Attachment_2 _Performance_Work_Statement_(PWS).pdf

PERFORMANCE WORK STATEMENT (PWS)

FOR

MEDICAL STANDARDS MANAGEMENT ELEMENT TECHNICIAN SUPPORT

SERVICES

AT THE 86TH MEDICAL GROUP

1 June 2015

TABLE OF CONTENTS

Subject Page

1.0 DESCRIPTION OF SERVICES 3

2.0. SPECIFIC REQUIREMENTS 3

3.0. SERVICE SUMMARY (SS) 8

4.0. GENERAL INFORMATION 8

5.0. APPENDIX 16

5.1. APPLICABLE PUBLICATIONS AND FORMS 16

5.2. HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT

(HIPAA) OF 1996 17

5.3. WORKLOAD ESTIMATE 21

1.0 DESCRIPTION OF SERVICES.

1.1 OVERVIEW OF SERVICES. This contract is a Personal Services Contract (PSC) and is intended to create an employer-employee relationship between the Government and the individual Health Care

Providers (HCP) only to the extent necessary for providing the healthcare services required under this contract. The performance of healthcare services by the individual HCP under a personal services contract is subject to day-to-day supervision and control comparable to that exercised over military and civil service HCP engaged in comparable healthcare services. Pursuant to 10 USC 1089(a), any personal injury claims alleging negligence by the individual HCP within the scope of the HCP performance of the personal services contract shall be processed by DoD in the same manner as claims alleging negligence by Department of Defense (DoD) military or civil service HCP. The contract does not create an employer-employee relationship between the Government and any corporation, partnership, business association or other party or legal entity with which the HCP may be associated. The authority for this contract is 10 United States Code 1091. This requirement is in support of the 86th Medical Group’s

Separation History and Physical Examinations (SHPE) program. Completion of a SHPE facilitates continuity of medical care and the evaluation of disability claims. Information captured during SHPEs can be used by Department of Defense (DoD) to recognize and prevent illnesses and injuries arising from military service by mitigating or eliminating occupational exposures and physical hazards in military workplaces, where feasible. Performance shall be according to the requirements contained in the this

Performance Work Statement (PWS), and professional standards of the Joint Commission on

Accreditation of Healthcare Organization (JCAHO), Accreditation Association for Ambulatory Health

Care (AAAHC), Unit Effectiveness Inspection (UEI) and Health Insurance Portability & Accountability

Act (HIPAA), (see Appendix 5.2). These services are considered to be non-mission essential.

1.2 BACKGROUND INFORMATION. It is DoD policy that all members of the Military Services, including Reserve Component (RC) Service members, who are scheduled to be separated from active duty after serving for 180 days or more, will take a comprehensive SHPE before the scheduled day of separation. RC Service members serving on active duty for a period of more than 30 days in support of a contingency operation will also take a SHPE before the date of separation.

2.0 SPECIFIC REQUIREMENTS

2.1 Contractor personnel shall serve as MSME technician to provide comprehensive SHPEs to service members including Reserve Component service members, who are scheduled to be separated from active duty . Duties include but are not limited to the following:

2.1.1. Serve as a Vocational or Practical Nurse performing patient care and nursing administrative duties for outpatients in accordance with established policies, procedures, protocols, and guidelines.

2.1.2. Ensure compliance of conduct with all clinical-service portions of the SHPE program

IAW Directive-type Memorandum (DTM) 14-006 and AFI 48-123.

2.1.3. Monitor, prepare patient, perform and record age appropriate physiological measurements, diagnostic testing, treatments, procedures, and observed effects in the patient medical records in electronic format as well as hard copy IAW AFI 48-123 and AFI 41-210.

This includes, but is not limited to completing vital signs, para-professional exams and placing referrals.

2.1.4. Provide and record individualized patient teaching on preventative healthcare and health maintenance IAW most current evidence based practice.

2.1.5. Perform medical records reviews and determine medical needs. Notify patient care team of high-risk observations within one (1) duty day.

2.1.6. Adhere to infection control procedures IAW AFI 44-108.

2.1.7. Ensure a safe work environment and employee safe work habits IAW MDGI 91-201.

2.1.8. Participate in training and continuing education programs for new procedures, techniques, and equipment on site during duty hours. Training is identified by Air Force Medical Operations

Agency (AFMOA), local education training office and state of licensing requirements for continued education.

2.1.9. Establish and maintain appropriate, professional, interpersonal relationships with co-workers, families, peers, and other team members.

2.1.10. Plan, organize, and implement medical standards activities in compliance with Chief of

Aerospace Medicine requests.

2.1.11. Attend and participate in daily, weekly and monthly meetings including but not limited to:

professional staff conferences, quality improvement meetings, staff meetings, commander’s staff meetings, flight meetings, and other meeting required by applicable regulations, Military

Treatment Facility (MTF) guidance, or by the flight Commander or his/her designated representative.

2.1.12. Assist in providing medical standards guidance policy interpretation and application to health care professionals and medical support staffs within the MTF and to personnel throughout the installation.

2.2 EDUCATION AND TRAINING REQUIREMENTS: Contractor employee(s) shall meet the following minimum qualifications:

2.2.1. Must have successfully completed all education and training requirements leading to and graduated from an accredited national, state or military equivalent school for Vocational

Nursing.

