Sol_75H71026Q00298.pdf

SEE ADDENDUMIS CHECKED

CODE 18a. PAYMENT WILL BE MADE BY

CODE

FACILITYCODE

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

OFFEROR

Highway 160, Mile Post 394.3 PO Box 368 Acquisition Department Kayenta Health Center

CODE 16. ADMINISTERED BYCODE

X

X

334510

SIZE STANDARD:

% FOR:SET ASIDE:UNRESTRICTED OR25

RFPIFB

10. THIS ACQUISITION ISCODE

RFQ

14. METHOD OF SOLICITATION

13b. RATING

NAICS:

SMALL BUSINESS

09/15/2026 1700 MD

09/09/2026

FLORA WASHINGTON

(No collect calls)

INFORMATION CALL:

FOR SOLICITATION 8. OFFER DUE DATE/LOCAL TIMEb. TELEPHONE NUMBER a. NAME

4. ORDER NUMBER3. AWARD/ 6. SOLICITATION

75H71026Q00298

5. SOLICITATION NUMBER

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS 1. REQUISITION NUMBER PAGE OF

1 33 IHS1528944OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

Kayenta AZ 86033

TELEPHONE NO.

17a. CONTRACTOR/

Kayenta AZ 86033 Highway 160, Mile Post 394.3 Kayenta Health Center

15. DELIVER TO

Kayenta AZ 86033 Highway 160, Mile Post 394.3 PO Box 368 Acquisition Department

9. ISSUED BY

7.

2. CONTRACT NO.

EFFECTIVE DATE

1,250

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW

ISSUE DATE

DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

11.

SEE SCHEDULEX

12. DISCOUNT TERMS

THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13a.

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

8(A)

Kayenta Health Center

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

***This is an Indian-Owned, Small Business Economic Enterprise (ISBEE) Set-Aside***

This contract is subject to the electronic payment process by the Department of Treasury.

All invoices complying to the requirements at 52.212-4(g) must be submitted through www.ipp.gov. For additional information, refer to the incorporated clause at 352.232-71 Electronic Submission of Payment Requests (APR 2026

DEVIATION).

(Use Reverse and/or Attach Additional Sheets as Necessary)

HEREIN, IS ACCEPTED AS TO ITEMS:

XX

DATED

JERLYN R. BEGAY

. YOUR OFFER ON SOLICITATION (BLOCK 5),

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER

ARE

ARE

31c. DATE SIGNED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print)

ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL

SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

OFFER

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

ARE NOT ATTACHED.

ARE NOT ATTACHED.

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

30b. NAME AND TITLE OF SIGNER (Type or print)

30a. SIGNATURE OF OFFEROR/CONTRACTOR

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

25. ACCOUNTING AND APPROPRIATION DATA

29. AWARD OF CONTRACT:

REF.

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32c. DATE 32b. SIGNATURE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

40. PAID BY39. S/R VOUCHER NUMBER38. S/R ACCOUNT NUMBER

37. CHECK NUMBER

FINALPARTIAL

36. PAYMENT

FINALPARTIAL

35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER33. SHIP NUMBER

COMPLETE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

42d. TOTAL CONTAINERS42c. DATE REC'D (YY/MM/DD)

42b. RECEIVED AT (Location)

42a. RECEIVED BY (Print)

41c. DATE41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

STANDARD FORM 1449 (REV. 2/2012) BACK

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

Period of Performance: 10/01/2026 to 09/30/2027

1 The Contractor shall remove and install ultrasound unit per the Statement of Work

(Attachment A) for the Kayenta Health Center in

Kayenta, Arizona 86033.

32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

33 2 of

Rev. 04/29/2026

SECTION B – CONTINUATION OF SF-1449

THIS PAGE IS INTENTIONALLY LEFT BLANK

SECTION C – CONTRACT CLAUSES

52.212-4 CONTRACT TERMS AND CONDITIONS –

COMMERCIAL PRODUCTS AND COMMERCIAL

SERVICES

NOV 2025

(DEVIATION)

The following Federal Acquisition Regulation clauses also apply:

☐ 52.203-3 GRATUITIES APR 1984

☐ 52.203-6 RESTRICTIONS ON SUBCONTRACTOR SALES TO THE GOVERNMENT Alt I

NOV 2021

☐ 52.203-12 LIMITATION OF PAYMENTS TO INFLUENCE CERTAIN FEDERAL

TRANSACTIONS

JUN 2020

☐ 52.203-13 CONTRACTOR CODE OF BUSINESS ETHICS AND CONDUCT NOV 2021

☐ 52.203-16 PREVENTING PERSONAL CONFLICTS OF INTEREST JUN 2020

☒ 52.203-17 CONTRACTOR EMPLOYEE WHISTLEBLOWER RIGHTS NOV 2023

☒ 52.203-19 PROHIBITION ON REQUIRING CERTAIN INTERNAL CONFIDENTIALITY

AGREEMENTS OR STATEMENTS

JAN 2017

☒ 52.204-9 PERSONAL IDENTITY VERIFICATION OF CONTRACTOR PERSONNEL JAN 2011

☒ 52.204-13 SYSTEM FOR AWARD MANAGEMENT MAINTENANCE NOV 2025

(DEVIATION)

☐ 52.204-14 SERVICE CONTRACT REPORTING REQUIREMENTS NOV 2025

(DEVIATION)

☐ 52.204-15 SERVICE CONTRACT REPORTING REQUIREMENTS FOR INDEFINITE-

DELIVERY CONTRACTS

NOV 2025

(DEVIATION)

☐ 52.204-91 CONTRACTOR IDENTIFICATION NOV 2025

(DEVIATION)

☒ 52.209-6 PROTECTING THE GOVERNMENT’S INTEREST WHEN

SUBCONTRACTING WITH CONTRACTORS DEBARRED, SUSPENDED, OR

PROPOSED FOR DEBARMENT

NOV 2025

(DEVIATION)

☐ 52.209-9 UPDATES OF PUBLICLY AVAILABLE INFORMATION REGARDING

RESPONSIBILITY MATTERS

NOV 2025

(DEVIATION)

☒ 52.209-10 PROHIBITION ON CONTRACTING WITH INVERTED DOMESTIC

CORPORATIONS

NOV 2025

(DEVIATION)

☐ 52.213-1 RESERVED

☐ 52.219-3 NOTICE OF HUBZONE SET-ASIDE OR SOLE-SOURCE AWARD NOV 2025

(DEVIATION)

