CN-680000-AA456.pdf

AGREEMENT NO. AA456

STATE OF FLORIDA

AGENCY FOR HEALTH CARE ADMINISTRATION

AGENCY AGREEMENT

AHCA Agreement No. AA456, Page 1 of 8

AHCA Form 2100-0062 (DEC 2018)

In exchange for the mutual promises contained herein, this Agency Agreement is entered into between the State of Florida, AGENCY FOR HEALTH CARE ADMINISTRATION, hereinafter referred to as the “Agency” whose address is 2727 Mahan Drive, Tallahassee, Florida 32308, and FLORIDA DEPARTMENT OF HEALTH hereinafter referred to as the “Requester”, whose address is 4052 Bald Cypress Way, Tallahassee FL 32399 to provide Medicaid recipient data to enhance the outcome of the HIV continuum of care model.

I. OVERVIEW/PURPOSE

The purpose of this project is to match Medicaid recipient data with the Enhanced HIV/AIDS Reporting System (eHARS) patient information. The Agency and the Requester shall use the data specified in this request to analyze the receipt of Human Immunodeficiency Virus (HIV) services by Medicaid recipients matched in eHARS.

II. LEGAL AUTHORITY

Section 381.0022(2), Florida Statutes, mandates that the Department of Health (DOH) may share confidential information on any individual who is or has been a Medicaid recipient and is or was the subject of one of the DOH’s programs, for the purpose of requesting, receiving, or auditing payment for services. This data request implements section 381.0022(2), Florida Statutes, by allowing the DOH to disclose the data necessary for receipt of services.

Additionally, Section 1902(a)(7) of the Social Security Act mandates that a State Medicaid Plan provide safeguards that restrict the use or disclosure of information concerning applicants and recipients for purposes directly connected with the administration of the Plan. Pursuant to 42 CFR 431, Subpart F, purposes directly related to plan administration include (a) Establishing eligibility;(b) Determining the amount of medical assistance; (c) Providing services for beneficiaries, and (d) conducting or assisting an investigation, prosecution, or civil or criminal proceeding related to the administration of the plan.

III. DEFINITIONS

N/A

IV. TERM

A. Term

This Agreement shall begin upon execution by all Parties and end on May 1, 2029, inclusive.

Docusign Envelope ID: 1DBD8811-E26D-4661-BDEB-398B2039A314

AHCA Agreement No. AA456, Page 2 of 8

B. Renewal

In accordance with Section 287.057(13), Florida Statutes, this Agreement may be renewed for a period that may not exceed three (3) years or the term of the original Agreement, whichever period is longer. Renewal of the Agreement shall be in writing and subject to the same terms and conditions set forth in the initial Agreement. A renewal Agreement may not include any compensation for costs associated with the renewal. Renewals are optional and subject to the availability of funds.

C. Amendment

This Agreement may be amended upon written Agreement signed by all parties.

V. MONETARY VALUE

There are no costs associated with this Agreement.

VI. CONTACT INFORMATION

A. The Agency’s Agreement Manager’s contact information is as follows:

Angela Smith Agency for Health Care Administration 2727 Mahan Drive, MS#38 Tallahassee, FL 32308

(850) 412-4696 Angela.smith@ahca.myflorida.com

B. The Department of Health Agreement Manager’s contact information is as follows:

Colby Cohen, MPH Medical Health Care Program Analyst HIV / AIDS Section Bureau of Communicable Diseases Florida Department of Health 4052 Bald Cypress Way, BIN A09 Tallahassee, FL 32399-1715

(850) 901-6977 Colby.Cohen@flhealth.gov

C. All matters pertaining to this Agreement shall be directed to the Agreement Managers for appropriate action or disposition. A change in Agreement Manager by any party shall be reduced to writing through an amendment to this Agreement by the Agency.

mailto:Angela.smith@ahca.myflorida.com

AHCA Agreement No. AA456, Page 3 of 8

VII. SCOPE

A. Services Provided by the Agency.

1. Pursuant to the terms of this Agreement, the Agency shall disclose Medicaid claims and encounter data pertaining to Medicaid recipients who received HIV/AIDS-related services paid for by the Medicaid program during an agreed-upon time period as determined by the Agency and the Department.