2.2.2. Must have and maintain throughout the course of contract, a current, active, valid, unrestricted license (with no limitations, stipulations or pending adverse actions) to practice as a

Licensed Vocational Nurse LVN or Licensed Practical Nurse (LPN) from a US jurisdiction.

License must be recognized and accepted by the State of practice in accordance with governing regulations.

2.2.3. Have knowledge of preventive health schedules, procedures, processes and education methods IAW most current evidence based practice.

2.2.4. Have knowledge of disease management and population health principles.

2.2.5. Have knowledge of pharmacological agents used in patient treatment, the desired effects, side effects, and complications of their use as well as the accurate administration of the pharmacologic agent, including dosage calculations as required. Have knowledge of the administrative requirements for proper documentation of patient conditions including disease progress, acknowledgement of teaching, and follow up care.

2.2.6. Have knowledge of computer operations and proficiency in use of basic word processing, data entry and automated medical records.

2.2.7. Have at least 24 months of experience within the last 48 months in a primary care clinic setting.

3.0 SERVICE SUMMARY (SS).

ITE

M

PERFORMANCE

OBJECTIVE

PWS

SUBTASK(S)

PARA.

REFERENCE

PERFORMANCE

THRESHOLD

SS#

Ensure completion of all relevant clinical exams

2.1.2. No more than two (2) validated

discrepancies* per quarter.

SS#

Document rendered care appropriately

2.1.3. No more than one (1) validated

discrepancy* per quarter.

SS#

Accurately provide and record healthcare related teaching

2.1.4. No more than one (1) validated

discrepancy* per quarter.

SS#

Timely patient problem notification

2.1.5. No more than one (1) validated

discrepancy* per quarter.

SS#

Adhere to Infection

Control procedures

2.1.6. No more than two (2) validated

discrepancies* per quarter.

SS#

Adhere to work safety standards

2.1.7. No more than one (1) validated

discrepancy* per quarter.

SS#

Accomplish required training

2.1.8.

Zero discrepancies

SS#

Maintain professionalism 2.1.9. No more than one (1) validated complaint* per quarter.

SS#

Comply with medical standard requests by Chief of Aerospace Medicine

2.1.10. No more than one (1) validated

discrepancy* per quarter.

SS#

Attend and participate in daily/weekly/monthly meetings

2.1.11. No more than two (2)

unexcused absences per quarter.

SS# Maintain current, active, 2.2.2.

11 valid, unrestricted

LVN/LPN license and BLS certification

Zero discrepancies

*validated discrepancies/complaints equate to any type of counciling documented to the Contracting Officer

Representative(s) (COR).

4.0. GENERAL INFORMATION.

4.1 CONTRACTOR REPRESENTATIVE. The Contractor shall designate to the Contracting Officer

(CO), in writing, a primary point-of-contact for contract implementation, coordination and administration not later than ten (10) business days after receiving notice of contract award. The Contractor shall notify the CO of changes in the primary point-of-contact at least ten (10) business days prior to any change. All notifications shall state in writing the name and contact information for the point-of-contact. The

Contractor representative may reside/be located outside of Germany (i.e. in the United States), but shall be available by telephone or email from 0700 to 1600 Central European Time.

4.2 DOCUMENTATION. The Contractor shall provide the contracting office the required documentation for all support services personnel within ten (10) business days of contract award notification to comply with required performance periods of the contract by taking into consideration that the DoD Contractor Personnel Office (DOCPER) process requires an average of eight(8) to ten (10) weeks for completion.

4.3 CONFLICT OF INTERESTS. Contractor personnel shall not bill patients for services rendered under this contract. Contractor personnel shall not request or accept compensation of any kind for patients treated, procedures performed, or any other actions performed. Contractor personnel shall not, while performing services under this contract, advise, recommend, or suggest to persons eligible to receive medical care at U.S. Government expense that such persons should receive care from the Contractor at any place other than as designated under this contract.

4.4 CONFIDENTIALITY OF INFORMATION. Unless otherwise specified under this contract, all financial, statistical, personnel, and/or technical data which is furnished, produced or otherwise available to the Contractor during the performance of this contract are considered confidential business information and shall not be used for purposes other than performance of work under this contract. The Contractor shall not release any of the above information without prior written consent of the CO. The Contractor shall not use patient care rendered pursuant to this contract as part of a study, research project, or publication.

4.5 MEDIA AND OTHER INQUIRIES. The Contractor or Contractor personnel shall not respond to any media inquiries. Any inquiries from the media, third parties, or public agencies shall be immediately relayed to the COR, who will relay them to the MTF Public Affairs Officer or, after duty hours, to the

Administrative Officer of the Day. There shall be no interviews, comments, or any other response without the prior knowledge and approval of the MTF Commander. Other than routine inquiries from external agencies, all other inquiries and complaints shall be brought to the attention of the COR.

4.6 AUTHORIZATION OF CONTRACT PERSONNEL. An individual who has: (1) been hired as a consequence of this contract, (2) is a full-time (40 hours per week or more) contract employee, (3) is employed in a Host Nation country (4) is a national (citizen) of or an ordinary resident of the United States provided that the contract employee is not also a Host Nation country (local) resident (i.e., a dual citizen), or (5) a U.S. citizen or a citizen of a North Atlantic Treaty Organization (NATO) country other than the

Host Nation and provided that the contract employee is not an ordinary resident of the Host Nation. The

Department of Defense Contractor Personnel Office (DOCPER) shall make the determination of a contract employee’s status with respect to being an ordinary resident. Authorized Contractor personnel and their authorized dependents will be granted privileges consistent with those granted members of the civilian component of the U.S. Forces.

