This document serves as an attachment to the Illinois Department of Human Services (DHS) Community Services Agreement and sets forth supplemental contractual obligations between the Provider and DHS. The Attachment provides contractual requirements beyond and in addition to those in the Agreement and applies to the programmatic areas of the Division of Family and Community Services (FCS), Bureau of Maternal and Child Health.
II. Applicable Rules and Statutes
The Provider shall provide services as set forth in the pertinent portions of the FCS Program Manual and shall act in accordance with all state and federal statutes and administrative rules applicable to the provision of the services, including, but not limited to the following:
- 42 CFR 430 et seq.: Medicaid provisions of Title XIX of the Social Security Act and its rules
- 42 CFR 431.300 - 431.307: Medicaid provisions of Title XIX of the Social Security Act and its rules, specifically provisions regarding "Safeguarding Information on Applicants and Recipients"
- 42 45 CFR Part 16: Procedures of the Departmental Grant Appeals Board
- 42 U.S. Code 290aa et seq.: Public Health Service Act
- 42 U.S. Code 701 et seq.: Maternal and Child Health Services Block Grant
- 42 U.S. Code 5101 et seq.: Child Abuse Prevention and Treatment Act of 1996
- 42 U.S. Code Chapter 7, Subchapter V, Section 701: Authorization of Appropriations (not sure)
State Rules: Title 77 Illinois Administrative Code
- Part 630: Maternal and Child Health Services Code
State Rules: Title 89 Illinois Administrative Code
- Part 504: Universal Newborn Hearing Screening Program
- 20 ILCS 1305: Department of Human Services Act
- 20 ILCS 2310/55.05: Civil Admin. Code of Illinois
- 225 ILCS 10: Child Care Act of 1969
- 225 ILCS 60: Medical Practice Act of 1987
- 225 ILCS 65: Nursing and Advanced Practice Nursing Act
- 225 ILCS 95 - Physician Assistant Practice Act of 1987
- 225 ILCS 460/1: Solicitation for Charity Act
- 305 ILCS 5/4-12, 9-1, 12-4.5 through 12-4.7, and 12-13: Illinois Public Aid Code
- 325 ILCS 5: Abused and Neglected Child Reporting Act
- 410 ILCS 212: Illinois Family Case Management Act
- 410 ILCS 213: Hearing Screening for Newborns Act
- 410 ILCS 505: Autopsy Act
- 750 ILCS 30: Emancipation of Minors Act
III. Program Services
The Provider shall submit a program plan to the Department for each Program detailed in the Community Services Agreement. Under separate cover, the Division of Family and Community Services will inform the Provider of the specific program plan requirements for each program and the format set forth for the program plan. Unless the Division of Family and Community Services specifies a different due date in the program plan requirements, program plans will be due 60 days after the effective date of the contract. The approved program plan must be on file with the Division of Family and Community Services, and the plan must be implemented as described.
All services funded by FCS' Bureau of Maternal and Child Health must meet the stated eligibility conditions in the program-specific Exhibits to the Agreement.
IV. Cornerstone Acceptable Use Agreement
DHS-funded agencies have certain responsibilities for using the Cornerstone Information System. The responsibilities with Cornerstone are:
- The Agency must purchase and maintain a business class contract with an Internet Service Provider (ISP).
- Interruption of communication and/or connectivity must be reported within 24 hours to the agency's ISP and the Cornerstone Service Desk.
- Cornerstone User access must be approved and terminated by an appropriate section manager responsible for Cornerstone security management within the Cornerstone agency.
- Security training is required before Cornerstone users are allowed access to the system and annually thereafter.
- Reasonable action, due care, and due diligence must be taken to prevent inappropriate use, disclosure, destruction or theft of Cornerstone-designated IT resources. Reasonable actions include but are not limited to prevention, detective and corrective measures such as encryption, anti-viral software and application of security patches.
- Disclosure of Cornerstone information is restricted only to authorized parties and in a manner consistent with the form of data classification.
- Cornerstone-designated IT resources must be for approved use only. Approved use is limited to authorized users, sanctioned Cornerstone business and job responsibility.
- Only approved software and hardware are authorized to be loaded on Cornerstone-owned IT resources:
- Users are not authorized to run software that has not been approved by Cornerstone technical staff.
- Users are not authorized to attach hardward not approved by Cornerstone technical staff including but not limited to modems or non-Cornerstone-designated IT resources such as portable computers or other digital storage or writing devices.
- Only approved software may be used to develop applications or to manipulate data.