☐ 52.219-6 NOTICE OF TOTAL SMALL BUSINESS SET-ASIDE NOV 2025

(DEVIATION)

☐ 52.219-6 Alt I

NOTICE OF TOTAL SMALL BUSINESS SET-ASIDE, WITH ALTERNATE I NOV 2025

☐ 52.219-7 NOTICE OF PARTIAL SMALL BUSINESS SET-ASIDE NOV 2020

☐ 52.219-7 Alt I

NOTICE OF PARTIAL SMALL BUSINESS SET-ASIDE, WITH ALTERNATE I MAR 2020

☐ 52.219-8 UTILIZATION OF SMALL BUSINESS CONCERNS NOV 2025

(DEVIATION)

☐ 52.219-9 SMALL BUSINESS SUBCONTRACTING PLAN MAR 2026

(DEVIATION)

☐ 52.219-9 Alt I

SMALL BUSINESS SUBCONTRACTING PLAN, WITH ALTERNATE I MAR 2026

(DEVIATION)

☐ 52.219-9 Alt II

SMALL BUSINESS SUBCONTRACTING PLAN, WITH ALTERNATE II MAR 2026

(DEVIATION)

☐ 52.219-9 Alt III

SMALL BUSINESS SUBCONTRACTING PLAN, WITH ALTERNATE III MAR 2026

(DEVIATION)

☐ 52.219-9 Alt IV

SMALL BUSINESS SUBCONTRACTING PLAN, WITH ALTERNATE IV MAR 2026

(DEVIATION)

☐ 52.219-13 NOTICE OF SET-ASIDE OF ORDERS MAR 2020

☐ 52.219-13 Alt I

RESERVED

☐ 52.219-16 LIQUIDATED DAMAGES—SUBCONTRACTING PLAN NOV 2025

(DEVIATION)

☐ 52.219-27 NOTICE OF SET-ASIDE FOR, OR SOLE-SOURCE AWARD TO, SERVICE-

DISABLED VETERAN-OWNED SMALL BUSINESS (SDVOSB) CONCERNS

ELIGIBLE UNDER THE SDVOSB PROGRAM

NOV 2025

(DEVIATION)

☒ 52.219-28 POSTAWARD SMALL BUSINESS PROGRAM REREPRESENTATION NOV 2025

(DEVIATION)

☐ 52.219-28 Alt I

POSTAWARD SMALL BUSINESS PROGRAM REREPRESENTATION, WITH

ALTERNATE I

NOV 2025

(DEVIATION)

☐ 52.219-29 NOTICE OF SET-ASIDE FOR, OR SOLE-SOURCE AWARD TO,

ECONOMICALLY DISADVANTAGED WOMEN-OWNED SMALL BUSINESS

CONCERNS

NOV 2025

(DEVIATION)

☐ 52.219-30 NOTICE OF SET-ASIDE FOR, OR SOLE-SOURCE AWARD TO, WOMEN-

OWNED SMALL BUSINESS CONCERNS ELIGIBLE UNDER THE WOMEN-

OWNED SMALL BUSINESS PROGRAM

NOV 2025

(DEVIATION)

☐ 52.219-33 NONMANUFACTURER RULE NOV 2025

(DEVIATION)

☒ 52.222-3 CONVICT LABOR NOV 2025

(DEVIATION)

☒ 52.222-19 CHILD LABOR—COOPERATION WITH AUTHORITIES AND REMEDIES NOV 2025

(DEVIATION)

☐ 52.222-35 EQUAL OPPORTUNITY FOR VETERANS NOV 2025

(DEVIATION)

☒ 52.222-36 EQUAL OPPORTUNITY FOR WORKERS WITH DISABILITIES NOV 2025

(DEVIATION)

☐ 52.222-36

ALT I

EQUAL OPPORTUNITY FOR WORKERS WITH DISABILITIES, WITH

ALTERNATE I

JUL 2014

☐ 52.222-37 EMPLOYMENT REPORTS ON VETERANS NOV 2025

☐ 52.222-40 NOTIFICATION OF EMPLOYEE RIGHTS UNDER THE NATIONAL LABOR

RELATIONS ACT

NOV 2025

(DEVIATION)

☐ 52.222-41 SERVICE CONTRACT LABOR STANDARDS NOV 2025

(DEVIATION)

☐ 52.222-43 FAIR LABOR STANDARDS ACT AND SERVICE CONTRACT LABOR

STANDARDS-PRICE ADJUSTMENT (MULTIPLE YEAR AND OPTION

CONTRACTS)

NOV 2025

(DEVIATION)

☐ 52.222-44 FAIR LABOR STANDARDS ACT AND SERVICE CONTRACT LABOR

STANDARDS-PRICE ADJUSTMENT

NOV 2025

(DEVIATION)

☒ 52.222-50 COMBATING TRAFFICKING IN PERSONS NOV 2025

(DEVIATION)

☐ 52.222-50 Alt I

COMBATING TRAFFICKING IN PERSONS NOV 2025

(DEVIATION)

☐ 52.222-51 EXEMPTION FROM APPLICATION OF THE SERVICE CONTRACT LABOR

STANDARDS TO CONTRACTS FOR MAINTENANCE, CALIBRATION, OR

REPAIR OF CERTAIN EQUIPMENT—REQUIREMENTS

NOV 2025

(DEVIATION)

☐ 52.222-53 EXEMPTION FROM APPLICATION OF THE SERVICE CONTRACT LABOR

STANDARDS TO CONTRACTS FOR CERTAIN SERVICES—

REQUIREMENTS

NOV 2025

(DEVIATION)

☒ 52.222-54 EMPLOYMENT ELIGIBILITY VERIFICATION NOV 2025

(DEVIATION)

☐ 52.222-55 MINIMUM WAGES FOR CONTRACTOR WORKERS UNDER EXECUTIVE

ORDER 14026

NOV 2025

(DEVIATION)

☐ 52.222-62 PAID SICK LEAVE UNDER EXECUTIVE ORDER 13706 NOV 2025

(DEVIATION)

☒ 52.222-90 ADDRESSING DEI DISCIMINATION BY FEDERAL CONTRACTORS APR 2026

(DEVIATION)

☐ 52.223-2 REPORTING OF BIOBASED PRODUCTS UNDER SERVICE AND

CONSTRUCTION CONTRACTS

NOV 2025

(DEVIATION)

