categories

C.4.4.A - Senior Analyst (Outreach)

1. Develops strategy for OCR’s outreach activities and develops mechanisms for OCR’s continuous improvement of its outreach initiatives through the use of effective performance metrics, surveys, and other performance management tools.

2. Participates in outreach to stakeholders, provides media relations and performs special initiatives that provide creative and effective ways to maximize impact of OCR’s mission.

3. Provides recommendations and implements recommendations regarding outreach and media relations activities.

4. Assists in outreach events and initiatives undertaken by OCR’s divisions concerning

Health and Human Services divisions, State and local governments, and private entities.

Makes recommendations to OCR Director and Division Directors.

5. Analyses OCR’s web pages and proposes updates to increase effectiveness and readability.

6. Coordinates with other offices (in particular the Office of the Assistant Secretary for Public

Affairs).

7. Writes press releases, fact sheets, and coordinates social media accounts to increase the impact of OCR’s outreach. Provides outreach activities, such as outreach to stakeholders, media relations and special initiatives, in support of OCR’s mission activities, program goals and strategic objectives.

accredited by the American Bar Association (ABA) or a Master’s degree from an accredited university, plus four years of specialized experience in a health or human services-related field which equips the applicant with the knowledge, skills, and abilities necessary to do the work of the position.

specialized experience equivalent to the GS-14/15 level in the Federal Government.

C.4.4.B - Management Analyst II (Outreach)

1. Provides consultation and recommendation regarding public awareness campaigns, education programs, and training curricula on mission activities under HHS programs for a multitude of audiences, including health care entities, faith-based organizations, advocacy organizations, schools, colleges, and universities, and HHS grant recipients.

2. Assists in the development of and provides recommendations regarding effective liaison strategies in mission activities under OCR’s compliance and enforcement authorities with

HHS Operating Divisions, national advocacy, beneficiary and provider groups, and to other

Federal departments and agencies.

3. Assist in implementing OCR’s nationwide goals in outreach and provides advice to regional offices in developing and executing mission outreach programs.

4. Supports OCR officials with inter-governmental mission activities.

5. Assists in the development of press packages for roll outs, provides consultation regarding public relations matters and drafts speeches and articles for the OCR Director and Division

Directors.

other regulated entities, the media, complainants, covered entities and business associates, advocacy groups, and other stakeholders as required.

7. Conducts presentations, trainings and provides information to audiences including members of the press and media utilizing materials approved by the Director of OCR or his/her designee.

university, plus two years of specialized experience in a health or human services-related field specialized experience equivalent to the GS-12/13 level in the Federal Government.

C.4.4.C – Management Analyst I (Outreach)

1. Makes recommendations to the OCR Director and/or Division Directors about public awareness campaigns, education programs, and training curricula that support OCR’s mission.

2. Conducts and prepares materials for internal and external outreach, education, and training activities supportive of OCR’s mission.

3. Reviews outreach, education and training materials implicating the office’s mission and makes recommendations.

Education: Minimum educational experience is one year of law school completed from a law school accredited by the American Bar Association (ABA)or a bachelor’s degree from an accredited university, plus one year of specialized experience in a health or human services-related field which equips the applicant with the knowledge, skills, and abilities necessary to do the work of the position.

C.4.4.D – Web Content Services

1. Provides back up services to senior outreach staff by reviewing and suggesting edits to written content to be placed on OCR’s Internet site to ensure it complies with all established standards, guidelines, and regulations and has the appropriate approvals.

2. Meet with a variety of Government staff regarding new and existing content and provide recommendations for improving the website.

3. Performs analysis including website trends and analytics, technical studies, and other innovative methods. Prepares written reports advising the COR on methods for improving the

OCR’ Internet…