Skip navigation

News Articles

This site contains over 2,000 news articles, legal briefs and publications related to for-profit companies that provide correctional services. Most of the content under the "Articles" tab below is from our Prison Legal News site. PLN, a monthly print publication, has been reporting on criminal justice-related issues, including prison privatization, since 1990. If you are seeking pleadings or court rulings in lawsuits and other legal proceedings involving private prison companies, search under the "Legal Briefs" tab. For reports, audits and other publications related to the private prison industry, search using the "Publications" tab.

For any type of search, click on the magnifying glass icon to enter one or more keywords, and you can refine your search criteria using "More search options." Note that searches for "CCA" and "Corrections Corporation of America" will return different results. 


 

CoreCivic Vt 2018 Standard-contract-for-services-37036

Download original document:
Brief thumbnail
This text is machine-read, and may contain errors. Check the original document to verify accuracy.
STA TE OF VERMONT Contract# 37036

Page 1 of63

STANDARD CONTRACT FOR SERVICES

I. Parties. This is a contract for services between the State of Vermont, Department of Corrections
(hereinafter called "State"), and CoreCivic, with a principal place of business in Nashville, TN, (hereinafter
called "Contractor"). Contractor's form of business organization is a Corporation. It is Contractor's
responsibility to contact the Vermont Department of Taxes to determine if, by law, Contractor is required
to have a Vermont Department of Taxes Business Account Number.
2. Subject Matter. The subject matter of this contract is services generally on the subject of providing
adult male inmates with housing, necessary care and treatment and inmate rights in accordance with ACA
Fourth Edition Standards. Detailed services to be provided by Contractor are described in Attachment A.
3. Maximum Amount. In consideration of the services to be performed by Contractor, the State agrees to
pay Contractor, in accordance with the payment provisions specified Attachment B, a sum not to exceed
$18,394,723.00.

!n

4. Contract Term. The period of Contractor's performance shall begin o,n October l, 20] 8 and end on
September 30, 2020. The Contract may be extended for one additional two-year period upon mutual
agreement of the parties.
5. Prior Approvals. This Contract shall not be binding unless and until all requisite prior approvals have
been obtained in accordance with current State law, bulletins, and interpretations.
6. Amendment. No changes, modifications, or amendments in the terms and conditions of this contract
shall be effective unless reduced to writing, numbered and signed by the duly authorized representative of
the State and Contractor.
7. Termination. This Contract may be unilaterally terminated, with or without cause, by one hundred

eigh~ (180) days' notice by either party, mailed to the other party by registered U.S. mail, return receipt
requested or served directly by personal delivery. Any notice so mailed and any notice serve4 by personal
delivery shall be deemed delivered and effective upon receipt or upon attempted delivery. This method of
notification shall be used in all instances, except for emergency situations when immediate notification is
required.
8. Attachments.

This contract consists of 63 pages including the fol1owing attachments which are
incorporated herein:
Attachment A- Specification of Work to be Performed
Attachment B - Payment Provisions
Attachment C - "Standard State Provisions for Contracts and Grants" a preprinted form (revision
date 12/15/2017)
Attachment D - Other Terms and Conditions for Information Technology Contracts
Attachment E - Business Associate Agreement (if any)
Attachment F - "AHS Customary Contract Provisions"

STATE OF VERMONT Contract# 3 7036

Page 2 of63

9. Order ofPrecedence. Any ambiguity, conflict or inconsistency between the documents comprising this
contract shall be resolved according to the follo:wing order of precedence:
( 1) Standard Contract
(2) Attachment D Other Terms and Conditions for Information Technology Contracts
(3) Attachment C (Standard State Provisions for Contracts and Grants)
(4) Attachment A

(5) Attachment B
(6) Attachment E
(7) Attachment F

STATE OF VERMONT Contract# 3 7036

Page3 of63

ATTACHMENT A
INMATE HOUSING CONTRACT
I. DESCRIPTION OF SERVICES
I.I FACILITY
Except as otherwise provide herein, Contractor shall house the VTDOC ("State") inmates at
Contractor's Tallahatchie County Correctional Facility ("Facility") located in Tutwiler, MS.
Contractor shall house all State general population inmates together and Contractor shall keep all
State general population inmates housed separate from other populations and jurisdictions to
include recreation areas. State inmates may commingle with other populations and jurisdictions in
programs or other common areas of the Facility.
At the time of the signing of this Contract, Contractor shall certify in writing that the Facility is
accredited by the American Correctional Association (ACA) and Contractor shall maintain such
accreditation throughout the term of this Contract. Contractor shall obtain and/or be actively
working towards NCCHC accreditation within one year of signing this Contract for the Facility
and shall maintain accreditation, once obtained, throughout the term of this Contract.
Contractor shall maintain staffing levels at the Facility in accordance with ACA standards and in
sufficient numbers and rank to maintain the safety of the public, staff and inmates. The State shall
be notified whenever the Contractor revises the staffing guidelines in inmate housing units ·
holding State inmates during the term of the Contract.
State shall have access to up to 350 beds (Minimum, Medium and Close custody) at the Facility.
Contractor shall not, at any time, utilize other facilities without State pe,mission. Contractor shall
allow the State to engage in an on-site visit of any facility proposed for utilization prior to State's
determining whether to grant permission. Any utilization of facilities other than the Facility shall
be at the same per diem rate as that of the Facility. Any utilization of facility beds in excess of
350 shall be at the same per diem rate as the first 350 beds.
Contractor shall provide necessary care and treatment, to include food, clothing, appropriate
housing, education, training, work programs, access to courts/Law Library and comprehensive
healthcare services (routine, acute, chronic and emergency medical care consistent with the
requirements of ACA standards, NCCHC standards, and constitutionally appropriate guidelines).
The Contractor shall provide safe, supervised confinement in the form of direct supervision, and
maintain proper discipline and control. The Contractor shall comply with applicable orders of the
courts in the State of Vermont and otherwise comply with applicable laws.
Contractor shall provide for inmate rights in accordance with ACA Fourth Edition Standards. The
Contractor shall provide to each inmate upon arrival an Inmate Handbook (orientation guide) that
includes, but is not limited to, information on: rules and procedures, penalties and offenses,
disciplinary procedures, access to courts, law library, attorney access, mail, visiting, telephone,
grievances, PREA information, indigent criteria, medical care, religious programs, educational
programs, work assignments and pay scale. This Inmate Handbook shall be updated annually, and
a copy provided to the State.

STATE OF VERMONT Contract# 37036

2.

Page4 of63

TRAINING

State shall provide training, follow-up and auditing to Contractor in the Incident Reporting, Due Process
and the Grievance processes. Contractor shall identify staff to travel to Vermont to attend training on
these processes which will be instructed by VTDOC.
The first training shall include curriculum, classroom and practical applications for Due Process
Certification. The training shall occur between September I 0, 2018 and September 12, 2018. This training
will include participation in actual hearings within a VTDOC facility for certification purposes. Upon
completion and certification, Contractors staff shall be authorized to conduct Due Process hearings.
The second training shall be a training for trainers and shall include curriculum, classroom and practical
applications for Incident Reporting and the Grievance process. The training shall occur on September 13,
2018. Upon completion, Contractors trainers shall be responsible to instruct and support Contractors staff
in the use of these systems.
The costs associated with travel, lodging and meals shall be borne by Contractor. The cost associated with
providing the training shall be covered by the State.
Contractor shall provide the State's Director of Nursing or designee, training in Contractors electronic
health record.
3. DEFINITIONS
The following terms used in this Contract not specifically defined in the text shall have the following
meanings:
(a) "Documentation" means any and all descriptions and specifications of the Requirements included
herein or created or developed hereunder, operational, functional and supervisory reference
guides, manuals and instructive materials, in whatever form and regardless of the media on which
it may be contained, stored or transmitted, which is developed, prepared, used or otherwise
available from Contractor and/or Contractor's suppliers, in connection with and applicable to the
provision, use, operation and support of the Services hereunder. Documentation shall be sufficient
to enable State personnel to understand, operate, use, access, support, maintain, update and modify
Services, notwithstanding that Contractor is or may be responsible for any or all of the foregoing
obligations. Documentation shall also include all standards _applicable to the Services, including
those applicable to: (i) Contractor for its own comparable items or services; (ii) the State for its
own comparable items or services; and (iii) such standards and guidelines as the parties mutually
agree apply to the Services involved.
(b) "Facilities" means the physical premises, locations and operations owned or leased by the State (a
"State Facility") or the Contractor (a "Contractor Facility"), and from or through which the
Contractor and/or its permitted contractors wil1 provide any Services.
(c) "Requirements" means the State's baseline Requirements in Attachment A of this Contract.
(d) "Report" means Contractor shall provide documentation and collaboration to meet the State's
reporting requirements. If requested, the Contractor shall use the State's Status Report template. If

STATE OF VERMONT Contract# 37036

Page S of63

no template is provided to the Contractor, the status information shall include, at a minimum the
information sp~cified in the Contract. All information and reports shall be uploaded to the
Globalscape folder.
(e) "Indigent Inmate" means an inmate will be deemed indigent if the combined balances of their
facility account and any ~ther accessible accounts are $10 or less at all times during the thirty
(30) days preceding the date on which the inmate submits a request for writing materials, postage,
or any State-issued property to the Facility Business Manager or designee. Any inmate who
refuses available work, for which they would be paid, although they are physically able and are
permitted to work by virtue of their housing status, is not indigent for the purpose of this
directive.
4. SCOPE OF SERVICES
4.1. RIGHT OF INSPECTION
State shall have the right to inspect, unhindered and at all times, the Facility housing State inmates
as determined by the State to monitor the Contractor's operational compliance with the Contract
and the health and welfare of State inmates. State shall have the right to inspect or otherwise
evaluate the work performed or being performed under this Contract. Contractor shall allow
access to and provide State with paper and digital records required for such inspections and
evaluations to include the review of surveillance camera footage. Contractor shall allow and
provide the State ~my and all documents needed for defense of claims and/or lawsuits against the
State, State agencies or any State personnel/employees.
Contractor shall allow State contract monitors to attend regularly scheduled operational meetings
between Facility administration and staff pertaining to Contractor's obligations under the
Contract with the exception of attending meetings with Contractor's legal counsel, corporate
officials or meetings involving employee disciplinary matters. State contract monitors shall not
have access to records pertaining to inmates from other jurisdictions.

4.2. VTDOC OFFICE SPACE
Contractor shall provide the Vermont Contract Monitor with office space that has a lock, de~k,
chair, telephone, and internet access at the same standard bandwidth and connection speed as
Contractor staff. Contractor shall not be responsible for non-business-related telephone costs.
Contractor shall provide Vermont Corrections Service Specialists (caseworkers) with space to
meet privately with State inmates. This space shall include a desk, chairs, telephone, and internet
access at the same standard bandwidth and connection speed as Contractor staff using State
equipment. Contractor shall not be responsible for non-business-related telephone costs.
Contractor shall allow State staff access to their State issued laptops, printer, signature pad and
document scanner in the office space provided.
Contractor shall provide State staff with safety and security equipment such as a radio and man'"
down alarm for use while inside the Facility.

STATE OF VERMONT Contract _# 37036

Page 6 of63

4.3 PRISON RAPE ELIMINATION ACT
Contractor shall comply with the Prison Rape Elimination Act (PREA) of 2003 (28 C.F .R. Part
115, Docket No. OAG-131. RlN 1005-Date May 17, 2012) and shall adopt all applicable PREA
Standards for preventing, detecting, monitoring, investigating, and eradicating any form of sexual
abuse within the Contractor's Facility that houses State inmates. The Contractor acknowledges
that, in addition to "self-monitoring requirements", State of Vermont Staff shal I conduct
announced and/or unannounced, compliance monitoring to include "on-site" monitoring to ensure
that Contractor is complying with PREA standards.
4.4 POLICIES, PROCEDU RES AND GUIDANCE DOCUMENTS
Contractor shall institute and be compliant with the following current VTDOC Directives,
Guidance Documents and interim memorandums, including all revisions;
•
•
•
•
•
•
•

320.01 - Offender Grievance System
324.01 - Inmate Voting
385.00-Inmate Access to Courts
405.00 - Incident Reporting
410.01 - Facility Rules and Inmate Discipline
410.03 - Placement on Administrative Segregation
410.05 - Protective Custody

Contractor shall maintain confidentiality of all VTDOC "Level A" Directives, and internal
Guidance Documents. "Level A" Directives and Guidance Documents contain sensitive
information and shall not be released to any inmate or member of the public without approval by
State.
State shall provide training and Quality Assurance on these VTDOC Directives. Training shall be
offered in accordance with Section 2 of this Contract.
At the time of the signing of this Contract, Contractor shall provide the State with;
•
•

Complete set of Policy and Procedures that govern the operations of the Facility housing
State inmates.
Allowable property lists for each living unit housing State inmates.

Any time there is a change in the Policy or Procedures, the Contractor shall inform, explain and
discuss the change with the State at least thirty (30) days in advance to the change being
implemented.
4.5 GRIEVANCES
4.5.1

4.5.2

State shall be responsible to respond to grievances and appeals on matters occurring
during the inmate's incarceration prior to the Contractor taking custody of the inmate.
Examples include; reasons for the transfer; transfer of personal property until custody is
relinquished to the Contractor; uses of force to require transfer; trust fund; oversight of
contract compliance.
Contractor shall be responsible to respond to grievances and appeals on complaints
occurring during the inmate's incarceration with the Contractor except for complaints that

STATE OF VERMONT Contract# 37036

4.5.3
4.5.4

Page 7 of63

are controlled by the State; sentence computation and interpretation and VTDOC case
management (security classification, programming, staffing's, releases).
If an inmate appeals a grievance to the Warden or higher authority, the State shall be
contacted for any relative input in the resolution.
Contractor shall review State inmate grievances to identify potential areas of concern and
to determine if problematic patterns exist.

4.6 PRE-TRANSFER PACKETS
At least two (2) weeks prior to the anticipated transfer date, State shall provide Contractor
transfer packets electronically using the Globalscape folder. Transfer packets shall include;
4.6.1

Record of adjustment in VTDOC correctional facilities:
4.6.1.1
ID Face Sheet
Keep-a-parts (separations)
4.6.1.2
4.6.1.3
Current sentencing Mittimus, detainers and affidavits
Sentence computation
4.6.1.4
Criminal Record Check
4.6.1.5
4.6.1.6
Drug Testing History
Sexual Violence Screening Tool (most recent)
4.6.1.7
Judicial and Administrative Rulings (stipulations/court orders)
4.6.1.8
Misconduct (ten-year disciplinary history)
4.6.1.9
4.6.1.10 Security Threat Group information
4.6.1.11 Contact notes (back one-year)
4.6.1.12 Current Vermont facility case plan
4.6.1.13 Approved Visitor List

4.6.2

Facility medical & mental health records including but not limited to:
4.6.2.1
Any current medical or mental health/psychological condition requiring
treatment, including suicide attempts.
4.6.2.2
Any needs for follow-up specialty care for medical or mental health
conditions.
4.6.2.3
Any medical admission testing performed and the results of those tests,
including: hepatitis, HIV/AIDS, hemophilia, multiple sclerosis, pulmonary
arterial hypertension, tuberculosis, or other infectious disease testing.
4.6.2.4
Notice of current or previously administered medications.

4.7

TRANSPORTATION OF INMATES

4. 7.1

Initial Transfers
4. 7 .1.1
Contractor shall arrange for and transport, at its cost, approximately two
hundred fifty (250) inmates from SCI Camp Hill in Pennsylvania to the
Facility. State shall assist in coordinating the transfer with PADOC.

4.7.2

Routine Transfers
4.7.2.1
Contractor shall, at its cost, provide one (I) thirty-man round trip transport
once per month between Vermont and the Facility for the purpose of
transferring inmates.
,

STATE OF VERMONT Contract# 37036
4.7.2.2

4. 7.2.3
4.7.2.4

Page 8 of63

Contractor shall, at its cost, provide two (2) additional non-routine transports
between Vermont and the Facility during each calendar year and at the request
of the State. Each transport shall provide transfer of up to thirty inmates.
State shall provide Contractor with a list of inmate names to be transferred to
and from the Facility.
Both State and Contractor shall provide basic medical and mental health
documentation to the transporting officers for continuity of care. This
information is in addition to the transfer of medical records. The basic
information shall include;
4.7.2.4.l
Current problems list (medical and mental health)
4.7.2.4.2 Current chronic illness clinic (CIC)
4.7.2.4.3
Current medication administration record (MAR)
The sending facility shall provide the transporting officers with seven (7)
days' worth of medications.

4. 7 .2.5

4.7.3

4. 7.4

Not more than seven (7) days prior to the transport, Contractor shall provide
State with a Transportation Operations Plan for every transport conducted. The
plan shall include, but not limited to, travel dates, assigned transport personnel,
routes, inmate names, destinations, applicable security equipment, planned rest
stops, emergency restroom protocols, meals, medication storage and delivery
in route. The use of black security wrist restraint boxes shall be limited unless
there is a verifiable security threat.

Retaking of Inmates
4. 7 .3 .1
Contractor shall surrender any State inmate to the proper officials of VTDOC
upon demand made to the Contractor and presentation of official written
authority to receive said inmate.
4. 7.3 .2
In the event that the State sends an inmate to the Facility who, in the opinion of
the Contractor, is unsuitable for housing at the facility due to custody
classification, medical, mental health or other reasons, the Contractor shall
discuss the inmate with the State. If it is agreed that the inmate shall be
returned to the State of Vermont, the inmate shall be placed on the next
available transport.
4.7.3.3
In emergent situations, Contractor shall coordinate transportation to Vermont
on a case by case basis.
Other than as provided above, any other transport of State inmates to or from Contractors
facility shall be at the cost of the State, unless otherwise agreed upori by the Contractor.

4.7.5

Contractor shall inform the State within twenty-four (24) hours of all cases where an
inmate is removed from the Contractor's Facility for emergency medical treatment,
scheduled doctor's appointment, or any other reason. All reasonable care shall be
exercised for the safekeeping and care of the inmate.

4.7.6

Upon expiration and/or termination of this Contract, State shall transport;at its cost, all
State inmates who had been transferred to the Facility under this Contract to a destination
of State's choice.

4. 7. 7

Except as otherwise indicated, transportation of an inmate for purposes of litigation for
which Contractor is providing State, its agencies or employees a defense per this contract
shall be at Contractor's expense.

STATE OF VERMONT Contract# 37036

4.8

Page 9 of63

TRANSFER OF INMATE FUNDS/PERSONAL PROPERTY

4.8. J

Initial Transfer
4.8.1. l
State shall coordinate the inventory, search and packaging of inmate property
with PADOC. This shall include; (a) allowable property to transport with the
inmate, (b) allowable property that shall be shipped to the Facility, and (c)
non-allowable property to be shipped back to Vermont.
4.8.1.2
Contractor shall be responsible for all costs associated with the shipment of
allowable property on the transport vehicle and allowable property that shall be
shipped separately to the Facility. Contractor shall be responsible for any lost
or damaged inmate property during shipment.
4.8.1.3
State shall be responsible for any property that is shipped to Vermont or other
address for the sole reason that it is not allowed at the Facility. State shall be
responsible for any lost or damaged inmate property during shipment.
4.8.1.4
Contractor shall not destroy inmates' personal property that arrives at the
Facility on the initial transfer. Property that the Contractor deems not
allowable shall be inventoried, boxed and shipped to an address of the inmates
choosing. State shall reimburse the Contractor for the costs of these shipments.
4.8.1.5
State shall transfer inmate personal funds to Contractor to be credited to the
inmates' account by the Contractor.

