NOFO Building International Data Protection and Capacity v2.pdf

U.S. DEPARTMENT OF STATE

BUREAU OF CYBERSPACE AND DIGITAL POLICY (CDP)

Notice of Funding Opportunity (NOFO):

Building International Data Protection and Capacity

This is the announcement of funding opportunity number DFOP0016688

Federal Assistance Listing/Catalog of Federal Domestic Assistance Number: 19.665

Type of Solicitation: Open Competition

Deadline for Applications: 11:59 PM EST/EDT on 29 July 2024

Total Funding: $1,000,000.00 USD (FY2023)

Funding Type I: Economic Support Funds (ESF) FADR Data Element 2: Global/Economic Growth/EG8

Anticipated Number of Awards: 1

Type of Award: Cooperative Agreement

Period of Performance: 18 months

Anticipated Time to Award: October 2024

Deadline for Questions: 11:59 PM EST on 15 July 2024

Eligibility Category:

• U.S.- based non-profit/non-governmental organizations subject to sections 501 (c)(3) and 501 (c)(6) of the U.S. tax code

• Private, public, or state institutions of higher education (universities and colleges)

• For-profit organizations or businesses.

Type of Applicant: Organizations only. Individuals not eligible to apply.

Number of Applications: One (1) per applicant organization.

This notice is subject to availability of funding.

Section A: Project Description The U.S. Department of State, Bureau of Cyberspace and Digital Policy (CDP) announces an open competition for organizations with the capacity and interest to carry out the project outlined in this announcement.

Pending the availability of funds, CDP anticipates awarding one grant of up to $1,000,000.00 USD. CDP reserves the right to award more or less funding or make no award as is in the best interest of the US Government.

This project aims to increase the capacity of partner countries to develop, adopt, and implement legal frameworks that protect individual data privacy while educating key stakeholders and enabling trusted cross-border data flows and digital trade.

The intended target audience of the project activities are data protection agencies and other public institutions with regulatory or enforcement responsibility for data protection and cross-border data flows.

This project will be global.

A1. Background Recognizing the growing role of technology as a cross-cutting national security issue, the State Department created the Bureau of Cyberspace and Digital Policy (CDP) in April 2022 to lead and coordinate U.S. diplomacy on cyber and digital policy. The bureau addresses the national security challenges, economic opportunities and human rights considerations presented by cyberspace and digital technologies and promotes standards and norms that are fair, transparent, and support the rights-respecting use of technology. Through robust engagement in multilateral organizations, bilateral diplomacy with partners round the world, and encouragement of responsible state behavior in cyberspace, CDP empowers U.S. leadership in cyber, digital, and technology diplomacy.

CDP deploys foreign assistance to strengthen international cooperation, create new partnerships, promote economic growth and development, and assist in the defense of our foreign partners to uphold an open, interoperable, secure, and reliable Internet.

Calibrated cyber and digital policies help form the backbone of our deeply interconnected world, are vital to U.S. national and economic security, and are required to fully harness the transformative power of technology. As citizens around the world eagerly seek increased Internet connectivity to access the tremendous opportunities afforded by digital transformation, the United States is working to ensure this connectivity is secure, meaningful, governed fairly, and serves the interests of its users. Foreign assistance programs aim to advance an affirmative vision of technology as a tool that supports collective security, prosperity, and democratic values.

More information on CDP is available at https://www.state.gov/bureaus-offices/deputy-secretary-of-state/bureau-of-cyberspace-and-digital-policy/.

The Digital Connectivity and Cybersecurity Partnership (DCCP) is a global, interagency initiative led by CDP and the U.S. Department of State to promote an open, interoperable, secure, and reliable internet. DCCP provides foreign assistance to partner nations to promote investments in secure, diverse, and resilient information and communication technologies (ICT) infrastructure; support the adoption of inclusive, rights-respecting, multi-stakeholder models of internet governance, to include data privacy; grow global markets for trusted ICT goods and services, to include cross border dataflow; and enhance cybersecurity. CDP foreign assistance programming follows these core tenets of DCCP. More information on DCCP is available at https://www.state.gov/digital-connectivity-and-cybersecurity-partnership/.

As more governments move to adopt data protection laws, we are at critical juncture to build capacity in individual country data protection authorities (DPAs), which have a substantial influence in determining how and when cross-border data flows are legally permissible, and thus the flow of data itself and the underpinning of the global digital economy. Rulemaking and regulatory decisions by DPAs can have significant implications for U.S. firms operating in overseas markets, including firms providing e-commerce and digital services and micro, small, and medium sized enterprises (MSMEs) having limited capacity to react to unpredictable business climates.

A global project is needed to work in partnership with CDP to provide DPAs, and other public institutions with regulatory or enforcement responsibility for data privacy and cross-border data flows, with legislative and regulatory information, training, and capacity building; to expand cooperation with likeminded partners; and to ensure interoperability of frameworks that allow for trusted cross-border data flows. Without amplifying U.S. leadership, potential partners governments may adopt data protection policies that may not appropriately protect individual privacy or preserve the trusted free flow of data needed for an open Internet.