4.6.1 AUTHORIZATION OF CONTRACT PERSONNEL DEPENDENTS. Authorized dependents shall include the Contractor personnel’s: lawful spouse, unmarried child, stepchild, or a lawfully adopted child who will reside in the host country with the Contractor personnel. (Child is defined as: has not passed his/her 21st birthday or, if passed, is incapable of self-support because of mental or physical incapability that existed before that birthday and is dependent on the contractor for over one-half of his/her support.)

The benefits listed below, if available, are generally extended as noted without special financial consideration due to the U.S. Government. In such cases the U.S. Government does not charge for use of these benefits, and the contract price should not be inflated by the value of these benefits. Should any of the below needed benefits not be available, negotiations will be conducted with the Contractor and consideration determined.

4.7 LOGISTICAL SUPPORT. The U.S. Government will provide individual logistical support for

Contractor personnel to the extent available and as authorized by NATO Status of Forces Agreement

(SOFA) Supplementary Agreement Article 72, and foreign regulations; by current applicable international agreements, arrangements, policies; and the local Installation Commander. The duration of the initial individual logistic support authorization may be subject to a time limitation. Prior to expiration of the initial logistical support authorization (if and as applicable), the COR and Contractor shall expedite/process the individual Renewal/Authorization in sufficient advance to ensure continuation of logistical support.

Logistical support is provided only for those Contractor personnel that are providing services solely for U.S.

Forces. Logistical support, if granted, will only be provided to authorized, full-time (40 hours per week)

Contractor and authorized dependents as defined in paragraphs 4.6 and 4.6.1. The following logistical support will be provided to applicable Contractor personnel:

1) Commissary

2) Army Air Force Exchange Service

3) Armed Forces Recreation Facilities

4) Class VI (alcoholic beverages, including rationed items)

5) Legal assistance (on a space available basis)

6) Local government transportation for official government business (non-tactical vehicle)

7) Local Moral/Welfare Recreation Services

8) Military Banking facilities

9) Military postal services

10) Officer and NCO Club memberships

11) Mortuary services

12) Privately Owned Vehicle (POV) authorization

13) Housing office (Note: Limited. These services are limited to translation assistance and an explanation of host-country rental laws and utility and telephone services)

14) Petroleum, Oils, and Lubricants (POL) purchases

15) Transient billets on space available basis

16) Messing Facilities at remote sites only (reimbursable)

17) Army Continuing Education Services

18) Credit union facilities

19)* Dependent Schools, on space available, tuition paying basis

20) Medical/Dental on a reimbursable basis. Dental on emergency basis only

21) Pet and firearm registration and control

22) NATO status of Forces Agreement stamp (subject to approval of Host nation Customs Authority)

23) Customs exemptions

*Note: The Government will not pay for tuition

4.8 EMERGENCY HEALTHCARE FOR CONTRACTOR PERSONNEL. The MTF will provide emergency health care for injuries or life threatening medical emergencies occurring while on duty under the provisions of Air Force Instruction (AFI) 41-210. (See 5.1 – Applicable Forms and Publications). In emergencies, transportation in U.S. Government ambulances may be furnished by the U.S. Government on a reimbursable basis. The Contractor shall reimburse the U.S. Government for such services as billed by the MTF.

4.9 CONTRACTOR PERSONNEL PRIVATE PRACTICE. Contractor personnel are prohibited by reason of their employment under this contract from conducting private practice. The CO will unilaterally resolve any issues concerning potential conflicts.

4.10 OVERSEAS REQUIREMENTS. The Contractor is responsible for ensuring all country clearances, passports, visas, and accreditations required by the Host Nation are obtained prior to employment of individuals under this contract. Documentation requirements are subject to change as SOFAs change. In the event a proposed Contractor employee is denied Host Nation approval, accreditation, and/or permission, the prospective awardee shall submit like documentation for another nominee. The Contractor will be responsible for obtaining the appropriate country specific requirements, and will coordinate this with the

CO or COR. The Contractor shall provide written notification to the CO and the COR within 24 hours of becoming aware of accredited Contract personnel no longer performing duties requiring accreditation/clearances/permissions. The Contractor shall recognize that Host Nation authorities may conduct on-site inspections at any time in the Contractor personnel’s work area for the purpose of verifying the status of positions and Contractor personnel and appropriate visas or permissions. The Contractor shall assume all costs related to submission of required documentation. At the time of preparation of this contract, applicable information and forms for placement of Contractor personnel in Germany may be accessed at the DOCPER and U.S. Department of State websites. (See 5.1 – Applicable Forms and

Publications)

4.11 CONTRACTOR PERSONNEL HEALTH REQUIREMENTS. Contractor personnel and dependents shall be up to date on immunizations required or recommended by the U.S. Department of

Health and Human Services for travel to the Host Nation. (See 5.1 – Applicable Forms and Publications)