4.8.2

Transfers from Vermont to the Facility
4.8.2.1
State shall inventory and package inmate property for transfer. This shall
include; (a) allowable property to transport with the inmate, and (b) allowable
property that shall be shipped to the Facility.
4.8.2.2
State shall screen the inmates' property for dangerous contraband such as
weapons, non-prescribed drugs, tobacco, or cell phones.
4.8.2.3
Contractor shall be responsible for all costs associated with the shipment of
allowable property on the transport and allowable property that shall be
shipped to the Facility. Contractor shall be responsible for any lost or damaged
inmate property during shipment
4.8.2.4
State shall transfer inmate personal funds to Contractor to be credited to the
inmates' account by the Contractor.
4.8.2.5
Contractor shall work with State on the collection of debt that may be owed by
State inmates in the Contractor's custody. State shall provide the Contractor,
on a monthly basis, a list of the current inmate debt accounts. Monies collected
from inmate accounts via the Contractor shall be submitted to VTDOC Central
Business Office on a monthly basis.

4.8.3

Transfers from the Facility to Vermont
4.8.3 .1
Contractor shall inventory and package inmate property for transfer. This shall
include; (a) allowable property to transport with the inmate, and (b) allowable
property that shall be shipped to Vermont as directed by the State.
4.8.3 .2
Contractor shall screen the inmates' property for dangerous contraband such as
weapons, non-prescribed drugs, tobacco, or cell phones.
4.8.3 .3
Contractor shall provide the State with signed, legible copies of property
receipts for all property shipped to Vermont.
4.8.3.4
Contractor shall be responsible for all costs associated with the shipment of
allowable property on the transport and allowable property that shall be

STATE OF VERMONT Contract # 3 7036

shipped to Vermont. Contractor shall be responsible for any lost or damaged
inmate property during shipment.
Inmate personal funds due to transferred inmates shail be provided by the
Contractor to State at the time of transfer. On the day of the return, the funds
shall be sent to the State along with a list of the inmates being transferred, their
dates of birth and the amount owed to each.
State shall work with the Contractor on the collection of debt that may be ·
owed by State inmates w.hile in the Contractor's custody. Contractor shall
provide Stat~, on a monthly basis, a list of the current inmate debt accounts.
Monies collected from inmate accounts via State shall be submitted to the
Contractors Business Office on a monthly basis.

4.8.3.5

4.8.3.6

4.9

Page 10 of63

CUSTODY CLASSIFICATION
Contractor shall classify State inmates in accordance with the policies and procedures of the
Contractor and the rules and regulations of the Facility and the laws and regulations of the
state where the Facility is located.
Contractor shall not reduce custody classification of any State inmate placed pursuant to this
Contract unless agreed to in advance and in writing by the State. Contractor may increase the
custody classification of inmates in a manner consistent with its policies and procedures and
shall notify the State within seventy-two (72) hours of such action.
Contractor shall provide State with any documentation used in the Contractors classification
process to include; criteria, classification tools, and housing limitations for each custody
level.

4.10

CLOTH ING, LINEN AND LAUNDRY
Contractor shall be responsible for laundry services, repair, and replacement of State inmate
clothing during incarceration at the Facility. Contractor shall provide State inmates with
clean clothes and bedding on a weekly basis. Contractor shall provide State inmates with a
minimum of three (3) sets of clean facility uniforms upon admission as well as the following:
•
•
•
•
•
•
•
•
•

Socks - three pairs
Undershirts - three
Underwear - three
Shorts - One
Sweat clothes (top and bottom)- one set
Shoes-one
Long underwear (top and bottom)- one set (seasonal issue)
Winter jacket- one (seasonal issue)
Winter hat- one (seasonal issue)

Contractor shall provide State inmates with appropriate footwear for their work assignment.
Contractor shall make shoes available for purchase in the commissary.
Contractor shall provide laundry services to the inmates at no charge to the inmate in
accordance with established Contractor policies.

STATE OF VERMONT Contract# 3 7036

Page 11 of63

Contractor shall provide clean bedding to include; sheets, blanket(s), pillow, pillow case and
mattress.
4.11

INMATE WORK
Contractor shl\ll employ State inmates for work to be performed for the benefit of the facility
such as; maintenance, clerical,janitorial, kitchen, laundry and Law Library. Contractor shall
ensure thatthere are sufficient job opportunities to employ, at a minimum, forty (40) percent
of the State's population housed at the Facility. The wage rate for these jobs shall be the
wages in place at the Facility as dictated by standards governing the Facility, including but
not limited to applicable statutes, but in no event sha11 be lower than the wages paid for the
same work to inmates at the Facility from other jurisdictions. This provision does not create
an employer/employee relationship subject to the Federal Fair Labor Standards Act; and that
such work is performed as part of the custodial arrangement. State inmate work assignments
shall be separated from other populations and jurisdictions.

4.12

INMATE PROGRAMS AND EDUCATION
Contractor shall afford all State inmates the opportunity to participate in programming
opportunities such as; educational, vocational, treatment, religious/spiritual and recreational.
Programs shall include but are not limited to;

4.12.l Education; Contractor shall utilize educational assessments to identify State inmates'
current educational requirements for placement in the most appropriate programs.
Contractor shall provide the following academic programs:
4.12.1.1 Adult Basic Education (Foundation Literacy)
4.12.1.2 Adult Basic Education (Literacy)
4.12.1.3 Adult Basic Education (Pre GED)
4.12.1.4 Adult Basic Education (GED)
4.12.1.5 Post-Secondary Academic
4.12.2 Vocation; Contractor shall provide the following vocational programs including the
equipment and software for the following:
4.12.2.1
4.12.2.2
4.12.2.3
4.12.2.4

Microsoft Office Keyboarding
Microsoft Office Word
Microsoft Office Power Point
Microsoft Office Excel

4.12.3 Treatment; Contractor shalJ provide the following substance abuse treatment programs:
4.12.3.1 Substance Abuse
4.12.3.2 Alcoholics Anonymous
4.12.3.3 Narcotics Anonymous
4.12.3 .4 Re-entry Program (Go Further Process)
4.12.4 Religious/spiritual; Contractor shall provide religious programs in accordance with ACA
standards.
4.12.5 Recreation; Contractor sha11 provide for a minimum of six (6) hours of out of cell
opportunities for inmates in General Population per day. This may be in the form of
indoor and outdoor recreation to include organized classes and activities. Indoor

STATE OF VERMONT Contract# 37036

Page 12 of63

recreation shall include both dayroom access and time spent in a gymnasium. Outside of
extenuating circumstances, out of unit recreation shall be afforded seven (7) days a week
for no less than 1.5 hours per day. Contractor shall provide State inmates with equipment
and supplies to accommodate pro-social leisure time.
Nothing contained herein shall be construed to permit or require any State inmate to
participate in any training, work, or other program contrary to the laws of the State of
Vermont. State inmates shall not be eligible for furloughs, participation in the work
release program, or be employed in work programs outside the secured perimeter of the
Facility.
4.13

MEALS
Contractor shall provide State inmates with a nutritionally balanced, varied diet of adequate
portions of food, pursuant to standards established by the ACA. All menus shall be approved
by a registered dietician or nutritionist and all meals shall be prepared in compliance with the
approved menus. Contractor shall provide special meals which meet medical or religious
requirements of applicable State inmates. Special medical meals must meet the nutritional
requirements as prescribed by a medical doctor.

4.14

INMATE VISITS
Contractor shall provide State inmates with the opportunity to participate in in-person
visiting privileges from family members and friends for the purpose of maintaining family
and social relationships, and to facilitate the inmate's re-entry to the community. Conjugal
visiting is not authorized for State inmates.
Visiting privileges shall be based on the frequency, duration and procedures afforded to other
inmates housed by the Contractor and as appropriate to the inmate's custody level except
that:

4.14.1 Contractor shall vet all contact visitor approvals through the State. The State shall
provide the approved visitor list upon request or update.
4.14.2 Contractor shall provide and maintain the equipment at the Facility that would allow for
visits using secure compatible video equipment connected to a high-speed internet line or
kiosk that shall allow an inmate's family to have video contact with the inmate.
4.15

ACCESS TO COU RTS. LEGAL RESEARCH AND SUPPLIES
Contractor shall provide access to courts, access to a law library, and access to counsel in
accordance with ACA Fourth Edition standard, US Constitution and US Supreme Court.
Contractor shall provide a commensurate Access to Court services as provided by State in its
facilities.
Contractor shall ensure all State inmates Access to Court is in compliance and consistent
with State Policy 385 and Guidance Documents for staff and inmates. The Contractor shall
provide access to US Federal and the States legal research materials and texts at the Facility.
Prior to housing State inmates, Contractor shall provide a list of Federal and States legal
research software used, electronic equipment available for inmate use, and legal materials
and texts available at the Facility.

STATE OF VERMONT Contract# 3 7036

Page 13 of63

Vermont-specific legal materials may be furnished by the State via online licenses with Lexis
Nexis. Contractor shall provide a minimum of four (4) kiosks or computer terminals to
ensure that every State inmate has access regardless of cu.stody level, or in the alternative
provide secure and monitored locations to house Vermont terminals, server and permit
installation of online DSL service. Equipment, DSL installation and service shall be the
responsibility of the State. Contractor shall ensure that sufficient power and outlets are
available at the place of State servers and terminal installations.
Contractor shall provide typewriters, ribbons, correction tape, typing paper, notary services,
photocopying services, in sufficient quantity and availability to meet constitutional
standards. Contractor shall provide suitable tables, desks, chairs, typing tables, computer
desks for State inmate use. State inmates may be billed for above items and services
consistent with VTDOC Directive 385 and relevant Guidance Documents. Indigent State
inmates' legitimate legal fillings shaU not be delayed due to inability to pay. Indigent State
inmates shall be provided with necessary services and materials to facilitate Access to
Courts. The Contractor is entitled to recover costs as soon as the inmate has sufficient funds
in his account.
4.16

INMATE ACCESS TO ATTORNEYS,

OU RTS AND VERMONT PAROLE BOARD

Contractor shall ensure that there is at least one (1) unmonitored telephone line per housing
unit available for State inmates to place and receive telephone calls to and from attorneys,
Courts, Vermont Parole Board, or other legal proceedings ordered and conducted by the state
or federal courts. Phone access, relative to this section, shall include a private room, a writing
table, and a chair for each participant. Contractor shall be responsible for connecting State
inmates with the applicable entity. Contractor shall ensure that calls are made between the
inmate and the authorized legal representative.
Contractor shall aJlow the Vermont Prisoner's Rights Office (PRO) physical access to State
inmates. Contractor shall provide a private room, a writing table, and a chair for each
participant for the PRO attorney or designee to meet with State inmates. State inmates shall
be permitted to bring paperwork or other documents with them when meeting with
representatives from the PRO.
Contractor shall ensure that the Facility has the capability to receive Skype for Business
video and audio conferencing. Skype for Business shall be used to accommodate, but not
limited to, State staff contacts with State inmates and Vermont Parole Board hearings. Any·
hardware costs incurred are the responsibility of the Contractor.

4.17

MAIL
Contractor shall provide State inmates with mail services. State inmates shaJI be provided the
opportunity to use up to seven (7) first class postage stamps per week. Contractor shall
develop a system to track the postage usage by inmate by week and submit documentation
with a monthly invoice for reimbursement.
Contractor shall provide State inmates that meet the criteria for indigent status with supplies
for correspondence. No request to mail a verified legal pleading shall be denied ~nder this

STATE OF VERMONT Contract# 3 7036

Page 14 of63

provision regardless of postage limit or financial status of the State inmate. The Contractor is
entitled to recover postage fees when the inmate has sufficient funds in their account.
Contractor shall not allow State inmates to correspond through the mail with any individual
on the State's negative contact list as established in 28 V.S.A. 11 § 802 (c) (d). State shall
· provide this list to the Contractor. State shall provide an updated list to the Contractor either
upon the Contractor's request or when changes are made to the list by the State.
Inmate to Inmate mail shall be approved or denied as determined between the Contractor and
State.
4.18

INTERDICTION PROGRAM .

4.18. l Urinalysis Testing
Contractor shall test via random sampling 5% of the State inmate population each
month. Contractor shall incur the costs for urinalysis testing.
4.18.2 Searches
Contractor shall search, in accordance with applicable state and federal law, 10% of the
State population each month. Contractor shall search the inmate, the inmate's room or
sleeping qu&rters, and the inmate's personal property.
In addition to the inmates and the inmate areas, Contractor shalJ also search the
common areas of the Facility on a routine basis so that each quarter all of the common
areas in the Facility have been searched.
4.18.3 Contraband
Contractor shall maintain a log of all dangerous contraband (e.g. illegal drugs, weapons,
cell phones, escape paraphernalia, etc.). Entries in the log at a minimum shall contain
what the contraband item was, where it was found, who found it, and when it was found
(date and time). The log shall also include how the contraband was disposed of.
Provided however, Contractor shalJ not log nuisance contraband such as excess
prop~rty or items, although prohibited, that do not constitute a danger to the good order
and security of the facility.
4.19

NOTIFICATION OF INCIDENTS AND EMERGENCIES

4.19.1 Contractor shall notify State of the following events within one (I) hour, to include
outside of normal business hours;
4.19.1.1
4.19.1.2
4.19.1.3

4. I 9.1.4
4.19. l.5

4.19.1.6
4.19.I.7

Death of a State inmate
Illness/medical condition (life threatening or high-lethality)
Suicide attempt (life threatening or high-lethality)
Escape or attempted escape
Hostage situation
Disturbances involving four (4) or more inmates
Lockdown of any State inmate housing units

STATE OF VERMONT Contract# 37036

Page 15 of63

4.19.2 Contractor shall notify State of any of the following events within twenty-four (24) hours
of occurrence:
4.19.2.1
4.19.2.2
4.19.2.3
4.19.2.4
4.19.2.5
4.19.2.6

Medical or mental health conditions that require transport to a hospital
Placement in the infirmary/medical/mental health observation
Assault/attempted with the use of a weapon
Evacuation
Use of any restraints for more than two (2) hours
Use of force in which there is an injury to a State inmate requiring medical
treatment
4.19.2.7 Alleged or known assault by an employee or civilian
4.19.2.8 Alleged or known PREA incident
4.19.2.9 Disturbance involving three (3) or more inmates which is not brought under
control within fifteen (15) minutes
4.19.2.10 Property destruction rendering a living unit or support service area unusable
4.19.2.11 Use ofchemical agents including hand-held OC units

Contractor may make initial notification via phone or e-mail contact. Contractor shall
provide State with electronic copies of the Facility's reports within seventy-two (72)
hours of the event.
4.20

ESCAPE
Contractor shall take-all actions necessary, in accordance with applicable law, to affect the
apprehension of the escaped inmate. In the case of an escape to a jurisdiction other than the
state in which the inmate was housed, the responsibility for extradition or rendition
proceedings shall be that of State. Any reasonable costs, including the expense and time of
State employees, up to $50,000.00 incurred by State in connection with any escape and or
rendition and extradition process shall be chargeable to and borne by Contractor.

4.21

RECORDS AND REPORTS FROM CONTRACTOR
Contractor shall provide the following information and reports to the State. All information
and reports shall be uploaded to the Globalscape folder.

4.21.1 Any time a State inmate is placed in segregation, for any reason, a written report
documenting the reason shall be uploaded to the Globalscape folder within twenty-four
(24) hours.
4.21.2 Each Monday, a report shall be uploaded to the Globalscape folder, by 1100 hours (EST),
that shows the number of State inmates in segregation by name, their admission date into
segregation, the reason for their placement, and when they were released from
segregation.
4.21.3· Contractor shall provide monthly reports to the State by the 5th of every month detailing
information for the month prior. Monthly reports shall include:
4.21.3.1 Food Service - menu for the upcoming month, number of times the menu was
changed last month, number of special and medical diets prepared;
4.21.3 .2 Disciplinaries - a report that reflects the inmate names, rule infractions, date of
infraction, hearing date, hearing results, imposed sanctions and any appeals
filed;

STATE OF VERMONT Contract# 3 7036

4 .21.3 .3

4.21.3 .4
4.21.3 .5
4.21.3 .6
4.21.3.7
4.21.3.8
4.21.3.9
4.21.3 .10
4.21.3.11
4.21.3 .12

4.21.3 .13
4.21.3.14
4.21.3 .15

4.21.3.16

Page 16 of63

Grievances - a report that reflects the inmate names, the category of the
complaint, the resolution, and dates throughout the process; including informal
complaints, formal grievances and any appeals filed, narrative of trends or
patterns identified through grievance reviews;
Urinalysis - name, date, random/cause, results, (positive for);
Searches - random and cause;
Contraband Log - what it was, where it was found, who found it, when it was
found (date and time) and inmates(s) names if applicable;
Visitation - numbers of inmates receiving visits and the number of visitors,
hours of visiting; including contact and noncontact visits;
Religious Services - hours, participants, faith;
Recreation - indoor, outdoor, activities, participants;
Education - hours, participants, classes;
Work- hours, participants,jobs;
Law Library access - days and hours available by week, inmate sign in sheets
evidencing individual inmate usage, services provided to inmates unable to
access the law library (segregation, infirmary, special management units),
equipment unavailability or failure (photocopjer, typewriter, terminals);
Lawsuits - current lawsuits by State inmates served on the Facility or
Corporation;
Security Threat Group (STG) identification or validation;
Health Services Statistical and Monitoring Reports - including Chronic
Illnesses, Mental Health Caseload Status and Treatment Planning, Off-site '
Services and others as determined by the VT DOC Health Services Division.;
Updates on staffing levels at the Facility.

Any records or reports provided to the State from the Contractor, in any form, shall be
considered a public record under the Vermont Public Records Act and shall be subject to
disclosure.
4.22

PHOTOGRAPHING AND PUBLICIT Y
Contractor shall not be authorized to release publicity concerning State i.nmates. Contractor
shall not release personal histories or photographs of such inmates or information concerning
their arrivals or departures or permit reporters or photographers to interview or photograph
such inmates without the express written permission of the State and of the inmate. The
Contractor may photograph inmates as a means of identification for official use only;
however, photographs of an inmate may be disseminated to appropriate law enforcement
officials and to the press in. the event of any escape from an institution by such inmate.
All requests for media interviews with State inmates must be approved in advance by the
State.

4.23

COMPREHENSIVE HEALTHCARE SERVICES
Contractor's written policies and procedures shall describe health services, mental health
service, and dental services to be provided. At a minimum, these must meet ACA standards,
federal, state and local laws and regulations, and the following State policies and procedures.