☐ 52.223-5 POLLUTION PREVENTION AND RIGHT-TO-KNOW INFORMATION MAY 2024

☐ 52.223-11 OZONE-DEPLETING SUBSTANCES NOV 2025

(DEVIATION)

☐ 52.223-12 MAINTENANCE, SERVICE, REPAIR, OR DISPOSAL OF REFRIGERATION

EQUIPMENT AND AIR CONDITIONERS

NOV 2025

(DEVIATION)

☒ 52.223-23 SUSTAINABLE PRODUCTS NOV 2025

(DEVIATION)

☒ 52.224-1 PRIVACY ACT NOTIFICATION APR 1984

☒ 52.224-2 PRIVACY ACT APR 1984

☒ 52.224-3 PRIVACY TRAINING JAN 2017

☐ 52.224-3

ALT I

PRIVACY TRAINING, WITH ALTERNATE I JAN 2017

☐ 52.225-1 BUY AMERICAN-SUPPLIES NOV 2025

(DEVIATION)

☐ 52.225-1 Alt I

BUY AMERICAN-SUPPLIES, WITH ALTERNATE I OCT 2022

☐ 52.225-3 BUY AMERICAN-FREE TRADE AGREEMENTS-ISRAELI TRADE ACT NOV 2025

(DEVIATION)

52.225-3

ALT I

RESERVED

☐ 52.225-3 Alt II

BUY AMERICAN-FREE TRADE AGREEMENTS-ISRAELI TRADE ACT,

WITH ALTERNATE II

NOV 2025

(DEVIATION)

☐ 52.225-3 Alt III

BUY AMERICAN-FREE TRADE AGREEMENTS-ISRAELI TRADE ACT,

WITH ALTERNATE III

NOV 2025

(DEVIATION)

☐ 52.225-3 Alt IV

BUY AMERICAN-FREE TRADE AGREEMENTS-ISRAELI TRADE ACT,

WITH ALTERNATE IV

NOV 2025

(DEVIATION)

☒ 52.225-5 TRADE AGREEMENTS NOV 2023

☐ 52.225-14 INCONSISTENCY BETWEEN ENGLISH VERSION AND TRANSLATION OF

CONTRACT

FEB 2000

☐ 52.225-19 CONTRACTOR PERSONNEL IN A DESIGNATED OPERATIONAL AREA OR

SUPPORTING A DIPLOMATIC OR CONSULAR MISSION OUTSIDE THE

UNITED STATES

MAY 2020

☐ 52.225-26 CONTRACTORS PERFORMING PRIVATE SECURITY FUNCTIONS

OUTSIDE THE UNITED STATES

OCT 2016

☒ 52.226-1 UTILIZATION OF INDIAN ORGANIZATIONS AND INDIAN-OWNED

ECONOMIC ENTERPRISES

NOV 2025

(DEVIATION)

☐ 52.226-5 RESTRICTIONS ON SUBCONTRACTING OUTSIDE DISASTER OR

EMERGENCY AREA

NOV 2025

(DEVIATION)

☐ 52.226-6 PROMOTING EXCESS FOOD DONATION TO NONPROFIT

ORGANIZATIONS

NOV 2025

(DEVIATION)

☐ 52.226-7 DRUG-FREE WORKPLACE MAY 2024

☒ 52.226-8 ENCOURAGING CONTRACTOR POLICIES TO BAN TEXT MESSAGING

WHILE DRIVING

MAY 2024

☐ 52.229-12 TAX ON CERTAIN FOREIGN PROCUREMENTS AUG 2025

(DEVIATION)

☐ 52.232-3 PAYMENTS UNDER PERSONAL SERVICES CONTRACTS NOV 2025

(DEVIATION)

☐ 52.232-18 AVAILABILITY OF FUNDS APR 1984

☐ 52.232-29 TERMS FOR FINANCING OF COMMERCIAL PRODUCTS AND

COMMERCIAL SERVICES

NOV 2021

☐ 52.232-30 INSTALLMENT PAYMENTS OF COMMERCIAL PRODUCTS AND

COMMERCIAL SERVICES

NOV 2021

☒ 52.232-33 PAYMENT BY ELECTRONIC FUNDS TRANSFER—SYSTEM FOR AWARD

MANAGEMENT

OCT 2018

☐ 52.232-34 PAYMENT BY ELECTRONIC FUNDS TRANSFER—OTHER THAN SYSTEM

FOR AWARD MANAGEMENT

JUL 2013

☐ 52.232-36 PAYMENT BY THIRD PARTY NOV 2025

(DEVIATION)

☒ 52.232-40 PROVIDING ACCELERATED PAYMENTS TO SMALL BUSINESS

SUBCONTRACTORS

MAR 2023

☐ 52.232-90 FAST PAYMENT PROCEDURE NOV 2025

☒ 52.233-3 PROTEST AFTER AWARD NOV 2025

(DEVIATION)

☒ 52.233-4 APPLICABLE LAW FOR BREACH OF CONTRACT CLAIM NOV 2025

(DEVIATION)

☒ 52.237-2 PROTECTION OF GOVERNMENT BUILDING, EQUIPMENT, AND

VEGETATION

APR 1984

☐ 52.237-3 CONTINUITY OF SERVICES JAN 1991

☒ 52.240-91 SECURITY PROHIBITIONS AND EXCLUSIONS NOV 2025

(DEVIATION)

☐ 52.240-91 Alt I

SECURITY PROHIBITIONS AND EXCLUSIONS, WITH ALTERNATE I NOV 2025

(DEVIATION)

☐ 52.240-92 SECURITY REQUIREMENTS NOV 2025

(DEVIATION)

☐ 52.240-92 Alt II

SECURITY REQUIREMENTS WITH ALTERNATE II NOV 2025

(DEVIATION)

☐ 52.240-93 BASIC SAFEGUARDING OF COVERED CONTRACTOR INFORMATION

SYSTEMS

NOV 2025

(DEVIATION)

☐ 52.242-5 PAYMENTS TO SMAL BUSINESS SUBCONTRACTORS JAN 2017

☐ 52.242-13 BANKRUPTCY JUL 1995

☐ 52.244-2 SUBCONTRACTS JUN 2020

☒ 52.244-6 SUBCONTRACTS FOR COMMERCIAL PRODUCTS AND COMMERCIAL

SERVICES

NOV 2025

(DEVIATION)

☐ 52.245-1 GOVERNMENT PROPERTY SEP 2021

☐ 52.245-2 GOVERNMENT PROPERTY INSTALLATION OPERATION SERVICES APR 2012

☐ 52.245-9 USE AND CHARGES APR 2012

☐ 52.247-64 PREFERENCE FOR PRIVATELY OWNED U.S.-FLAG COMMERCIAL

VESSELS

NOV 2025

(DEVIATION)

☐ 52.247-64 Alt I

PREFERENCE FOR PRIVATELY OWNED U.S.-FLAG COMMERCIAL

VESSELS, WITH ALTERNATE I

APR 2003

☐ 52.247-64 Alt II

PREFERENCE FOR PRIVATELY OWNED U.S.-FLAG COMMERCIAL

VESSELS, WITH ALTERNATE II

NOV 2021

52.219-14 LIMITATIONS ON SUBCONTRACTING NOV 2025

(a) This clause does not apply to the unrestricted portion of a partial set-aside.