Multiple governments are either in the process of considering comprehensive privacy or data protection legislation or have recently passed related laws and are preparing to establish new data protection authorities or implementing regulations. Failure to support data protection development through holistic training and capacity building could lead to the erosion of U.S.

policy leadership as other governments are actively engaging third countries and providing capacity building aligned to contrary policy goals.

Implementer will select beneficiaries for project activities in consultation and coordination with the State Department, via CDP, considering regional and bilateral policy priorities and capacity building needs. In-person events outside the United States shall be coordinated with the local U.S. Embassy officials, via CDP. Regionally focused in-person events may address more than one objective in more than one partner country.

https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fwww.state.gov.mcas.ms%2Fbureaus-offices%2Fdeputy-secretary-of-state%2Fbureau-of-cyberspace-and-digital-policy%2F%3FMcasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11&McasTsid=20892 https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fwww.state.gov.mcas.ms%2Fbureaus-offices%2Fdeputy-secretary-of-state%2Fbureau-of-cyberspace-and-digital-policy%2F%3FMcasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11&McasTsid=20892 https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fwww.state.gov.mcas.ms%2Fdigital-connectivity-and-cybersecurity-partnership%2F%3FMcasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11&McasTsid=20892

A2. Strategic Program Goals and Objectives This project should contribute to the following three CDP strategic goals and objectives outlined in the functional bureau strategy, and three DCCP Pillars.

CDP Strategic Goals and Objectives:

Bureau Goal 1: Advance cyber and digital policies that align with U.S. national interests and foreign policy objectives.

• Objective 1.1: Deepen relationships with existing U.S. allies and partners, forge new partnerships, and engage with a range of countries to advance a common vision for the Internet and digital technologies.

• Objective 1.2: Leverage key multilateral fora to build relationships, advance U.S.

policy priorities, and guard against positions that are counter to U.S. approaches to the Internet and digital technologies.

• Objective 1.3: Identify, enhance, cultivate, and develop strategic engagements across the private sector and multistakeholder communities.

DCCP Pillars:

Pillar 1: Build Connections by promoting investments in secure, diverse, and resilient ICT infrastructure.

Pillar 2: Advance an Open, Interoperable, Reliable, and Secure Internet by promoting inclusive, rights-respecting, multi-stakeholder models of internet governance and pro-competition, pro-innovation digital economy policies and regulations.

Pillar 4: Enhance Cybersecurity by increasing adoption and implementation of cybersecurity best practices.

A3. Project Goals, Objectives, Expected Outcomes, Activities, Indicators, and Sustainability The section below identifies the project goals and objective and details how the project will achieve its objectives through activities designed to achieve specific outcomes in accordance with overarching program (CDP and DCCP) strategic goals and objectives. In awarding funds for this project, CDP expects that the activities and milestones listed below will be accomplished within the project’s period of performance.

This project should be designed to achieve the following high-level goal: Increase the capacity of partner countries to develop, adopt, and implement legal frameworks that protect individual data privacy while educating key stakeholders and enabling trusted cross-border data flows and digital trade.

Project Objective 1: Assist partner countries in developing privacy and data protection laws through workshops, training, and technical assistance to enable DPAs and other agencies regulating data flows to facilitate legal international data transfers with the broad array of mechanisms that currently exist within the partner country.

Expected Outcomes

Achievement of Project Objective 1 is expected to result in the following outcomes:

• Selected partner countries develop and/or adopt new or updated laws and regulations that both preserve individual privacy and enable trusted cross-border data flows.

• Selected partner countries develop and/or adopt new or updated laws, regulations, and/or administrative procedures documenting privacy safeguards related to law enforcement and national security access to data held by private sector entities. Measures may reference OECD Declaration on Government Access to Personal Data Held by Private Sector Entities.

Activities To achieve the expected project outcomes, the project must include the following:

• Analyze proposed legislation and other legal measures, including English translation when not available, in collaboration with CDP and U.S.

Embassies.

• Recommend legislative and other policy text based on best practices to facilitate legal data transfers with the broad array of mechanisms that currently exist (adequacy, standard/model contractual clauses, binding corporate rules, certifications and codes of conduct). Coordinate policy recommendations and references with CDP and other U.S. government stakeholders including the Department of Commerce and USTR.

• Recommendations should draw on multilateral, interoperable, enforceable best practices highlighted by CDP, including those documented by multilateral bodies, such as the Global Cross-Border Privacy Rules (CBPR) Forum and the Organization for Economic Cooperation and Development

(OECD).

• DPAs and other agencies regulating data flows are able to facilitate legal international data transfers with the broad array of mechanisms that currently exist (adequacy, standard/model contractual clauses, binding corporate rules, certifications and codes of conduct).