2. The Agency shall use the data to improve access to quality health care and services for Floridians covered by Medicaid.

3. The Agency shall use the file to contribute to the new AIDS4 special condition case-finding algorithm.

B. Services Provided by Department of Health

1. The Department shall use the data specified in this request to confirm Medicaid recipients who received HIV/AIDS-related services paid for by the Medicaid program are reported in the Department eHARS.

2. The Department shall use the data specified in this request to provide a more accurate portrayal of the HIV care patterns and the continuum of care model in Florida.

C. Deliverables Section

TABLE 1 – DELIVERABLE SCHEDULE

No. Deliverable Receiving Party Due Date

1.

eHARS data files with HIV patient and laboratory data up to July 31st

Agency for Health Care Administration, Medicaid - Medicaid Data Analytics

Receive eHARS file by August 31st

2.

eHARS data files with HIV patient and laboratory data up to January 31st

Agency for Health Care Administration, Medicaid - Medicaid Data Analytics

Receive eHARS file by February 28th

AHCA Agreement No. AA456, Page 4 of 8

VIII. Agency and the Requester HEREBY AGREES:

A. Monitoring

1. To provide data as specified in Section VII., Item B., Services Provided by Requester. These reports will be used for monitoring progress or performance of the contractual services.

2. To permit persons duly authorized by the Agency to inspect any records, papers, documents, facilities, goods, and services of Requester which are relevant to this Agreement.

3. To ensure that each of its employees or subcontractors who performs activities related to the services associated with this Agreement will report to the Agency any health care facility that is subject of these services that may have violated the law. To report concerns pertaining to a health care facility, the Requester’s employee or subcontractor may contact the Agency Complaint Hotline by calling 1-888-419-3456 or by completing the online complaint form found at https://apps.ahca.myflorida.com/hcfc.

4. To ensure that each of its employees or subcontractors who performs activities related to the services associated with this Agreement, will report to the Agency areas of concern relative to the operation of any entity covered by this Agreement. To report concerns, the Requester’s employee or subcontractor may contact the Agency Complaint Hotline by calling 1- 877-254-1055 or by completing the online complaint form found at https://apps.ahca.myflorida.com/smmc_cirts/.

5. To ensure that reports which represent individuals receiving services are at risk for, or have suffered serious harm, impairment, or death are reported to the Agency immediately and no later than twenty-four (24) clock hours after the observation is made. Reports that reflect noncompliance that does not rise to the level of concern noted above shall be reported to the Agency within ten (10) calendar days or the observation.

B. Health Insurance Portability and Accountability Act

1. To comply with the Department of Health and Human Services Privacy

Regulations in the CFR, Title 45, sections 160 and 164, regarding disclosure of the protected health information.

2. To ensure it meets all Federal regulations regarding required standard electronic transactions and standards for privacy and individually identifiable health information as identified in the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and the Health Information Technology for Economics and Clinical Health Act (HITECH) of 2009 and associated regulations.

https://apps.ahca.myflorida.com/hcfc https://apps.ahca.myflorida.com/smmc_cirts/

AHCA Agreement No. AA456, Page 5 of 8

3. To conduct all activities in compliance with 45 CFR 164 Subpart C to ensure data security, including but not limited to encryption of all information that is confidential under Florida or Federal law, while in transmission and while resident on portable electronic media storage devices. Encryption is required and shall be consistent with Federal Information Processing Standards (FIPS), and/or the National Institute of Standards and Technology (NIST) publications regarding cryptographic standards.

C. Confidentiality of Information

1. To not use or disclose any confidential information, including social security numbers that may be supplied under this Agreement pursuant to law, and also including the identity or identifying information concerning a Medicaid recipient or services under this Agreement for any purpose not in conformity with State and Federal laws, except upon written consent of the recipient, or his/her guardian.