4.23.l

Initial Healthcare Receiving Screening

STATE OF VERMONT Contract# 37036

Page 17 of63

Contractor shall conduct a receiving screening on all newly admitted State inmates within
twenty-four (24) hours of the inmate's arrival at the Facility. Contractor shall ensure that
this screening is conducted by a qualified healthcare professional who is licensed in the
State of Mississippi and shall include review of healthcare information for each inmate
and provision of necessary services, including but not limited to:
4.23.1.1

Current and past me5iical, mental health, dental, phannacological, and other
problems;
4.23.1.2 A physical evaluation;
4.23.1.3 Observation of:
4.23 .1.3 .1 Behavior, which includes state of consciousness, mental status
(including suicidal ideation), appearance, conduct, tremors and
sweating;
4.23 .1.3 .2 Body deformities and ease of movement;
4.23 .1.3 .3 Persistent cough or lethargy; and
4.23 .1.3 .4 Condition of skin, including trauma markings, bruises, lesions,
jaundice, rashes, infestations and needle marks or other indications
of drug abuse. This should also include a Methicillin Resistant
Staphylococcus Aurous (MRSA) check.
4.23.1.4 History of serious infectious or communicable diseases, and any treatment or
symptoms (e.g., chronic cough, lethargy, weakness, weight loss, loss of
appetite, fever, night sweats) suggestive of such illness;
4.23.1.5 Mental illness, including history of suicidal ideation;
4.23.1.6 Current and past medications;
4.23.1.7 Dietary requirements;
4.23.1.8 Use of alcohol and other drugs, and any history of associated withdrawal
symptoms;
4.23.1.9 Screening and evaluation for other health problems;
4.23.1.10 Education and orientation regarding how to access healthcare services at the
Facility, including:
4.23. I.I 0.1 Procedures for obtaining healthcare services ( e.g., submission of
"Healthcare Request Forms");
4.23. I. I 0.2 Timeframes for sick call responses;
4.23. I. I 0.3 How various healthcare services are provided, including but not
limited to chronic care, emergency services, pharmaceutical
services, and infirmary services;
4.23. I .10.4 The behavior expected of inmates while in the health care services
area;
4.23 .1.10.5 Grievance procedures;
4.23. I .10.6 Procedure for obtaining copies of protected health information.
4.23. I. I 0. 7 Orientation to the Prison Rape Elimination Act (PREA) to include
the Contractor(s) local procedures on how to,report sexual abuse
or harassment.
4.23. I .10.8 Information regarding how to complete Advance Directive forms
which are germane to the State of Mississippi.
4.23.2 Physical Examinations
Contractor shall ensure that physical examinations are conducted annually or as
clinically indicated based on the age and unique health condition of each inmate.

STATE OF VERMONT Contract# 37036

Page 18 of63

4.23.3 Sick Call
Contractor shall provide a sick call system which provides inmates with access to health
care services. Contractor's Health care staff shall collect, triage, and respond to all
inmate requests daily. The frequency of sick call shall be consistent with NCCHC
standards. If the inmate's custody status precludes attendance at sick call, appropriate
measures shall be taken to provide access to health care services.
4.23 .4 Emergency Services
Contractor shall provide an immediate response to inmates with emergency health care
needs. Contractor shall have twenty-four (24) hour physician coverage or telephone oncall coverage. Contractor shall have specific written policies and procedures to address
emergency response and the emergency transfer of inmates. Contractor shall
completely and accurately document all emergency responses in the inmate's medical
record. ·
4.23 .5 Infirmary Services
Contractor shall staff and utilize infirmary bed!:) available at the Facility for admissions
which do not require hospitalization. Inmates requiring respiratory isolation shall be
housed in a designated negative air pressure room. The Contractor shall comply with
state and federal laws and NCCHC standards with respect to the management and
operation of infirmary facilities. Physician orders shall dictate when inmates are
admitted to and discharged from the infirmary/medical housing as well as how
frequently the inmate shall be seen by qualified healthcare professionals. All inmates
placed in the infirmary or medical observation shall at all times be able to access
healthcare services through visual or auditory cues.
4.23 .6 Hospitalization
Contractor shall ensure that all inpatient hospital claims are processed through the
Vermont Department of Vermont Health Access (Vermont's Medicaid program), since
all State inmates may receive Medicaid benefits for inpatient hospital services, even if
those services are provided out of state. The Contractor shall be financially responsible
for all inpatient hospital services that are not remitted through Vermont's Medicaid
program. Contractor shall ensure that an inmate's medical chart accurately and
completely documents services provided by community health care providers.
Under no circumstances shall Contractor limit or delay access to inpatient
hospitalization for inmates identified as needing this.level of care. State, at its
discretion, may audit any case to ensure that there is no limit or delay access to
inpatient hospitalization for inmates identified as needing this level of care.
4.23. 7 Utilization Management & Specialty Outpatient Services
Contractor shall implement a utilization management process, utilizing Interqual or
other criteria, for the purposes of the timely review, approval, denial, or modification of
requests for specialty outpatient services. Contractor shall be responsible for
scheduling, authorizing, and coordinating all specialty services. Contractor shall arrange

STATE OF VERMONT Contract# 3 7036

Page 19 of63

for qualified medical specialists to visit the Facility to avoid the transport of inmates
off-site whenever possible. If necessary, an outside referral shall be made for services
that cannot be provided at the Facility. To the degree possible, diagnostic testing shall
be performed on-site. The Contractor shall provide specialty service providers with all
pertinent information needed to facilitate timely assessment, diagnosis, and treatment.
The medical specialist shall receive diagnostic testing results, substantive patient
history and clinical findings in the form of a written referral.
Contractor shall ensure that all inmates retuming from outside hospital stays or clinic
visits shall be seen immediately upon return by a medical professional, and a progress
note regarding the review shall be documented in the inmate's health care record.
Contractor shall document all off-site services provided to the inmate in the inmate's
healthcare record.
Under no circumstances shall Contractor limit or delay access to specialty services for
inmates identified as needing this care. State, at its discretion, may audit any case to
ensure that there is no limit or delay of access to specialty services for inmates
identified as needing this care.
4.23.8 Laboratory Services
Contractor shall provide lab diagnostic testing. Laboratory testing shall include but not
be limited to routine, special chemistry, and toxicology analysis. The laboratory shall
meet all applicable state and federal requirements for specimen handling, testing, and
reporting. The Contractor shall review any test and or, lab results with the inmate in a
timely manner based on the acute or non-acute nature of the testing performed. The
Contractor shall document all conversations with inmates regarding laboratory results in
the inmate's healthcare record.
4.23.9 Radiology Services
Contractor shall ensure that a radiology technician shall be available to provide
radiology services. Contractor shall refer inmates off-site for procedures beyond the
scope of services provided on-site. Contractor shall ensure that a Board-Certified
radiologist shall read the·studies in a timely manner. Contractor shall document the
radiology report and maintain it in the inmate's healthcare record. The Contractor's
Medical Director shall review, initial, and date all radiology reports. Contractor shall
furnish a verbal notification of all positive findings to the State's Medical Director or
his/her designee within three (3) working days; this verbal notification is to be followed
up by a written notice of findings within ten (10) working days.
4.23.10 Medical Diets
Contractor shall make medical diets available to inmates when indicated and ordered by
the physician. Contractor shall document the need and dietary services required in the
inmate's healthcare record. Contractor shall document the inmate's orientation to the
medical diet in the healthcare record. In accordance with NCCHC standards, Contractor
shall coordinate reviews of all diets at least every six (6) months with a registered
dietitian.

STATE OF VERMONT Contract# 37036

Page20 of63

4.23.11 EKG Services
Contractor shall provide EKG services and necessary EKG ~quipment. Contractor shall
ensure that there is immediate reading and reporting ofresults of EKG. Contractor shall
conduct in service training of nursing staff on EKG services.
4.23.12 Medical Prosthetics
Contractor shall provide prosthetic devices to inmates as medically indicated.
Prosthetics shall be selected according to community standards, but also must conform
to security requirements of the Facility and the Americans with Disabilities Act. The
costs associated with providing prosthetics shall be borne by the Contractor.
4.23.13 Optical Services
Contractor shall identify the need for optical services. Contractor shall ensure that
inmates requesting health care services for visual problems shall be evaluated using the
Snellen eye chart by nursing staff. If a visual deficiency beyond 20/40 is identified,
Contractor shall refer the inmate to Contractor's optical service provider. Contractor
shall coordinate the provision of optometrist services either on-site or off-site.
Contractor shall pay for the evaluation, fitting, and dispensing of an optometrist.
Contractor shall provide one (1) set of eyeglasses to inmates if prescribed and deemed
necessary by the optometrist. Inmates shall be eligible to receive follow-up eye exams
every two (2) years.
Contractor shall offer all monocular inmates a referral to the optometrist for a
discussion of vision preservation without regard for visual acuity by Snellen testing.
4.23 .14 Pharmaceuticals
Contractor shall provide a total pharmaceutical system, including psychotropic
medications, which is sufficient to meet the needs of the State inmates. Policies,
procedures and practices addressing pharmaceuticals shall be in compliance with all
applicable state and federal regulations.
The pharmaceutical system shall have the following components:

4.23 .14.1 Medication ordered by a qualified provider (physician, psychiatrist, nursepractitioner, dentist) shall be appropriately documented in the medication
administration record (MAR) and healthcare record.
4.23 .14.2 A pharmaceutical inventory shall be established to facilitate the initiation of
pharmaceutical therapy upon the physician's order. An inventory control
system shall be implemented to ensure the availability of necessary and
commonly prescribed medications. All pharmaceuticals shall be prepared,
maintained, and stored under secure conditions to protect against the loss of
pharmaceuticals.
4.23. 14.3 An adequate and proper supply of antidotes and emergency medications shall
be available.
4.23.14.4 Contractor shall maintain a formulary listing the available medications, and
this formulary shall be available to the State.

STATE OF VERMONT Contract# 37036

Page 21 of63

4.23.14.5 While it is recognized that formulary prescribing is the norm, cases may arise
in which non-formulary medications are determined to be the most effective
treatment. When this occurs, the need for non-formulary medications shall be
reviewed as part of the Utilization Management process and provided to the
inmate as indicated by the appropriate authority (e.g., Medical Director).
4.23 .15 Medication Administration
Contractor shall maintain a medication administration system which meets the needs of
State inmates. Medication shall be administered to inmates by nurses or other
authorized personnel three (3) times daily or as ordered. The administration of each
medication shall be documented on a medication administration record (MAR). On the
MAR, staff shall document instances when an inmate refuses a medication or is not
available to receive a medication. Medication administration times shaJI be adjusted to
meet the needs of inmates who participate in work details or classes.
For inmates who are non-adherent to medications (especiaJly essential medications to
control chronic or acute health or mental health conditions), referrals to a medical or
mental health provider for counseling shall be made prior to discontinuing the
medication. Psychiatric medications shall not be discontinued until the inmate has met
with mental health staff to discuss the reason the medication was originally prescribed
and the risks of discontinuation. All conversations regarding medication non-adherence
shall be documented in the inmate's healthcare record.
4.23. I 6 Dental Services
Contractor shall provide on-site dental services which include preventive and
restorative care. An initial dental appraisal and instruction in oral hygiene shall be
conducted within fourteen (14) days of admission. The Contractor's provision of a
dental screening for all referred inmates shall be conducted by a licensed dentist.
Nurses who provide oral hygiene instruction shall receive in-service training.
Inmates may request dental services in accordance with the Contractor's protocols and
procedures. Inmates shall be seen as soon as practicable, based on acuity. Inmates who
require treatment beyond the capabilities of the Contractor's licensed dentist shall be
referred to a dental specialist. Dental prostheses shall be provided as determined by a
licensed dentist.
·
4.23.17 Hepatitis C Treatment
It is recognized by the Parties that the prevalence of hepatitis in prison populations is
higher than the general public. The Contractor shall develop clinical guidelines,
consistent with Federal Bureau of Prison Guidelines, for the treatment of hepatitis C.
Contractor shall be responsible for the costs associated with hepatitis C treatment.
4.23.18 Mental Health Services
Contractor shall provide individualized mental health services to meet the needs of
State inmates, including assessment, evaluation, diagnosis, development of treatment
plan~, evidence-based individual and group interventions, psychopharmacology, and
periodic review by a multi-disciplinary treatment team. AH mental health records shall

STA TE OF VERMONT Contract# 3 7036

Page22 of63

be provided by the State to the Contractor for the purposes of continuity of care. The
Contractor shall document all mental health services provided to inmates (including
refusals of care) in the inmate's healthcare record.
4.23.19 Suicide Prevention and Crisis Intervention
Contractor shall provide routine screening and evaluation of inmates to assess suicidal
ideation or behavior. When an inmate is suspected of being at risk of harming self or
others, Contractor shall take all necessary measures and interventions to maintain the
inmate's safety. Compliance with standards of professional practice shall be followed.
When an inmate experiences psychiatric emergencies or crisis, the Contractor shall take
all necessary measures to respond to the inmate's needs, place the inmate in an
appropriate treatment setting (including but not limited to medical observation or a
psychiatric hospital), and maintain the safety of the inmate and staff.
Contractor shall document all interactions with inmates that are suicidal or showing
signs of psychological decompensation in the inmate's healthcare record.
4.23.20 Health Care Records
Contractor shall maintain a healthcare record for all inmates which includes
documentation of all healthcare services provided to inmates on-site or off-site.
Contractor shall provide full and unrestricted access to and copies of the appropriate
health care record to the State within the scope of legal and regulatory requirements and
in accordance with the State's policies, procedures and directives. Contractor's with an
electronic health record shall provide read-only access to the State's Director of
Nursing or designee. Contractor shall respond to written requests for information
regarding the health status of an inmate within 24 hours of the written request. Failure
to respond to the State's request for additional information may result in the assessment
of liquidated damages, which shall be deducted from the Contractor's monthly invoice.
The standardized health care record shall contain, but not be fimited to, the following
information:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

Problem list;
ADA accommodations and forms;
Completed intake screening form;
Health appraisal form;
Clinical (SOAP(E)) notes;
Physician orders;
Inmate requests for health care services, including illnesses and injuries;
All diagnostic findings, treatments and dispositions;
Prescribed medications and their administration;
Laboratory, radiology and other diagnostic studies;
Consent and refusal forms;
Release of Information forms;
Date and time of health care encounters;
The health care provider's name and title;
Hospital reports and discharge summaries;

STATE OF VERMONT Contract# 37036

•
•
•
•
•
•

Page 23 of63

Intra-system and inter-system transfer summaries;
Specialized treatment plans;
Consultation forms;
Healthcare Request Forms;
Grievance forms;
Documentation of all medical, dental and mental health care services provided,
whether from inside or outside the facility.

A health care record shall be initiated during the inmate's first health care encounter and
shall contain complete and accurate records of health care services provided during the
inmate's placement at the Facility. The State shall provide health information at the
time of transfer, and the Contractor shall provide relevant records to the State upon an
inmate's return to the State's custody. Health care records shall be maintained securely.
and in a confidential manner at all times.
4.23 .21 Quality Assurance and Improvement Program
Contractor shall implement a Quality Assurance (QA) and Continuous Quality
Improvement (CQI) program as set forth by NCCHC standards. The program shall be
designed to identify issues related to providing healthcare services and develop
corrective action plans to address deficiencies in a timely manner.
The program shall consist of the following elements:
•

Risk Management - Contractor shall establish a logical and thorough system of
policies and procedures to minimize exposure to liability. Risk management
activities focus on the identification of clinical events which have, or may have, the
potential of placing the inmate, health care provider, or the facility at risk.
Identified risk areas are investigated and analyzed to develop policies and
procedures that reduce risk and maintain a safe clinical setting. The quality
improvement plan shall include a safety component to provide a safe environment
for inmates, employees and visitors.

•

Infection Control - Contractor's infection control policies and procedures shall
focus on the prevention, identification and control of diseases acquired in the
facility setting or brought in from the outside community. The infection control
program shall address hand washing, housekeeping, decontamination, disinfection
and sterilization of equipment and supplies, medical isolation, infectious agents,
blood borne pathogens, infectious waste, pest control and parasite infected
environments.

•

Utilization of Services - Contractor shall collect and monitor statistical data to
detect potential problems. Volume data reporting forms shall be used to report data
and to track the utilization of health care services on a year-to-date basis. All
deviations shall be reviewed for problem identification. Contractor shall monitor
the utilization of all health care services provided off-site, as compared to national
data on incarcerated populations, and shall be readily available for telephone
consultations. Contractor shall provide the State with a monthly report identifying
those inmates transferred off-site to the hospital emergency department, and a status
report on all inmates in local hospitals and infirmaries. Contractor's volume data

STATE OF VERMONT Contract# 37036

Page 24 of63

reporting forms shall also be used to prepare a narrative report on the types and
numbers of services provided.
•

Inmate Grievances - Grievances are reviewed to identify potential areas of concern
and to determine if problematic patterns exist. Inmate grievances shall be
documented in a log to assist in monitoring compliance with policy and procedure
related to inmate grievances and to summarize those areas which are frequently the
topic of inmate dissatisfaction. All inmate grievances shall be responded to within
twenty (20) days of receipt and included in monthly reporting.

Contractor shall work with the State's Health Services Administrator or designees on all
QA and CQI plans relating to State inmates. The Contractor shall provide the State with
all QA, CQI, and corrective action plans that are developed as a result of critical clinical
events, including but not limited to expected or unexpected inmate deaths, even if those
documents are generally protected by "peer review" statutes. The Contractor shall
verify its compliance with all QA, CQI, and corrective action plans suggested by the
State.
4.23.22 NCCHC Accreditation
Contractor shall work in good faith to pursue NCCHC accreditation and shall receive
accreditation for these sites, or any other sites where State inmates are housed, within
twelve (12) months of the commencement date of the contract
4.23.23 Inmate Death
Contractor's written policies and procedures shall provide for the prompt notification of
the State in case of an expected or unexpected inmate death. Any death of a·State
inmate assigned to the Facility shall be reported within one (1) hour of the death to
State. A post-mortem/autopsy examination shall be conducted on all inmates who die
while in the custody of the Contractor. The costs of post-mortem/autopsy examination
shall be borne by the Contractor. Contractor and State shall communicate with each
other to determine the most appropriate way to convey notice of an inmate's death to
his next-of-kin. Contractor shall provide the State with any and all documentation, or
other information such as video, relative to the inmate death within 7 days of the event.
The State will be responsible for all costs to prepare and transport the body of a
deceased Vermont inmate.
4.23.24 Medical Co-pay
Contractor shall not charge a medical co-payment to State inmates.
4.24

HEADINGS
Headings herein are for convenience of reference only and shall not be considered any
interpretation of this Contract.

STATE OF VERMONT Contract# 37036

Page 25 of63

5. NOTICES
Any notice provided for in this Contract shall be in writing and served by personal delivery or by
certified mail, return receipt requested, postage prepaid, or by national overnight courier service at the
addresses listed in Section 13 unless written notice of a change is received from the other party. Any
notice so mailed and any notice served by personal delivery shall be deemed delivered and effective
upon receipt or upon attempted delivery. This method of notification will be used in all instances,
except for emergency situations when immediate notification is required pursuant to the appropriate
sections of this Contract.

