Specifications include, but are not limited to: The Contractor must have a current active DHS/DSPD USTEPS Provider Interface (UPI) account, comply with UPI requirements below, and comply with electronic access and process changes as they develop. UPI access forms are on the DHS/DSPD web page: dspd.utah.gov Use of UPI: The Contractor shall: a. Complete the DHS/DSPD form “0-9 USTEPS Provider Interface (UPI) Provider Company Designee Access Form;” b. Complete the DHS/DSPD form “0-8 USTEPS Provider Interface (UPI) Individual User Access Form” for at least one staff; c. Ensure that access to UPI is granted only to staff that need to know the information in UPI to provide or coordinate DHS/DSPD services; d. Ensure staff with UPI access is trained in HIPAA privacy requirements; e. Accept or reject the DHS/DSPD Service Authorization Form 1056 (1056) through UPI within 15 business days of the creation of a new or adjusted DHS/DSPD the 1056; f. If the Contractor rejects the 1056, the Contractor shall coordinate with the Person’s SCE to either adjust the DHS/DSPD, the 1056, or transition the service to a different Contractor; g. Monitor the use of services by Persons to ensure that the utilization of services complies with the approved 1056. If the Person is at risk of exhausting the units allocated in the 1056, the Contractor shall notify the Person’s SCE and arrange for appropriate changes to be made to the Person’s PCSP; h. Use the UPI “Provider Organization” section to create and maintain a Contractor organizational group structure that will restrict UPI users from seeing a Person’s information not required to provide or coordinate DHS/DSPD services; i. Assign and maintain staff with UPI access to the appropriate organizational group(s); j. Assign and maintain each staff with UPI access, email, and notification preference; k. Assign and maintain each Person to the appropriate organizational group(s); l. Remove terminated staff from the “Provider Organization” within one business day of termination; m. Remove Staff from an organizational group within one business day of the Staff member no longer having a need to know the information in UPI to provide or coordinate DHS/DSPD services; n. Remove a Person from the “Provider Organization” within one business day of when the Contractor is no longer providing or coordination services or payments for services on behalf of the Person; o. Conduct and document an annual review of all staff with UPI access to ensure all staff with UPI access have the correct UPI access and the UPI Provider Organization is correct and current; and p. Notify the DHS/DSPD USTEPS team with in one business day of the termination of staff with UPI access.