The U.S. Government will not reimburse the Contractor for this expense. Contractor personnel providing services under this contract shall receive a pre-employment physical examination prior to commencement of work and annually thereafter. Certification shall be provided to the COR that Contractor personnel have completed medical evaluation required no later than seven (7) business days prior to commencement of work . The contractor will submit certificates to the COR(s). This certification shall state the date on which the examination was completed, the doctor’s name that performed the examination, and a statement concerning the physical health of the individual. The certification shall also contain the following statement: “(name of contractor employee) is suffering from no contagious diseases to include but not limited to Tuberculosis and Hepatitis.” Per Occupational Safety Health Administration (OSHA) requirements, all Contractor personnel who will have occupational exposure to blood or body fluids, or other potentially infectious materials, shall receive Hepatitis B vaccine, sign a voluntary declination, or have documented proof of immunity to Hepatitis B infection. (See 5.1 – Applicable Forms and

Publications) Personnel who sign declinations may change their minds at any time and receive the

Hepatitis B vaccine without penalty. It is the Contractor’s responsibility to report all information necessary to assure hospital records can be maintained correctly, and therefore comply with the OSHA and Center for

Disease Control (CDC) health records requirement. (See 5.1 – Applicable Forms and Publications)

4.12 ADMINISTRATIVE CHECKS AND REQUIREMENTS.

4.12.1 NATIONAL AGENCY CHECK WITH INQUIRIES (NACI). Since personnel under this contract will have access to critical government information and/or process information requiring protection under the Privacy Act of 1974, these positions are considered Public Trust Positions. Compliance with DoD

Directive 5200.2-R, AFI 31-501and Homeland Security Presidential Directive 12 (HSPD-12) is mandatory for these positions. (See 5.1–Applicable Forms and Publications) A back-ground investigation consisting of a National Agency Check with Inquiries (NACI) is required for all personnel under this contract. The Contractor shall fully adhere with the provisions of referenced publications by having each of their employees who are performing under this contract initiate and complete a NACI.

Background investigation requests for employee will be submitted through the Personnel Security Office, Ramstein AB, Germany. Member will be fingerprinted and required to complete the appropriate forms

(Standard Form 85P, Questionnaire for Public Trust Positions and OF 306, Declaration for Federal

Employment). (See 5.1–Applicable Forms and Publications) The contractor shall advise employee that a favorable suitability determination is required as a condition of employment under this specific contract.

The employee shall apply for the NACI prior to start of performance. The government is solely responsible for the cost associated with the initiation, application and completion of the background investigation with exceptions for expenses incurred for Police Checks for “local hire” personnel.

4.12.2 CRIMINAL HISTORY BACKGROUND CHECK (CHBC). CHBC are required for Contractor personnel involved in the delivery of healthcare to children under the age of 18 on a frequent and regular basis, as stated in Department of Defense Instruction (DoDI) 1402.5, Enclosure 5. (See 5.1 – Applicable

Forms and Publications) The Contractor shall ensure that the personnel follow local MTF policy to provide fingerprints on a properly completed Standard Form 87, Fingerprint Card for Federal Employees.

(See 5.1 – Applicable Forms and Publications) The procedures for completing the required CHBC are outlined in the DoDI 1402.5. (See 5.1 – Applicable Forms and Publications)

4.12.3 PENDING COMPLETION OF NACI AND CHBC. The Contractor personnel may provide contract services prior to completion of background investigation. The Contractor understands that the

MTF Commander may allow the Contractor personnel to temporarily occupy sensitive positions pending

NACI. The Contractor personnel will be immediately removed from the position if at any time the NACI receives unfavorable adjudication, or if other unfavorable information that would affect the NACI becomes known. Pending completion of CHBC the Air Force Surgeon General requires close clinical supervision and full compliance with existing DoD Directives, Instructions, and other guidance on quality assurance, risk management, licensure, personnel orientation and certification verification. The MTF Commander will determine what constitutes “close clinical supervision” for individuals whose NACIs/CHCB are pending, either supervised practice ensuring protection of patients under the age of 18 or line-of-sight supervision

(i.e., chaperoned by an individual whose background investigation has been successfully completed) at all times when caring for these patients.

4.13. REMOVAL OF CONTRACTOR PERSONNEL. At any time during the performance of this contract, the CO or SCM may direct the Contractor to immediately remove any Contractor personnel whose actions or impaired state raises reasonable suspicion that clear and present danger of physical harm exists to a patient, other Contractor personnel, and government personnel or to the impaired individual. This provision will be used in emergency situations only and not for the purpose of bringing performance issues or other non-urgent concerns to the attention of the Contractor. If the need for a removal occurs, the COR will contact the Contractor's point-of-contact and direct the Contractor to remove that individual from the

MTF and to not use that individual to perform any services required under this contract until the issue has been resolved by the CO. A review of the basis for removal will be made by the CO within three working days after the SCM directed the removal. If, after any investigation deemed necessary by the CO and discussions with the Contractor's representative, the CO concludes that the Contractor personnel’s impairment requires permanent removal from performance under the contract, the CO will notify the

Contractor that permanent removal is required. In the event of disagreements between the Government and the Contractor's representative concerning matters of the impaired Contractor personnel, the decision of the

CO will be final. During the period of time between the removal and the final decision of the CO, the

Contractor shall provide back-up/replacement Contractor personnel IAW the terms and conditions of this contract.

4.14 COMMON ACCESS CARD. Common Access Card (CAC) is a DOD-mandated program affecting military, DOD civilians and eligible Contractors. The Contractor shall comply with the requirements of this program. Visit the website for more information: http://www.cac.mil/.