6. NO THIRD-PARTY BENEFICIARY ENFORCEMENT
It is expressly understood and agreed that enforcement of the terms and conditions of this Contract,
and all rights of action relating to such enforcement, shall be strictly reserved to State and Contractor,
and nothing contained in this Contract shall give or allow any claim or right of action whatsoever by
any other person on this Contract. It is the express intention of State and Contractor that any entity,
other than State or Contractor receiving services or benefits under this Contract, shall be deemed an
incidental beneficiary only.

7.

MODIFICATION AND WAIVER
This Contract contains the entire Contract and understanding between the parties and supersedes any
other Contracts concerning the subject matter of this transaction, whether oral or written. No
modification, amendment, notation, renewal or other alteration of or to this Contract shall be deemed
valid or of any force or effect whatsoever, unless mutually agreed upon in writing by the parties. No
breach of any term, provision or clause of this Contract shall be deemed, waived or excused, unless
such waiver or consent shall be in writing and signed by the party claimed to have waived or
consented. Any consent by any party to, or waiver of, a breach by the other, whether express or
implied, shall not constitute consent to, waiver of, or excuse of any other different or subsequent
breach.

8.

SEVERABILITY
If any term or condition of this Contract shaH be held to be invalid, illegal or unenforceable, this
Contract shall be construed and enforced without such provision to the extent this Contract is then
capable of execution within the original intent of the parties.

9.

RISK OF PHYSICAL DAMAGE TO FACILITY
The risks and costs of physical damage to the Facility incurred as a dire.c t result of the placement of
State inmates in the Faciljty shall be considered usual costs incidental to the operation of the-Facility
and part of the costs reimbursed by the fixed rate per inmate day as provided in Attachment B .
Contractor shall not administratively adjudicate reimbursement from State inmates without a small
claims or other court order to recover expenses related to damages caused by State inmates.

STATE OF VERMONT Contract # 37036

Page 26 of63

10. COMPLIANCE WITH APPLICABLE LAWS
Contractor shall, at all times during the perfonnance of its obligations of this Contract strictly adhere
to all applicable federal laws and regulations, including protection of the confidentiality of all
applicant/recipient records, papers, documents, tapes or any other materials that have been or may
hereafter be established which relate to this Contract. The Contractor acknowledges that the following
laws are included: Title VII of the Civil Rights Act of 1964, Section 504 of the Rehabilitation Act of
1972, the Education Amendments of 1972, the Age Discrimination Act of 1975, the Americans With
Disabilities Act, including Title 11, Subtitle A, 24 U.S.C. Sec. 12101, et seq. and all rules and
regulations applicable to these laws prohibiting discrimination because of race, religion, color,
national origin, creed, sex, age and handicap in federally assisted health and human services
programs. This assurance is given in consideration of and for the purpose of obtaining any and all
federal grants, or other federal financial assistance.
Contractor assures State that at all times during the performance of this Contract that no qualified
individual with a, disability shall, by reason of such disability, be excluded from participation in, or
denied to benefits of service, programs, or activities performed by the Contractor, or be subjected to
any discrimination by the Contractor upon which assurance State relies.
Contractor shall provide any infonnation and assistance necessary for State to fulfill any federal
VOi/TiS grant requirements for funds for the financing of this Contract.
11. CONTACT PERSON
The contact person for the State is;
Shannon Marcoux, Faci1ities Operations Manager
NOB 2 South, 280 State Drive
Waterbury, VT 05671-2000
shannon.marcoux@vermont. ov
Office: 802-241-0017
·
Cell: 802-535-8658
The contact person for the Contractor is;
Cole Carter, General Counsel
CoreCivic
IO Burton Hills Boulevard
Nashville, TN 37215
Cole.Carter@corecivic.com
615-263-3000
And
Warden Martin Frink
Tallahatchie County Correctional Facility
415 U.S. Highway 49North
Tutwiler, MS 38963
Martin.Frink@corecivic.com
662-345-6567

STATE OF VERMONT Contract# 37036

Page27 of63

Replacement of the individuals named herein may be accomplished by written notice to the other
party.
12. COMMISSARY
Commissary commissions will be collected and deposited into the Inmate Recreation Fund,for all
Vermont correctional facilities.

STATE OF VERMONT Contract# 3 7036

Page 28 of63

ATTACHMENT B-PAYMENT PROVISIONS
The maximum dollar amount payable under this contract is not intended as any fonn of a guaranteed
amount. The Contractor will be paid for products or services actually delivered or perfonned, as specified
in Attachment A, up to the maximum allowable amount specified on page 1 of this contract.
1. Prior to commencement of work and release of any payments, Contractor shaU submit to the State:
a . . a certificate of insurance consistent with the requirements set forth in Attachment C,
Section 8 (Insurance), and with any additional requirements for insurance as may be set
forth elsewhere in this contract; and
b. a current IRS Fonn W-9 (signed within the last six months).
2. Payment terms are Net 30 days from the date the State receives an error-free invoice with all
necessary and complete supporting documentation.
3. Contractor shall submit detailed invoices itemizing all work performed during the invoice period,
including the dates of service, rates of pay, and any other information and/or documentation
appropriate and sufficient to substantiate the amount invoiced for payment by the State. All
invoices must include the Contract # for this contract.
4.

Contractor shall submit invoices to the State in accordance with the schedule set forth in this
Attachment B. Unless a more particular schedule is provided herein, invoices shall be submitted
not more frequently than monthly.

5. Invoices shall be submitted to the State at the following address: VTDOC Business Office NOB 2
South, 280 State Drive, Waterbury, VT 05671-2000.
6. The payment schedule for deJivered products, or rates for services performed, and any additional
reimbursements, are as follows:
Except as otherwise provided herein, the entire cost to State for housing inmates with Contractor
under the terms of this Agreement shall be fixed at $7 i .00 per inmate per day for the first year of
this contract On October 1, 2019 and every subsequent October in which this Agreement or any
renewal term is in effect, the then current rates shall increase. The rates for the four-year term
shall be as follows:
Year One: $71.00
Year Two: $72.99
Year Three: $75.04
Year Four: $77 .15
State shall be billed monthly by the Contractor. State shall pay Contractor for the day Contractor
takes custody of an inmate and every subsequent day the inmate remains in the custody of the
Contractor, except Contractor shall not be paid for the day the inmate ceases to be in the custody
of Contractor. Contractor shall present VTDOC with an in'{oice no later than 15 days after the
close of the month. Payment shall be made within thirty (30) days of a correct invoice. State and
Contractor shall use all reasonable efforts to ensure that an invoice is reviewed and, if necessary,
corrected in a timely fashion.

STATE OF VERMONT Contract# 3 7036

Page 29 of63

State shall receive an annual credit of Fifty Thousand Dollars ($50,000.00) to offset its expense
for the on-site contract monitors. This credit shall be deducted on each monthly invoice in the
amount of four thousand one hundred sixty-six dollars and sixty-seven cents ($4,166.67).
Beginning on October 1, 2019 and continuing each year that this Agreement or any renewal term
is in effect, the annual credit for the on-site contract monitor shall increase by three percent (3%)
over the prior year's credit and the amount deducted on the monthly invoice shall be adjusted
accordingly.
State shall reimburse Contractor for State inmate postage on a monthly basis as outlined in
Attachment A section 4. 17.
·
Commissary profits shall be paid to State on a monthly basis via check mailed to the VTDOC
Business Office. Contractor shall provide a detailed statement of commissary sales to State
inmates separated by commissionable and non-commissionable items.
The parties acknowledge and agree that liquidated damages included in this contract applicable to
Attachment A section 4.23.20 shall not apply in situations where the Contractor's failed
performance is related to events or actions outside of the control of the Contractor.
Liquidated damages are intended to represent estimated actual damages and are not intended as a
penalty and Contractor shall pay them to the State without limiting the State' s right to terminate
this agreement for default as provided elsewhere herein. If there is a determination of actual
damage, the calculated amount may be deducted from the Contractor's total remittance for the
month. Liquidated damages shall be calculated at $294.03 per day.
The parties recognize that the rates agreed upon in this Contract are based on current applicable
law, court orders, regulations, policies, procedures, guidelines, VTDOC Directives and Guidance
Documents and ACA standards in effect as of the date the Contract is signed. If changes in
current applicable law, regulations, applicable policies, procedures, guidelines, VTDOC
Directives and Guidance Documents or ACA standards increase the Contractor's costs to comply
with its obligations under this Contract, the parties agree to review the changes and negotiate a
modification in the form of an amendment to this contract in good faith to provide adequate
compensation for the changes.

STATE OF VERMONT Contract# 3 7036

Page 30 of63

ATTACHMENT C: STANDARD STATE PROVISIONS
FOR (:ONTRACTS AND GRANTS
REVISED DECEMBER 15, 2017
1. Definitions: For purposes of this Attachment, "Party" shall mean the Contractor, Grantee or
Subrecipient, with whom the State of Vermont is executing this Agreement and consistent with the form of
the Agreement. "Agreement" shall mean the specific contract or grant to which this form is attached.
2. Entire Agreement: This Agreement, whether in the form of a contract, State-funded grant, or Federallyfunded grant, represents the entire agreement between the parties on the subject matter. All prior
agreements, representations, statements, negotiations, and understandings shall have no effect.
3. Governing Law, Jurisdiction and Venue; No Waiver of Jury Trial: This Agreement will be governed
by the laws of the State of Vermont. Any action or proceeding brought by either the State or the Party in
connection with this Agreement shall be brought and enforced in the Superior Court of the State of Vermont,
Civil Division, Washington Unit. The Party irrevocably submits to the jurisdiction of this court for any
action or proceeding regarding this Agreement. The Party agrees that it must first exhaust any applicable
administrative remedies with respect to any cause of action that it may have against the State with regard
to its performance under this Agreement. Party agrees that the State shall not be required to submit to
binding arbitration or waive its right to a jury trial.
4. Sovereign Immunity: The State reserves all immunities, defenses, rights or actions arising out of the
State's sovereign status or under the Eleventh Amendment to the United States Constitution. No waiver of
the State's immunities, defenses, rights or actions shall be implied or otherwise deemed to exist by reason
of the State's entry into this Agreement.
5. No Employee Benefits For Party: The Party understands that the State will not provide any individual
retirement benefits, group life insurance, group health and dental insurance, vacation or sick leave, workers
compensation or other benefits or services available to State employees, nor will the State withhold any
state or Federal taxes except as required under applicable tax laws, which shall be determined in advance
of execution of the Agreement. The Party understands that all tax returns required by the Internal Revenue
Code and the State of Vermont, including but not limited to income, withholding, sales and use, and rooms
and meals, must be filed by the Party, and information as to Agreement income will be provided by the
State of Vermont to the Internal Revenue Service and the Vermont Department of Taxes:
6. Independence: The Party will act in an independent capacity and not as officers or employees of the
State.

7. Defense and Indemnity: The Party shall defend the State and its officers and employees against all
third-party claims or suits arising in whole or in part from any act or omission of the Party or of any agent
of the Party in connection with the performance of this Agreement. The State shall notify the Party in the
event of any such claim or suit, and the Party shall immediately retain counsel and otherwise provide a
complete defense against the entire claim or suit. The State retains the right to participate at its own expense
in the defense of any claim. The State shall have the right to approve all proposed settlements of such
claims or suits.
After a final judgment or settlement, the Party rriay request recoupment of specific defense costs and may
file suit in Washington Superior Court requesting recoupment. The Party shall be entitled to recoup costs
only upon a showing that soch costs were entirely unrelated to the defense of any claim arising from an act
or omission of the Party in connection with the performance of this Agreement.

STATE OF VERMONT Contract# 37036

Page 31 of63

The Party shall indemnify the State and its officers and employees if the State, its officers or employees
become legally obligated to pay any damages or losses arising from any act or omission of the Party or an
agent of the Party in connection with the performance of this Agreement.
Notwithstanding any contrary language anywhere, in no event shall the terms of this Agreement or any
document furnished by the Party in connection with its performance under this. Agreement obligate the
State to ( 1) defend or indemnify the Party or any third party, or (2) otherwise be liable for the expenses or
reimbursement, including attorneys' fees, collection costs or other costs of the Party or any third party.

8. Insurance: Before commencing work on this Agreement the Party must provide certificates of insurance
to show that the following minimum coverages are in effect. It is the responsibility of the Party to maintain
current certificates of insurance on file with the State through the term of this Agreement. No warranty is
made that the coverages and limits listed herein are adequate to cover and protect the interests of the Party
for the Party's operations. These are solely minimums that have been established to protect the interests of
the State.
Workers Compensation: With respect to all operations performed, the Party shall carry workers'
compensation insurance in accordance with the laws of the State of Vermont. Vermont will accept an outof-state employer's workers' compensation coverage while operating in Vermont provided that the
insurance carrier is licensed to write insurance in Vermont and an amendatory endorsement is added to the
policy adding Vermont for coverage purposes. Otherwise, the party shall secure a Vermont workers'
compensation policy, if necessary to comply with Vermont law.
General Liability and Property Damage: With respect to all operations performed under this Agreement,
the Party shall carry general liability insurance having all major divisions of coverage including, but not
limited to:
Premises - Operations
Products and Completed Operations
Personal Injury Liability
Contractual Liability
The policy shall be on an occurrence form and limits shall not be less than:
$1,000,000 Each Occurrence
$2,000,000 General Aggregate
$1,000,000 Products/Completed Operations Aggregate
$1,000,000 Personal & Advertising Injury
Automotive Liability: The Party shall carry automotive liability insurance covering all motor vehicles,
including hired and non-owned coverage, used in connection with the Agreement. Limits of coverage shall
not be less than $500,000 combined single limit. If performance of this Agreement involves construction,
or the transport of persons or hazardous materials, limits of coverage shall not be less than $1,000,000
combined single limit.
Additional Insured. The General Liability and Property Damage coverages required for performance of this
Agreement shall include the State of Vermont and its agencies, departments, officers and employees as
Additional Insureds. If performance of this Agreement involves construction, or the transport of persons
or hazardous materials, then the required Automotive Liability coverage shall include the State qfVermont
and its agencies, departments, officers and employees as Additional Insureds. Coverage shall be primary
and non-contributory with any other insurance and self-insurance.
Notice ofCancellation or Change. There shall be no cancellation, change, potential exhaustion of aggregate
limits or non-renewal of insurance coverage(s) without thirty (30) days written prior written notice to the
State.

STATE OF VERMONT Contract# 37036

Page32 of63

9. Reliance by the State on Representations: All payments by the State under this Agreement will be
made in reliance upon the accuracy of all representations made by the Party in accordance with this
Agreement, including but not limited to bills, invoices, progress reports and other proofs of work.
10. False Claims Act: The Party acknowledges that it is subject to the Vermont False Claims Act as set
forth in 32 V.S.A. § 630 et seq. If the Party violates the Vermont False Claims Act it shall be liable to the
State for civil penalties, treble damages and the costs of the investigation and prosecution of such violation,
including attorney's fees, except as the same may be reduced by a court of competent jurisdiction. The
Party's liability to the State under the False Claims Act shall not be limited notwithstanding any agreement
of the State to otherwise limit Party's liability.
11. Whistleblower Protections: The Party shall not discriminate or retaliate against one of its employees
or agents for disclosing information concerning a violation of law, fraud, waste, abuse of authority or acts
threatening health or safety, including but not limited to allegations concerning the False Claims Act.
Further, the Party shall not require such employees or agents to forego monetary awards as a result of such
disclosures, nor should they be required to report miscondu~t to the Party or its agents prior to reporting to
any governmental entity and/or the public.
12. Location of State Data: No State data received, obtained, or generated by the Party in connection with
performance under this Agreement shall be processed, transmitted, stored, or transferred by any means
outside the continental United States, except with the express written permission of the State.

13. Records Available for Audit: The Party shall maintain all records pertaining to performance under
this agreement. "Records" means any written or recorded information, regardless of physical form or
characteristics, which is produced or acquired by the Party in the performance of this agreement. Records
produced or acquired in a machine readable electronic format shall be maintained in that format. The
records described shall be made available at reasonable times during the period of the Agreement and for
three years thereafter or for any period required by law for inspection by any authorized representatives of
the State or Federal Government. If any litigation, claim, or audit is started before the expiration of the
three-year period, the records shall be retained until all litigation, claims or audit findings involving the
records have been resolved.
14. Fair Employment Practices and Americans with Disabilities Act: Party agrees to comply with the
requirement of21 V.S.A. Chapter 5, Subchapter 6, relating to fair employment practices, to the full extent
applicable. Party shall also ensure, to the full extent required by the Americans with Disabilities Act of
1990, as amended, that qualified individuals with disabilities receive equitable access to the services,
programs, and activities provided by the Party under this Agreement.
15. Set Off: The State may set off any sums which the Party owes the State against any sums due the Party
under th is Agreement; provided, however, that any set off of amounts due the State of Vermont as taxes
shall be in accordance with the procedures more specifically provided hereinafter.
16. Taxes Due to the State:
A. Party understands and acknowledges resp~nsibility, if applicable, for compliance with State tax
laws, including income tax withholding for employees performing services within the State,
payment of use tax on property used within the State, corporate and/or personal income tax on
income earned within the State.

B. Party certifies under the pains and penalties of perjury that, as of the date this Agreement is signed,
the Party is in good standing with respect to, or in full compliance with, a plan to pay any and all
taxes .due the State of Vermont.

STATE OF VERMONT Contract# 37036

Page33 of63

C. Party understands that final payment under this Agreement may be withheld if the Commissioner
of Taxes determines that the Party is not in good standing with respect to or in full compliance with
a plan to pay any and all taxes due to the State of Vermont.
D. Party also understands the State may set off taxes (and related penalties, interest and fees) due to
the State of Vermont, but only if the Party has failed to make an appeal within the time allowed by
law, or an appeal has been taken and finally determined and the Party has no further legal recourse
to contest the amounts due.

17. Taxation of Purchases: All State purchases must be invoiced tax free. An exemption certificate will
be furnished upon request with respect to otherwise taxable items.
18. Child Support: (Only applicable if the Party is a natural person, not a corporation or partnership.) Party
states that, as of the date this Agreement is signed, he/she:
A. is not under any obligation to pay child support; or
B. is under such an obligation and is in good standing with respect to that obligation; or
C. has agreed to a payment plan with the Vermont Office of Child Support Services and is in full
compliance with that plan.

