Contracts: Difference between revisions

443 bytes added ,  July 24, 2019
m
no edit summary
No edit summary
mNo edit summary
Line 26: Line 26:
<big>'''Contracts Policy'''</big>
<big>'''Contracts Policy'''</big>
== Basis for Policy ==
== Basis for Policy ==
The purpose of this policy is to provide guidance on who is authorized to sign contracts on behalf of the University of Nebraska Medical Center; and to make clear that individuals must have specific authority, as delegated in Board of Regents Policy [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/board-governing-documents/board-of-regents-policies.pdf (RP – 6.3.1)], in [https://www.nebraska.edu/docs/president/13%20Delegation%20to%20Approve%20Academic-Admin%20Personnel%20Actions.pdf Executive Memorandum No. 13] and [https://www.nebraska.edu/docs/president/14%20Authority%20to%20Approve%20Contracts.pdf Executive Memorandum No. 14], and as specifically provided for in the UNMC Contract Signature Authority Tables to sign such contracts.
The purpose of this policy is to provide guidance on who is authorized to sign contracts on behalf of the University of Nebraska Medical Center; and to make clear that individuals must have specific authority, as delegated in [https://nebraska.edu/offices-policies/policies Board of Regents Policy], in [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/delegation-of-administrative-authority-to-approve-certain-personnel-actions.pdf Executive Memorandum No. 13] and [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/delegation-of-administrative-authority-to-approve-certain-types-of-university-contracts.pdfExecutive Memorandum No. 14], and as specifically provided for in the UNMC Contract Signature Authority Tables to sign such contracts.
==Policy==  
==Policy==  
=== Written Agreements Required ===
=== Written Agreements Required ===
All organizations and individuals that provide products and services to the University of Nebraska Medical Center (UNMC) shall enter into a written contract with UNMC. Pursuant to University of Nebraska Executive Memorandum No. 14, the President has delegated authority to each Chancellor to approve specific types of contracts described in Section 4 of RP -6.3.1. Pursuant to University of Nebraska [http://www.nebraska.edu/docs/president/13%20Delegation%20to%20Approve%20Academic-Admin%20Personnel%20Actions.pdf Executive Memorandum No. 13] and [http://www.nebraska.edu/docs/president/14%20Authority%20to%20Approve%20Contracts.pdf Executive Memorandum No. 14], the Chancellor may delegate contract signature authority. Individuals with the authority to sign contracts on behalf of UNMC are listed in the UNMC [https://wiki.unmc.edu/images/8/83/UNMC_Exec.Memo.13_Signature_Authority.pdf Executive Memorandum 13 Contract Signature Authority] and UNMC [https://wiki.unmc.edu/images/f/fe/UNMC_Exec.Memo.14_Signature_Authority.pdf Executive Memorandum 14 Contract Signature Authority] Tables. No individual shall sign a contract on behalf of the University of Nebraska Medical Center unless having specifically been delegated the authority to do so.
All organizations and individuals that provide products and services to the University of Nebraska Medical Center (UNMC) shall enter into a written contract with UNMC. Pursuant to University of Nebraska Executive Memorandum No. 14, the President has delegated authority to each Chancellor to approve specific types of contracts described in Section 4 of RP -6.3.1. Pursuant to University of Nebraska [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/delegation-of-administrative-authority-to-approve-certain-personnel-actions.pdf Executive Memorandum No. 13] and [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/delegation-of-administrative-authority-to-approve-certain-types-of-university-contracts.pdf Executive Memorandum No. 14], the Chancellor may delegate contract signature authority. Individuals with the authority to sign contracts on behalf of UNMC are listed in the UNMC [https://wiki.unmc.edu/images/8/83/UNMC_Exec.Memo.13_Signature_Authority.pdf Executive Memorandum 13 Contract Signature Authority] and UNMC [https://wiki.unmc.edu/images/f/fe/UNMC_Exec.Memo.14_Signature_Authority.pdf Executive Memorandum 14 Contract Signature Authority] Tables. No individual shall sign a contract on behalf of the University of Nebraska Medical Center unless having specifically been delegated the authority to do so.
===Executive Memorandum No. 14===
===Executive Memorandum No. 14===


Line 72: Line 72:
When contracting outside UNMC and Nebraska Medicine for equipment purchases or transfer of PHI electronically, a security review is required by [https://wiki.unmc.edu/index.php/Privacy/Information_Security Information Security].
When contracting outside UNMC and Nebraska Medicine for equipment purchases or transfer of PHI electronically, a security review is required by [https://wiki.unmc.edu/index.php/Privacy/Information_Security Information Security].
==Protected Student Financial Information (PSFI)==
==Protected Student Financial Information (PSFI)==
[https://www.nebraska.edu/docs/president/26%20Information%20Security%20Plan%20%28GLB%20Compliance%29.pdf Executive Memorandum No. 26] describes protections of Student Financial Information required under Gramm Leach Bliley Act (GLBA), and protection of credit card information received in the course of business. When an activity requires use of protected financial information under Executive Memorandum No. 26, [https://www.nebraska.edu/docs/president/26%20Information%20Security%20Plan%20%28GLB%20Compliance%29.pdf a GLBA Addendum must be added to the contract] (the Addendum is attached as an exhibit to Memorandum 26).