2. That all personally identifiable information, including Medicaid information, obtained by Requester shall be treated as privileged and confidential information and shall be used only as authorized for purposes directly related to the administration of this Agreement. Requester must have a process that specifies that patient-specific information remains confidential, is used solely for the purposes of data analysis or Requester responsibilities under this Agreement and is exchanged only for the purpose of conducting a review or other duties outlined in this Agreement.

3. All patient-specific information received by Requester can be shared only with those agencies that have legal authority to receive such information and cannot be otherwise transmitted for any purpose other than those for which Requester is retained by the Agency. Requester must have in place written confidentiality policies and procedures to ensure confidentiality and to comply with all Federal and State laws (including the HIPAA and HITECH Acts) governing confidentiality, including electronic treatment records, facsimile mail, and electronic mail).

4. All subcontracts must explicitly state expectations about the confidentiality of information, and the subcontractor is held to the same confidentiality requirements as Requester. If provider-specific data are released to the public, Requester shall have policies and procedures for exercising due care in compiling and releasing such data that address statutory protections of quality assurance and confidentiality while assuring that open records requirements of Chapter 119, F.S., are met.

5. Requester and its subcontractors shall comply with the requirements of

Section 501.171, F.S. and shall, in addition to the reporting requirements therein, report to the Agency any breach of personal information.

AHCA Agreement No. AA456, Page 6 of 8

6. Any releases of information to the media, the public, or other entities require prior approval from the Agency.

7. Ensure all services will be performed within the borders of the United States and its territories and protectorates.

8. State-owed Data shall be processed, accessed, and stored in data centers that are located only in the forty-eight (48) contiguous U.S.

D. Cybersecurity Supply Chain Scanning

The Agency may conduct an initial IT security rating score scan on the Requester, as well as periodic or continuous security monitoring through an information security rating service, at the Agency’s expense, to enable the Agency to effectively measure and mitigate the Requester’s security risks. The Requester will work with the Agency’s Security Rating Score Provider to define the relevant Requester’s assets providing Agency services. If the Requester does not maintain a top-tier security rating score, the Agency will impose liquidated damages(s) and/or other applicable sanctions(s).

E. Public Records Requests

1. To comply with Section 119.0701, F.S., if applicable, and all other applicable parts of the Florida Public Records Act.

2. To keep and maintain public records that ordinarily and necessarily would be required in order to perform services under this Agreement.

3. To provide the public with access to public records on the same terms and conditions that the Agency would provide the records and at a cost that does not exceed the cost provided in Section 119.07, F. S. or as otherwise provided by law.

4. That upon request from the appropriate Agency custodian of public records, provide the Agency with a copy of the requested records or allow the records to be inspected or copied within a reasonable time at a cost that does not exceed the cost in Section 119.07, F.S., or as otherwise provided by law.

5. To ensure that public records that are exempt or confidential and exempt from public records disclosure requirements are not disclosed except as authorized by law for the duration of this Agreement term and following completion of this Agreement if the Party does not transfer the records to the Agency.

6. To not collect an individual’s social security number unless Requester has stated in writing the purpose for its collection. Requester collecting an

AHCA Agreement No. AA456, Page 7 of 8

7. individual's social security number shall provide a copy of the written statement to the Agency and otherwise comply with applicable portions of Section 119.071(5), F.S.

8. To meet all requirements for retaining public records and transfer, at no cost, to the Agency all public records in possession of Requester upon termination of this Agreement and destroy any duplicate public records that are exempt or confidential and exempt from public records disclosure requirements. All records stored electronically must be provided to the Agency in a format that is compatible with the information technology systems of the Agency.

9. If Requester does not comply with a public records request, the Agency shall enforce Agreement provisions in accordance with this Agreement.