(b) Definition. Similarly situated entity, as used in this clause, means a first-tier subcontractor, including an independent contractor, that—

(1) Has the same small business program status as that which qualified the prime contractor for the award (e.g., for a small business set-aside contract, any small business concern, without regard to its socioeconomic status); and

(2) Is considered small for the size standard under the North American Industry Classification System (NAICS) code the prime contractor assigned to the subcontract.

(c) Applicability. This clause applies only to—

(1) Contracts that have been set aside for any of the small business concerns identified in 19.000(a)(3);

(2) Part or parts of a multiple-award contract that have been set aside for any of the small business concerns identified in 19.000(a)(3);

(3) Contracts that have been awarded on a sole-source basis in accordance with subparts 19.105, 19.106, 19.107, and 19.108;

(4) Orders expected to exceed the simplified acquisition threshold and that are set aside for small business concerns under multiple-award contracts, as described in 8.4 and 16.5;

(5) Orders, regardless of dollar value, that are set aside in accordance with section 19.105, 19.106, 19.107, and 19.108 under multiple-award contracts, as described in 8.4 and 16.5; and

(6) Contracts using the HUBZone price evaluation preference to award to a HUBZone small business concern unless the concern waived the evaluation preference.

(d) Independent contractors. An independent contractor shall be considered a subcontractor.

(e) By submission of an offer and execution of a contract, the Contractor agrees that in performance of a contract assigned a North American Industry Classification System (NAICS) code for—

(1) Services (except construction), it will not pay more than 50 percent of the amount paid by the Government for contract performance to subcontractors that are not similarly situated entities. Any work that a similarly situated entity further subcontracts will count towards the prime contractor's 50 percent subcontract amount that cannot be exceeded. When a contract includes both services and supplies, the 50 percent limitation shall apply only to the service portion of the contract;

(2) Supplies (other than procurement from a nonmanufacturer of such supplies), it will not pay more than 50 percent of the amount paid by the Government for contract performance, excluding the cost of materials, to subcontractors that are not similarly situated entities. Any work that a similarly situated entity further subcontracts will count towards the prime contractor's 50 percent subcontract amount that cannot be exceeded. When a contract includes both supplies and services, the 50 percent limitation shall apply only to the supply portion of the contract;

(3) General construction, it will not pay more than 85 percent of the amount paid by the Government for contract performance, excluding the cost of materials, to subcontractors that are not similarly situated entities. Any work that a similarly situated entity further subcontracts will count towards the prime contractor's 85 percent subcontract amount that cannot be exceeded; or

(4) Construction by special trade contractors, it will not pay more than 75 percent of the amount paid by the Government for contract performance, excluding the cost of materials, to subcontractors that are not similarly situated entities. Any work that a similarly situated entity further subcontracts will count towards the prime contractor's 75 percent subcontract amount that cannot be exceeded.

https://www.acquisition.gov/far/part-19#FAR_19_000 https://www.acquisition.gov/far/part-19#FAR_19_000

(f) The Contractor shall comply with the limitations on subcontracting as follows:

(1) For contracts, in accordance with paragraphs (c)(1), (2), (3) and (6) of this clause—

☐ By the end of the base term of the contract and then by the end of each subsequent option period; or

☒ By the end of the performance period for each order issued under the contract.

(2) For orders, in accordance with paragraphs (c)(4) and (5) of this clause, by the end of the performance period for the order.

(g) A joint venture agrees that, in the performance of the contract, the applicable percentage specified in paragraph (e) of this clause will be performed by the aggregate of the joint venture participants.

(1) In a joint venture comprised of a small business protégé and its mentor approved by the Small Business Administration, the small business protégé shall perform at least 40 percent of the work performed by the joint venture. Work performed by the small business protégé in the joint venture must be more than administrative functions.

(2) In an 8(a) joint venture, the 8(a) participant(s) shall perform at least 40 percent of the work performed by the joint venture. Work performed by the 8(a) participants in the joint venture must be more than administrative functions.

(End of Clause)

52.252-2 CLAUSES INCORPORATED BY REFERENCE FEB 1998

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

Revolutionary FAR Overhaul - FAR Overhaul - FAR Part Deviation Guidance | Acquisition.GOV

Federal Acquisition Regulation - https://www.acquisition.gov/browse/index/far

Department of Health and Human Services Acquisition Regulation – https://www.acquisition.gov/hhsar

(End of clause)

52.252-6 AUTHORIZED DEVIATIONS IN CLAUSES NOV 2020

(a)The use in this solicitation or contract of any Federal Acquisition Regulation (48 CFR Chapter 1) clause with an authorized deviation is indicated by the addition of "(DEVIATION)" after the date of the clause.

(b)The use in this solicitation or contract of any Department of Health and Human Services (48 CFR Chapter 3) clause with an authorized deviation is indicated by the addition of "(DEVIATION)" after the name of the regulation.

