Contracts: Difference between revisions

no edit summary
No edit summary
No edit summary
Line 25: Line 25:


== Basis for Policy ==
== Basis for Policy ==
   
* [http://www.nebraska.edu/board/bylaws2006.pdf Section 6.4 of the Bylaws of the Board of Regents] (BOR) of the University of Nebraska Board of Regents Policy on Administrative Approval of University Contracts ([http://www.nebraska.edu/docs/board/RegentPolicies.pdf RP – 6.3.1])   
* [http://www.nebraska.edu/board/bylaws2006.pdf Section 6.4 of the Bylaws of the Board of Regents] (BOR) of the University of Nebraska Board of Regents Policy on Administrative Approval of University Contracts ([http://www.nebraska.edu/docs/board/RegentPolicies.pdf RP – 6.3.1])   
* University of Nebraska [http://www.nebraska.edu/docs/president/13%20Delegation%20to%20Approve%20Academic-Admin%20Personnel%20Actions.pdf Executive Memorandum 13], Delegation of Administrative Authority to Approve Academic-Administrative Personnel Actions   
* University of Nebraska [http://www.nebraska.edu/docs/president/13%20Delegation%20to%20Approve%20Academic-Admin%20Personnel%20Actions.pdf Executive Memorandum 13], Delegation of Administrative Authority to Approve Academic-Administrative Personnel Actions   
Line 33: Line 32:
* [http://www.hhs.gov/ocr/hipaa/privrulepd.pdf Health Insurance Portability and Accountability Act of 1996] (HIPAA) [45 CFR §164.502(e)(1)]   
* [http://www.hhs.gov/ocr/hipaa/privrulepd.pdf Health Insurance Portability and Accountability Act of 1996] (HIPAA) [45 CFR §164.502(e)(1)]   
* [http://www.ftc.gov/privacy/glbact/ Gramm-Leach-Bliley Act] (GLBA)  [12 CFR §225.28]   
* [http://www.ftc.gov/privacy/glbact/ Gramm-Leach-Bliley Act] (GLBA)  [12 CFR §225.28]   
==Policy==                                                       
==Policy==                                                       
#'''Written Agreements Required'''.  All organizations and individuals that provide products and services to the University of Nebraska Medical Center (UNMC) shall enter into a written contract with UNMC. Pursuant to University of Nebraska Executive Memorandum No. 14, the President has delegated authority to each Chancellor to approve specific types of contracts described in Section 4 of RP -6.3.1. Pursuant to [http://www.nebraska.edu/docs/president/13%20Delegation%20to%20Approve%20Academic-Admin%20Personnel%20Actions.pdf University of Nebraska Executive Memorandum No. 13] and [http://www.nebraska.edu/docs/president/14%20Authority%20to%20Approve%20Contracts.pdf Executive Memorandum No. 14], the Chancellor may delegate contract signature authority. Individuals with the authority to sign contracts on behalf of UNMC are listed in the [http://webmedia.unmc.edu/policy/ContractSignature.doc Contract Signature Authority Table]. (Changes to the Contract Signature Authority Table should be forwarded to the [mailto:wlawlor@unmc.edu Director, Financial Compliance and Cost Analysis].)
=== Written Agreements Required ===
#:Original contracts are maintained as follows:<br />
All organizations and individuals that provide products and services to the University of Nebraska Medical Center (UNMC) shall enter into a written contract with UNMC. Pursuant to University of Nebraska Executive Memorandum No. 14, the President has delegated authority to each Chancellor to approve specific types of contracts described in Section 4 of RP -6.3.1. Pursuant to [http://www.nebraska.edu/docs/president/13%20Delegation%20to%20Approve%20Academic-Admin%20Personnel%20Actions.pdf University of Nebraska Executive Memorandum No. 13] and [http://www.nebraska.edu/docs/president/14%20Authority%20to%20Approve%20Contracts.pdf Executive Memorandum No. 14], the Chancellor may delegate contract signature authority. Individuals with the authority to sign contracts on behalf of UNMC are listed in the [http://webmedia.unmc.edu/policy/ContractSignature.doc Contract Signature Authority Table]. (Changes to the Contract Signature Authority Table should be forwarded to the [mailto:wlawlor@unmc.edu Director, Financial Compliance and Cost Analysis].)
<br />
<br />
Original contracts are maintained as follows:<br />
{| class="wikitable" width="75%"
{| class="wikitable" width="75%"
|valign="top"| Student and Academic Program Affiliations:
|valign="top"| Student and Academic Program Affiliations:
Line 49: Line 50:
|valign="top"| All Others:
|valign="top"| All Others:
|valign="top"| Business Services
|valign="top"| Business Services
|}<br />
|}
#'''Independent Contractors'''
===Independent Contractors===
#:Independent contractors are 3rd parties who perform services for or provide products to UNMC who are neither employees nor volunteers. The  [http://webmedia.unmc.edu/policy/8009IndepContTempl.doc Independent Contractor Agreement Template] shall be used when entering into contracts with independent contractors who perform non-clinical services (with the exception of sponsored programs agreements and continuing medical education program agreements).   For clinical service agreements, contact UNMC Physicians (UNMC-P) or University Dental Associates (UDA) administration, as applicable.   Questions regarding independent contractor status or requests to modify the template shall be directed to the Associate General Counsel for Health Care, Business Services, or Sponsored Programs Administration (for grants or sponsored programs agreements).
Independent contractors are 3rd parties who perform services for or provide products to UNMC who are neither employees nor volunteers. The  [http://webmedia.unmc.edu/policy/8009IndepContTempl.doc Independent Contractor Agreement Template] shall be used when entering into contracts with independent contractors who perform non-clinical services (with the exception of sponsored programs agreements and continuing medical education program agreements). For clinical service agreements, contact UNMC Physicians (UNMC-P) or University Dental Associates (UDA) administration, as applicable. Questions regarding independent contractor status or requests to modify the template shall be directed to the Associate General Counsel for Health Care, Business Services, or Sponsored Programs Administration (for grants or sponsored programs agreements).
#: '''(A) Use of Protected Health Information (PHI) by an Outside Entity'''
====Use of Protected Health Information (PHI) by an Outside Entity====
#:When a person or entity outside UNMC, The Nebraska Medical Center, UDA and UNMC-P performs a function or activity on behalf of UNMC that involves the use or disclosure of protected health information (PHI), the person or entity is a business associate of UNMC and a business associate addendum must be added to the contract for HIPAA compliance. Health care providers providing treatment are exempt from the business associate requirement.       
When a person or entity outside UNMC, The Nebraska Medical Center, UDA and UNMC-P performs a function or activity on behalf of UNMC that involves the use or disclosure of protected health information (PHI), the person or entity is a business associate of UNMC and a business associate addendum must be added to the contract for HIPAA compliance. Health care providers providing treatment are exempt from the business associate requirement.  
#:Academic affiliation agreement partners are not business associates.       
<br />
#:The [http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Associate Addendum] describes the permitted uses of the PHI and the business associate’s responsibilities regarding it. If a business associate relationship exists with no written contract, a [http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Associate Agreement] must be signed.     
#: '''(B) Use of Protected Student Financial Information (PSFI) by an Outside Entity'''       
#:When a person or entity outside UNMC, The Nebraska Medical Center, UDA, and UNMC-P performs a function or activity on behalf of UNMC that involves protected student financial information (PSFI), a [https://unebapps01.nebraska.edu/slugo/download.nsf/UNMCWinFile?OpenView&Start=1&Count=50&Expand=2.3 Gramm-Leach-Bliley Act] (GLBA) Addendum must be added to the contract for GLBA compliance.       
#:The GLBA addendum describes the permitted uses of the PSFI and the service provider’s responsibilities regarding it. If a service provider relationship exists with no written contract, a GLBA agreement must be signed.       
#: '''(C) Use of UNMC Information Systems'''       
#:When a person or entity outside UNMC, The Nebraska Medical Center, UDA and UNMC-P (“service provider”) requires electronic access to UNMC private network resources, and is not a business associate, the service provider shall sign a [http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Partner Agreement or Addendum].
#:[http://sapphire.nebraska.edu/standard/html/wa08_Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Academic Affiliation Agreements].  Academic Affiliation agreements are required for all organizations accepting UNMC students and for all students who come to UNMC from other educational institutions for clinical experience. The academic affiliation template shall be used. Any modifications to the academic affiliation template must be approved by the Office of the Vice Chancellor for Academic Affairs. A fully executed original copy of the agreement is kept on file in the Office of the Vice Chancellor for Academic Affairs.<br />
<br />
<br />
 