10. IF REQUESTER HAS QUESTIONS REGARDING THE APPLICATION OF

CHAPTER 119, FLORIDA STATUES, TO THE PARTY’S DUTY TO

PROVIDE PUBLIC RECORDS RELATING TO THIS AGREEMENT,

CONTACT THE AGENCY CUSTODIAN OF PUBLIC RECORDS FOR

THIS AGREEMENT. THE AGENCY CUSTODIAN OF PUBLIC RECORDS

FOR THIS AGREEMENT IS THE AGREEMENT MANAGER.

IX. Invoices shall be submitted on Requester letterhead to the Agency’s designated

Agreement Manager within fifteen (15) calendar days of completion and Agency approval of deliverable(s). Invoices(s) shall include, at a minimum:

1. Invoice date

2. Invoice number

3. Agency’s Agreement number

4. Detailed description of the services rendered

5. Date(s) on which services were rendered

6. Payment remittance address; and

7. Other supporting documentation as requested by the Agency

REMAINDER OF PAGE INTENTIONALLY LEFT BLANK

AHCA Agreement No. AA456, Page 8 of 8

IN WITNESS THEREOF, the Parties hereto have caused this fifteen (15) page Agreement, which includes any referenced attachments, to be executed by their undersigned officials as duly authorized. This Agreement is not valid until signed and dated by all Parties.

STATE OF FLORIDA DEPARTMENT OF HEALTH

STATE OF FLORIDA, AGENCY FOR

HEALTH CARE ADMINISTRATION

SIGNED

BY:

SIGNED

BY:

NAME: NAME:

TITLE: TITLE:

DATE: DATE:

List of Attachments included as part of this Agreement

Specify Type Number Description Attachment I Application to Florida Medicaid for Disclosure of Data

(7 Pages)

REMAINDER OF PAGES INTENTIONALLY LEFT BLANK

Director, Division of DCHP

Carina Blackmore

8/7/2024

Austin Noll

8/9/2024

Deputy Secretary

RON DESANTIS

GOVERNOR

JASON WEIDA

SECRETARY

Facebook .com/AHCAFlo r ida Youtube.com/AHCAFlor i da

Twi t te r . com/AHCA_FL S l ideShare.net /AHCAFlo r ida

2727 Mahan Dr ive • Mai l S top # Ta l lahassee, FL 32308 AHCA.MyFlor i da.com

Application to Florida Medicaid for Disclosure of Data

1. Introduction

• Title Human Immunodeficiency Virus /Acquired Immunodeficiency Syndrome (HIV/AIDS) Surveillance with the Department of Health (DOH)

• Purpose:

o Provide a detailed explanation of the purpose of the project. Permitted purposes include bona fide research, public health, Agency health care operations, or for health care operations as provided in 45 CFR 164.506(c)(4).

The purpose of this project is to match Medicaid recipient data with the Enhanced HIV/AIDS Reporting System (eHARS) patient information. The Requester shall use the data specified in this request to analyze the receipt of Human Immunodeficiency Virus (HIV) services by Medicaid recipients matched in eHARS. The results of these analyses will be used to enhance the outcome of the HIV continuum of care model.

Note – if the purpose of this data request is research, a research proposal demonstrating a systematic, investigative, or experimental scientific activity including hypotheses and methods of testing hypotheses must be attached, along with an Institutional Review Board Waiver of Authorization, as applicable.

o If Medicaid data about Medicaid applicants or beneficiaries is requested, the purpose must be directly related to the administration of the Florida Medicaid plan and must demonstrate the potential to improve the quality of life or services for Medicaid enrollees or improve the administration of the Medicaid program.

o What are the potential uses of this project to the Agency? If Medicaid data is requested, what are the potential uses of this project to the Medicaid program, Medicaid service providers, and/or to benefit the Medicaid program?

Section 381.0022(2), Florida Statutes, mandates that the Department of Health (DOH) may share confidential information on any individual who is or has been a Medicaid recipient and is or was the subject of one of the DOH’s programs, for the purpose of requesting, receiving, or auditing payment for services. This data request implements section 381.0022(2), Florida Statutes, by allowing the DOH to disclose the data necessary for receipt of services.