(End of clause)

The following Department of Health and Human Services Acquisition Regulation clauses also apply:

https://www.acquisition.gov/far-overhaul/far-part-deviation-guide https://www.acquisition.gov/browse/index/far https://www.acquisition.gov/hhsar

☐ 352.203-70 ANTI-LOBBYING DEC 2015

☐ 352.208-70 PRINTING AND DUPLICATION DEC 2015

☐ 352.211-3 PAPERWORK REDUCTION ACT DEC 2015

☐ 352.219-71 MENTOR-PROTÉGÉ PROGRAM REPORTING REQUIREMENTS JAN 2010

☐ 352.223-70 SAFETY AND HEALTH DEC 2015

☒ 352.224-70 PRIVACY ACT DEC 2015

☒ 352.226-6 INDIAN ECONOMIC ENTERPRISE SUBCONTRACTING

LIMITATIONS

MAR 2022

☐ 352.227-70 PUBLICATIONS AND PUBLICITY DEC 2015

☐ 352.231-70 SALARY RATE LIMITATION DEC 2015

☐ 352.237-70 PRO-CHILDREN ACT DEC 2015

☐ 352.237-71 CRIME CONTROL ACT – REPORTING OF CHILD ABUSE DEC 2015

☐ 352.237-72 CRIME CONTROL ACT – REQUIREMENTS FOR BACKGROUND

CHECKS

DEC 2015

☐ 352.237-73 INDIAN CHILD PROTECTION AND FAMILY VIOLENCE ACT DEC 2015

352.232-71 ELECTRONIC SUBMISSION OF PAYMENT

REQUESTS

APR 2026

(a) Definitions. As used in this clause –

Payment request means a bill, voucher, invoice, or request for contract financing payment with associated supporting documentation. The payment request must comply with the requirements in FAR 32.905(b) and the applicable payment clause included in this contract.

(b) Submission instructions. Except as provided in paragraph (c) of this clause, the Contractor must submit payment requests electronically using the Department of Treasury Invoice Processing Platform (IPP) or successor system. Information regarding IPP, including IPP Customer Support contact information, is available at www.ipp.gov or any successor site.

(c) Alternate submission procedures. The Contractor may submit payment requests using other than IPP only when the Contracting Officer authorizes alternate procedures in writing.

(d) Submission of alternate payment procedures authorization. If alternate payment procedures are authorized, the Contractor shall include a copy of the Contracting Officer’s written authorization with each payment request.

(End of clause)

352.239-74 ELECTRONIC AND INFORMATION TECHNOLOGY

ACCESSIBILITY

DEC 2015

(a) Pursuant to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d), as amended by the Workforce Investment Act of 1998, all electronic and information technology (EIT) supplies and services developed, acquired, or maintained under this contract or order must comply with the “Architectural and Transportation Barriers http://www.ipp.gov/

Compliance Board Electronic and Information Technology (EIT) Accessibility Standards” set forth by the Architectural and Transportation Barriers Compliance Board (also referred to as the “Access Board”) in 36 CFR part 1194. Information about Section 508 is available at http://www.hhs.gov/web/508. The complete text of Section 508 Final Provisions can be accessed at http://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-section-508-standards.

(b) The Section 508 accessibility standards applicable to this contract or order are identified in the Statement of Work or Specification or Performance Work Statement. The contractor must provide any necessary updates to the submitted HHS Product Assessment Template(s) at the end of each contract or order exceeding the simplified acquisition threshold (see FAR 2.101) when the contract or order duration is one year or less. If it is determined by the Government that EIT supplies and services provided by the Contractor do not conform to the described accessibility standards in the contract, remediation of the supplies or services to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(c) The Section 508 accessibility standards applicable to this contract are:

All Information and Communication Technology (ICT) deliverables—such as websites, applications, electronic documents, and multimedia—must conform to the Revised Section 508 Standards (36 CFR Part 1194) and WCAG 2.1 Level A/AA. Contracting documentation (e.g., SOW, PWS, or SOO) must include accessibility requirements, and vendors must provide accessibility conformance documentation (e.g., VPAT/ACR or HHS Section 508 checklist) to demonstrate compliance.

(d) In the event of a modification(s) to this contract or order, which adds new EIT supplies or services or revises the type of, or specifications for, supplies or services, the Contracting Officer may require that the contractor submit a completed HHS Section 508 Product Assessment Template and any other additional information necessary to assist the Government in determining that the EIT supplies or services conform to Section 508 accessibility standards. Instructions for documenting accessibility via the HHS Section 508 Product Assessment Template may be found under Section 508 policy on the HHS Web site: (http://www.hhs.gov/web/508). If it is determined by the Government that EIT supplies and services provided by the Contractor do not conform to the described accessibility standards in the contract, remediation of the supplies or services to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(e) If this is an Indefinite Delivery contract, a Blanket Purchase Agreement or a Basic Ordering Agreement, the task/delivery order requests that include EIT supplies or services will define the specifications and accessibility standards for the order. In those cases, the Contractor may be required to provide a completed HHS Section 508 Product Assessment Template and any other additional information necessary to assist the Government in determining that the EIT supplies or services conform to Section 508 accessibility standards. Instructions for documenting accessibility via the HHS Section 508 Product Assessment Template may be found at http://www.hhs.gov/web/508. If it is determined by the Government that EIT supplies and services provided by the Contractor do not conform to the described accessibility standards in the provided documentation, remediation of the supplies or services to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(End of clause)

The following local Indian Health Service, Navajo Area terms also apply:

NAIHS-ACQ-09 UNAUTHORIZED COMMITMENTS NOV 2025

(a) Definitions.

Contracting Officer means a person with the authority to enter into, administer, and/or terminate contracts and make related determination and findings.

Ratification means the act of approving an unauthorized commitment by an official who has the authority to do so.

Unauthorized Commitment (UAC) means an agreement that is not binding solely because the Government representative who made it lacked the authority to enter into that agreement on behalf of the Government.

(b) Policy.

The Government is not bound by agreements with, or contractual commitments made to, prospective contractors by individuals who do not have delegated contracting authority. Unauthorized commitments do not follow the appropriate process for the expenditure of Government funds. Consequently, the Government may not be able to ratify certain actions, putting a contractor at risk for taking direction from a Federal official other than the contracting officer (see FAR 1.403-2). Government employees responsible for unauthorized commitments are subject to disciplinary action. Contractors perform at their own risk when accepting direction from unauthorized officials. Failure to follow statutory and regulatory processes for the expenditure of Government funds is a very serious matter.

(c) Procedure.

Any agreement, modification, or change to a contractual agreement made by a government personnel who lack authority will be deemed an unauthorized commitment. The Government is not liable to the Contractor or under the terms of the contract, financially or otherwise – unless the unauthorized commitment successfully passes the ratification process.

The ratification process does not have any lead time, nor does the Government make any promise that an unauthorized commitment will be ratified and, therefore, the Contractor would be paid. The Contractor proceeds at its own risk if any of the terms of the contract are altered, changed, or modified without the written concurrence by a Contracting Officer.