Academic affiliation agreement partners are not business associates.
<br />
<br />
The [http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Associate Addendum] describes the permitted uses of the PHI and the business associate’s responsibilities regarding it. If a business associate relationship exists with no written contract, a [http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Associate Agreement] must be signed.     
====Use of Protected Student Financial Information (PSFI) by an Outside Entity====
When a person or entity outside UNMC, The Nebraska Medical Center, UDA, and UNMC-P performs a function or activity on behalf of UNMC that involves protected student financial information (PSFI), a [https://unebapps01.nebraska.edu/slugo/download.nsf/UNMCWinFile?OpenView&Start=1&Count=50&Expand=2.3 Gramm-Leach-Bliley Act] (GLBA) Addendum must be added to the contract for GLBA compliance. 
<br />
<br />
The GLBA addendum describes the permitted uses of the PSFI and the service provider’s responsibilities regarding it. If a service provider relationship exists with no written contract, a GLBA agreement must be signed.
<br />
<br />
====Use of UNMC Information Systems====
When a person or entity outside UNMC, The Nebraska Medical Center, UDA and UNMC-P (“service provider”) requires electronic access to UNMC private network resources, and is not a business associate, the service provider shall sign a [http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Partner Agreement or Addendum].
<br />
<br />
[http://sapphire.nebraska.edu/standard/html/wa08_Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Academic Affiliation Agreements].  Academic Affiliation agreements are required for all organizations accepting UNMC students and for all students who come to UNMC from other educational institutions for clinical experience. The academic affiliation template shall be used. Any modifications to the academic affiliation template must be approved by the Office of the Vice Chancellor for Academic Affairs. A fully executed original copy of the agreement is kept on file in the Office of the Vice Chancellor for Academic Affairs
== Definitions ==
== Definitions ==
 
