San Bernardino header
File #: 5488   
Type: Consent Status: Passed
File created: 1/31/2022 Department: County Administrative Office
On agenda: 2/8/2022 Final action: 2/8/2022
Subject: Amendment to Agreement with Plante & Moran, PLLC for Privacy and Security Risk Analysis Services
Attachments: 1. CON-CAO-02082022-Plante Moran Amendment No. 2.pdf, 2. Item #29 Executed BAI, 3. 20-77-A-2 Executed Contract
REPORT/RECOMMENDATION TO THE BOARD OF SUPERVISORS
OF SAN BERNARDINO COUNTY
AND RECORD OF ACTION

February 8, 2022

FROM
LEONARD X. HERNANDEZ, Chief Executive Officer, County Administrative Office

SUBJECT
Title
Amendment to Agreement with Plante & Moran, PLLC for Privacy and Security Risk Analysis Services
End

RECOMMENDATION(S)
Recommendation
Approve Amendment No. 2 to Agreement No. 20-77 with Plante & Moran, PLLC for Health Insurance Portability and Accountability Act/Health Information Technology for Economic and Clinical Health Act of 2009 Privacy and Security Risk Analysis services, with no change to the scope or not-to-exceed amount of $630,000, extending the agreement term by one year, for a total agreement period of February 11, 2020 through February 10, 2023.
(Presenter: Leonard X. Hernandez, Chief Executive Officer, 387-5417)
Body

COUNTY AND CHIEF EXECUTIVE OFFICER GOALS & OBJECTIVES
Improve County Government Operations.
Operate in a Fiscally-Responsible and Business-Like Manner.
Provide for the Safety, Health and Social Service Needs of County Residents.

FINANCIAL IMPACT
This item will not result in the use of additional Discretionary General Funding (Net County Cost). The original agreement amount included mandatory and optional costs that were included in the respective department's budgets and will be included in future recommended budgets as necessary.

BACKGROUND INFORMATION
In 1996, the United States Congress passed the Health Insurance and Portability Accountability Act (HIPAA) (Public Law 104-191), a federal law designed to provide privacy and information security standards to protect patients' medical records and other health information submitted to health plans, doctors, hospitals, and other health care providers ("covered entities"). Regulations have been implemented since the passage of HIPAA detailing the requirements placed upon covered entities in the areas of privacy and security [45 Code of Federal Regulations (CFR) part...

Click here for full text