4.15 HOURS OF OPERATION. The healthcare services are to be performed at the 86th MDG, Ramstein

Air Force Base, Germany. The 86th MDGs normal business hours are 0730-1630 hours (at the discretion of the Flight Commander and/or Flight Chief) Monday through Friday, excluding U.S. Federal holidays.

Except for USAFE Family Days (see paragraph 4.16.2 below), contract employee shall work 80 hours within a two-week time period, not to exceed 10 hours a day, with one uncompensated hour off for lunch.

4.15.1 HOLIDAYS. The following is a list of legal federal holidays. Any federal holiday falling on a

Saturday will be observed on the preceding Friday, holidays falling on a Sunday will be observed the following Monday.

U.S. Holidays:

January 1 New Year’s Day rd

Monday in January Martin Luther King, Jr. Day rd

Monday in February Washington’s Birthday

Last Monday in May Memorial Day

July 4 Independence Day st Monday in September Labor Day nd

Monday in October Columbus Day

November 11 Veterans Day th Thursday in November Thanksgiving Day

December 25 Christmas Day

4.15.2 USAFE FAMILY DAYS.. For the base period and each option period(s) of this contract there are an estimated five USAFE Family Days scheduled that the MDG will be closed and the Contractor will not be able to provide services Therefore, the Contractor shall advise their personnel accordingly and treat these situations as determined appropriate. The USAFE Family days are scheduled by the USAFE

Commander

4.15.3 In the event of unplanned closure of the MTF due to natural disaster, military emergency, severe weather, security threat, or a facility-related problem that prevents the contractor‘s personnel from performing services under this contract, these contractor‘s employees shall follow the same departure and reporting directions given to Government personnel and the contractor shall treat its employees as they determine appropriate.

4.16 CONTRACTOR ORIENTATION AND NEW PERSONNEL REQUIREMENTS.

4.16.1 GENERAL TRAINING. The Contractor shall be responsible for ensuring personnel comply with health information privacy and security policies and procedures. The Government shall provide training on

Government provided forms and equipment, Air Force directives, MTF policies and procedures. Contractor http://www.cac.mil/ personnel shall participate in continuing education programs to update and/or maintain skills and knowledge to meet annual requirements.

4.16.2 ORIENTATION TRAINING. The Contractor shall ensure that all Contractor personnel participate in the Government provided MTF orientation program for newly assigned personnel within 30 days of performance start. Orientation training will be conducted during normal hours of operation, and will be scheduled by the COR. Orientation shall include training on regulations specific to the professional specialty, and hospital and Air Force policy and procedures, instructions on automation processing, quality assurance policies, and other information systems as they apply to the position.

4.16.3 GOVERNMENT PROVIDED TRAINING.

Alcohol and Drug Abuse Prevention and Treatment Program

Annual Block Training

Armed Forces Health Longitudinal Technology Application (AHLTA)

Basic Life Support (BLS) IAW AFI 41-101 – current/continual certification (See 5.1 – Applicable

Forms and Publications)

Composite Healthcare Computer System (CHCS)

Cultural Diversity

Infection Control

Health Insurance Portability and Accountability Act (HIPAA) – initial and annual certification training. (See 5.1 – Applicable Forms and Publications)

Military Health Care Computer Systems/Procedures

New Personnel Orientation

On-the-job-training (work center/patient safety, waste disposal, fire prevention etc.)

Personnel Reliability Program

Renewals (initial training is the Contractor’s responsibility prior to contract start) of Basic Life

Support (BLS) Pediatric Advanced Life Support (ACLS), Pediatric Advance Life Support (PLAS), IAW AFI 41-101 – current/continual certification (See 5.1 – Applicable Forms and Publications) as required by the 86 MDG Credentials Office Total Force Awareness Training – DoD Information Assurance Awareness

Total Force Awareness Training – Information Protection Training

4.16.4. COMPUTER TRAINING. Contractor personnel who have any interaction with the MTF computer systems must receive training for the applicable system(s). The COR will coordinate the necessary computer training. The training will be on-site and during normal hours of operation. This training will be at no cost to the Contractor. Access to patient data systems is an "Automated Data

Processing Sensitive" position requiring compliance with AFI 31-501 (See 5.1 – Applicable Forms and

Publications). The Contractor shall comply with agency personal identity verification procedures that implement Homeland Security Presidential Directive-12 (HSPD-12), Office of Management and Budget

(OMB) guidance M-05-24, and Federal Information Processing Standards Publication (FIPS PUB) Number

201. (See 5.1 – Applicable Forms and Publications).

4.16.5. CONTRACTOR PROVIDED TRAINING. It is the contractor’s responsibility to ensure their employees receive all training and licenses required for initial credentialing and to ensure their personnel stay current on their certifications in order to maintain their credentials.

4.17 COMMANDER’S TOBACCO USE GUIDANCE. The Air Force recognizes equal work breaks

(when these breaks are permitted) for tobacco users and non-tobacco users. The MTF will have a smoke free medical campus with only one authorized smoking area for buildings 2114, 2121 and 2182.

Tobacco use is prohibited in government vehicles, inside buildings and within 50 feet of building‘s direct service entryway. The spitting of such non-smoking tobacco products into cups, cans, or any type of container within the above-restricted areas is prohibited.

4.18. U.S. GOVERNMENT-FURNISHED PROPERTY, INFORMATION AND SERVICES:

4.18.1. Government furnished property under this contract will be furnished to Contractor employees at no cost and shall be used only in performance of services under this contract.