'''Business Associate''' is defined as a person or entity outside UNMC, The Nebraska Medical Center, University Dental Associates (UDA), and UNMC Physicians (UNMC-P) (the affiliated covered entity) that performs a function or activity on behalf of UNMC that involves the use or disclosure of protected health information (PHI).  Health care providers providing treatment are exempt from the business associate requirements.
'''Business Associate''' is defined as a person or entity outside UNMC, The Nebraska Medical Center, University Dental Associates (UDA), and UNMC Physicians (UNMC-P) (the affiliated covered entity) that performs a function or activity on behalf of UNMC that involves the use or disclosure of protected health information (PHI).  Health care providers providing treatment are exempt from the business associate requirements.<br \><br \>
<br \>
 
<br \>
'''Independent Contractors''' are individuals or entities who perform services for or provide goods to UNMC, who are not employees or volunteers.  The Internal Revenue Service (IRS) test for independent contractor status depends on three factors: behavioral control, financial control, and relationship of the parties.  The general rule is that an individual is an independent contractor if the entity receiving services has the right to control or direct only the result of the work and not the means and methods of accomplishing the work.  For more information about independent contractor determination, see [http://www.irs.ustreas.gov/pub/irs-pdf/p1779.pdf IRS Publications 1779] and [http://www.irs.gov/pub/irs-pdf/p15a.pdf 15-A].<br \><br \>
'''Independent Contractors''' are individuals or entities who perform services for or provide goods to UNMC, who are not employees or volunteers.  The Internal Revenue Service (IRS) test for independent contractor status depends on three factors: behavioral control, financial control, and relationship of the parties.  The general rule is that an individual is an independent contractor if the entity receiving services has the right to control or direct only the result of the work and not the means and methods of accomplishing the work.  For more information about independent contractor determination, see [http://www.irs.ustreas.gov/pub/irs-pdf/p1779.pdf IRS Publications 1779] and [http://www.irs.gov/pub/irs-pdf/p15a.pdf 15-A].
'''Protected Health Information (PHI)''' is individually identifiable health information.  Health information means any information, whether oral or recorded in any medium, that:
<br \>
   
<br \>
'''Protected Health Information (PHI)''' is individually identifiable health information.  Health information means any information, whether oral or recorded in any medium, that:  
# is created or received by UNMC; and
# is created or received by UNMC; and
# relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual.<br />
# relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual.
<br />
'''Protected Student Financial Information (PSFI)''' is information that UNMC has obtained from a student in the process of offering a financial product or service, or such information provided to UNMC by another financial institution.  Offering a financial product or service includes offering student loans to students, receiving tax information from a student’s parent when offering a financial aid package and other financial services.  Examples of student financial information include addresses, phone numbers, bank and credit account numbers, income and credit histories, and social security numbers in both paper and electronic format.
<br \>
<br \>
For additional information, please contact the [mailto:swrobel@unmc.edu Compliance Officer] or the [mailto:kswartsl@unmc.edu Director, Business Services], or see [[Business Associate Agreements and Addendums Procedures]].
<br />
<br />
<br />
[http://webmedia.unmc.edu/policy/ContractSignature.doc Contract Signature Authority Table]<br />


'''Protected Student Financial Information (PSFI)''' is information that UNMC has obtained from a student in the process of offering a financial product or service, or such information provided to UNMC by another financial institution. Offering a financial product or service includes offering student loans to students, receiving tax information from a student’s parent when offering a financial aid package and other financial services. Examples of student financial information include addresses, phone numbers, bank and credit account numbers, income and credit histories, and social security numbers in both paper and electronic format.<br \><br \>
[http://webmedia.unmc.edu/policy/8009IndepContTempl.doc Independent Contractor Agreement Template]<br />


For additional information, please contact the [mailto:swrobel@unmc.edu Compliance Officer] or the [mailto:kswartsl@unmc.edu Director, Business Services], or see [[Business Associate Agreements and Addendums Procedures]].
[http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Partner Agreement or Addendum] <br />


[http://webmedia.unmc.edu/policy/ContractSignature.doc Contract Signature Authority Table] / [http://webmedia.unmc.edu/policy/8009IndepContTempl.doc Independent Contractor Agreement Template]
[http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Partner Agreement or Addendum] /
[http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Associate Agreements and Addendums]
[http://sapphire.nebraska.edu/standard/Business_forms.asp?Campus=UNMC&Want=Forms&Heading=HIPAA Business Associate Agreements and Addendums]
<br />
<br />
 
<br />
This page maintained by [mailto:dpanowic@unmc.edu dkp].
This page maintained by [mailto:dpanowic@unmc.edu dkp].