Texas Health and Human Services Commission EDW/BI Solution - RFP No. 529-16-0001 Exhibit B Exhibit B: Federally-mandated Special Terms and Conditions I. Access to Records: Code of Federal Regulations (CFR) Verbiage 45 CFR Part 95 Subpart F §95.615 The State agency must allow the Department access to the system in all of its aspects, including pertinent state staff, design developments, operation, and cost records of contractors and subcontractors at such intervals as are deemed necessary by the Department to determine whether the conditions for approval are being met and to determine the efficiency, economy and effectiveness of the system. 42 CFR Part 433.112(b)(5) – (9) The State owns any software that is designed, developed, installed or improved. The Department has a royalty free, non-exclusive, and irrevocable license to reproduce, publish, or otherwise use and authorize to use, for Federal Government purposes, software, modifications to software, and documentation that is designed, developed, installed or enhanced. The costs of the system are determined in accordance with 45 CFR 74.27(a). The Medicaid agency agrees in writing to use the system for the period of time specified in the advance planning document approved by CMS or for any shorter period of time that CMS determines justifies the Federal funds invested. The agency agrees in writing that the information in the system will be safeguarded in accordance with subpart F, part 431 of this subchapter. 45 CFR Part 95 Subpart F §95.615 The State agency must allow the Department access to the system in all of its aspects, including pertinent state staff, design developments, operation, and cost records of contractors and subcontractors at such intervals as are deemed necessary by the Department to determine whether the conditions for approval are being met and to determine the efficiency, economy and effectiveness of the system. State Medicaid Manual Section 11267 Copies of progress reports, as requested, will be delivered to HCFA. All deliverables, interim reports, data collection forms, questionnaires, and other working papers which support the final system acceptance will be made available on request to HCFA. Page B-1 Texas Health and Human Services Commission EDW/BI Solution - RFP No. 529-16-0001 Exhibit B II. Software & Ownership Rights, Federal Licenses, Information Safeguarding, HIPAA Compliance, and Progress Reports: Code of Federal Regulations (CFR) 45 CFR Part 95 Subpart F §95.617 Verbiage 42 CFR Part 431.300 45 CFR Part 164 The State or local government must include a clause in all procurement instruments that provides that the State or local government will have all ownership rights in software or modifications thereof and associated documentation designed, developed or installed with Federal financial participation under this subpart. The Department reserves a royalty-free, nonexclusive, and irrevocable license to reproduce, publish, or otherwise use and to authorize others to use for Federal Government purposes, such software, modifications, and documentation. Proprietary software. Proprietary operating/Vendor software packages which are provided at established catalog or market prices and sold or leased to the general public shall not be subject to the ownership provisions in paragraphs (a) and (b) of this section. FFP is not available for proprietary applications software developed specifically for the public assistance programs covered under this subpart. Section 1902(a)(7) of the Social Security Act (Title XIX – Grants to States for Medical Assistance Programs) requires that a State plan must provide safeguards that restrict the use or disclosure of information concerning applicants and recipients to purposes directly connected with the administration of the plan. This subpart specifies State plan requirements, the types of information to be safeguarded, the conditions for release of safeguarded information, and restrictions on the distribution of other information. Section 1137 of the Act, which requires agencies to exchange information in order to verify the income and eligibility of applicants and recipients (see §435.940ff), requires State agencies to have adequate safeguards to assure that— o Information exchanged by the State agencies is made available only to the extent necessary to assist in the valid administrative needs of the program receiving the information, and information received under section 6103(l) of the Internal Revenue Code of 1954 is exchanged only with agencies authorized to receive that information under that section of the Code; and o The information is adequately stored and processed so that it is protected against unauthorized disclosure for other purposes HHS Administrative Data Standards and Related Requirements Part 164-Security and Privacy. Page B-2