NAIHS-ACQ-18 COVERED ENTITIES AND BUSINESS

ASSOCIATES

APR 2025

The Standards for Privacy of Individually Identifiable Health Information ("Privacy Rule") establishes, for the first time, a set of national standards for the protection of certain health information. The U.S. Department of Health and Human Services ("HHS") issued the Privacy Rule to implement the requirement of the Health Insurance Portability and Accountability Act of 1996 ("HIPAA").1 The Privacy Rule standards address the use and disclosure of individuals' health information—called "protected health information" by organizations subject to the Privacy Rule

— called "covered entities," as well as standards for individuals' privacy rights to understand and control how their health information is used. Within HHS, the Office for Civil Rights ("OCR") has responsibility for implementing and enforcing the Privacy Rule with respect to voluntary compliance activities and civil money penalties.

A major goal of the Privacy Rule is to assure that individuals' health information is properly protected while allowing the flow of health information needed to provide and promote high quality health care and to protect the public's health and well being. The Rule strikes a balance that permits important uses of information, while protecting the privacy of people who seek care and healing. Given that the health care marketplace is diverse, the Rule is designed to be flexible and comprehensive to cover the variety of uses and disclosures that need to be addressed.

Individuals, organizations, and agencies that meet the definition of a covered entity under HIPAA Rules at 45 CFR

160.103 must comply with the Rules' requirements to protect the privacy and security of health information and must provide individuals with certain rights with respect to their health information. If a covered entity engages a business associate to help it carry out its health care activities and functions, the covered entity must have a written business associate contract or other arrangement with the business associate that establishes specifically what the business associate has been engaged to do and requires the business associate to comply with the Rules’ requirements to protect the privacy and security of protected health information. In addition to these contractual obligations, business associates are directly liable for compliance with certain provisions of the HIPAA Rules.

Under this contract the contractor and its employees agree to the Business Associate Agreement labeled as Attachment C that has been incorporated into this solicitation or contract.

(End of Clause)

NAIHS-ACQ-20 PROTECTING FEDERAL EMPLOYEES AND

THE PUBLIC FROM EXPOSURE TO TOBACCO

SMOKE IN THE FEDERAL WORKPLACE

APR 2026

In accordance with Executive Order 13058 “Protecting Federal Employees and the Public from Exposure to Tobacco Smoke in the Federal Workplace,” and the Assistant Secretary for Health memorandum “Prohibition of Tobacco Use in HHS Occupied Facilities,” the use of tobacco products, in any form, is strictly prohibited at IHS-operated properties including, but not limited to:

1. All interior and exterior spaces of IHS-operated properties.

2. All HIS-operated spaces in multi-tenant buildings.

3. All Government vehicles regardless of their location.

4. Private vehicles while on IHS property.

The IHS continues to recognize the value and efficacy of patients’ traditional beliefs and ceremonial practices. The use of tobacco products for ceremonial purposes is allowed in the designated traditional healing room, including any space designated for a ceremony, or in a patient’s hospital room.

To the maximum extent practicable, Contractor must notify the Contracting Officer’s Representative in advance of using tobacco products in a ceremony.

SECTION D – DOCUMENTS, EXHIBITS, ATTACHMENTS, ETC.

Attachment A – Statement of Work

Attachment B – Indian Health Service Buy Indian Act Indian Economic Enterprise Representation Form

Attachment C – Business Associate Agreement

Statement of Work (SOW)

Replacement of Ultrasound Units

Kayenta Alternative Rural Hospital (KARH)

1. Background

The Kayenta Alternative Rural Hospital (KARH) currently utilizes ultrasound (US) systems that have exceeded their recommended lifecycle.

• The ultrasound unit at KARH is over 10 years old.

This system is beyond its expected service life, upgrading this system will support efforts to ensure patient needs are met by enabling more efficient and comprehensive imaging services. It will also enhance timely reporting and diagnosing, which is critical to improving patient outcomes and streamlining treatment plans. These improvements will help better meet the health care needs of Indian communities.

Additionally, modernizing the US equipment and associated software will keep the facility aligned with current technological standards. Upgraded imaging and information technology systems will enhance diagnostic capabilities, support timely care delivery, and contribute to the ongoing effort to provide high-quality, culturally responsive care in an increasingly digital health care environment.

2. Purpose

The purpose of this procurement is to acquire a user-friendly and reliable new diagnostic ultrasound systems—for KARH:

• Antenatal (OB) examinations

• Abdominal scans

• Pelvic imaging

• Basic small parts imaging

• Emergency point-of-care assessments

The system must be cost-effective, durable, and suitable for moderate patient volumes typical of a community health center.

3. Scope of Work

The contractor shall provide all labor, materials, equipment, transportation, and supervision necessary to:

Attachment A – Statement of Work

3.1 Equipment Provision

• Furnish and deliver:

o One (1) new ultrasound system for KARH.

• Minimum four(4) transducers (Matriz Phased Array, Linear Array, Covex Array, and Microconvex Probes)

• Mobile cart-based or compact system suitable for limited space

• Built-in image storage and reporting functionality

• On Board Printer compatibility

• Required accessories (gel bottles, probe holders, power cables)

• Advanced abdominal tool package

• Power assistant Bin-Twin

3.2 Minimum Technical Specifications

The system shall include:

• 2D B-mode imaging

• M-mode

• Color Doppler

• Power Doppler

• Pulsed Wave (PW) Doppler

• Minimum 15–21 inch high-resolution LCD monitor

• At least 2 active probe ports

• Multi-frequency probe capability

• Built-in measurement packages (OB, abdominal, pelvic)

• Automatic fetal biometry calculations

• Image storage (minimum 500GB or equivalent)

• USB export capability

• DICOM capability (preferred but optional depending on infrastructure)

• Battery backup (preferred for unstable power environments)

3.3 Transducers Required

• Convex probe (2–5 MHz) – for abdominal and OB imaging

• Linear probe (5–12 MHz) – for small parts and vascular access

• Other probes mentioned in specifcation

Optional (if OB/GYN services are frequent):

• Endocavitary probe (5–9 MHz)

3.4 Installation and Commissioning

• Perform delivery, setup, and installation at KARH.

• Coordinate with facility IT and Biomedical Engineering staff.

• Integrate systems with:

o Existing PACS/RIS systems.

o RPMS/EHR or other approved clinical information systems.

• Configure DICOM networking and image routing.

• Ensure compliance with IHS OIT security requirements.