2. Project Issues and Methods

• List and describe the key issues to be studied or uses of the data.

The HIV Continuum of Care depicts the number of persons living with HIV that enter different stages of care, from diagnosis to linkage to retention in care, to antiretroviral therapy, and finally viral suppression. In calendar year (CY) 2016, there were 114,772 persons living with HIV in Florida. HIV surveillance data through the documentation of laboratory tests captured within the eHARS database can aid in the generation of the HIV care continuum model. However, certain laboratory results, HIV antiretroviral prescription data, and other indicators of care engagement may not be reported through this system. This is especially true for persons living with HIV in Florida who are also Medicaid beneficiaries and utilize Medicaid to access all HIV care services. An incomplete collection of care engagement indicators can result in a poor model of care, leading to an underestimation of the number of persons found to be in care as per Health Resources and Services Administration (HRSA) definitions. However, matching Medicaid recipient patient information with the patient information in eHARS provides a more accurate portrayal of the HIV care patterns and the continuum of care model in Florida.

• Describe the plan to analyze the data for the project, including the methodology and procedures that will be used.

• Provide an outline of project reports, including types of tabulations, aggregations, and other data presentations.

The HIV Care Continuum has five main “steps” or stages including HIV diagnosis, linkage to care, retention in care, antiretroviral use, and viral suppression. HRSA defines a person to be “In Care” by either having a Viral Load or CD4 laboratory test, a documented care visit, or a documented prescription for HIV-Related drugs in a calendar year. Furthermore, HRSA defines a person to be “Retained In Care” by having 2 or more of the aforementioned occurrences, at least three months apart in a calendar year. The diagnosis-based model of the HIV Care Continuum allows Florida to display each step of the continuum as a percentage of the number of diagnosed people living with HIV (PLWH). The Florida model, like the federal and other models, represents persons living in Florida (regardless of where they were diagnosed) at the end of the current year being measured. The diagnoses-based continuum directs steps that can be taken to get individuals with HIV into care and virally suppressed (<200 copies/ml).

DOH will send the list at the end of each quarter to the Bureau of Medicaid Data Analytics within the Division of Medicaid using the SFTP. The Agency will match the Medicaid recipients to the claims and encounter data and transmit the file back to DOH. Upon receipt of the Medicaid data, the Requester will conduct further matches to determine those who are HIV diagnosed, engaged, and retained in care through Medicaid for grant purposes. The file will be used by the Agency to help improve access to quality health care and services for Floridians covered by Medicaid and contribute to the new AIDS4 special condition case-finding algorithm.

• Statement of whether any of the methodology or tools contain proprietary information.

No methodology or tools contain proprietary information.

3. Data Sources and Data Management Safeguards

• Describe the specific data sources that will be used in the research/ project.

Please address the following:

Year(s) or other time periods that will be used or studied;

An initial supply of data from January 1, 2015 through the date the Agreement is executed with subsequent quarterly updates thereafter.

Specific source including Owner, Responsible Agent, or Data Custodian for each data source/set;

Daniel C. Grischy, MD, MPH, Surveillance Program Manager, HIV/AIDS

Section, contract manager Hasan Mirza, Integration Team Project Manager, HIV/AIDS Section, data management Karalee Poschman, MPH, Epidemiologist, CDC Direct Assignee, analyzing

Medicaid data for HIV Continuum of Care Lorene Maddox, MPH, Surveillance Data Manager, HIV/AIDS Section, analyzing Medicaid data for HIV Continuum of Care Colby Cohen, MPH, Surveillance Data Analyst, HIV/AIDS Section, analyzing

Medicaid data for HIV Continuum of Care Angela Campbell, MPH, Surveillance Data Analyst, HIV/AIDS Section, analyzing Medicaid data for HIV Continuum of Care Jimmy LLaque, Florida HIV Patient Care & Treatment Access Program Director, HIV/AIDS Section, analyzing Medicaid data with ADAP clients.