Party makes this statement with regard to support owed to any and all children residing in Vermont. In
addition, if the Party is a resident of Vermont, Party makes this statement with regard to support owed to
any and all children residing in any other state or territory of the United States.
19. Sub-Agreements: Party shall not assign, subcontract or subgrant the performance of this Agreement
or any portion thereof to any other Party without the prior written approval of the State. Party shall be
responsible and liable to the State for all acts or omissions of subcontractors and any other person
performing work under this Agreement pursuant to an agreement with Party or any subcontractor.
In the case this Agreement is a contract with a·total cost in excess of $250,000, the Party shall provide to
the State a list of all proposed subcontractors and subcontractors' subcontractors, together with the identity
of those subcontractors' workers compensation insurance providers, and additional required or requested
information, as applicable, in accordance with Section 32 of The Vermont Recovery and Reinvestment Act
of 2009 (Act No. 54).
Party shall include the following provisions of this Attachment C in all subcontracts for work performed
solely for the State of Vermont and subcontracts for work performed in the State of Vermont: Section 10
("False Claims Act"); Section 11 ("Whistleblower Protections"); Section 12 ("Location of State Data");
Section 14 ("Fair Employment Practices and Americans with Disabilities Act"); Section 16 ("Taxes Due
the State"); Section 18 ("Child Support"); Section 20 ("No Gifts or Gratuities"); Section 22 ("Certification
Regarding Debarment"); Section 30 ("State Facilities"); and Section 32.A ("Certification Regarding Use
of State Funds").
20. No Gifts or Gratuities: Party shall not give title or possession of anything of substantial value
(including property, currency, travel and/or education programs) to any officer or employee of the State
during the term of this Agreement.
21. Copies: Party shall use reasonable best efforts to ensure that all written reports prepared under this
Agr~ement are printed using both sides of the paper.
22. Certification Regarding Debarment: Party certifies under pains and penalties of perjury that, as of
the date that this Agreement is signed, neither Party nor Party's principals (officers, directors, owners, or

STATE OF VERMONT Contract# 3 7036

Page34 of63

partners) are presently debarred, suspended, proposed for debarment, declared ineligible or excluded from
participation in Federal programs, or programs supported in whole or in part by Federal funds.
Palfy further certifies under pains and penalties of perjury that, as of the date that this Agreement is signed,
Party is not presently debarred, suspended, nor named on the State's debarment list at:
http://bgs. vermont. gov /purchasing/debarment

23. Conflict oflnterest: Party shall fully disclose, in writing, any conflicts of interest or potential conflicts
of interest.

24. Confidentiality: Party acknowledges and agrees that this Agreement and any and all information
obtained by the State from the Party in connection with this Agreement are subject to the State of Vermont
Access to Public Records Act, 1 V.S.A. § 315 et seq.
25. Force Majeure: Neither the State nor the Party shall be liable to the other for any failure or delay of
performance of any obligations under this Agreement to the extent such failure or delay shall have been
wholly or principally caused by acts or events beyond its reasonable control rendering performance illegal
or impossible (excluding strikes or lock-outs) ("Force Majeure"). Where Force Majeure is asserted, the
nonperforming party must prove that it made all reasonable efforts to remove, eliminate or minimize such
cause of delay or damages, diligently pursued· performance of its obligations under this Agreement,
substantially fulfilled all non-excused obligations, and timely notified the other party of the likelihood or
actual occurrence of an event described in this paragraph.
26. Marketing: Party shall not refer to the State in any publicity materials, information pamphlets, press
releases, research reports, advertising, sales promotions, trade shows, or marketing materials or similar
communications to third parties except with the prior written consent of the State.
27. Termination:
A. Non-Appropriation: If this Agreement extends into more than one fiscal year of the State (July 1
to June 30), and if appropriations are insufficient to support this Agreement, the State may cancel
at the end of the fiscal year, or otherwise upon the expiration of existing appropriation authority.
In the case that this Agreement is a Grant that is funded in whole or in part by Federal funds, and
in the event Federal funds become unavailable or reduced, the State may suspend or cancel this
Grant immediately, and the State shall have no obligation to pay Subrecipient from State revenues.
B. Termination for Cause: Either party may terminate this Agreement if a party materially breaches
its obligations under this Agreement, and such breach is not cured within thirty (30) days after
delivery of the non-breaching party's notice or such longer time as the non-breaching party may
specify in the notice.
C. Termination Assistance: Upon nearing the end of the final tenn or termination of this Agreement,
without respect to cause, the Party shall take all reasonable and prudent measures to facilitate any
transition required by the State. All State property, tangible 'and intangible, shall be returned to the
State upon demand at no additional cost to the State in a format acceptable to the State.
28. Continuity of Performance: In the event ofa dispute between the Party and the State, each party will
continue to perform its obligations under this Agreement during the resolution of the dispute until this
Agreement is terminated in accordance with its terms.
29. No Implied Waiver of Remedies: Either party's delay or failure to exercise any right, power or remedy
under this Agreement shall not impair any such right, power or remedy, or be construed as a waiver of any
such right, power or remedy. All waivers must be in writing.

STATE OF VERMONT Contract# 37036

Page35 of63

30. State Facilities: If the State makes space available to the Party in any State facility during the term of
this Agreement for purposes of the Party's performance under this Agreement, the Party shall only use the
space in accordance with all policies and procedures governing access to and use of State facilities which
shall be made available upon request. State facilities will be made available to Party on an "AS IS, WHERE
IS" basis, with no warranties whatsoever.
31. Requirements Pertaining Only to Federal Grants and Subrecipient Agreements: If this Agreement
is a grant that is funded in whole or in part by Federal funds:
A. Requirement to Have a Single Audit: The Subrecipient will complete the Subrecipient Annual
Report annually within 45 days after its fiscal year end, informing the State of Vermont whether or
not a Single Audit is required for the prior fiscal year. If a Single Audit is required, the Subrecipient
will submit a copy of the audit report to the granting Party within 9 months. If a single audit is not
required, only the Subrecipient Annual Report is required.
For fiscal years ending before December 25, 2015, a Single Audit is required if the subrecipient
expends $500,000 or more in Federal assistance during its fiscal year and must be conducted in
accordance with 0MB Circular A-133. For fiscal years ending on or after December 25, 2015, a
Single Audit is required if the subrecipient expends $750,000 or more in Federal assistance during
its fiscal year and must be conducted in accordance with 2 CFR Chapter I, Chapter II, Part 200,
Subpart F. The Subrecipient Annual Report is required to be submitted within 45 days, whether or
· not a Single Audit is required.
B. Internal Controls: In accordance with 2 CFR Part II, §200.303, the Party must establish and
maintain effective internal control over the Federal award to provide reasonable assurance that the
Party is managing the Federal award in compliance with Federal statutes, regulations, and the terms
and conditions of the award. These internal controls should be in compliance with guidance in
"Standards for Internal Control in the Federal Government" issued by the Comptroller General of
the United States and the "Internal Control Integrated Framework", issued by the Committee of
Sponsoring Organizations of the Treadway Commission (COSO).

C. Mandatory Disclosures: In accordance with 2 CFR Part II, §200.113, Party must disclose, in a
timely manner, in writing to the State, all violations of Federal criminal law involving fraud,
bribery, or gratuity violations potentially affecting the Federal award. Failure to make required
disclosures may result in the imposition of sanctions which may include disallowance of costs
incurred, withholding of payments, termination of the Agreement, suspension/debarment, etc.
32. Requirements Pertaining Only to State-Funded Grants:
A. Certification Regarding Use of State Funds: If Party is an employer and this Agreement is a
State-funded grant in excess of$1,001, Party certifies that none of these State funds will be used to
interfere with or restrain the exercise of Party's employee's rights with respect to unionization.
B. Good Standing Certification (Act 154 of 2016): If this Agreement is a State-funded grant, Party
hereby represents: (i) that it has signed and provided to the State the form prescribed by the
Secretary of Administration for purposes of certifying that it is in good standing (as provided in
Section 13(a)(2) of Act 154) with the Agency of Natural Resources and the Agency of Agriculture,
Food and Markets, or otherwise explaining the circumstances surrounding the inability to so certify,
and (ii) that it will comply with the requirements stated therein.

(End of Standard Provisions)

STATE OF VERMONT Contract# 37036

Page 36 of63

ATTACHMENT D
INFORMATION TECHNOLOGY PROFESSIONAL SERVICES
TERMS AND CONDITIONS (rev. 3/29/18)
1. OWNERSHIP AND LICENSE IN DELIVERABLES
1.1
Contractor Intellectual Property. Contractor shall retain all right, title and interest in and
to any work, ideas, inventions, discoveries, tools, methodology, computer programs, processes and
improvements and any other intellectual property, tangible or intangible, that has been created by
Contractor prior to entering into this Contract ("Contractor Intellectual Property"). Should the
State require a license for the use of Contractor Intellectual Property in connection with the
development or use of the items that Contractor is required to deliver to the State under this
Contract, including Work Product ("Deliverables"), the Contractor shall grant the State a royaltyfree license for such development and use. For the avoidance of doubt, Work Product shall not be
deemed to include Contractor Intellectual Property, provided the State shall be granted an
irrevocable, perpetual, non-exclusive royalty-free license to use any such Contractor Intellectual
Property that is incorporated into Work Product.
1.2
State Intellectual Property. The State shall retain all right, title and interest in and to (i)
all content and all property, data and information furnished by or on behalf of the State or any
agency, commission or board thereof, and to all information that is created under this Contract,
including, but not limited to, all data that is generated under this Contract as a result of the use by
Contractor, the State or any third party of any technology systems or knowledge bases that are
developed for the State and used by Contractor hereunder, and all other rights, tangible or
intangible; and (ii) all State trademarks, trade names, logos and other State identifiers, Internet
uniform resource locators, State user name or names, Internet addresses and e-mail addresses
obtained or developed pursuant to this Contract (collectively, "State Intellectual Property").
Contractor may not use State Intellectual Property for any purpose other than as specified in this
Contract. Upon expiration or termination of this Contract, Contractor shall return or destroy all
State Intellectual Property and all copies thereof, and Contractor shall have no further right or
license to such State Intellectual Property.
Contractor acquires no rights or licenses, including, without limitation, intellectual property rights
or licenses, to use State Intellectual Property for its own purposes .. In no event shall the Contractor
claim any security interest in State Intellectual Property.
1.3
Work Product. All Work Product shall belong exclusively to the State, with the State
having the sole and exclusive right to apply for, obtain, register, hold and renew, in its own name
and/or for its own benefit, all patents and copyrights, and all applications and registrations,
renewals and continuations thereof and/or any and all other appropriate protection. To the extent
exclusive title and/or complete and exclusive ownership rights in and to any Work Product may
not originally vest in the State by operation of law or otherwise as contemplated hereunder,
Contractor shall immediately upon request, unconditionally and irrevocably assign, transfer and
convey to the State all right, title and interest therein.

Page 37 of63

STATE OF VERMONT Contract# 37036

"Work Product" means any tangible or intangible ideas, inventions, improvements, modifications,
discoveries, development, customization, configuration, methodologies or processes, designs,
models, drawings, photographs, reports, formulas, algorithms, patterns, devices, compilations,
databases, computer programs, work of authorship, specifications, operating instructions,
procedures manuals or other documentation, technique, know-how, secret, or intellectual property
right whatsoever or any interest therein (whether patentable or not patentable or registerable un.der
~opyright or similar statutes or subject to analogous protection), that is specifically made,
conceived, discovered or reduced to practice by Contractor, either solely or jointly with others,
pursuant to this Contract. Work Product does not include Contractor Intellectual Property or thirdparty intellectual property.
To the extent delivered under this Contract, upon full payment to Contractor in accordance with
Attachment B, and subject to the terms and conditions contained herein, Contractor hereby (i)
assigns to State all rights in and to all Deliverables, except to the extent they include any Contractor
Intellectual Property; and (ii) grants to State a perpetual, non-exclusive, irrevocable, royalty-free
license to use for State's internal business purposes, any Contractor Intellectual Property included
in the Deliverables in connection with its use of the Deliverables and, subject to the State's
obligations with respect to Confidential Information, authorize others to do the same on the State's
behalf. Except for the foregoing license grant, Contractor or its licensors retain all rights in and to
all Contractor Intellectual Property.
The Contractor shall not sell or copyright a Deliverable without explicit permission from the State.
If the Contractor is operating a system or application on behalf of the State of Vermont, then the
Contractor shall not make information entered into the system or application available for uses by
any other party than the State of Vermont, witho"Qt prior authorization by the State. Nothing herein
shall entitle the State to pre-existing Contractor Intellectual Property or Contractor Intellectual
Property developed outside ohhis Contract with no assistance from State.

2. CONFIDENTIALITY
REPORTING

AND

NON-DISCLOSURE;

SECURITY

BREACH

2.1
For purposes of this Contract, confidential information will not include information or
material which (a) enters the public domain (other than as a result of a breach of this Contract);
(b) was in the receiving party's possession prior to its receipt from the disclosing party; (c) is
independently. developed by the receiving party without the use of confidential information; (d)
is obtained by the receiving party from a third party under no obligation of confidentiality to the
disclosing party; or (e) is not exempt from disclosure under applicable State law.
2.2
Confidentiality of Contractor Information. The Contractor acknowledges and agrees
that this Contract and any and all Contractor information obtained by the State in connection with
this Contract are subject to the State of Vermont Access to Public Records Act, 1 V.S.A. § 315 et
seq. The State will not disclose information for which a reasonable claim of exemption can be
made pursuant to 1 V.S.A. § 317(c), including, but not limited to, trade secrets, proprietary
information or financial information, including any formulae, plan, pattern, process, tool,
mechanism, compound, procedure, production data, or compilation of information which is not

STATE OF VERMONT Contract# 37036

Page38 of63

patented, which is known only to the Contractor, and which gives the Contractor an opportunity
to obtain business advantage over competitors who do not know it or use it.
The State shall immediately notify Contractor of any request made under the Access to Public
Records Act, or any request or demand by any court, governmental agency or other person
asserting a demand or request for Contractor information. Contractor may, in its discretion, seek
an appropriate protective order, or otherwise defend any right it may have to maintain the
confidentiality of such information under applicable State law within three business days of the
State's receipt of any such request. Contractor agrees that it will not make any claim against the
State if the State makes available to the public any information in accordance with the Access to
Public Records Act or in response to a binding order from a court or governmental body or agency
compelling its production. Contractor shall indemnify the State for any costs or expenses incurred
by the State, including, but not limited to, attorneys' fees awarded in accordance with 1 V.S.A. §
320, in connection with any action brought in connection with Contractor's attempts to prevent or
unreasonably delay public disclosure of Contractor's information if a final decision of a court of
competent jurisdiction determines that the State improperly withheld such information and that the
improper withholding was based on Contractor's attempts to prevent public disclosure of
Contractor's information.
The State agrees that (a) it will use the Contractor information only as may be necessary in the
course of performing duties, receiving services or exercising rights under this Contract; (b) it will
provide at a minimum the same care to avoid disclosure or unauthorized use of Contractor
information as it provides to protect its own similar confidential and proprietary information; (c)
except as required by the Access to Records Act, it will not disclose such information orally or in
writing to any third party unless that third party is subject to a written confidentiality agreement
that contains restrictions and safeguards at least as restrictive as those contained in this Contract;
(d) it will take all reasonable precautions to protect the Contractor's information; and (e) it will
not otherwise appropriate such information to its own use or to the use of any other person or
entity.
Contractor may affix an appropriate legend to Contractor information that is provided under this
Contract to reflect the Contractor's determination that any such information is a trade secret,
proprietary information or financial information at time of delivery or disclosure.

2.3
Confidentiality of State Information. In performance of this Contract, and any exhibit
or schedule hereunder, the Party acknowledges that certain State Data (as defined below), to which
the Contractor may have access may contain individual federal tax information, personal protected
health information and other individually identifiable information protected by State or federal law
or otherwise exempt from disclosure under the State of Vermont Access to Public Records Act, 1
V. S .A. § 315 et seq ("State Data"). In addition to the provisions of this Section, the Contractor
shall comply with the requirements set forth in the State's HIP AA Business Associate Agreement
attached hereto as Attachment Before receiving or controlling State Data, the Contractor will
have an information security policy that protects its systems and processes and media that may
contain State Data from internal and external security threats and State Data from unauthorized
disclosure, and will have provided a copy of such policy to the State.

Page 39 of63

STATE OF VERMONT Contract# 3 7036

State Data shall not be stored, accessed from, or transferred to any location outside the United
States.
The Contractor agrees that (a) it will use the State Data only as may be necessary in the course of
performing duties or exercising rights under this Contract; (b) it will provide at a minimum the
same care to avoid disclosure or unauthorized use of State Data as it provides to protect its own
similar confidential and proprietary information; (c) it will not publish, reproduce, or otherwise
divulge any State Data in whole or in part, in any manner or form orally or in writing to any third
party unless it has received written approval from the State and that third party is subject to a ·
written confidentiality agreement that contains restrictions and safeguards at least as restrictive as
those contained in this Contract; (d) it will take all reasonable precautions to protect the State's
information; and (e) it will not otherwise appropriate such information to its own use or to the use
of any other person or entity. Contractor will take reasonable measures as are necessary to restrict
access to State Data in the Contractor's.possession to only those employees on its staff who must
have the information on a "need to know" basis. The Contractor shall not retain any State Data
except to the extent required to perform the services under this Contract. ·
Contractor shall not access State user accounts or State Data, except in the course of data center
operations, response to service or technical issues, as required by the express terms of this
Contract, or at State's written request.
Contractor may not share State Data with its parent company or other affiliate without State's
express written consent.
The Contractor shall promptly notify the State of any request or demand by any court,
governmental agency or other person asserting a demand or request for State Data to which the
Contractor or any third-party hosting service of the Contractor may have access, so that the State
may seek an appropriate protective order.

3. SECURITY OF STATE INFORMATION.
3.1
Security Standards. To the extent Contractor has access to, processes, handles, collects,
transmits, stores or otherwise deals with State Data, the Contractor represents and warrants that it
has implemented and it shall maintain during the term of this Contract the highest industry standard
administrative, technical, and physical safeguards and controls modeled on NIST Special
Publication 800-39 and designed to (i) ensure the security and confidentiality of State Data; (ii)
protect against any anticipated security threats or hazards to the security or integrity of the State
Data; and (iii) protect against unauthorized access to or use of State Data. Such measures shall
include at a minimum: (1) access controls on information systems, including controls to
authenticate and permit access to State Data only to authorized individuals and controls to prevent
the Contractor employees from providing State Data to unauthorized individuals who may seek to
obtain this information (whether through fraudulent means
otherwise); (2) industry-standard
firewall protection; (3) encryption of electronic State Data while in transit from the Contractor
networks to external networks; (4) measures to store in a secure fashion all State Data which shall
include multiple levels of authentication; (5) dual control procedures, segregation of duties, and
pre-employment criminal background checks for employees with responsibilities for or access to
State Data; (6) measures to ensure that the State Data shall not be altered or corrupted without the

or

STATE OF VERMONT Contract# 37036

Page 40 of63

prior written consent of the State; (7) measures to protect against destruction, loss or damage of
State Data due to potential environmental hazards, such as fire and water damage; (8) staff training
to implement the information security measures; and (9) monitoring of the security of any portions
of the Contractor systems that are used in the provision of the services against intrusion on a
twenty-four (24) hour a day basis.

