ContractData Use Agreement • October 5th, 2018
Contract Type FiledOctober 5th, 2018HHS Enterprise Data Use Agreement ‐ Attachment 2 SECURITY AND PRIVACY INITIAL INQUIRY (SPI) If you are a bidder for a new procurement/contract, in order to participate in the bidding process, you must have corrected any "No" responses in sections B and C prior to the contract award date. If you are an applicant for an open enrollment, you must have corrected any "No" answers in Sections B and C below prior to performing any work on behalf of any HHS agency. For existing contracts or renewals with "No" responses, there must be an action plan for remediation of Section B and C within 30 calendar days for HIPAArelated contracts and 90 calendar days from the date the form is signed for all non‐HIPAA contracts. SECTION A: APPLICANT/BIDDER INFORMATION (To be completed by Applicant/Bidder) 1. Does the applicant/bidder access, create, disclose, receive, transmit, maintain, or store HHS Confidential Information in electronic systems (e.g., laptop, personal use computer, mobile device, database,