Physical location where the data are stored (EX: at AHCA, at FMHI, at the California Department of State);

HIV/AIDS Surveillance Program, within the Florida Department of Health

Person(s) responsible for accessing the data;

Daniel C. Grischy, MD, MPH, Surveillance Program Manager, HIV/AIDS Section, contract manager

Hasan Mirza, Integration Team Project Manager, HIV/AIDS Section, data management

Karalee Poschman, MPH, Epidemiologist, CDC Direct Assignee, analyzing Medicaid data for HIV Continuum of Care

Lorene Maddox, MPH, Surveillance Data Manager, HIV/AIDS Section, analyzing Medicaid data for HIV Continuum of Care

Colby Cohen, MPH, Surveillance Data Analyst, HIV/AIDS Section, analyzing Medicaid data for HIV Continuum of Care

Angela Campbell, MPH, Surveillance Data Analyst, HIV/AIDS Section, analyzing Medicaid data for HIV Continuum of Care

Jimmy LLaque, Florida HIV Patient Care & Treatment Access Program Director, o Method or procedure for accessing, downloading, transferring, and storing the data;

The Florida Department of Health will be given access to an account on https://sftp.ahca.myflorida.com to exchange data files securely with the Agency.

Data in this location will be held until pickup and no longer. This location will not be used for data archival purposes. Data files will be secured at all times via encrypted transport, restricted access storage, and or encryption.

o A list of all the variables/fields from each data set that will be used, and the specific information that will be collected from non-database sources;

The Requester is requesting:

1. Data for all Medicaid beneficiaries that accessed HIV-related Medicaid services; and

2. Data for all Medicaid beneficiaries with an HIV-related diagnosis code.

Please see the attached spreadsheets highlighting the requested Medicaid recipient eligibility, fee for service claims and encounter claims data variables.

Identification of any relevant data use agreements in place or that will be needed.

The Requester’s HIV/AIDS Section, Patient Care Program has an existing data use agreement in place with the Agency for Health Care Administration to receive limited Medicaid eligibility data.

What are the organization’s qualifications and experience at maintaining and using data sets?

The Requester’s HIV/AIDS Section updates, manages, and maintains several databases for persons diagnosed and/or living with HIV in the state of Florida.

• Describe all electronic and physical security safeguard measures that will be taken to ensure confidentiality of the data. In your responses please address each of the following:

o Authorization and access control

The Requester shall restrict disclosure of the data specified in this data request to the minimum number of individuals who require the information in order to perform the functions of this data request. The Requester shall instruct individuals to whom the data is disclosed of all obligations under this data request and shall require the individuals to maintain those obligations.

The Requester shall secure the data specified in this data request when the data is not under the direct and immediate control of an authorized individual performing the functions of this data request.

o Data transmission security procedures including encryption

The Requester shall establish appropriate administrative, technical, and physical safeguards to protect the confidentiality of and to prevent unauthorized use or access to the data specified in this request. This also governs any electronic transmission of the data.

The Florida Department of Health will be given access to an account on https://sftp.ahca.myflorida.com to exchange data files securely with the Agency.

Data in this location will be held until pickup and no longer. This location will not be used for data archival purposes. Abandoned files will be deleted after 30 days.

Data files will be secured at all times via encrypted transport, restricted access storage, and or encryption.

o Protections against improper modification of data

The Requester’s HIV/AIDS Section Data Integration Team maintains the data warehouse user profiles which have defined roles and privileges for data modifications. The HIV/AIDS Data Integration Team has established a formal access request process that will be utilized to manage user access to the dataset. Any database change must follow the strict Change Management Process defined by the HIV/AIDS Section.

o System audit controls

The Requester’s HIV/AIDS Section has implemented system audit controls as required by Requester’s Information Technology Security Team in accordance with the Department of Health Information Security and Privacy Policy DOHP 50- 10-16, Section I (D) (B) (F). All changes (Functional, Non-functional, Database) are documented and approved via Change Management committee. Databases are configured to store any add/updates/deletes in audit history tables for review and monitor the data updates. Documentation for all the changes are securely maintained on the Department’s network.

o Controls placed on affiliated organizations that will have access to the data.