3.2
Security Breach Notice and Reporting. The Contractor shall have policies and
procedures in place for the effective management of Security Breaches, as defined below, which
shall be made available to the State upon request.
In addition to the requirements set forth in any applicable Business Associate Agreement as may
be attached to this Contract, in the event of any actual security breach or reasonable belief of an
actual security breach the Contractor either suffers or learns of that either compromises or could
compromise State Data (a "Security Breach"), the Contractor shall notify the State within 24 hours
of its discovery. Contractor shall immediately determine the nature and extent of the Security
Breach, contain the incident by stopping the unauthorized practice, recover records, shut down the
system that was breached, revoke access and/or correct weaknesses in physical security.
Contractor shall report to the State: (i) the nature of the Security Breach; (ii) the State Data used
or disclosed; (iii) who made the unauthorized use or received the unauthorized disclosure; (iv)
what the Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use
or disclosure; and (v) what corrective action the Contractor has taken or shall take to prevent future
similar unauthorized use or disclosure. The Contractor shall provide such other information,
including a written report, as reasonably requested by the State. Contractor shall analyze and
document the incident and provide all notices required by applicable law.
In accordance with Section 9 V.S.A. §2435(b)(3), the Contractor shall notify the Office of the
Attorney General, or, if applicable, Vermont Department of Financial Regulation ("D FR"), within
fourteen (14) business days of the Contractor's discovery of the Security Breach. The notice shall
provide a preliminary description of the breach. The foregoing notice requirement shall be
included in the subcontracts of any of Contractor's subcontractors, affiliates or agents which may
be "data collectors" hereunder.
The Contractor agrees to fully cooperate with the State and assume responsibility at its own
expense for the following, to be determined in the sole discretion of the State: (i) notice to affected
consumers if the State determines it to be appropriate under the circumstances of any particular
Security Breach, in a form recommended by the AGO; and (ii) investigation and remediation
associated with a Security Breach, including but not limited to, outside investigation, forensics,
counsel, crisis management and credit monitoring, in the sole determination of the State.
The Contractor agrees to comply with all applicable laws, as such laws may be amended from time
to time (including, but not limited to, Chapter 62 of Title 9 of the V(;rmont Statutes and all
applicable State and federal laws, rules or regulations) that require notification in the event of
unauthorized release of personally-identifiable information or other event requiring notification.
In addition to any other indemnification obligations in this Contract, the Contractor shall fully
indemnify and save harmless the State from any costs, loss or damage to the State resulting from
a Security Breach or the unauthorized disclosure of State Data by the Contractor, its officers,
agents, employees, and subcontractors.

STATE OF VERMONT Contract# 37036

Page 41 of63

4. CONTRACTOR'S REPRESENTATIONS AND WARRANTIES

4.1

General Representations and Warranties. The Contractor represents, warrants and
covenants that:
(i)
The Contractor has all requisite power and authority to execute, deliver and perform its
obligations under this Contract and the execution, delivery and performance of this
Contract by the Contractor has been duly authorized by the Contractor.
(ii)
There is no pending litigation, arbitrated matter or other dispute to which the Contractor
is a party which, if decided unfavorably to the Contractor, would reasonably be expected
to have a material adverse effect on the Contractor's ability to fulfill its obligations under
this Contract.
(iii)
The Contractor will comply with all laws applicable to its performance of the services
and otherwise to the Contractor in connection with its obligations under this Contract.
(iv)
The Contractor (a) owns, or has the right to use under valid and enforceable agreements,
all intellectual property rights reasonably necessary for and related to delivery of the
services and provision of the services as set forth in this Contract; (b) shall be responsible
for and have full authority to license all proprietary and/or third party software modules,
including algorithms and protocols, that Contractor incorporates into its product; and (c)
none of the services or other materials or technology provided by the Contractor to the
State will infringe upon or misappropriate the intellectual property rights of any third
party.
(v)
The Contractor has adequate resources to fulfill its obligations under this Contract.
(vi)
Neither Contractor nor Contractor's subcontractors has past state or federal violations,
convictions or suspensions relating to miscoding of employees in NCCI job codes for
purposes of differentiating between independent contractors and employees.·

4.2

Contractor's Performance Warranties. Contractor represents and warrants to the State
that:
(i)
Each and all of the services shall be performed in a timely, diligent, professional and
skillful manner, in accordance with the highest professional or technical standards
applicable to such services, by qualified persons with the technical skills, training and
experience to perform such services in the planned environment.
(ii)
Any time software is delivered to the State, whether delivered via electronic media or the
internet, no portion of such software or the media upon which it is stored or delivered
will have any type of software routine or other element which is designed to facilitate
unauthorized access to or intrusion upon; or unrequested disabling or erasure of; or
unauthorized interference with the operati(?l). of any hardware, software, data or
peripheral equipment of or utilized by the State. Without limiting the generality of the
foregoing, if the State believes that harmful code may be present in any software
delivered hereunder, Contractor will, upon State's request, provide a new or clean install
of the software. Notwithstanding the foregoing, Contractor assumes no responsibility for
the State's negligence or failure to protect data from viruses, or any unintended
modification, destruction or disclosure.
(iii)
To the extent Contractor resells commercial hardware or software it purchased from a
third party, Contractor will, to the extent it is legally able to do so, pass through any such

STATE OF VERMONT Contract# 37036

Page42 of63

third-party warranties to the State and will reasonably cooperate in enforcing them. Such
warranty pass-through will not relieve the Contractor from Contractor's warranty
obligations set forth herein.

5. PROFESSIONAL LIABILITY AND CYBER LIABILITY INSURANCE COVERAGE
In addition to the insurance required in Attachment C to this Contract, before commencing work
on this Contract and throughout the term of this _Contract, Contractor agrees to procure and
maintain (a) Technology Professional Liability insurance for any and all services performed under
this Contract, with minimum third-party coverage of $5,000,000.00 per claim, $10,000,000.00
aggregate. To the extent Contractor has access to, processes, handles, collects, transmits, stores or
otherwise deals with State Data, Contractor shall maintain first party Breach Notification Coverage
of not less than $1,000,000.00.
Before commencing work on this Contract, the Contractor must provide certificates of insurance
to show that the foregoing minimum coverages are in effect.
With respect to the first party Breach Notification Coverage, Contractor shall nfill?.e the State of
Vermont and its officers and employees as additional insureds for liability arising out of this
Contract.

6.
REMEDIES FOR DEFAULT. In the event either party is in default under this Contract,
the non-defaulting party may, at its option, pursue any or al1 of the remedies available to it under
this Contract, including termination for cause, and ai law,or in equity.
7. TERMINATION
Contractor shall reasonably cooperate with other parties in connection with all services to
be delivered under this Contract, including without limitation any successor provider to whom
State Data, State Intellectual Property or other State information and materials are to be transferred
in connection with termination. Contractor shall assist the State in exporting and extracting any
and all State data, in a format usable without the use of the Services and as agreed to by State, at
no additional cost. Any transition services requested by State involving additional knowledge
transfer and support may be subject to a contract amendment for a fixed fee or at rates to be
mutually agreed upon by the parties.
7.1

If the State determines in its sole discretion that a documented transition plan is necessary, then no
later than sixty (60) days prior to termination, Contractor and the State shall mutually prepare a
Transition Plan identifying transition services to be provided.

7.2
Return of Property. Upon termination of this Contract for any reason whatsoever,
Contractor shall immediately deliver to State all State Intellectual Property and State Data
(including without limitation any Deliverables for which State has made payment in whole or in
part), that are in the possession or under the control of Contractor in whatever stage of development
and form of recordation such State property is expressed or embodied at that time.

STATE OF VERMONT Contract# 3 7036

Page 43 of63

8.
DESTRUCTION OF STATE DATA. At anytime during the term of this Contract within
thirty days of (i) the Stiite's written request or (ii) termination or expiration of this Contract for any
reason, Contractor shall securely dispose of all copies, whether in written, electronic or other form
or media, of State Data according to National Institute of Standards and Technology (NIST)
approved methods, and certify in writing to the State that such State Data has been disposed of
securely. Further, upon the relocation of State Data, Contractor shall securely dispose of such
copies from the former data location according to National Institute of Standards and Technology
(NIST) approved methods and certify in writing to the State that such State Data has been disposed
of securely. Contractor shall comply with all reasonable directions provided by the State with
respect to the disposal of State Data.
9. IRS TERMS IF FEDERAL TAX INFORMATION WILL BE PROCESSED OR
STORED (Per IRS Publication 1075)
To the extent Contractor's performance under this Contract involves the processing or storage of
Federal tax information, then, pursuant to IRS Publication 1075, the following provisions shall
apply in addition to any other security standard or requirements set forth in this Contract:

A. PERFORMANCE
In performance of this Contract, the Contractor agrees to comply with and assume responsibility
for compliance by its employees with the following requirements:
1. All work will be done under the supervision of the Contractor or the Contractor's
employees.
2. The Contractor and the Contractor's employees with access to or who use Federal tax
information must meet the background check requirements defined in IRS Publication
1075.
3. Any return or return information made available in any format shall be used only for the
purpose of carrying out the provisions of this Contract. Information contained in such
material will be treated as confidential and will not be divulged or made known in any
manner to any person except as may be necessary in th.e performance of this Contract.
Disclosure to anyone other than an officer or employee of the Contractor will be prohibited.
4. All returns and return information will be accounted for upon receipt and properly stored
before, during, and after processing. In addition, all related output will be given the same
level of protection as required for the source material.
5. The Contractor certifies that the data processed during the performance of this Contract
will be completely purged from all data storage components of his or her computer facility,
and no output will be retained by the Contractor at the time the work is completed. If
immediate purging of all data storage components is not possible, the Contractor certifies
that any IRS data remaining in any storage component will be safeguarded to prevent
unauthorized disclosures.
6. Any spoilage or any intermediate hard copy printout that may result during the processing
of IRS data will be given to the State or his or her designee. When this is not possible, the
Contractor will be responsible for the destruction of the spoilage or any intermediate hard

STATE OF VERMONT Contract# 37036

Page 44 of63

copy printouts and will provide the State or its designee with a statement containing the
date of destruction, description of material destroyed, and the method used.
7. All computer systems processing, storing, or transmitting Federal tax information must
meet the requirements defined in IRS Publication 1075. To meet functional and assurance
requirements, the security features of the environment must provide for the managerial,
operational, and technical controls. All security features must be available and activated to
protect against unauthorized use of and access to Federal tax information.
8. No work involving Federal tax information furnished under this Contract will be
subcontracted without prior written approval of the IRS.
9. The Contractor will maintain a list of employees authorized access. Such list will be
provided to the State and, upon request, to the IRS reviewing office.
10. The State will have the right to void the Contract if the Contractor fails to provide the
safeguards described above.

B. CRIMINAL/CIVIL SANCTIONS:
1. Each officer or employee of any person to whom returns or return information is or may
be disclosed will be notified in writing by such person that returns or return information
disclosed to such officer or employee can be used only for a purpose and to the extent
authorized herein, and that further disclosure of any such returns or return information for
a purpose or to an extent unauthorized herein constitutes a felony punishable upon
conviction by a fine of as much as $5,000 or imprisonment for as long as 5 years, or both,
together with the costs of prosecution. Such person shall also notify each such officer and
employee that any such unauthorized further disclosure of returns or return information
may also result in an award of civil damages against the officer or employee in an amount
not less than $1,000 with respect to each instance of unauthorized disclosure. These
penalties are prescribed by IRC sections 7213 and 7431 and set forth at 26 CFR
301.6103(n)-l.
2. Each officer or employee of any person to whom returns or return information is or may
be disclosed shall be notified in writing by such person that any return or return information
made available in any format shall be used only for the purpose of carrying out the
provisions of this Contract. Information contained in such material shall be treated as
confidential and shall not be divulged or made known in any manner to any person except
as may be necessary in the performance of the Contract. Inspection by or disclosure to
anyone without an official need to know constitutes a criminal misdemeanor punishable
upon conviction by a fine of as much as $1,000 or imprisonment for as long as 1 year, or
both, together with the costs of prosecution. Such person shall also notify each such officer
and employee that any such unauthorized inspection or disclosure of returns or return
information may also result in an award of civil damages against the officer or employee
in an amount equal to the sum of the greater of $1,000 for each act of unauthorized
inspection or disclosure with respect to which such defendant is found liable or the sum of
the actual damages sustained by the plaintiff as a result of such unauthorized inspection or
disclosure plus in the case of a willful inspection or disclosure which is the result of gross
negligence, punitive damages, plus the costs of the action. These penalties are prescribed
by IRC section 7213A and 7431 and set forth at 26 CFR 301.6103(n)-l.

STATE OF VERMONT Contract# 37036

Page 45 of63

3. Additionally, it is incumbent upon the Contractor to inform its officers and employees of
the penalties for improper disclosure imposed by the Privacy Act of 1974, 5 U.S.C. 552a.
Specifically, 5 U.S.C. 552a(i)(l), which is made applicable to contractors by 5 U.S.C.
552a(m)(l ), provides that any officer or employee of a contractor, who by virtue of his/her
employment or official position, has possession of or access to State records which contain
individually identifiable information, the disclosure of which is prohibited by the Privacy
Act or regulations established thereunder, and who knowing that disclosure of the specific
material is prohibited, willfully discloses the material in any manner ·to any person or
agency not entitled to receive it, shall be guilty of a misdemeanor and fined not more than
$5,000.
4. Prior to Contractor having access to Federal tax information, Contractor shall certify that
each Contractor employee or other individual with access to or who use Federal tax
information on Contractor's behalf pursuant to this Contract understands the State's
security policy and procedures for safeguarding Federal tax information. Contractor's
authorization to access Federal tax information hereunder shall be contingent upon annual
recertification. The initial certification and.recertification must be documented and placed
in the State's files for review. As part of the certification, and at least annually afterwards,
Contractor will be advised of the provisions of IRCs 7431, 7213, and 7213A (see IRS
Publication 1075 Exhibit 4, Sanctions for Unauthorized Disclosure, and Exhibit 5, Civil
Damages for Unauthorized Disclosure). The training provided before the initial
certification and annually thereafter must also cover the incident response policy and
procedure for reporting unauthorized disclosures and data breaches (See Publication 1075,
Section 10). For both the initial certification and the annual certification, the Contractor
must sign a confidentiality statement certifying its understanding of the security
requirements.
C. INSPECTION:

The IRS and the State, with 24 hours' notice, shall have the right to send its officers, employees,
and inspectors into the offices and plants of the Contractor for inspection of the facilities and
operations provided for the performance of any work under this Contract. for compliance with the
requirements defined in IRS Publication 1075. The IRS's right of inspection shall include the use
of manual and/or automated scanning tools to perform compliance and vulnerability assessments
of information technology assets that access, store, process or transmit Federal tax information.
On the basis of such inspection, corrective actions may be required in cases where the Contractor
is found to be noncompliant with Contract safeguards.
10. EXECUTIVE ORDER 2-18 INTERNET NEUTRALITY IN STATE PROCUREMENT:

To the extent Contractor's performance under this Contract involves the provision of services for
accessing the Internet, the following provisions shall apply:
Definitions. As used in this agreement, the following definitions apply:

1. "Broadband Internet Access Service" means a mass-market retail service by wire or radio
that provides the capability to transmit data to and receive data from all or substantially all

STATE OF VERMONT Contract# 3 7036

Page 46 of63

Internet endpoints, including any capabilities that are incidental to and enable the operation
of the communications service, but excluding dial-up Internet access service. This term also
encompasses any service that the State finds to be providing a functional equivalent of the
service described in the previous sentence, or that is used to evade the protections set forth in
this section.
2. "Reasonable Network Management" means a network management practice that has a
primarily technical network management justification but does not include other business
practices. A network management practice is reasonable if it is primarily used for and
tailored to achieving a legitimate network management purpose, taking into account the
particular network architecture and technology of the broadband Internet access service.

Public Disclosure. Contractor shall publicly disclose to all of its customers in the State of
Vermont (including but not limited to the State itself) accurate information regarding the
network and transport management practices (including cellular data and wireless broadband
transport), performance, and commercial terms of its broadband Internet access services
sufficient for: a) consumers to mak~ informed choices regarding use of such services and for
content, application, service; and b) device providers to develop, market, and maintain Internet
offerings. Compliance with the Federal Communications Commission's transparency rule, as
amended by 83 Fed. Reg. 7852, 7922 (Feb. 22, 2018), satisfies Contractor's public disclosure
requirements under this paragraph.
Provision of Services. Contractor shall not, with respect to any customer in the State of Vermont
(including but not limited to the State itself):
A. Block lawful content, applications, services, or nonharmful devices, subject to reasonable
network management that is disclosed to its customers;
B. Throttle, impair or degrade lawful Internet traffic on the basis of Internet content,
application, or service, or use of a non-harmful device, subject to reasonable network
management that is disclosed to its customers;
C. Engage in paid prioritization or providing preferential treatment of some Internet traffic
to any Internet customer;
D. Unreasonably interfere with or unreasonably disadvantage either:
i.A customer's ability to select, access, and use broadband Internet access service
or the lawful Internet content, applications, services, or devices of their
choice; or
ii.An edge providers' ability to make lawful content, applications, services, or
devices available to a customer;
·

Compliance. Contractor agrees to provide the State, upon request, at any time during the term of
this contract, records, documentation, or any other information as required to demonstrate
Contractor's compliance with the requirements of this section.

STATE OF VERMONT Contract# 37036

Page 47 of63

Attachment C is modified by adding to Section 7 titled, Defense and Indemnity the following;

"If the Office of the Attorney General or other representative of the State tenders, in writing, a
claim and/or lawsuit to Contractor for defense and indemnification in accordance with the
aforementioned paragraph, the Contractor shall respond, in writing, to the Attorney General or
State within ten (10) business days of such tender. In the event a response to the ·claim or suit is
required prior to the expiration of the ten (10) business days period of time, including but not
limited to court action, the Contractor will be so notified. The Contractor's response to the
Attorney General's or State's tendering of any such claim or lawsuit shall include an
acknowledgment of receipt of the claim and/or lawsuit, a response on whether Contractor will
accept or decline the tendering of any such claim and/or lawsuit and, if accepted, the identity of
counsel retained to defend any such claim and/or lawsuit. in the event the Contractor does not
comply with any aspect of this provision, and such non-compliance also constitutes a material
violation of this provision, as so determined either judicially or by mutual agreement of the parties,
the Contractor shall be responsible for any and all costs and/or fees that were reasonably-incurred
by the Attorney General's Office and/or the State as a direct consequence of such non-compliance.
The Contractor agrees to cooperate with the Office of the Attorney General and the State in the
investigation and handling of any claim and/or lawsuits filed by inmate(s), and/or other person(s)
and/or entity or entities in connection with the Contractor's performance of services under this
contract. The Office of the Attorney General and the State will moni~or the defense of all claims
and/or lawsuits and the Contractor and defense counsel shall cooperate fully with such
monitoring. The Office of the Attorney General and the State retain the right to participate, at
their own expense, in the defense and/or trial of any claim and/or lawsuit where the Contractor is
providing the defense and indemnification of such claim and/or lawsuit. The Office of the
Attorney General and the State shall have the right to approve all proposed settlements of such
claims and/or lawsuits, which are being made against the State, State agencies and/or State
employees. Contractor shall not settle such claims and/or lawsuits without the consent of the
Office of the Attorney General. In the event the Office of the Attorney General or the State
withholds such consent to settle any such claim and/or lawsuit then, the Contractor shall proceed
with the defense of the claim and/or lawsuit b~t, under those circumstances, the Contractor's
liability and indemnification obligations shall be limited to the amount of the proposed
settlement."
Attachment C is modified by adding to section 8 General Liability and Property Damage:
Medical Professional Liability:
$5,000,000 per Occurrence/$25,000,000 Aggregate
General Liability and Property Damage:
$5,000,000 per Occurrence/$25,000,000 General Aggregate
$1,000,000 Products/Completed Operations Aggregate
$50,000 Fire/Legal/Liability

STATE OF VERMONT Contract# 37036

Page 48 of63

Automotive Liability:
$5,000,000 Combined Single Limit
Professional Liability:
$3,000,000 Per Occurrence and $3,000,000 Aggregate
Attachment F is modified by replacing section 6 first sentence with the following; Party agrees
that it shall comply with the laws of the state where the services are provided with respect to the
appropriate classification of its workers and service providers as "employees" and "independent
contractors" for all purposes, to include for purposes related to unemployment compensation
insurance and workers compensation coverage, and proper payment and reporting of wages.

