Government Contracting Request for Proposal (RFP)

VOLUME 5 – DATA MANAGEMENT PLAN Walton Global Enterprise, LLC (WGE) has developed this Data Management Plan (DMP) to describe the collection, generation, management, protection, access, sharing, and long-term preservation of public health data collected or generated in performance of the National Program Administrator (NPA) contract. This DMP applies to all public health data handled throughout the contract period of performance and will be maintained and updated as required across the data life cycle. 5.1 Description of Public Health Data Collected or Generated Under this contract, WGE will collect, generate, and manage public health data necessary to support administration of the WTC Health Program. Data types include, but are not limited to: Member demographic and eligibility informationClinical monitoring, diagnostic, screening, and treatment dataPharmacy and prescription utilization dataCase management and utilization management dataMember inquiry and service interaction dataOperational, quality, and performance data supporting Program oversight Data may exist in identifiable and de-identified forms depending on operational need, regulatory requirements, and authorized use. 5.2 Standards Used for Data Collection and Management WGE will collect and manage public health data using industry-accepted healthcare, public health, and information management standards to ensure accuracy, consistency, and interoperability. Data standards will support structured data capture, validation, version control, and traceability. All datasets will include appropriate metadata to describe data elements, sources, collection methods, and known limitations. 5.3 Data Access, Sharing, and Use WGE will provide access to and sharing of public health data in accordance with Program requirements, applicable law, and contractual obligations. Access controls are role-based and limited to authorized users with a defined need to know. Identifiable data will be accessible only to authorized personnel for approved operational, clinical, or administrative purposes.De-identified data may be used for reporting, quality improvement, and Program analysis where permitted. Where data access or sharing is restricted, limitations are based on privacy, confidentiality, security, or other legal requirements. Any restrictions on accessibility will be documented and justified. 5.4 Protection of Privacy, Confidentiality, and Security WGE implements administrative, technical, and physical safeguards to protect the privacy, confidentiality, and security of public health data. Safeguards include access controls, audit logging, encryption where appropriate, workforce training, and continuous monitoring. Data handling practices align with applicable privacy and security requirements, including HIPAA and related contractual obligations. 5.5 Documentation and Data Quality All public health data released or shared will include documentation describing: The method of data collectionWhat the data representKnown limitations for use Data quality controls are implemented throughout the data life cycle to ensure accuracy, completeness, and reliability. 5.6 Archiving and Long-Term Preservation WGE will archive public health data in accordance with Program direction, records management requirements, and applicable federal guidance. Archiving practices ensure data integrity, retrievability, and appropriate retention for both identifiable and de-identified data. Where long-term preservation or public access is not justified, WGE will document the rationale based on privacy, confidentiality, security, or operational considerations. 5.7 Data Management Plan Maintenance This DMP will be maintained throughout the life cycle of public health data collected or generated under the contract. Updates will be made as required to reflect changes in data types, systems, access requirements, or regulatory obligations.