4.18.2. The Government will provide the Contractor access to Air Force directives, MTF policies and procedures prior to start of contract performance date.

4.18.3. Facilities: During the hours of performance under this contract, the Contractor employees shall have the use of office space available.

4.18.4. Equipment and Supplies: Available equipment and office supplies for the performance of services under this contract, such as desk, chair, lighting, computer, printer, phone, copier, paper, folders, file cabinets, etc.

4.185. Electronic Documentation: As available at the local MTF, a standardized electronic documentation system or electronic medical record will be provided, such as, but not limited to CHCS and AHLTA.

4.18.6. Directives/Forms/Work Files: Unless noted otherwise, all required Air Force and DoD directives, forms and other work files applicable to the MTF SHPE Program/Services will be furnished by the

Government and will be retained by the Government.

4.19 CONFORMANCE WITH ENVIRONMENTAL MANAGEMENT SYSTEMS. The Contractor shall perform work under this contract consistent with the relevant environmental policy and objectives identified in the installation environmental management system (EMS) applicable for your contract. The

Contractor shall perform work in a manner that conserves water, energy and other resources to the maximum extent feasible and ensure minimum production of waste as possible, giving preference to recycling and reutilization opportunities. Furthermore, the Contractor shall give preference to less toxic materials whenever available and still reliable for their work. In the event an environmental nonconformance or noncompliance of host nation and USAF environmental laws and regulations associated with the contracted services is identified, the contractor shall take corrective and/or preventative actions. In the case of a noncompliance, the Contractor shall respond and take corrective action immediately. In the case of a nonconformance, the Contractor shall respond and take corrective action based on the time schedule established by the EMS Coordinator. In addition, the Contractor shall ensure that their employees are aware of the environmental management system on base and how these requirements affect their work performed under this contract. All on-site contractor personnel shall receive the installation EMS awareness level information.

4.20. CONFORMANCE WITH ENVIRONMENTAL REQUIREMENTS. The contractor shall perform all work in accordance with applicable German and US Air Force environmental laws, regulations and operating standards, including but not limited to the Final Governing Standards (FGS) for

Germany. The contractor shall be immediately capable of understanding and addressing environmental laws and regulations as they pertain to work performed under this contract.

The FGS for Germany and other important environmental laws & requirements applicable for all contractors working on base.

4.21. CONTRACTOR MANPOWER REPORTING LANGUAGE FOR CONTRACT

PERFORMANCE WORK STATEMENTS

The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract. The contractor is required to completely fill in all required data fields at http://www.ecmra.mil . Reporting inputs will be for the labor executed during the period of performance for each Government fiscal year (FY), which runs 1 October through 30

September. While inputs may be reported any time during the FY, all data shall be reported no later than

31 October* of each calendar year. Contractors may direct questions to the CMRA help desk.

Reporting Period: Contractors are required to input data by 31 October of each year.

Uses and Safeguarding of Information: Information from the secure web site is considered to be proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contractor name and contract number associated with the data.

User Manuals: Data for Air Force service requirements must be input at the Air Force CMRA link. However, user manuals for government personnel and contractors are available at the

Army CMRA link at http://www.ecmra.mil.

5.0. APPENDIX.

5.1 APPLICABLE PUBLICATIONS AND FORMS. Supplements or amendments to listed publications and/or forms from any organizational level may be issued during the life of this contract. Should any publication or form revision cause a change in the contractor’s processes, procedures and/or standards of operation, the contractor shall advise the CO of such changes in writing within 30 days of receipt of the publication or form revisions.

REFERENCE LONG TITLE

AFI 48-123

Medical Examinations and Standards

AFI 48-149 Flight and Operational Medicine

AFI 48-101 Aerospace Medicine Enterprise

AFI 41-101 Obtaining Alternative Medical and Dental Care

AFI 41-217 Health Information Assurance for Military

Treatment Facilities

AFI 31-501 Personnel Security Program Management

AFI 41-114 Military Health Services System Matrix

DOCPER DoD Contractor Personnel Office

DoDD 5200.2 DoD Personnel Security Program

DoDI 1402.5 Criminal History Background Checks on

Individuals In Child Care Services

FIPS PUB 201 Federal Information Processing Standards

Publication 201

Health Records Occupational Safety Health Administration

Hepatitis B – OSHA

Occupational Safety Health Administration http://www.ecmra.mil/

HIPAA Health Insurance Portability and Accountability

Act

HSPD 12 Homeland Security Presidential Directive 12

OF 306 Declaration for Federal Employment

OMB M-05-24 Office of Management and Budget M-05-24

Privacy Act of 1974 Privacy Act of 1974

Standard Form 85P Questionnaire for Public Trust Positions

Standard Form 87 Fingerprint Card for Federal Employees state.gov U.S. Department of State

Vaccination/immunization U.S. Department of Health and Human Services

5.2 HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA)

BUSINESS ASSOCIATE AGREEMENT

Introduction

In accordance with 45 CFR 164.502(e)(2) and 164.504(e) and paragraph C.3.4.1.3 of DoD 6025.18-R, “DoD Health Information Privacy Regulation,” January 24, 2003, this document serves as a business associate agreement (BAA) between the signatory parties for purposes of the Health Insurance Portability and Accountability Act (HIPAA) and the “HITECH Act” amendments thereof, as implemented by the

HIPAA Rules and DoD HIPAA Issuances (both defined below). The parties are a DoD Military Health

System (MHS) component, acting as a HIPAA covered entity, and a DoD contractor, acting as a HIPAA business associate. The HIPAA Rules require BAAs between covered entities and business associates.