• Execute bilateral and/or regional in-person workshops, consultations, or roundtables with government and legislative officials developing or considering legal measures affecting privacy, data protection, and cross-border data flows, including multi-stakeholder formats as necessary.

• Collaborate with the State Department, via CDP, to identify global participants for aforementioned workshops and consultations that include diverse stakeholders currently involved in the development of privacy, data protection, and data flow policies, including technical experts from the private sector, academia, policy makers, third-country officials, and civil society organizations.

• Fund participants and subject matter experts to travel and attend international workshops and other aforementioned engagements, in coordination with the State Department, via CDP.

To achieve the expected project outcomes, the project could include the following:

• Comparative analysis of recent and proposed legal measures in select countries and regions, including commonality or reference to multilateral, regional, and/or third-country rules.

• Provide virtual or in-person training to legislative, government, and regulatory officials related to legal, operational, and/or technical matters related to data protection.

Performance Indicators:

In addition to project-specific indicators to monitor key milestones and progress to keep the project on track, implementers will report against relevant indicators within the performance management plan CDP established under the auspices of the Digital Connectivity and Cybersecurity Program (DCCP). DCCP indicators for this project will include:

• DCCP 1.8 Number of USG-supported fora held to convene key stakeholders for technical assistance or to discuss digital issues or best practices.

• DCCP 2.1 Number of instances of U.S. ICT/digital policy positions presented in international or regional fora by the U.S. or partner countries.

• DCCP 2.2 Number of ICT/digital governance policies, laws, or regulations drafted, proposed, adopted, improved, or implemented with USG assistance.

• DCCP 2.6 Number of people receiving USG assistance to participate in multilateral fora.

• DCCP 4.11 Number of organizations using or applying principles from internationally recognized frameworks, models, or principles of Internet governance or privacy standards due to USG assistance.

Upon final award, CDP and the selected partner will meet to discuss a final set of DCCP standard indicators as well as project-specific indicators.

Project Objective 2: Build capacity of partner countries on the process of establishing data protection authorities through amplification, training, technical assistance, and workshops. Capacity building should include, but not be limited to, facilitating international data transfers drawing on best practices identified by CDP.

Expected Outcomes

Achievement of Project Objective 2 is expected to result in the following outcomes:

• Partner countries establish, or take steps towards establishing, data protection authorities.

• Partner country data protection authorities or other regulatory bodies enable interoperable trusted data flows, including through issuing regulations incorporating mutual recognition, contractual clauses, and/or by issuing appropriate adequacy determinations.

• Partner country data protection authorities adopt open, transparent, consultative, standardized processes in the promulgation of regulations or policy guidance.

• Execute bilateral and/or regional in-person workshops, roundtables, consultations, or training sessions with officials at data protection authorities and other government agencies regulating privacy and data flows, prioritizing those in the process of establishing DPAs. Content could include technical and operational functions of a DPA, including on rulemaking, public consultation, and enforcement, in consultation with the State Department and other U.S. government stakeholders, via CDP.

• Recommend regulatory text based on best practices to facilitate legal data transfers with the broad array of mechanisms that currently exist (adequacy, standard/model contractual clauses, binding corporate rules, certifications and codes of conduct). Coordinate policy recommendations and references with CDP and other U.S. government stakeholders including Commerce and the Federal Trade Commission.

• For countries with greater assistance needs, provide technical assistance to data protection authorities on developing standard operating procedures and internal training curricula, including but not limited to managing public comment processes, use of model/standard contractual clauses, and other administrative processes and technologies related to data protection and international data transfers.

• Collaborate with the State Department, via CDP, to identify global participants for aforementioned workshops and consultations that include diverse stakeholders currently involved in the development of privacy, data protection, and data flow policies, including technical experts from the private sector, academia, policy makers, third-country officials, and civil society organizations.

• Funding participants and subject matter experts to travel and attend international workshops and training, in coordination with the State Department, via CDP.

• Execute virtual seminars for officials at data protection authorities and other government agencies regulating privacy and data flows with subject-matter experts.

• Comparative analysis of recent and proposed regulatory measures in select countries and regions, including commonality or reference to multilateral, regional, and/or third-country rules.

• Provide virtual or in-person training to legislative, government, and regulatory officials related to legal, operational, and/or technical matters related to data protection.

