TO: Board of Supervisors
FROM: Jennifer Yasumoto, Director Health and Human Services Agency
REPORT BY: Summer Isham, Contracts Supervisor
SUBJECT: Amendment No. 1 to Agreement No. 170857B with Department of Health Care Services (Medi-Cal Data Privacy and Security)
RECOMMENDATION
title
Director of Health and Human Services Agency (HHSA) requests approval of and authorization for the Chair to sign Amendment No. 1 to Agreement No. 170857B with Department of Health Care Services (DHCS) to extend the term of the agreement to March 1, 2024.
body
EXECUTIVE SUMMARY
Approval of today’s action will extend the term of the existing agreement with DHCS to March 1, 2024. This agreement ensures the privacy and security of Medi-Cal Personally Identifiable Information (PII) accessed by HHSA through its use of the State's Medi-Cal Eligibility Determination System.
FISCAL & STRATEGIC PLAN IMPACT
|
Is there a Fiscal Impact? |
No |
ENVIRONMENTAL IMPACT
ENVIRONMENTAL DETERMINATION: The proposed action is not a project as defined by 14 California Code of Regulations 15378 (State CEQA Guidelines) and therefore CEQA is not applicable.
BACKGROUND AND DISCUSSION
DHCS is required to enter into a data sharing agreement with the Social Security Administration (SSA). DHCS operates the Medi-Cal Eligibility Determination System (MEDS), which enables California counties to access the data covered under the DHCS-SSA agreement. Counties access MEDS data to track, confirm, and/or determine eligibility for public assistance programs.
The data sharing agreement between SSA and DHCS requires DHCS to diligently oversee the SSA data being accessed by multiple users (agents and contractors of DHCS) throughout the State. As agents of DHCS and the State in administration of the Medi-Cal program, counties must conform to the SSA's security and disclosure standards outlined in the SSA-DHCS data sharing agreement. All 58 County Welfare Departments (CWDs) are required to sign Medi-Cal Data Privacy and Security Agreement to ensure the continued transmission of PII between the counties and DHCS.
The Medi-Cal Data Privacy and Security agreement lays out the terms and conditions for compliance with privacy and confidentiality assurance measures; employee orientation and training regarding privacy and confidentiality; management and oversight of workplace compliance with privacy and confidentiality measures; physical security of records; computer security safeguards; paper document controls; and notification and investigation of breaches.