Implementing this BAA requirement, the applicable DoD HIPAA Issuance (DoD 6025.18-R, paragraph

C3.4.1.3) provides that requirements applicable to business associates must be incorporated (or incorporated by reference) into the contract or agreement between the parties.

(a) Catchall Definition. Except as provided otherwise in this BAA, the following terms used in this BAA shall have the same meaning as those terms in the DoD HIPAA Rules: Data Aggregation, Designated

Record Set, Disclosure, Health Care Operations, Individual, Minimum Necessary, Notice of Privacy

Practices (NoPP), Protected Health Information (PHI), Required By Law, Secretary, Security Incident, Subcontractor, Unsecured Protected Health Information, and Use.

Breach means actual or possible loss of control, unauthorized disclosure of or unauthorized access to PHI or other PII (which may include, but is not limited to PHI), where persons other than authorized users gain access or potential access to such information for any purpose other than authorized purposes, where one or more individuals will be adversely affected. The foregoing definition is based on the definition of breach in DoD Privacy Act Issuances as defined herein.

Business Associate shall generally have the same meaning as the term “business associate” in the DoD

HIPAA Issuances, and in reference to this BAA, shall mean [INSERT NAME OF BUSINESS

ASSOCIATE].

Agreement means this BAA together with the documents and/or other arrangements under which the

Business Associate signatory performs services involving access to PHI on behalf of the MHS component signatory to this BAA.

Covered Entity shall generally have the same meaning as the term “covered entity” in the DoD HIPAA

Issuances, and in reference to this BAA, shall mean 86th Medical Group.

DHA Privacy Office means the DHA Privacy and Civil Liberties Office. The DHA Privacy Office

Director is the HIPAA Privacy and Security Officer for DHA, including the National Capital Region

Medical Directorate (NCRMD).

DoD HIPAA Issuances means the DoD issuances implementing the HIPAA Rules in the DoD Military

Health System (MHS). These issuances are DoD 6025.18-R (2003), DoDI 6025.18 (2009), and DoD

8580.02-R (2007).

DoD Privacy Act Issuances means the DoD issuances implementing the Privacy Act, which are DoDD

5400.11 (2007) and DoD 5400.11-R (2007).

HHS Breach means a breach that satisfies the HIPAA Breach Rule definition of breach in 45 CFR

164.402.

HIPAA Rules means, collectively, the HIPAA Privacy, Security, Breach and Enforcement Rules, issued by the U.S. Department of Health and Human Services (HHS) and codified at 45 CFR Part 160 and Part

164, Subpart E (Privacy), Subpart C (Security), Subpart D (Breach) and Part 160, Subparts C-D

(Enforcement), as amended by the 2013 modifications to those Rules, implementing the “HITECH Act” provisions of Pub. L. 111-5. See 78 FR 5566-5702 (Jan. 25, 2013) (with corrections at 78 FR 32464 (June

7, 2013)). Additional HIPAA rules regarding electronic transactions and code sets (45 CFR Part 162) are not addressed in this BAA and are not included in the term HIPAA Rules.

Service-Level Privacy Office means one or more offices within the military services (Army, Navy, or Air

Force) with oversight authority over Privacy Act and/or HIPAA privacy compliance.

I. Obligations and Activities of Business Associate

(a) The Business Associate shall not use or disclose PHI other than as permitted or required by this

Agreement or as required by law.

(b) The Business Associate shall use appropriate safeguards, and comply with the DoD HIPAA Rules with respect to electronic PHI, to prevent use or disclosure of PHI other than as provided for by this

Agreement.

(c) The Business Associate shall report to Covered Entity any Breach of which it becomes aware, and shall proceed with breach response steps as required by Part V of this BAA. With respect to electronic

PHI, the Business Associate shall also respond to any security incident of which it becomes aware in accordance with any Information Assurance provisions of this Agreement. If at any point the Business

Associate becomes aware that a security incident involves a Breach, the Business Associate shall immediately initiate breach response as required by part V of this BAA.

(d) In accordance with 45 CFR 164.502(e)(1)(ii)) and 164.308(b)(2), respectively, and corresponding

DoD HIPAA Issuances, as applicable, the Business Associate shall ensure that any subcontractors that create, receive, maintain, or transmit PHI on behalf of the Business Associate agree to the same restrictions, conditions, and requirements that apply to the Business Associate with respect to such PHI.

(e) The Business Associate shall make available PHI in a Designated Record Set, to the Covered Entity or, as directed by the Covered Entity, to an Individual, as necessary to satisfy the Covered Entity obligations under 45 CFR 164.524 and corresponding DoD HIPAA Issuances.

(f) The Business Associate shall make any amendment(s) to PHI in a Designated Record Set as directed or agreed to by the Covered Entity pursuant to 45 CFR 164.526, or take other measures as necessary to satisfy Covered Entity’s obligations under 45 CFR 164.526, and corresponding DoD HIPAA Issuances.

(g) The Business Associate shall maintain and make available the information required to provide an accounting of disclosures to the Covered Entity or an individual as necessary to satisfy the Covered

Entity’s obligations under 45 CFR 164.528 and corresponding DoD HIPAA Issuances.