• Execute train-the-trainer sessions for data protection authorities’ internal personnel and outreach to outside stakeholders, such as major data controllers/processors.

the project on track, implementers will report against relevant indicators within the performance management plan CDP established under the auspices of the Digital Connectivity and Cybersecurity Program (DCCP). DCCP indicators for this project will include:

o DCCP 1.6 Number of people trained in telecom/ICT, digital, or cyber issues with USG support.

o DCCP 1.7 Number of people trained on telecom/ICT or digital issues who demonstrate improved knowledge or skill.

o DCCP 1.8 Number of USG supported fora held to convene key stakeholders for technical assistance or to discuss telecom/ICT or digital issues or best practices.

o DCCP 2.1 Number of instances of U.S. telecom/ICT/digital policy positions presented in international or regional fora by the U.S. or partner countries.

o DCCP 2.2 Number of telecom/ICT governance policies, laws, or regulations drafted, proposed, adopted, improved, or implemented with USG assistance.

o DCCP 2.4 Number of private sector, civil society, or other non-governmental organizations with improved capacity for advocacy or engagement with national legislatures on national telecom/ICT, Internet, or digital policies.

o DCCP 2.6 Number of people receiving USG assistance to participate in multilateral fora.

o DCCP 4.11 Number of organizations using or applying principles from

Project Objective 3: Build capacity at established data protection authorities in partner countries to collaborate in multilateral efforts promoting trusted cross-border data flows, through training, technical assistance, and workshops. Capacity building should include, but not be limited to, facilitating international data transfers drawing on best practices identified by

CDP.

Expected Outcomes Achievement of Project Objective 3 is expected to result in the following outcomes:

o Partner countries join, or take steps to join, relevant multilateral organizations, such as but not limited to the Global CBPR Forum and Global Cooperation Arrangement for Privacy Enforcement (Global CAPE).

o Partner countries endorse multilateral principles promoting trusted cross-border data flows, including but not limited to OECD Declaration on Government Access to Personal Data Held by Private Sector Entities and Data Free Flow with Trust.

• Execute bilateral and/or regional in-person workshops, roundtables, consultations, or training sessions with officials at data protection authorities and other government agencies regulating privacy and data flows. Include multi-stakeholder formats as necessary, including but not limited to networks of DPAs, industry associations, and not-for-profit and civil society privacy experts.

o Content may include international best practices on interoperable trusted data flows, including mutual recognition, contractual clauses, and/or national adequacy determinations; privacy enhancing technologies (PETS) and other technology factors affecting data protection policy; and management of public comment processes, in consultation with the State Department and other U.S. government stakeholders, via CDP.

• Collaborate with the State Department, via CDP, to identify global participants for aforementioned workshops that include diverse stakeholders currently involved in the development of privacy, data protection, and data flow policies, including technical experts from the private sector, academia, policy makers, the diplomatic community, and civil society organizations.

• Funding participants to travel and attend international workshops and training, in coordination with the State Department, via CDP.

• Execute virtual seminars for officials at data protection authorities and other government agencies regulating privacy and data flows with subject-matter experts.

• Research and brief CDP and other U.S. government officials on engagement and coordination opportunities with foreign DPAs and public institutions with similar roles.

• Execute train-the-trainer sessions for data protection authorities’ internal personnel and outreach to outside stakeholders, such as major data controllers/processors.

• Advise select partner countries in adopting risk-based data protection measures to mitigate cybersecurity threats and threats from untrustworthy information and communications technology and services, in coordination with the State Department, via CDP.

the project on track, implementers will report against relevant indicators within the performance management plan CDP established under the auspices of the Digital Connectivity and Cybersecurity Program (DCCP). DCCP indicators for this project will include:

o DCCP 1.6 Number of people trained in telecom/ICT, digital, or cyber issues with USG support.

o DCCP 1.7 Number of people trained on telecom/ICT or digital issues who demonstrate improved knowledge or skill.

o DCCP 1.8 Number of USG supported fora held to convene key stakeholders for technical assistance or to discuss telecom/ICT or digital issues or best practices.

o DCCP 2.1 Number of instances of U.S. telecom/ICT policy positions presented in international or regional fora by the U.S. or partner countries.

o DCCP 2.4 Number of private sector, civil society, or other non-governmental organizations with improved capacity for advocacy or engagement with national legislatures on national telecom/ICT, Internet, or digital policies.

o DCCP 2.6 Number of people receiving USG assistance to participate in multilateral fora.

o DCCP 4.11 Number of organizations using or applying principles from

Sustainability Appropriately balancing privacy, economic, security, and human rights equities in data protection laws will ensure they are sustainable without further amendment. Activities building institutional capacity would likewise ensure new laws and regulations are implemented efficiently and in a non-discriminatory manner. Defraying one-time costs associated with drafting legislation, educating key stakeholders, and establishing new institutions will help partner governments facilitate interoperable trusted data flows, which would then have economic and regulatory constituencies to sustain them. Supporting partner government officials in attending regional workshops and Global Cros-border Privacy Forum events would build connections to enable officials from likeminded countries to exchange information and provide mutual support after program concludes. If needed, other U.S. government departments and agencies may be able to provide out-year assistance to address specialized partner needs not addressed by this program.

A4. Key Considerations The following list of program considerations is provided to help applicant(s) develop a responsive, robust proposal. Strong preference will be given to applicant(s) that:

• Demonstrate administrative and technical capacity and experience in administering successful and similar projects with a global participant base.