3.5 Data Security and Privacy

• Systems must:

o Support secure transmission of PII/PHI.

o Utilize encryption in transit and at rest where applicable.

o Meet applicable HHS, IHS, and HIPAA requirements.

• Contractor shall assist with any required documentation to support Privacy Impact Assessment (PIA) review.

• Comply with Section 508 accessibility requirements where applicable (software interfaces and documentation).

• Meet current cybersecurity standards.

3.6 Testing and Acceptance

• Perform system testing to ensure full functionality.

• Conduct image quality verification.

• Provide on-site operational validation with clinical staff.

• Final acceptance will be based on successful installation, integration, and performance testing.

3.7 Training

• Provide on-site user training for clinical staff at KARH, minimum 2 days on-site training.

• Provide basic technical orientation for Biomedical and IT personnel.

• Supply user manuals and technical documentation in electronic format.

• Application training for OB measurements.

3.8 Warranty and Support

• Provide a minimum of two (2) year comprehensive warranty.

• Include preventive maintenance during the warranty period.

• Service response time within 48 hours.

• Availability of spare parts for minimum 5-7 years.

4. Project Timeline

Milestone Timeline

Purchase Order Issued Day 0

Delivery Within 30 days

Installation Within 5 days of delivery

Training Within 7 days of installation

Final Acceptance Within 10 days of installation

6. Responsibilities

Vendor Responsibilities:

• Supply equipment meeting agreed specifications

• Complete installation and testing

• Provide training and documentation

• Provide warranty and service support

Health Center Responsibilities:

• Provide prepared room (minimum 10x10 ft recommended)

• Ensure stable electrical supply (120VAC or as specified)

• Assign staff for training

• Provide network access if PACS integration required

7. Period of Performance

The period of performance shall begin upon contract award and continue through delivery, installation, training, and final acceptance. Delivery and installation are anticipated within 30 days of award (to be finalized upon procurement).

8. Place of Performance

• Kayenta Alternative Rural Hospital (KARH)

9. Deliverables

Vendor must provide:

• Installed and operational ultrasound system

• All specified probes

• Warranty documentation

• Maintenance schedule

• Regulatory compliance certificates (FDA/CE or applicable authority)

• Training completion documentation

• Remove old equipment as part of “Trade-In” agreement

10. Government-Furnished Property (If Applicable)

The Government will provide reasonable access to facility space, electrical connections, and network infrastructure necessary for installation.

11. Acceptance Criteria

Acceptance will occur after:

• Successful installation and integration.

• Demonstration of required imaging modes.

• Completion of training.

• Submission of all documentation.

• Confirmation of secure connectivity and compliance with privacy and security requirements.

• Sign-off by KARH representative

DEPARTMENT OF HEALTH & HUMAN SERVICES

Indian Health Service

Office of Management Services Division of Acquisition Policy (DAP)

5600 Fishers Lane Rockville, MD 20857

INDIAN HEALTH SERVICE

BUY INDIAN ACT

INDIAN ECONOMIC ENTERPRISE

REPRESENTATION FORM

SOLICITATION/SOURCES SOUGHT/RFI #: _________________________________________________

PROJECT TITLE: ________________________________________________________

DATE: ___________________________________________________________________

In accordance with 25 U.S.C. 47 the Buy Indian Act, the signature below constitutes self-certification that the Offeror meets the definition of an “Indian Economic Enterprise” (HHSAR 326.601) in response to this Sources Sought Notice, Request for Information (RFI) or Solicitation and resultant contract.

The enterprise must meet the definition of “Indian Economic Enterprise” throughout the following time periods:

(1) At the time an offer is made in response to this solicitation;

(2) At the time of contract award; and

(3) During the full term of the contract performance period. At any point during these periods, if the Contractor no longer meets the eligibility requirements, the contractor must provide immediate written notification to the Contracting Officer.

Individual Contracting Officers may require documentation of eligibility before awarding a set-aside or sole source contracts under the Buy Indian Act and awards may be subject to protest if the eligibility of the successful Offeror is in question. In addition to the self-certification requirements, successful Offerors must also be registered with the System of Award Management (SAM).

Any false or misleading information submitted by an enterprise when submitting an offer in consideration of an award set-aside under the authority of the Buy Indian Act is a violation of the law and punishable under 18 U.S.C. 1001.

False claims submitted as part of contract performance are subject to the penalties enumerated in 31 U.S.C. 3729 to 3731 and 18 U.S.C. 287.

REPRESENTATION

The Offeror represents as part of its offer that it does _____, does not _____ meet the definition of an “Indian Economic Enterprise” with “Indian Ownership” under the authority of the Buy Indian Act.

Name of the 51% owner of IEE Firm

Certifying Signature

Print Name

Name of Federally Recognized Tribal Entity

Business Name

Unique Entity ID (UEI)

Attachment B – Indian Health Service Buy Indian Act Indian Economic Enterprise Representation Form

Appendix___: Business Associate Agreement

I. Authority:

Pursuant to 45 C.F.R. § 164.502(e), the Indian Health Service (IHS), as a covered entity, is required to enter into an agreement with a “business associate,” as defined by 45 C.F.R. § 160.103, under which the business associate must agree to appropriately safeguard Protected Health Information (PHI) that it will use and disclose when performing functions, activities or services pursuant to its contract with the IHS. By signing Contract No. _______________ (Contract), ______________________ agrees that it is a Business Associate and will comply with the terms below, in addition to other applicable Contract terms and conditions, and applicable law, relating to the safekeeping, use, and disclosure of PHI. This Appendix comprises the Business Associate Agreement (Agreement).

II. Definitions:

The following terms shall have the same meaning as those terms in 45 C.F.R. Part 160 and Part 164, which are the federal regulations implementing the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended: Breach, Designated Record Set, Disclosure, Health Care Operations, Individual, Minimum Necessary, Notice of Privacy Practices, PHI, Required by Law, Secretary, Security Incident, Subcontractor, Unsecured PHI, and Use.

A. Business Associate. “Business Associate” shall generally have the same meaning as the term “business associate” at 45 C.F.R. § 160.103, and in reference to the party to this Agreement shall mean ____________________.

B. Covered Entity. “Covered Entity” shall generally have the same meaning as the term “covered entity” at 45 C.F.R. § 160.103, and in reference to the party to this Agreement, shall mean the IHS.

C. HIPAA Rules. “HIPAA Rules” shall mean the Privacy, Security, Breach Notification, and Enforcement Rules at 45 C.F.R. Part 160 and Part 164.