(h) To the extent the Business Associate is to carry out one or more of Covered Entity's obligation(s) under the HIPAA Privacy Rule, the Business Associate shall comply with the requirements of the HIPAA

Privacy Rule that apply to the Covered Entity in the performance of such obligation(s); and

(i) The Business Associate shall make its internal practices, books, and records available to the Secretary for purposes of determining compliance with the HIPAA Rules.

II. Permitted Uses and Disclosures by Business Associate

(a) The Business Associate may only use or disclose PHI as necessary to perform the services set forth in this Agreement or as required by law. The Business Associate is not permitted to de-identify PHI under

DoD HIPAA issuances or the corresponding 45 CFR 164.514(a)-(c), nor is it permitted to use or disclose de-identified PHI, except as provided by this Agreement or directed by the Covered Entity.

(b) The Business Associate agrees to use, disclose and request PHI only in accordance with the HIPAA

Privacy Rule “minimum necessary” standard and corresponding DHA policies and procedures as stated in the DoD HIPAA Issuances.

(c) The Business Associate shall not use or disclose PHI in a manner that would violate the DoD HIPAA

Issuances or HIPAA Privacy Rules if done by the Covered Entity, except uses and disclosures for the

Business Associate’s own management and administration and legal responsibilities or for data aggregation services as set forth in the following three paragraphs.

(d) Except as otherwise limited in this Agreement, the Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the

Business Associate. The foregoing authority to use PHI does not apply to disclosure of PHI, which is covered in the next paragraph.

(e) Except as otherwise limited in this Agreement, the Business Associate may disclose PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate, provided that disclosures are required by law, or the Business Associate obtains reasonable assurances from the person to whom the PHI is disclosed that it will remain confidential and used or further disclosed only as required by law or for the purposes for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached.

(f) Except as otherwise limited in this Agreement, the Business Associate may use PHI to provide Data

Aggregation services relating to the Covered Entity’s health care operations.

III. Provisions for Covered Entity to Inform Business Associate of Privacy Practices and

Restrictions

(a) The Covered Entity shall notify the Business Associate of any limitation(s) in the notice of privacy practices of the Covered Entity under 45 CFR 164.520 and the corresponding provision of the DoD

HIPAA Issuances, to the extent that such limitation may affect Business Associate’s use or disclosure of

PHI.

(b) The Covered Entity shall notify the Business Associate of any changes in, or revocation of, the permission by an Individual to use or disclose his or her PHI, to the extent that such changes affect the

Business Associate’s use or disclosure of PHI.

(c) The Covered Entity shall notify the Business Associate of any restriction on the use or disclosure of

PHI that the Covered Entity has agreed to or is required to abide by under 45 CFR 164.522 and the corresponding DoD HIPAA Issuances, to the extent that such changes may affect the Business

Associate’s use or disclosure of PHI.

IV. Permissible Requests by Covered Entity

The Covered Entity shall not request the Business Associate to use or disclose PHI in any manner that would not be permissible under the HIPAA Privacy Rule or any applicable Government regulations

(including without limitation, DoD HIPAA Issuances) if done by the Covered Entity, except for providing

Data Aggregation services to the Covered Entity and for management and administrative activities of the

Business Associate as otherwise permitted by this BAA.

V. Breach Response

(a) In general.

(1) In the event of a breach of PII/PHI held by the Business Associate, the Business Associate shall report the breach to the Covered Entity in accordance with Section VII, assess the breach incident, take mitigation actions as applicable, and notify affected individuals, as directed by the Covered Entity.

(2) The Business Associate shall coordinate all investigation actions with the Covered Entity, and at a minimum, follow the breach response requirements set forth in this Part V, which is designed to satisfy both the Privacy Act and HIPAA as applicable. If a breach involves PII without PHI, then the Business

Associate shall comply with DoD Privacy Act Issuance breach response requirements only; if a breach involves PHI (a subset of PII), then the Business Associate shall comply with both Privacy Act and

HIPAA breach response requirements. A breach involving PHI may or may not constitute an HHS

Breach. If a breach is not an HHS Breach, then the Business Associate has no HIPAA breach response obligations. In such cases, the Business Associate must still comply with breach response requirements under the DoD Privacy Act Issuances.

(3) The Business Associate shall, at no cost to the government, bear any costs associated with a breach of

PII/PHI that the Business Associate has caused or is otherwise responsible for addressing.

(b) Government Reporting Provisions

(1) If the Covered Entity determines that a breach is an HHS Breach, then the Business Associate shall comply with both the HIPAA Breach Rule and DoD Privacy Act Issuances, as directed by the Covered

Entity, regardless of where the breach occurs.. If the Covered Entity determines that the breach does not constitute an HHS Breach, then the Business Associate shall comply with DoD Privacy Act Issuances, as directed by the applicable Service-Level Privacy Office.

(2) This Part V is designed to satisfy the DoD Privacy Act Issuances and the HIPAA Breach Rule as implemented by the DoD HIPAA Issuances. In general, for breach response, the Business Associate shall report the breach to the Covered Entity, assess the breach incident, notify affected individuals, and take mitigation actions as applicable. Because DoD defines “breach” to include possible (suspected) as well as actual (confirmed) breaches, the Business Associate shall implement these breach response requirements immediately upon the Business Associate’s discovery of a possible breach.

(3) The…