• Demonstrate thoughtful project design to address the key objectives and activities for the target audiences described in the NOFO.

• Demonstrate thoughtful monitoring and evaluation and report results.

• Prove existing, collaborative, and successful partnerships with U.S. and foreign partners on issues and engagements related to cybersecurity and digital policy.

• Demonstrate adherence to ethical best practices including “do no harm” and gender equity.

All applicants will also be required to address the entirety of Section A.3 within this NOFO in their completion of the Draft Scope of Work attached to this NOFO (see Section D.2.1, item #5).

Section B: Federal Award Information

Organizations may submit one application per organization in response to this NOFO. If more than one application is submitted by an organization, only the first application received will be reviewed for eligibility and funding.

The U.S. government reserves the right to: (a) reject any or all applications, (b) accept other than the lowest cost application, (c) accept more than one application, and (d) waive irregularities in applications received.

The U.S. government may make award(s) based on initial applications received, without discussions or negotiations. Therefore, each initial application should contain the applicant's best terms from a cost and technical standpoint. The U.S. government reserves the right (though it is under no obligation to do so), to enter discussions with one or more applicants in order to obtain clarifications, additional detail, or to suggest refinements in the project description, budget, or other aspects of an application.

CDP anticipates awarding a cooperative agreement. The final determination on award mechanism will be made by the Grants Officer.

The authority for this funding opportunity is found in the Foreign Assistance Act of 1961 (FAA), as amended. Funds were appropriated under the Title III of the Department of State, Foreign Operations and Related Programs Appropriations Act, 2023 (Div. K, P.L. 117-328) (FY 2023

SFOAA) under the heading “Economic Support Funds”. Several funding restrictions apply and may vary from year to year. CDP reserved the right to adjust proposed beneficiaries.

To maximize the impact and sustainability of the award(s) that result(s) from this NOFO, CDP reserves the right to execute a non-competitive continuation amendment(s). The total duration of any award, including potential non-competitive continuation amendments, shall not exceed 54 months, or four and a half years. Any non-competitive continuation is contingent on availability of funds, and satisfactory performance of the program. A non-competitive continuation is not guaranteed, and the Department of State reserves the right to exercise or not exercise this option.

Section C: Eligibility Information

C1. Eligible Applicants CDP welcomes applications from U.S.- based non-profit/non-governmental organizations subject to sections 501 (c)(3) and 501 (c)(6) of the U.S. tax code; Private, public, or state institutions of higher education (universities and colleges); For-profit organizations or businesses.

Please see 2 CFR 200.307 for regulations regarding program income.

C2. Cost Sharing or Matching Providing cost sharing, matching, or cost participation is not an eligibility factor or requirement for this NOFO and providing cost share will not result in a more favorable competitive ranking.

Per 2 CFR §200.306, items that are proposed for cost share must be allowable per 2 CFR §200, Subpart E—Costs Principles.

C3. Other To be eligible to receive an award, all organizations must have a unique entity identifier (UEI), as well as a valid registration on SAM.gov. Please see Section D3.2 for information on how to obtain these registrations.

Applicants must be organizations, and only one application will be considered for each applicant organization. If more than one application is submitted by the same organization, only the first received will be reviewed for eligibility and funding.

Applicants must demonstrate existing, or the capacity to develop, active partnerships local in-country partners, entities, and relevant stakeholders and have demonstrable experience in administering successful and preferably similar projects.

Please note, any applicant listed on the Excluded Parties List System in the System for Award Management (SAM.gov) and/or has a current debt to the U.S. government is not eligible to apply for an assistance award in accordance with the OMB guidelines at 2 CFR 180 that https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=http%3A%2F%2Fwww.SAM.gov.mcas.ms%3FMcasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11 https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fsam.gov.mcas.ms%3FMcasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11 https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fsam.gov.mcas.ms%3FMcasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11 implement Executive Orders 12549 (3 CFR,1986 Comp., p. 189) and 12689 (3 CFR,1989 Comp.,

p. 235), “Debarment and Suspension.” Additionally, no entity or person listed on the Excluded Parties List System in SAM.gov can participate in any activities under an award. All applicants are strongly encouraged to review the Excluded Parties List System in SAM.gov to ensure that no ineligible entity or person is included in their application.

Section D: Application and Submission Information

D1. Address to Request Application Package Application forms, and other required materials are available at Grants.gov (http://www.grants.gov) and MyGrants (https://mygrants.servicenowservices.com) under the announcement title “Building International Data Protection and Capacity,” and funding opportunity number “DFOP0016688 ”. Once the NOFO deadline has passed, the Department of State may not discuss this competition with any applicant until the proposal review process has been completed. If requesting reasonable accommodations for persons with disabilities or for security reasons, please contact the CDP point of contact listed in Section G. Please note that reasonable accommodations do not include deadline extensions.