STATE OF VERMONT Contract# 3 7036

Page 49 of63

ATTACHMENT E
BUSINESS ASSOCIATE AGREEMENT
This Business Associate Agreement ("Agreement") is entered into by and between the State of
Vermont Agency of Human Services, operating by and through its Agency of Human Services,
Department of Corrections ("Covered Entity") and CoreCivic ("Business Associate") as of
10/01/2018 ("Effective Date"). This Agreement supplements and is made a part of the
contract/grant to which it is attached.
Covered Entity and Business Associate enter into this Agreement to comply with standards
promulgated under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"),
including the Standards for the Privacy oflndividually Identifiable Health Information, at 45 CFR
Parts 160 and 164 ("Privacy Rule"), and the Security Standards, at 45 CFR Parts 160 and 164
("Security Rule"), as amended by Subtitle D of the Health Information Technology for Economic
and Clinical Health Act (HITECH), and any associated federal rules and regulations.
The parties agree as follows:

1.
Definitions. All capitalized terms used but not otherwise defined in this Agreement have
the meanings set forth in 45 CFR Parts 160 and 164 as amended by HITECH and associated federal
rules and regulations.
"Agent" means those person(s) who are agents(s) of the Business Associate, in accordance with
the Federal common law of agency, as referenced in 45 CFR § 160.402(c).
"Breach" means the acquisition, access, use or disclosure of protected health information (PHI)
which compromises the security or privacy of the PHI, except as excluded in the definition of
Breach in 45 CFR § 164.402.
"Business Associate shall have the meaning given in 45 CFR § 160.103.
"Individual" includes a person who qualifies as a personal representative in accordance with 45
CFR § 164.502(g).
"Protected Health Information" or PHI shall have the meaning given in 45 CFR § 160.103, limited
to the information created or received by Business Associate from or on behalf of Agency.
"Security Incident" means any known successful or unsuccessful attempt by an authorized or
unauthorized individual to inappropriately use, disclose, modify, access, or destroy any
information or interference with system operations in an information system.
"Services" includes all work performed by the Business Associate for or on behalf of Covered
Entity that requires the use and/or disclosure of protected health information to perform a business
associate function described in 45 CFR § 160.103 under the definition of Business Associate.

STATE OF VERMONT Contract# 37036

Page 50 of63

"Subcontractor" means a person or organization to whom a Business Associate delegates a
function, activity or service, other than in the capacity of a member of the workforce of the
Business Associate. For purposes of this Agreement, the term Subcontractor includes Subgrantees.

2.
Identification and Disclosure of Privacy and Security Offices. Business Associate and
Subcontractors shall provide, within ten (10) days of the execution of this agreement, written
notice to the Covered Entity's contract/grant manager the names and contact information of both
the HIPAA Privacy Officer and HIPAA Security Officer. This information must be updated any
time either of these contacts changes.

3.

Permitted and Required Uses/Disclosures of PHI.

3.1
Except as limited in this Agreement, Business Associate may use or disclose PHI
to perform Servic~s, as specified in the underlying grant or contract with Covered Entity.
The uses and disclosures of Business Associate are limited to the minimum necessary, to
complete the tasks or to provide the services associated with the terms of the underlying
agreement. Business Associate shall not use or disclose PHI in any manner that would
constitute a violation of the Privacy Rule if used or disclosed by Covered Entity in that
manner. Business Associate may not use or disclose PHI other than as permitted or
required by this Agreement or as Required by Law.
3.2
Business Associate may make PHI available to its employees who need access to
perform Services provided that Business Associate makes such employees aware of the use
and disclosure restrictions in this Agreement and binds them to comply with such
restrictions. Business Associate may only disclose PHI for the purposes authorized by this
Agreement: (a) to its agents and Subcontractors in accordance with Sections 9 and 18 or;
(b) as otherwise permitted by Section 3.
3 .3
Business Associate shall be directly liable under HIP AA for impermissible uses
and disclosures of the PHI it handles on behalf of Covered Entity, and for impermissible
uses and disclosures, by Business Associate's Subcontractor(s), of the PHI that Business
Associate handles on behalf of Covered Entity and that it passes on to Subcontractors.

4.
Business Activities. Business Associate may use PHI received in its capacity as a Business
Associate to Covered Entity if necessary for Business Associate's proper management and
administration or to car.ry out its legal responsibilities. Business Associate may disclose PHI
received in its capacity as Business Associate to Covered Entity for Business Associate's proper
management and administration or to carry out its legal responsibilities if a disclosure is Required
by Law or if Business Associate obtains reasonable written assurances via a written agreement
from the person to whom the information is to be disclosed that the PHI shall remain confidential
and be used or further disclosed only as Required by Law or for the purpose for which it was
disclosed to the person, and the Agreement requires the person or entity to notify Business
Associate, within two (2) business days (who in turn will notify Covered Entity within two (2)
business days after receiving notice of a Breach as specified in Section 6.1 ), in writing of any
Breach of Unsecured PHI of which it is aware. Uses and disclosures of PHI for the purposes

STATE OF VERMONT Contract# 37036

Page 51 of63

identified in Section 3 must be of the minimum amount of PHI necessary to accomplish such
purposes.

5.
Safeguards. Business Associate, its Agent(s) and Subcontractor(s) shall implement and
use appropriate safeguards to prevent the use or disclosure of PHI other than as provided for by
this Agreement. With respect to any PHI that is maintained in or transmitted by electronic media,
Business Associate or its Subcontractor(s) shall comply with 45 CFR sections 164.308
(administrative safeguards), 164.310 (physical safeguards), 164.312 (technical safeguards) and
164.316 (policies and procedures and documentation requirements). Business Associate or its
Agent(s) and Subcontractor(s) shall identify in writing upon request from Covered Entity all of the
safeguards that it uses to prevent impermissible uses or disclosures of PHI.
6.

Documenting and Reporting Breaches.
6.1
Business Associate shall report to Covered El}.tity any Breach of Unsecured PHI,
including Breaches reported to it by a Subcontractor, as soon as it (or any of its employees
or agents) becomes aware of any such Breach, and in no case later than two (2) business
days after it ( or any of its employees or agents) becomes aware of the Breach, except when
a law enforcement officiai determines that a notification would impede a criminal
investigation or cause damage to national security.
6.2
Business Associate shall provide Covered Entity with the names of the individuals
whose Unsecured PHI has been, or is reasonably believed to have been, the subject of the
Breach and any other available information that is required to be given to the affected
individuals, as set forth in 45 CFR § 164.404(c), and, if requested by Covered Entity,
information necessary for Covered Entity to investigate the impermissible use or
disclosure. Business Associate shall continue to provide to Covered Entity information
concerning the Breach as it becomes available to it. Business Associate shall require its
Subcontractor(s) to agree to these same terms and conditions.
6.3
When Business Associate determines that an impermissible acquisition, use or
disclosure of PHI by a member of its workforce is not a Breach, as that term is defined in
45 CFR § 164.402, and therefore does not necessitate notice to the impacted individual(s),
it shall document its assessment of risk, conducted as set forth in 45 CFR § 402(2). When
requested by Covered Entity, Business Associate shall make its risk assessments available
to Covered Entity. It shall also provide Covered Entity with 1) the name of the person(s)
making the assessment, 2) a brief summary of the _facts, and 3) a brief statement of the
reasons supporting the determination of low probability that the PHI had been
compromised. When a breach is the responsibility of a member of its Subcontractor's
workforce, Business Associate shall either 1) conduct its own risk assessment and draft a
summary of the event and assessment or 2) require its Subcontractor to conduct the
assessment and draft a summary of the event. In either case, Business Associate shall make
these assessments and reports available to Covered Entity.

STATE OF VERMONT Contract# 37036

Page52 of63

6.4
Business Associate shall require, by contract, a Subcontractor to report to Business
Associate and Covered Entity any Breach of which the Subcontractor becomes aware, no
later than two (2) business days after becomes aware of the Breach.
7.
Mitigation and Corrective Action. Business Associate shall mitigate, to the extent
practicable, any harmful effect that is known to it of an impermissible use or disclosure of PHI,
even if the impermissible use or disclosure does not constitute a Breach. Business Associate shall
draft and carry out a plan of corrective action to address any incident of impermissible use or
disclosure of PHI. If requested by Covered Entity, Business Associate shall make its mitigation
and corrective action plans available to Covered Entity. Business Associate shall require a
Subcontractor to agree to these same terms and conditions.
8.

Providing Notice o.f Breach.es.

8.1
If Covered Entity determines that an impermissible acquisition, access, use or
disclosure of PHI for which one of Business Associate's employees or agents was
responsible constitutes a Breach as defined in 45 CFR § 164.402, and if requested by
Covered Entity, Business Associate shall provide notice to the individual(s) whose PHI has
been the subject of the Breach. When requested to provide notice, Business Associate shall
consult with Covered Entity about the timeliness, content and method of notice, and shall
receive Covered Entity's approval concerning these elements. The cost of notice and
related remedies shall be borne by Business Associate.
8.2
If Covered Entity or Business Associate determines that an impermissible
acquisition, access, use or disclosure of PHI by a Subcontractor of Business Associate
constitutes a Breach as defined in 45 CFR § 164.402, and if requested by Covered Entity
or Business Associate, Subcontractor shall provide notice to the individual(s) whose PHI
has been the subject of the Breach. When Covered Entity requests that Business As~ociate
or its Subcontractor provide notice, Business Associate shall either 1) consult with Covered
Entity about the specifics of the notice as set forth irt section 8.1, above, or 2) require, by
contract, its Subcontractor to consult with Covered Entity about the specifics of the notice
as set forth in section 8.1
8.3
The notice to affected individuals shall be provided as soon as reasonably possible
and in no case later than 60 calendar days after Business Associate reported the Breach to
Covered Entity,
8.4
The notice to affected individuals shall be written in plain language and shall
include, to the extent possible, 1) a brief description of what happened, 2) a description of
the types of Unsecured PHI that were involved in the Breach, 3) any steps individuals can
take to protect themselves from potential harm resulting from the Breach, 4) a brief
description of what the Business Associate is doing to investigate the Breach, to mitigate
harm to individuals and to protect against further Breaches, and 5) contact procedures for
individuals to ask questions or obtain additional information, as set forth in 45 CFR §
164.404(c).

STATE OF VERMONT Contract# 37036

Page53 of63

8.5
Business Associate shall notify individuals of Breaches as specified in 45 CFR §
164.404(d) (methods of individual notice). In addition, when a Breach involves more than
500 residents of Vermont, Business Associate shall, ifrequested by Covered Entity, notify
prominent media outlets serving Vermont, following the requirements set forth in 45 CFR
§ 164.406.

9.
Agreements with Subcontractors. Business Associate shall enter into a Business
Associate Agreement with any Subcontractor to whom it provides PHI received from Covered
Entity or created or received by Business Associate on behalf of Covered Entity in which the
Subcontractor agrees to the same restrictions .and conditions that apply through this Agreement to
Business Associate with respect to such PHI. Business Associate must enter into this Business
Associate Agreement before any use by or disclosure of PHI to such agent. The written agreement
must identify Covered Entity as a direct and intended third party beneficiary with the right to
enforce any breach of the agreement concerning the use or disclosure of PHI. Business Associate
shall provide a copy of the Business Associate Agreement it enters into with a subcontractor to
Covered Entity upon request. Business associate may not make any disclosure of PHI to any
Subcontractor without prior written consent of Covered Entity.

10.
Access to PHI. Business Associate shall provide access to PHI in a Designated Record
Set to Covered Entity or as directed by Covered Entity to an Individual to meet the requirements
under 45 CFR § 164.524. Business Associate shall provide such access in the time and manner
reasonably designated by Covered Entity. Within three (3) business days, Business Associate shall
forward to Covered Entity for handling any request for access to PHI that Business Associate
directly receives from an Individual.
11.
Amendment of PHI. Business Associate shall make any amendments to PHI in a
Designated Record Set that Covered Entity directs or agrees to pursuant to 45 CFR § 164.526,
whether at the request of Covered Entity or an Individual. Business Associate shall make such
amendments in the time and manner reasonably designated by Covered Entity. Within three (3)
business days, Business Associate shall forward to Covered Entity for handling any request for
amendment to PHI that Business Associate directly receives from an Individual.
12.
Accounting of Disclosures. Business Associate shall document disclosures of PHI and all
information related to such disclosures as would be required for Covered Entity to respond to a
request by an Individual for an accounting of disclosures of rHI in accordance with 45 CFR §
164.528. Business Associate shall provide such information to Covered Entity or as directed by
Covered Entity to .an Individual, to permit Covered Entity to.respond to an accounting request.
Business Associate shall provide such information in the time and manner reasonably designated
by Covered Entity. Within three .(3) business days, Business Associate shall forward to Covered
Entity for handling any accounting request that Business Associate directly receives from an
Individual.
13.
Books and Records. Subject to the attorney-client and other applicable legal privileges,
Business Associate shall make its internal practices, books, and records (including policies and
procedures and PHI) relating to the use and disclosure of PHI received from Covered Entity or
created or received by Business Associate on behalf of Covered Entity available to the Secretary

STATE OF VERMONT Contract# 37036

Page54 of63

of HHS in the time and manner designated by the Secretary. Business Associate shall make the
same information available to Covered Entity, upon Covered Entity's request, in the time and
manner reasonably designated by Covered Entity so that Covered Entity may determine whether
Business Associate is in compliance with this Agreement.

14.

Termination.
14.1 This Agreement commences on the Effective Date and shall remain in effect until
terminated by Covered Entity or until all of the PHI provided by Covered Entity to Business
Associate or created or received by Business Associate on behalf of Covered Entity is
destroyed or returned to Covered Entity subject to Section 19.8.
14.2 If Business Associate breaches any material term of this Agreement, Covered
Entity may either: (a) provide an opportunity for Business Associate to cure the breach and
Covered Entity may terminate the contract or grant without liability or penalty if Business
Associate does not cure the breach within the time specified by Covered Entity; or (b)
immediately terminate the contract or grant without liability or penalty if Covered Entity
believes _that cure is not reasonably possible; or (c) if neither termination nor cure are
feasible, Covered Entity shall report the breach to the Secretary. Covered Entity has the
right to seek to cure any breach by Business Associate and this right, regardless of whether
Covered Entity cures such breach, does not lessen any right or remedy available to Covered
Entity at law, in equity, or under the contract or grant, nor does it lessen Business
Associate's responsibility for such breach or its duty to cure such breach.
·

15.

Return/Destruction of PHI.
15 .1 Business Associate in connection with the expiration or termination of the. contract
or grant shall return or destroy, at the discretion of the Covered Entity, all PHI received
from Covered Entity or created or received by Business Associate on behalf of Covered
Entity pursuant to this contract or grant that Business Associate still maintains in any form
or medium (including electronic) within thirty (30) days after such expiration or
termination. Business Associate shall not retain any copies of the PHI. Business Associate
shall certify in writing for Covered Entity (1) when all PHI has been returned or destroyed
and (2) that Business Associate does not continue to maintain any PHI. Business Associate
is to provide this certification during this thirty (30) day period.
15 .2 Business Associate shall provide to Covered Entity notification of any conditions
that Business Associate believes make the return or destruction of Pffl infeasible. If
Covered Entity agrees that return or destruction is infeasible, Business Associate shall
extend the protections of this Agreement to such PHI and limit further uses and disclosures
of such PHI to those purposes that make the return or destruction infeasible for so long as
Business Associate maintains such PIIl. This shall also apply to all Agents and
Subcontractors of Business Associate.

16.
Penalties. Business Associate understands that: (a) there may be civil or criminal penalties
for misuse or misappropriation of PHI and (b) violations of this Agreement may result in

STATE OF VERMONT Contract# 37036

Page SS of63

notification by Covered Entity to · law enforcement officials and regulatory, accreditation, and
licensure organizations.

17.
Training. Business Associate understands that it is its obligation to comply with the law
and shall provide appropriate training and education to ensure compliance with this Agreement. If
requested by Covered Entity, Business Associat~ shall participate in AHS training regarding the
use, confidentiality, and security of PHI, however, participation in such training shall not supplant
nor relieve Business Associate of its obligations under this Agreement to independently assure
compliance with the law and this Agreement.
18.
Security Rule Obligations. The following provisions of this section apply to the extent
that Business Associate creates, receives, maintains or transmits Electronic PHI on behalf of
Covered Entity.
18.1 Business Associate shall implement and use administrative, physical, and technical
safeguards in compliance with 45 CFR sections 164.308, 164.310, and 164.312 with
respect to the Electronic PHI that it creates, receives, maintains or transmits on behalf of
Covered Entity. Business Associate shall identify in writing upon request from Covered
Entity all of the safeguards that it uses to protect such Electronic PHI.

18.2 Business Associate shall ensure that any Agent and Subcontractor to whom it
provides Electronic PHI agrees in a written agreement to implement and use administrative,
physical, and technical safeguards that reasonably and appropriately protect the
Confidentiality, Integrity and Availa~ility of the Electronic PHI. Business Associate must
enter into this written agreement before any use or disclosure of Electronic PHI by such
Agent or Subcontractor. The written agreement must identify Covered Entity as a direct
and intended third party beneficiary with the right to enforce any breach of the agreement
concerning the use or disclosure of Electronic PHI. Business Associate shall provide a
copy of the written agreement to Covered Entity upon request. Business Associate may
not make any disclosure of Electronic PHI to any Agent or Subcontractor without the prior
written consent of Covered Entity.
18.3 Business Associate shall report in writing to Covered Entity any Security Incident
pertaining to such Electronic PHI (whether involving Business Associate or an Agent or
Subcontractor). Business Associate shall provide this written report as soon as it becomes
aware of any such Security Incident, and in· no case later than two (2) business days after
it becomes aware of the incident. Business Assocjate shall provide Covered Entity with
the information necessary for Covered Entity to investigate any such Security Incident.
18.4 Business Associate shall comply :with any reasonable policies and procedures
Covered Entity implements to obtain compliance under the Security Rule.

STATE OF VERMONT Contract# 37036

19.