[https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/university-of-nebraska-information-security-plan.pdf University of Nebraska Executive Memorandum No. 26] describes protections of Student Financial Information required under Gramm Leach Bliley Act (GLBA), and protection of credit card information received in the course of business. When an activity requires use of protected financial information under Executive Memorandum No. 26, a GLBA Addendum must be added to the contract (the Addendum is attached as an exhibit to Memorandum 26).
==Business Associate Agreement==
==Business Associate Agreement==
A [https://wiki.unmc.edu/index.php/Business_Associate_Agreements_and_Addendums_Procedures Business Associate Agreement] is required in association with the contract for equipment, services or other where a person or entity is performing functions or activities on behalf of a covered entity (UNMC, Nebraska Medicine, College of Dentistry, etc.) or a subcontractor that creates, receives, maintains or transmits PHI on behalf of the covered entity. The [https://www.unmc.edu/hipaa/forms/index.html Business Associate Agreement template] can be located at https://www.unmc.edu/hipaa/forms/index.html. Refer to the [https://www.unmc.edu/hipaa/forms/docs/wedi-ba-decision-tree-v2.pdf Business Associate Decision Tree] as needed.
A [https://wiki.unmc.edu/index.php/Business_Associate_Agreements_and_Addendums_Procedures Business Associate Agreement] is required in association with the contract for equipment, services or other where a person or entity is performing functions or activities on behalf of a covered entity (UNMC, Nebraska Medicine, College of Dentistry, etc.) or a subcontractor that creates, receives, maintains or transmits PHI on behalf of the covered entity. The [https://www.unmc.edu/hipaa/forms/index.html Business Associate Agreement template] can be located at https://www.unmc.edu/hipaa/forms/index.html. Refer to the [https://www.unmc.edu/hipaa/forms/docs/wedi-ba-decision-tree-v2.pdf Business Associate Decision Tree] as needed.
Line 82: Line 82:
*[https://www.unmc.edu/academicaffairs/compliance/affiliation-agreements.html Academic Affiliation Agreements]
*[https://www.unmc.edu/academicaffairs/compliance/affiliation-agreements.html Academic Affiliation Agreements]
*[https://nebraska.edu/docs/board/bylaws.pdf Section 6.4 of the Bylaws of the Board of Regents] of the University of Nebraska Board of Regents Policy on Administrative Approval of University Contracts ([https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/board-governing-documents/board-of-regents-policies.pdf RP – 6.3.1])
*[https://nebraska.edu/docs/board/bylaws.pdf Section 6.4 of the Bylaws of the Board of Regents] of the University of Nebraska Board of Regents Policy on Administrative Approval of University Contracts ([https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/board-governing-documents/board-of-regents-policies.pdf RP – 6.3.1])
*University of Nebraska [http://www.nebraska.edu/docs/president/13%20Delegation%20to%20Approve%20Academic-Admin%20Personnel%20Actions.pdf Executive Memorandum 13], Delegation of Administrative Authority to Approve Academic-Administrative Personnel Actions
*University of Nebraska [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/delegation-of-administrative-authority-to-approve-certain-personnel-actions.pdf Executive Memorandum 13], Delegation of Administrative Authority to Approve Academic-Administrative Personnel Actions
*University of Nebraska [http://www.nebraska.edu/docs/president/14%20Authority%20to%20Approve%20Contracts.pdf Executive Memorandum 14], Delegation of Administrative Authority to Approve Certain Types of University Contracts, and Requirements for Submittal and Execution of Contracts Requiring Approval by the Board of Regents
*University of Nebraska [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/delegation-of-administrative-authority-to-approve-certain-types-of-university-contracts.pdf Executive Memorandum 14], Delegation of Administrative Authority to Approve Certain Types of University Contracts, and Requirements for Submittal and Execution of Contracts Requiring Approval by the Board of Regents
*University of Nebraska [http://www.nebraska.edu/docs/president/26%20Information%20Security%20Plan%20%28GLB%20Compliance%29.pdf Executive Memorandum No. 26], Information Security Plan
*University of Nebraska Executive Memorandum No. 26 [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/university-of-nebraska-information-security-plan.pdf Information Security Plan - Gramm Leach Bliley Compliance]
*University of Nebraska [http://www.nebraska.edu/docs/president/27%20HIPAA%20Compliance.pdf Executive Memorandum No. 27], HIPAA Compliance Plan   
*University of Nebraska [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/hipaa-compliance-policy.pdf Executive Memorandum No. 27], HIPAA Compliance Plan   
*[http://www.gpo.gov/fdsys/pkg/PLAW-104publ191/pdf/PLAW-104publ191.pdf Health Insurance Portability and Accountability Act of 1996] (HIPAA) [45 CFR §164.502(e)(1)]   
*[http://www.gpo.gov/fdsys/pkg/PLAW-104publ191/pdf/PLAW-104publ191.pdf Health Insurance Portability and Accountability Act of 1996] (HIPAA) [45 CFR §164.502(e)(1)]   
*[http://www.gpo.gov/fdsys/pkg/PLAW-106publ102/pdf/PLAW-106publ102.pdf Gramm-Leach-Bliley Act](GLBA) 12 CFR §225.28]   
*[http://www.gpo.gov/fdsys/pkg/PLAW-106publ102/pdf/PLAW-106publ102.pdf Gramm-Leach-Bliley Act](GLBA) 12 CFR §225.28]