D2. Content and Form of Application Submission For all application documents, please ensure:

• The proposal clearly addresses the goals and objectives of this funding opportunity

• All documents are in English (original documents that are in another language must be accompanied by an English translation)

• All budgets are in U.S. dollars

• For documents subject to page limitations, all pages are numbered

• All documents are formatted to 8 ½ x 11 paper and,

• All Microsoft Word documents are single-spaced, 12-point Calibri font, with a minimum of 1-inch margins

• Captions and footnotes may be 10-point Calibri font

Any prospective applicant who has questions concerning the contents of this NOFO should submit them by email to the contacts listed in Section G. Any updates about this NOFO will also be posted on Grants.gov.

D2.1 Application Requirements Complete applications must include the following:

1. Completed and signed SF-424, SF-424A, as well as SF-424B, if applicable.

2. Organizations that engage in lobbying the U.S. government, including Congress, or pay for another entity to lobby on their behalf, are also required to complete the SF-LLL “Disclosure of Lobbying Activities” form.

https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=http%3A%2F%2Fwww.grants.gov.mcas.ms%3FMcasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11 https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fmygrants.servicenowservices.com.mcas.ms%3FMcasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11 https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=http%3A%2F%2Fwww.Grants.gov.mcas.ms.%3FMcasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11

3. Cover Page and Executive Summary (not to exceed three [3] pages, preferably as a Word Document). Includes the organization name, project title, target country or countries, and name and contact information for the application’s main point of contact and brief section that clearly outlines the (1) the problem statement addressed by the project (2) research-based evidence justifying the applicant’s approach, and (3) quantifiable project outcomes and impacts.

4. Proposal Narrative (not to exceed seven [7] pages, preferably as a Word Document).

Please note the seven-page limit does not include the following:

• SF-forms listed above

• Cover Page and Executive Summary

• Scope of Work

• Project Design and Logic Model

• Project Performance Monitoring and Evaluation Plan

• Detailed Budget

• Budget Narrative – If the Budget includes subawards, please include a separate Budget Narrative for each organization.

• Timeline

• Key Personnel Summary, CVs or Resumes (per person)

• Contingency Plan

• Additional Required Attachments (Audit, NICRA, etc.)

• Optional Sections (if applicable, see page 15)

The Proposal Narrative must include the following:

• Introduction to the Organization: Description of past and present operations, showing ability to carry out the project, including information on all relevant or similar type projects from previous grants from the Bureau and/or U.S.

government agencies.

• Problem Statement: Clear, concise, and well-supported statement that summarizes the problem and how the applicant’s unique project/approach will address it and support CDP’s Strategic Goals and Objectives.

• Project Goal: The goal describes the larger outcomes intended.

• Statement of Capabilities and Experience: Clear, concise, and well-supported statement that fully describes the applicant’s unique project/approach will address both objectives and support CDP’s Strategic Goals and Objectives.

Applicant should describe past experience with Federal contracting and logistics management, industry knowledge and contacts.

• Future Funding or Sustainability: Applicant’s plan for continuing the project beyond the grant period, or the availability of other resources, if applicable.

Include ways project activities will ensure sustainability.

• Risk Analysis: Internal and external risks associated with the proposed project, rate the likelihood of the risks, rate the potential impact of the risks on the project, and identify actions that could help mitigate the risks.

Please note the seven-page limit does not include the following:

• SF-forms listed above

• Cover Page and Executive Summary

• Scope of Work

• Project Design and Logic Model

• Project Performance Monitoring and Evaluation Plan

• Detailed Budget

• Budget Narrative – If the Budget includes subawards, please include a separate Budget Narrative for each organization.

• Timeline

• Key Personnel Summary, CVs or Resumes (per person)

• Contingency Plan

• Additional Required Attachments (Audit, NICRA, etc.)

• Optional Sections (if applicable, see page 15)

5. Scope of Work (SOW). Applicants should use the Project Draft Scope of Work Template

(see tab 1) provided and attached to this NOFO. The SOW should provide a summary of the applicant’s unique approach to the following as indicated in Section 4) Proposal Narrative:

• Project Goal

• Project Objectives

• Project Activities

• Project Indicators: Applicants should also identify key indicators and milestones to measure progress towards program goals and project objectives. Methods for collecting and monitoring project indicators should be described and those responsible for doing so identified.

• Sustainability

6. Project Logic Model (preferably as a Word Document). Building out a logic model with an accompanying theory of change can be helpful when planning and designing a program, project or activity. These tools can be used to visually depict or outline how and why a project will work—i.e., the rationale behind your project approach. Detailing how a project’s planned activities lead to certain outcomes can often help applicants understand the assumptions within the approach. Detailing factors outside your control, such as policy shifts, within a logic model can identify areas that should be included within your project’s risk analysis. It details planned activities, the immediate services or product of project activities (outputs), and the expected changes or benefits that occur after activities have been implemented (outcomes). Applicants should specify objectives, identify what resources (inputs) are needed, outline proposed activities (outputs) and beneficiaries, and illustrate how activities lead to desired results in the theory of change. Applicants are encouraged to use the attached Project Logic Model Template (see Tab 2) but are welcome to use their own templates so long as they provide the requisite information for thorough review of the proposed project.