Page 56 of63

Miscellaneous.
19.1 In the event of any conflict or inconsistency between the terms of this Agreement
and the terms of the contract/grant, the terms of this Agreement shall govern with respect
to its subject matter. Otherwise, the terms of the contract/grant continue in effect.
19.2 Business Associate shall cooperate with Covered Entity to amend this Agreement
from time to time as is necessary for Covered Entity to comply with the Privacy Rule, the
Security Rule, or any other standards promulgated under HIP AA.
19.3 Any ambiguity in this Agreement shall be resolved to permit Covered Entity to
comply with the Privacy Rule, Security Rule, or any other standards promulgated under
HIPAA.
19.4 In addition to applicable Vermont law, the parties shall rely on applicable federal
law (e.g., HIPAA, the Privacy Rule and Security Rule, and the HIPAA omnibus final
rule) in construing the meaning and effect of this Agreement.
19.5 As between Business Associate and Covered Entity, Covered Entity owns all PHI
provided by Covered Entity to Business Associate or created or received by Business
Associate on behalf of Covered Entity.

19.6 Business Associate shall abide by the terms and conditions of this Agreement with
respect to all PHI it receives from Covered Entity or creates or receives on behalf of
Covered Entity even if some of that information relates to specific services for which
Business Associate may not be a "Business Associate" of Covered Entity under the Privacy
Rule.
19.7 Business Associate is prohibited from directly or indirectly ·receiving any
remuneration in exchange for an individual's PHI. Business Associate will refrain from
marketing activities that would violate HIP AA, including specifically Section 13406 of the
HITECH Act. Reports or data containing the PHI may not be sold without Agency's or the
affected individual's written consent.
19.8 The provisions of this Agreement that by their terms encompass continuing rights
or responsibilities shall survive the expiration or termination of this Agreement. For
example: (a) the provisions of this Agreement shall continue to apply if Covered Entity
determines that it would be infeasible for Business Associate to return or destroy PHI as
provided in Section 14.2 and (b) the obligation of Business Associate to provide an
accounting of disclosures as set forth in Section 12 survives the expiration or termination
of this Agreement with respect to accounting requests, if any, made after such expiration
or termination.

Rev: 7/7/17

STATE OF VERMONT Contract# 37036

Page 57 of63

ATTACHMENTF
AGENCY OF HUMAN SERVICES' CUSTOMARY.CONTRACT/GRANT PROVISIONS
I. Definitions: For purposes of this Attachment F, the term "Agreement" shall mean the form of

the contract or grant, with all of its parts, into which this Attachment F is incorporated. The
meaning of the term "Party" when used in this Attachment F shall mean any named party to this
Agreement other than the State of Vermont, the Agency of Human Services (AHS) and any of
the departments, boards, offices and business units named in this Agreement. As such, the
term "Party" shall mean, when used in this Attachment F, the Contractor or Grantee with whom
the State of Vermont is executing this Agreement. If Party, when permitted to do so under
this Agreement, seeks by way of any subcontract, sub-grant or other form of provider agreement
to employ any other person or entity to perform any of the obligations of Party under this
Agreement, Party shall be obligated to ensure that all terms of this Attachment F are followed.
As such, the term "Party" as used herein shall also be construed as applicable to, and describing
the obligations of, any subcontractor, sub-recipient or sub-grantee of this Agreement. Any such
use or construction of tlie term "Party" shall not, however, give any subcontractor, sub-recipient
or sub-grantee any substantive right in this Agreement without an express written agreement to
that effect by the State of Vermont.
2. Agency of Ruman Services: The Agency of Human Services is responsible for overseeing
all contracts and grants entered by any of its departments, boards, offices and business units,
however denominated. The Agency of Human Services, through the business office of the
Office of the Secretary, and through its Field Services Directors, will share with any named
AHS-associated party to. this Agreement oversight, monitoring and enforcement
responsibilities. Party agrees to cooperate with both the named AHS-associated party to this
contract and with the Agency of Human Services itself with respect to the resolution of any
issues relating to the performance and interpretation of this Agreement, payment matters and
legal compliance.
3. Medicaid Program Parties (applicable to any Party providing services and supports paidfor

under Vermont's Medicaid program and Vermont's Global Commitment to Health Waiver):
J11spectio11 and Rete11tio11 of Reconls: In addition to any other requirement under this

Agreement or at law, Party must fulfill all state and federal legal requirements, and will comply
with all requests appropriate to enable the Agency of Human Services, the U.S. Department of
Health and Human Services (along with its Inspector General and the Centers for Medicare
and Medicaid Services), the Comptroller General, the Government Accounting Office, or any
of their designees: (i) to evaluate through inspection or other means the quality,
appropriateness, and timeliness of services performed under this Agreement; and (ii) to inspect
and audit any records, financial data, contracts, computer or other electronic systems of Party
relating to the performance of services under Vermont's Medicaid program and Vermont's
Global Commitment to Health Waiver. Party will retain for ten years all documents required
to be retained pursuant to 42 CFR 438.3(u).

S11bco11tracti11g for Medicaid Services: Notwithstanding any permitted subcontracting of
services to be performed under this Agreement, Party shall remain responsible for ensuring

STATE OF VERMONT Contract# 37036

Page 58 of63

that this Agreement is fully performed according to its terms, that subcontractor remains in
compliance with the terms hereof, and that subcontractor complies with all state and federal
laws and regulations relating to the Medicaid program in Vermont. Subcontracts, and any
service provider agreements entered into by Party in connection with the performance of this
Agreement, must clearly specify in writing the responsibilities of the subcontractor or other
service provider and Party must retain the authority to revoke its subcontract or service
provider agreement or to impose other sanctions if the performance of the subcontractor or
service provider is inadequate or if its performance deviates from any requirement of this
Agreement. Party shall make available on request all contracts, subcontracts and service
provider agreements between the Party, subcontractors and other service providers to the
Agency of Human Services and any of its departments as well as to the Center for Medicare
and Medicaid Services.

Medicaid Notification of Termi11atio11 Req11ireme11ts: Party shall follow the Department of
Vermont Health Access Managed-Care-Organization enrollee-notification requirements, to
include the requirement that Party provide timely notice of any termination of its practice.
E11co1111ter Data: Party shall provide encounter data to the Agency of Human Services and/or
its departments and ensure further that the data and services provided can be linked to and
supported by enrollee eligibility files maintained by the State.

Fe.tleral Medicai,I Sv~·tem Securitv Req11ireme11ts Complia11ce: Party shall provide a security
plan, risk assessment, and security controls review document within three months of the start
date of this Agreement (and update it annually thereafter) in order to support audit compliance
with 45 CFR 95.621 subpart F, ADP System Security Requirements and Review Process.
4.

Workplace Violence Prevention and Crisis Response (applicable to any Party and any
subcontractors and sub-grantees whose employees or other service providers deliver social. or
mental health services directly to individual recipients of such services):

Party shall establish a written workplace violence prevention and crisis response policy
meeting the requirements of Act 109 (2016), 33 VSA §8201(b), for the benefit of employees
delivering direct social or mental health services. Party shall, in preparing its policy, consult
with the guidelines promulgated by the U.S. Occupational Safety and Health Administration
for Preventing Workplace Violence for Healthcare and Social Services Workers, as -those
guidelines may from time to time be amended.
Party, through its violence protection and crisis response committee, shall evaluate the efficacy
ofits policy, and update the policy as appropriate, at least annually. The policy and any written
evaluations thereof shall be provided to employees delivering direct social or mental health
services.
Party will ensure that any subcontractor and sub-grantee who hires employees (or contracts
with service providers) who deliver social or mental health services directly to individual
recipients of such services, complies with all requirements of this Section.

STATE OF VERMONT Contract# 37036

Page 59of63

5. Non-Discrimination:

Party shall not discriminate, and will prohibit its employees, agents, subcontractors, sub-.
grantees and otl1er service providers from discrimination, on the basis of age under the Age
Discrimination Act of 1975, on the basis of handicap under section 504 of the Rehabilitation
Act of 1973, on the basis of sex under Title IX of the Education Amendments of 1972, and on
the basis ofrace, color or national origin under Title VI of the Civil Rights Act of 1964. Party
shall not refuse, withhold from or deny to any person the benefit of services, facilities, goods,
privileges, advantages, or benefits of public accommodation on the basis of disability, race,
creed, color, national origin, marital status, sex, sexual orientation or gender identity as
provided by Title 9 V.S.A. Chapter 139.
No person shall on the grounds of religion or on the grounds of sex (including, on the grounds
that a woman is pregnant), be excluded from participation in, be denied the benefits of, or be
subjected to discrimination, to include sexual harassment, under any program or activity
supported by State of Vermont and/or federal funds.
Party further shall comply with the non-discrimination requirements of Title VI of the Civil
Rights Act of 1964, 42 USC Section 2000d, et seq., and with the federal guidelines
promulgated pursuant to Executive Order 13166 of 2000, requiring that contractors and
subcontractors receiving federal funds assure that persons with limited English proficiency can
meaningfully access services. To the extent Party provides assistance to individuals with
limited English proficiency through the use of oral or written translation or interpretive
services, such individuals cannot be required to pay for such services.
6. Employees and Independent .Contractors:

Party agrees that it shall comply with the laws of the State of Vermont with respect to the
appropriate classification of its workers and service providers as "employees" and
"independent contractors" for all purposes, to include for purposes related to unemployment
compensation insurance and workers compensation coverage, and proper payment and
reporting of wages. Party agrees to ensure that all of its subcontractors or sub-grantees also
remain in legal compliance as to the appropriate classification of "workers" and "independent
contractors" relating to unemployment compensation insurance and workers compensation
coverage, and proper payment and reporting of wages. Party will on request provide to the
Agency of Human Services information pertaining to the classification of its employees to
include the basis for the classification. Failure to comply with these obligations may result in
termination of this Agreement.
7.

Data Protection and Privacy:

Protected Health I,1formatio11: Party shall maintain the privacy and security of all individually
identifiable health information acquired by or provided to it as a part of the performance of
this Agreement. Party shall follow federal and state law relating to privacy and security of
individually identifiable health information as applicable, including the Health Insurance
Portability and Accountability Act (HIP AA) and its federal regulations.

STATE OF VERMONT Contract# 37036

Page 60 of63

Substance Abuse Treatme11t /11formation: Substance abuse treatment information shall be
maintained in compliance with 42 C.F.R. Part 2 if the Party or subcontractor(s) are Part 2
covered programs, or if substance abuse treatment information is received from a Part 2
covered program by the Party or subcontractor(s).

Protection of Personal /11formalio11 : Party agrees to comply with all applicable state and
federal statutes to assure protection and security of personal information, or of any personally
identifiable information (PII), including the Security Breach Notice. Act, 9 V.S.A. § 2435, the
Social Security Number Protection Act, 9 V.S.A. § 2440, the Document Safe Destruction Act,
9 V.S.A. § 2445 and 45 CFR 155.260. As used here, PII shall include any information, in any
medium, including electronic, which can be used to distinguish or trace an individual's
identity, such as his/her name, social security number, biometric records, etc., either alone or
when combined with any other personal or identifiable information that is linked or linkable
to a specific person, such as date and place or birth, mother's maiden name, etc.

Ot!,er Co11fide11tial Co11s11mer li1formatio11: Party agrees to comply with the requirements of
AHS Rule No. 08-048 concerning access to and uses of personal information relating to any
beneficiary or recipient of goods, services or other forms of support. Party further agrees to
comply with any applicable Vermont State Statute and other regulations respecting the right to
individual privacy. Party shall ensure that all of its employees, subcontractors and other
service providers performing services under this agreement understand and preserve the
sensitive, confidential and non-public nature of information to which they may have access.

Data Breaches: Party shall report to AHS, though its Chief Information Officer (CIO), any
impermissible use or disclosure that compromises the security, confidentiality or privacy of
any form of protected personal information identified above within 24 hours of the discovery
of the. breach. Party shall in addition comply with any other data breach notification
requirements required under federal or state law.

8. Abuse and Neglect of Children and Vulnerable Adults:

Abuse Registrv. Party agrees not to employ any individual, to use any volunteer or other
service provider, or to otherwise provide reimbursement to any individual who in the
performance of services connected with this agreement provides care, custody, treatment,
transportation, or supervision to children or to vulnerable adults if there has been a
substantiation of abuse or neglect or exploitation involving that individual. Party is responsible
for confirming as to each individual having such contact with children or vulnerable adults the
non-existence of a substantiated allegation of abuse, neglect or exploitation by verifying that
fact though (a) as t0 vulnerable adults, the Adult Abuse Registry maintained by the Department
of Disabilities, Aging and Independent Living and (b) as to children, the Central Child
Protection Registry (unless the Party holds a valid child care license or registration from the
Division of Child Development, Department for Children and Families). See 33 V.S.A.
§4919(a)(3) and 33 V.S.A. §691 l(c)(3).

Reporting of Abuse, Neglect, or Exploitatio11. Consistent with provisions of 33 V.S.A.
§4913(a) and §6903, Party and any of its agents or employees who, in the performance of
services connected with this agreement, (a) is a caregiver or has any other contact with clients
and (b) has reasonable cause to believe that a child or vulnerable adult has been abused or

STATE OF VERMONT Contract# 3 7036

Page 61 of63

neglected as defined in Chapter 49 or abused, neglected, or exploited as defined in Chapter 69
of Title 33 V .S.A. shall: as to children, make a report containing the information required by
33 V.S.A. §4914 to the Commissioner of the Department for Children and Families within 24
hours; or, as to a vulnerable adult, make a report containing the information required by 33
V.S.A. §6904 to the Division of Licensing and Protection at the Department of Disabilities,
Aging, and Independent Living within 48 hours. Party will ensure that its agents or employees
receive training on the reporting of abuse or neglect to children and abuse, neglect or
exploitation of vulnerable adults.
9. Information Technology Systems:

Comp11ti11g a11d Conm11mic(ltio11: Party sha11 select, in consultation with the Agency of Human
Services' Information Technology unit, one of the approved methods for secure access to the
State's systems and data, if required. Approved methods are based on the type of work
performed by the Party as part of this agreement. Options include, but are not limited to:

1. Party's provision of certified computing equipment, peripherals and mobile devices, on
a separate Party's network with separate internet access'. The Agency of Human
Services' accounts may or may not be provided.
2. State supplied and managed equipment and accounts to access state applications and
data, including State issued active directorY. accounts and application specific accounts,
which follow the National Institutes of Standards and Technology (NIST) security and
the Health Insurance Portability & Accountability Act (HIPAA) standards.
l11tellect11al Property/Work Protluct Ow11ers!,ip: All data, technical information, materials
first gathered, originated, developed, prepared, or obtained as a condition of this agreement
and used in the performance of this agreement -- including, but not limited to all reports,
surveys, plans, charts, literature, brochures, mailings, recordings (video or audio), pictures,
drawings, analyses, graphic representations, software computer programs and accompanying
documentation and printouts, notes and memoranda, written procedures and documents, which
are prepared for or obtained specifically for this agreement, or are a result of the services
required under this grant -- shall be considered "work for hire" and remain the property of the
State of Vermont, regardless of the state of completion unless otherwise specified in this
agreement. Such items shall be delivered to the State of Vermont upon JO-days' notice by the
State. With respect to software computer programs and / or source codes first developed for
the State, all the work shall be considered "work for hire," i.e., the State, not the Party (or
subcontractor or sub-grantee), shall have full and complete ownership of all software computer
programs, documentation and/or source codes developed.

Party shall not sell or copyright a work product or item produced under this agreement without
explicit permission from the State of Vermont.
If Party is operating a system or application on behalf of the State of Vermont, Party shall not
make information entered into the system or application available for uses by any other party

STATE OF VERMONT Contract# 37036

Page 62 of63

than the State of Vermont, without prior authorization by the State. Nothing herein shall entitle
the State to pre-existing Party's materials.
Party acknowledges and agrees that should this agreement be in support of the State's
implementation of the Patient Protection and Affordable Care Act of 2010, Party is subject to
the certain property rights provisions of the Code of Federal Regulations and a Grant from the
Department of Health and Human Services, Centers for Medicare & Medicaid Services. Such
agreement will be subje~t to, and incorporates here by reference, 45 CFR 74.36, 45 CFR 92.34
and 45 ~FR 95.617 governing rights to intangible property.

Security a,u/ Data' Tra11sfers: Party shall comply with all applicable State and Agency of
Human Services' policies and standards, especially those related to privacy and security. The
State will advise the Party of any new policies, procedures, or protocols developed during the
term of this agreement as they are issued and will work with the Party to implement any
required.
Party will ensure the physical and data security associated with computer equipment, including
desktops, notebooks, and other portable devices, used in connection with this Agreement. Party
will also assure that any media or mechanism used to store or transfer data to or from the State
includes industry standard security mechanisms such as continually up-to-date malware
protection and encryption. Party will make every reasonable effort to ensure media or data files
transferred to the State are virus and spyware free. At the conclusion of this agreement and
after successful delivery of the data to the State, Party shall securely delete data (including
archival backups) from Party's equipment that contains individually identifiable records, in
accordance with standards adopted by the Agency of Human Services.
Party, in the event of a data breach, shall comply with the terms of Section 7 above.
10. Other Provisions:
E11viro11me11tt1I Tobacco Smoke. Public Law 103-227 (also known as the Pro-Children Act of

1994) and Vermont's Act 135 (2014) (An act relating to smoking in lodging establishments,
hospitals, and child care facilities, and on State lands) restrict the use of tobacco products in
certain settings. Party shall ensure that no person is permitted: (i) to use tobacco products or
tobacco substitutes as defined in 7 V.S.A. § 1001 on the premises, both indoor and outdoor, of
any licensed child care center or afterschool program at any time; (ii) to use tobacco products
or tobacco substitutes on the premises, both indoor and in any outdoor area designated for child
care, health or day care services, kindergarten, pre-kindergarten, elementary, or secondary
education or library services; and (iii) to use tobacco products or tobacco substitutes on the
premises of a licensed or registered family child care home while children are present and in
care. Party will refrain from promoting the use of tobacco products for all clients and from
making tobacco products available to minors.
Failure to comply with the provisions of the federal law may result in the imposition of a civil
monetary penalty of up to $1,000 for each violation and/or the imposition of an administrative
compliance order on the responsible entity. The federal·Pro-Children Act of 1994, however,

STATE OF VERMONT Contract# 37036

Page63 of63

does not apply to portions of facilities used for inpatient drug or alcohol treatment; service
providers whose sole source of applicable federal funds is Medicare or Medicaid; or facilities
where Women, Infants, & Children (WIC) coupons are redeemed.

2-1-1 Database: If Party provides health or human services within Vermont, or if Party
provides such services near the Vermont border readily accessible to residents of Vermont,
Party shall adhere to the "Inclusion/Exclusion" policy of Vermont's United WayNermont 211
(Vermont 211), and will provide to Vermont 211 relevant descriptive information regarding
its agency, programs and/or contact information as well as accurate and up to date information
to its database as requested. The "Inclusion/Exclusion" policy can be found at
www. vermont21 l .or .

Voter Registration: When designated by the Secretary of State, Party agrees to become a voter
registration agency as defined by 17 V.S.A. §2103 (41), and to comply with the requirements
of state and federal law pertaining to such agencies.
Drug Free Workplace Act: Party will assure a drug-free workplace in accordance with 45
CFRPart76.

Lohhviug: No federal funds under this agreement may be used to influence or attempt to
influence an officer or employee of any agency, a member of Congress, an officer or employee
of Congress, or an employee of a member of Congress in connection with the awarding of any
federal contract, continuation, renewal, amendments other than federal appropriated funds.
AHSATT. F 5/16/2018