D. Master Patient Index (MPI). The “Master Patient Index” or “MPI” is composed of a unique list of patients and a current list of medical centers where each patient has been seen. This enables the sharing of patient data between operationally and regionally diverse systems. Each record (or index entry) on the MPI contains a small amount of patient data used to identify individual entries.

The mission of the MPI is to uniquely identify a patient and to “link” that patient’s data throughout the IHS facilities using the Integration Control Number (ICN).

The MPI is the authoritative source of a patient’s ICN, the enterprise-wide identifier for IHS facilities and the key to accessing a patient’s record. The

Attachment C - Business Associtate Agreement accuracy of patient information and patient identification directly affects clinical, administrative, billing, and interdepartmental processes.

III. Obligations and Activities of Business Associate:

A. Compliance: Business Associate agrees not use or disclose PHI other than as authorized by the Agreement or as required by law. Business Associate acknowledges that it is directly liable under the HIPAA Rules and subject to civil and, in some cases, criminal penalties for making uses and disclosures of PHI that are not authorized by the Agreement or required by law. Business Associate agrees that it will require all of its agents, employees, subsidiaries, and affiliates, to whom Business Associate provides PHI, or who create or receive PHI on behalf of Business Associate for Covered Entity, to comply with the HIPAA Rules and to enter into written agreements with Business Associate that provide the same restrictions, terms, and conditions as set forth in the Agreement.

B. Subcontractors: In accordance with 45 C.F.R. §§ 164.502(e)(1)(ii) and 164.308(b)(2), which govern relations with subcontractors, Business Associate agrees to ensure that any subcontractors that create, receive, maintain, or transmit PHI on behalf of Business Associate agree to the same restrictions, terms, and conditions that apply to Business Associate with respect to such PHI.

C. Safeguarding PHI: Business Associate shall develop and use appropriate procedural, physical, and electronic safeguards to protect against the use or disclosure of PHI in a manner not authorized by this Agreement or required by law. Business Associate will limit any use, disclosure, or request for use or disclosure of PHI to the minimum amount necessary to accomplish the intended purpose of the use, disclosure, or request.

D. Safeguarding Electronic PHI: Business Associate agrees to use appropriate safeguards, as set forth in Subpart C of 45 C.F.R. Part 164 with respect to electronic PHI, to prevent use or disclosure of electronic PHI other than as authorized by this Agreement or required by law.

E. Reporting Use or Disclosures Not Authorized By this Agreement or Required by Law: Business Associate agrees to report to Covered Entity any use or disclosure of PHI not authorized by this Agreement or required by law within thirty (30) days of discovering the use or disclosure, or any security incident of which it becomes aware. In addition, Business Associate shall mitigate, to the extent practicable, any harmful effect that is known to Business Associate of the use, disclosure, or security incident.

F. Reporting of Breach: In accordance with the policy of the Department of Health and Human Services, Business Associate will report, within one hour of discovery, all suspected or confirmed breaches to Covered Entity.

G. Notification of Breach of Unsecured PHI: In addition to the above, Business

Associate shall notify Covered Entity of a breach, as set forth in 45 C.F.R. § 164.410, of the security of any unsecured PHI that Business Associate received from, or created or received on behalf of, Covered Entity within thirty (30) calendar days after the discovery of the breach by Business Associate, its employees, officers, and/or other agents, unless notification is specifically excepted by 45 C.F.R. § 164.412.

1. Requirements of Notice. Such notice shall include, to the extent possible, the identification of each individual whose unsecured PHI has been, or is reasonably believed by Business Associate to have been, accessed, acquired, or disclosed during such breach; a brief description of the circumstances of the breach of security, including the date of the breach and the date of Business Associate’s discovery of the breach; and the type of unsecured PHI involved in the breach. Business Associate agrees to provide any other available information that Covered Entity is required to include in notification to the individual under 45 §164.404(c). In the event notification is delayed, evidence demonstrating the necessity of the delay shall accompany the notification.

H. Individual Access to PHI: Business Associate shall maintain a designated record set for each individual for whom it maintains PHI. In accordance with an individual’s right to access his or her PHI, Business Associate shall make available all PHI in the individual’s designated record set to the individual to whom that information pertains, or, upon the request of the individual, to that individual’s authorized representative, as necessary to satisfy Covered Entity’s obligations under 45 C.F.R. § 164.524. Availability to access PHI shall be made within five (5) calendar days of receipt of a valid request.

I. Accounting of Disclosures: Business Associate shall maintain records of PHI received from, or created or received on behalf of, Covered Entity and shall document subsequent uses and disclosures of such information by Business Associate. Business Associate shall, within five (5) calendar days after receiving a request from Covered Entity, provide to Covered Entity such information as Covered Entity may require to fulfill its obligations to account for disclosures of PHI pursuant to 45 C.F.R. § 164.528.

J. Amendment of PHI: Business Associate shall, within five (5) calendar days of a request by Covered Entity, make PHI available to Covered Entity for Covered Entity to fulfill its obligations under 45 C.F.R. § 164.526 to amend PHI and shall, as directed by Covered Entity, within five (5) calendar days of receipt of such direction, incorporate any amendments into PHI held by Business Associate. In addition, Business Associate shall ensure incorporation of any such amendments into PHI held by its agents or subcontractors within ten (10) days of such direction, and shall notify Covered Entity within five (5) calendar days of when those agents or subcontractors have completed the incorporation of the amendments. Business Associate shall forward to Covered Entity all requests to amend PHI that it receives directly from individuals within five (5) calendar days of its receipt of a request.

K. Carrying out Covered Entity’s Obligations: To the extent Business Associate is to carry out one or more of Covered Entity’s obligation(s) under Subpart E of 45 C.F.R. Part 164, Business Associate agrees to comply with the requirements of Subpart E that apply to Covered Entity in the performance of such obligation(s).

L. Disclosures for Verifying Compliance: Upon request, Business Associate shall permit access by the Secretary and Covered Entity during normal business hours to its facilities, books, records, accounts, and any other sources of information, including PHI and any agreements that it has with subcontractors, vendors, and/or other agents relating to the use and disclosure of PHI received from Covered Entity, or created or received by Business Associate on behalf of Covered Entity, for purposes of determining both Business Associate’s and Covered Entity’s compliance with the HIPAA Rules.

IV. Permitted Uses and Disclosures by Business Associate:

A. Business Associate shall not use or disclose PHI except to perform functions, activities, or services on…