The Requester shall ensure that any agents, including, but not limited to, a contractor or subcontractor, to whom a party provides the data specified in this data request agree to the same terms, conditions, and restrictions that apply to the party with respect to the data.

4. Key personnel

• List all individuals in the organization, affiliated organizations, and/or agents who will have access to the data. Provide each person’s name, title, organization, and function in the project.

• Daniel C. Grischy, MD, MPH, Surveillance Program Manager, HIV/AIDS Section, contract manager

• Hasan Mirza, Integration Team Project Manager, HIV/AIDS Section, data management

Docusign Envelope ID: 1DBD8811-E26D-4661-BDEB-398B2039A314 http://www.floridahealth.gov/diseases-and-conditions/aids/patient-care/_documents/dohp-50-10-16-complete.pdf http://www.floridahealth.gov/diseases-and-conditions/aids/patient-care/_documents/dohp-50-10-16-complete.pdf

• Karalee Poschman, MPH, Epidemiologist, CDC Direct Assignee, analyzing Medicaid data for HIV Continuum of Care

• Lorene Maddox, MPH, Surveillance Data Manager, HIV/AIDS Section, analyzing Medicaid data for HIV Continuum of Care

• Colby Cohen, MPH, Surveillance Data Analyst, HIV/AIDS Section, analyzing Medicaid data for HIV Continuum of Care

• Angela Campbell, MPH, Surveillance Data Analyst, HIV/AIDS Section, analyzing Medicaid data for HIV Continuum of Care

• Jimmy LLaque, Florida HIV Patient Care & Treatment Access Program Director,

5. Dissemination/Implementation

• Describe how the findings will be used.

Findings will be used to enhance the outcome of the HIV continuum of care model.

• Briefly describe any data dissemination plan that includes how the findings and any reported data elements will be aggregated to a level that does not permit the identification of the individual.

Medicaid data on the individuals engaged in different levels of HIV care will be combined with eHARS data and reported in aggregate as part of the Florida HIV Continuum of Care Model. The Continuum of Care Model for Florida will be shared with federal and state grantors, partners, and agencies as well as local agencies and stakeholders to identify issues and opportunities related to improving the delivery of services to PLWH across the entire HIV Continuum of Care. Medicaid client-level data will not be shared.

• Describe the type of data that will be disseminated, if applicable.

The Requester’s diagnosis-based HIV care continuum shows each stage of care engagement of the continuum as a percentage of the number of people living with diagnosed HIV as of the end of the year. The data will be available in summary Excel tables and PowerPoint bar graphs.

6. Proprietary Information

• If the project involves proprietary information, a statement to that effect must be included in this attachment.

N/A

7. Disposition of Data

• Describe all data to be destroyed including data received, copies of data, modified data, and merged files. Please also describe any data that will NOT be destroyed.

We imported the Medicaid ID into eHARS and it becomes part of the surveillance record.

The Medicaid data will be retained for a routine look at trends in our care data over time, frequently going back to 2015 or even earlier. Along with HIV-related care events from multiple other sources, this data will also be used to calculate our linkage to care and retention in care measures. Due to the regular updates to cases in eHARS, we don’t have static care measures. We may receive information that updates the diagnosis date or current residence which in turn changes which time periods we might use to calculate the care measures. We store the Medicaid data on a secure server in a folder with restricted access and never release any of the data.

8. Project Timeline

• The proposed timeline should include target dates for at least the following elements:

o Work Plan Submission (a detailed plan of how and when remaining elements within the proposed project will be completed); N/A o Completion of All Data Collection and Formatting; N/A o Results of the Preliminary Data Analysis (initial findings, basic test of methods, validity of research); N/A o Draft Final Report to the Agency for Review and Comment (professional quality report with minimal grammatical, formatting and/or stylistic errors and analyses which are supported by the data presented within the report); and o Final Report (finished product based on communication with and approval by the Agency of the draft final report). N/A