7. Draft Project Performance Monitoring and Evaluation Plan (preferably as a Word Document). This document details how a project’s performance monitoring and evaluation system will be carried out and by whom. It:

• Explains how the project’s performance toward its objectives will be tracked over time.

• Identifies which performance indicators the project will report against, the indicator type, baseline values, performance targets, and data sources or collection methods.

• Provides a clear description of the approach and data collection strategies and tools to be employed (e.g., pre- and post-test surveys, interviews, focus groups).

• Identifies what, if any, external evaluations will be conducted.

A sample Project Performance Monitoring and Evaluation Plan Template (see tab 3) is provided as an attachment to this NOFO. Applicants are encouraged to refer to the Defining M&E Terms in the Project Logic Model template for concise explanations of M&E terms and definitions used by the Department of State. The final will be due 30- 60 days post award.

8. Project Detailed Budget (Excel workbook strongly preferred; please do not provide as a PDF). Include three (3) columns containing the request to CDP, any cost sharing contribution, and the total budget. A Summary Budget should also be included using the OMB-approved budget categories (see SF-424A as a sample) in a separate tab. Costs must be in U.S. Dollars. Detailed line-item budgets for sub-grantees should be included as additional tabs within the Excel workbook (if available at the time of submission).

Please see the attached Project Detailed Budget Template (see tab 4) for more information.

9. Project Budget Narrative (preferably as a Word Document). Justify each line-item in the budget and explain how the amounts were derived, consistency with the applicants’ documented policies, as well as the source and description of all proposed costs (and cost-share, if applicable). The narrative should complement the budget rather than repeat information provided in the budget. For example, the narrative should provide details on the purpose of costs, reasonability of costs, cost price analysis, explain allocations, explain any yearly variances, and tie expenses to project activities and/or objectives where appropriate. Sources of all cost-share offered in the application should be identified and explained in the budget narrative. Project Budget Narrative Template (see tab 5) for more information.

10. Timeline (not to exceed one [1] page per year of proposed performance period, preferably as a Word Document or Excel Sheet). The timeline of the overall proposal should include activities, and monitoring and evaluation efforts outlined in either a monthly or quarterly format. It should also include sufficient time for project closeout to conduct and finalize internal/external evaluations and allow any sub-recipients time for final reporting.

11. Summary of Key Personnel and Subject Matter Experts (not to exceed two [2] pages, preferably as a Word Document). This can represent staff within your organization or outside of your organization (subgrantee, consultants, contractors), who are integral to the success of the project. Provides names, titles, roles, and bios that highlight relevant experience/qualifications of key personnel involved in the project.

12. Contingency Plan (not to exceed three (3) pages) for proposed activities should the originally planned activities not be able to be implemented. Applicants should demonstrate consideration of the risks identified in the submitted risk assessment and include specific alternative activities or locations as part of the Contingency Plan. Any proposed “plan” must comply with 2CFR200.433 – Contingency provisions. Plans must not include un-allocable or unallowable expenses and must not result in a larger Total Award Value than the identified as the “competition ceiling.” CDP/SPC requires prior approval by the Grants Officer of the “plan” before any activities can take place, or costs can be incurred against the “plan.”

13. Additional Required Attachments:

• Audit An audit or an explanation for the lack of an audit is required. Please review the bulleted items below carefully.

• If your organization meets the threshold as defined in 2 CFR 200 Subpart F, then your organization must submit a pdf of its most recent single audit.

• If your organization does not currently meet the 2 CFR 200 requirement and has not had a single audit within its most recent three fiscal years, then your organization must submit its most recent (within the preceding three fiscal years) independent financial audit, preferably a pdf.

• If your organization has not been independently audited within its three most recent fiscal years, then it must explain the reason for the lack of an audit and provide an independent confirmation of the adequacy of its internal controls.

• NICRA If your organization has a Negotiated Indirect Cost Rate Agreement (NICRA) and includes NICRA charges in the budget, your latest NICRA letter should be included as a PDF file. This document will not be reviewed by the Merit Review Panel but will be used by project and grant team if the submission is recommended for funding. Organizations that have previously established indirect cost rates must submit timely indirect cost proposals to their cognizant agency as required by Appendix III & IV of 2 CFR 200. If indirect cost proposals have not been submitted for re-negotiation, as required, out-of-date NICRAs may not be considered. If your proposal involves subawards to organizations charging indirect costs, please submit their NICRA, if applicable.

