Data and Technical Lead (Aggregation) Responsible for all Covered California data requirements for aggregation and reporting needs including those that exceed the standard reporting package Ensure the integrity of data used in the aggregation process Establish, manage and monitor procedures associated data aggregation and data quality Management of data aggregation requests and its associated activities Management of informational resource pertaining to inquiries, system configuration, and data files Establishing the principles by which data management activities will be executed, and defining the goals, objectives and standards of the required information architecture Creation, document reconciliation and maintenance of logical and physical models reflecting the state and use of data across the information value chain Capture, integrate and publish descriptive metadata across the various applications and tools (modeling, integration and more) in the environment Analyze and measure data quality levels, identify data quality issues, and working with data stewards, users and other IT functions to facilitate data quality improvement Deep familiarity with data structures and processing capabilities of the Vendor’s technology Experience with technical interfaces required between Issuers and other data sources and the vendor’s data integration infrastructure Minimum of five (5) years of deep information and data architecture and management experience for a government or private sector healthcare payer or provider, including a minimum of three (3) years of experience in a project similar in scope and size to that of Covered California Experience designing interfaces and integration of data submissions in the Vendor technology Data and Technical Lead (Analytics) Responsible for all Covered California data requirements for analytics and reporting needs including those that exceed the standard reporting package and the information available through the decision support tool provided by the Vendor Establish the principles by which data analytics activities will be executed, and define the goals, objectives and standards of the organization's analytics approach and architecture Employ advanced information analytics practices to Covered California requirements Apply multiple solutions and approaches to business problems Deep familiarity with Vendor’s analytical models, and technology Experience with Healthcare analytical models required by Covered California and related data sources Minimum of five (5) years of deep information and data architecture and management experience for a government or private sector healthcare payer or provider, including a minimum of three (3) years of experience in a project similar in scope and size to that of Covered California Possesses interpersonal skills, including teamwork, facilitation, and negotiation skills and experience
Deliverable P.15 – Annual security assessment reports Deliverable P.16 – Periodic data extracts as requested Production Task Related Deliverables – Data Analysis The following provides a list of deliverables that will be created by the Data Analytics Vendor during the production phase. These deliverables are specific to the Data Analysis scope of work, and will only be required for the Vendor selected to perform the Data Analysis scope of work. If a single vendor is selected to perform both Data Aggregation and Data Analytics scopes of work, at Covered California’s discretion, these deliverables may be revised to meet the consolidated scope of work Production Related Deliverables – Data Analytics Task Deliverable Task P.6 – Analytics Platform Provision Deliverable P.16 – Analytics Plan Deliverable P.17 – Documentation of analytic methodology(ies), algorithms, report queries (e.g. episode grouper, risk-adjustment, etc. Task P.7 – COTS Analytics Applications Deliverable P.18 – Library of analytic applications Task P.8 – Analytics Application Development Deliverable P.19 – Development and/or enhancement of application capabilities Deliverable P.20 - Development approach plan Task P.9 – Analytics Platform and Applications Support Deliverable P.20 – Standardized Periodic Query and Report Generation Deliverable P.21 – Development of new queries and reports Task P.10 – Analytics Guidance and Leadership Support Deliverable P.22 – Review of reports and expert analysis Deliverable P.23 – Expert support and ad hoc analysis Deliverable P.24 – Participate in any external audit process Deliverable P.25 – Participate in the creation of reports that describe the data analysis process and lessons learned Deliverables Expectations Document (DED) The Vendor must develop Deliverables Expectations Documents (DEDs), in an approved Covered California form and format; project deliverables need to adhere to the information within the DED. No work will be performed by the Vendor on any deliverable until the DED has been approved in writing by Covered California. As each project deliverable is submitted, the Vendor must include a copy of the associated Deliverable Expectation Document. Acceptance All concluded work must be submitted to Covered California for review and approval. This will be a deliverable based contract, but certain tasks will be paid on a time and
Privacy Act of 1974 EGovernance Act of 2002 Patient Protection and Affordable Care Act of 2010 Safeguards for Protecting Federal Tax Returns and return Information (26 U.S.C. 6103 and related provitions) 155.260 HHS ACA Final Rule Hosted System Requirements This section is included if the best option is for the system to be hosted at a site other than at Covered California. A selected vendor shall be required to agree to terms acceptable to Covered California regarding the confidentiality and security of Covered California data. These terms may vary depending on the nature of the data to be stored by the Contractor. If applicable, Covered California may require compliance with Covered California MARS- E and NIST 800-53 security standards, IRS requirements, HIPAA, HITECH and/or FISMA compliance and/or compliance with State law relating to the privacy of personally identifiable information. Further, a selected vendor hosting a Covered California system may be a “data collector” for purposes of Covered California law and shall be required to (i) comply with certain data breach notification requirements; and (ii) indemnify Covered California for any third party claims against Covered California which may occur as a result of any data breach. The selected Vendor must agree to host Covered California’s solution within the continental United States of America. Covered California reserves the right to periodically audit the Contractor (or subcontractor) application infrastructure to ensure physical and network infrastructure meets the configuration and security standards and adheres to relevant Covered California policies governing the system. Covered California reserves the to run non-intrusive network audits (basic port scans, etc.) randomly, without prior notice. More intrusive network and physical audits may be conducted on or off site with 24 hours’ notice. The Contractor will have a party perform methodology-based (such as OSSTM) penetration testing quarterly and will report the results of that testing to Covered California. A selected vendor shall agree to cause an SSAE 16 Type II audit certification to be conducted annually. The audit results and the Contractor’s plan for addressing or resolution of the audit results shall be shared with Covered California. A selected vendor shall agree to terms acceptable to Covered California regarding system backup, disaster recovery planning and access to Covered California data. A selected vendor shall be required to agree to disclose the hosting provider which shall be acceptable to Covered California for purposes of the data to be stored and shall not change the hosting provider without the prior written consent of Covered California.