• Letters of support or official permission letters from project partners describing the roles and responsibilities of each partner, for any partner or partners identified in the proposal whose role is central to the project achieving its objectives. No letter of support is required for goods or services that are widely available commercially unless an identified provider is offering no-cost or uniquely favorable terms that will not be available commercially.

Applications that do not include the elements listed above will be deemed technically ineligible. To ensure that all applications receive a balanced evaluation, the review panel will review from the first page of each section up to the page limit and no further.

• Gender and Inclusion Analysis (not to exceed two (2) pages, preferably as a Word Document) that provides a concise analysis of relevant gender norms, equity and equality for underserved communities and marginalized populations, power relations, and conflict dynamics in target countries. Potential domains of analysis include institutional practices and barriers, cultural norms, gender roles, access to and control over assets and resources, and patterns of decision-making. Applicants should briefly explain how they have integrated findings from their analysis into project design and/or other proposal documents, including a plan for regularly reviewing and updating the gender and inclusion analysis with local partners/beneficiaries, and making any necessary adjustments to project implementation.

D.2.2 Additional Information Requested for Those Receiving Conditional Notification Letter Successful applicants must submit, after Conditional Notification Letter, but prior to issuance of a federal award:

• Written responses and revised application documents addressing conditions and recommendations from the review panel.

• A copy of the applicant’s latest NICRA as a PDF file, if the applicant has a NICRA and includes NICRA charges in the budget.

• A completed copy of the Department’s Financial Management Survey, if receiving USG funding for the first time.

• Submission of required documents to register in the Payment Management System managed by the Department of Health and Human Services, if receiving CDP funding for the first time (unless an exemption is provided).

• Other requested information or documents included in the Conditional Notification Letter or subsequent communications prior to issuance of a federal award.

• Applicants who submit their applications through Grants.gov will be required to create a MyGrants account in order to accept the final award. Accounts must be logged into to every 60 days in order to maintain an active account.

D3. Unique Entity Identifier (UEI) and System for Award Management (SAM) All organizations, whether based in the United States or in another country, must have a Unique Entity Identifier (UEI) and an active registration with SAM.gov. A UEI is one of the data elements mandated by Public Law 109-282, the Federal Funding Accountability and Transparency Act (FFATA), for all federal awards.

The 2 CFR 200 requires that sub-grantees obtain a UEI number. Please note the UEI for sub-grantees is not required at the time of application but will be required before an award is processed and/or directed to a sub-grantee.

Note: The process of obtaining or renewing a SAM.gov registration may take anywhere from 4-8 weeks. Please begin your registration as early as possible and advise proposed sub-grantees to do so as well.

• Organizations based in the United States or that pay employees within the United States will need an Employer Identification Number (EIN) from the Internal Revenue Service (IRS) and a UEI number issued through SAM.gov. Once the UEI number is received continue with the remainder of the SAM.gov registration.

• Organizations based outside of the United States that do not pay employees within the United States do not need an EIN from the IRS but do need a UEI number – obtained by registering as an entity in SAM.gov.

Organizations based outside of the United States and that DO NOT plan to do business with the DoD should follow the below instructions:

Step 1: Proceed to SAM.gov to obtain a UEI and complete the SAM.gov registration process.

SAM.gov registration must be renewed annually.

All prime organizations must also continue to maintain active SAM.gov registration with current information at all times during which they have an active federal award or application under consideration by a federal award agency. SAM.gov requires all entities to renew their registration once a year in order to maintain an active registration status in SAM. It is the responsibility of the applicant to ensure it has an active registration in SAM.gov and to maintain that active registration. If an applicant has not fully complied with the requirements at the time of application, the applicant may be deemed technically ineligible to receive an award and use that determination as a basis for making an award to another applicant.

Note: SAM.gov is not the same as MyGrants. It is free to register in both systems, but the registration processes are different.

Information is included on the SAM.gov website to help international registrations:

https://www.fsd.gov/gsafsd_sp?id=kb_article_view&sysparm_article=KB0016380&sys_kb_id=1 94695221bfe4d983565ed3ce54bcbbb&spa=1 https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fwww.fsd.gov.mcas.ms%2Fgsafsd_sp%3Fid%3Dkb_article_view%26sysparm_article%3DKB0016380%26sys_kb_id%3D194695221bfe4d983565ed3ce54bcbbb%26spa%3D1%26McasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11 https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fwww.fsd.gov.mcas.ms%2Fgsafsd_sp%3Fid%3Dkb_article_view%26sysparm_article%3DKB0016380%26sys_kb_id%3D194695221bfe4d983565ed3ce54bcbbb%26spa%3D1%26McasTsid%3D20892&McasCSRF=9b5cb826be098bf166781c47404229b4de16d54d7f026fac64ae43e76a3c4c11

Please note, guidance on SAM.gov and the guidance on GSA’s website about requirement for registering in SAM.gov is subject to change at any time.