District Of Columbia 2023 2023-2024 Regular Session

District Of Columbia Council Bill B25-0267 Introduced / Bill

Filed 04/25/2023

                    •jI
/
April 24, 2023
. I
Dear Chairman Mendelson:
I urge the Council to take prompt and favorable action on the enclosed legislation.
Sincerely,
Honorable Phil Mendelson
Chairman
Council of the District of Columbia
John A. Wilson Building
1350 Pennsylvania Avenue, NW, Suite 504
Washington, DC 20004
The legislation will approve Contract No. DCHBX-2023-E-0001 with Experian Consumer 
Services to provide DC Health Link customers with identity and credit monitoring protection in 
response to a data breach that involved personally identifiable information. In addition, the 
legislation will approve payment for services received and to be received under the contract.
If you have any questions regarding this legislation, please have your staff contact Kenneth 
Wallington, Contracting Officer, DC Health Benefit Exchange Authority, at (202) 679-5952.
i 
/
MURIEL BOWSER
MAYOR
Enclosed for consideration and enactment by the Council of the District of Columbia is ah 
emergency bill, the “Contract No. DCHBX-2023-E-0001 with Experian Consumer Services 
Approval and Payment Authorization Emergency Act of2023,” and the accompanying emergency 
declaration resolution.
urfel Bowser   /
A BILL
IN THE COUNCIL OF THE DISTRICT OF COLUMBIA
BE IT ENACTED BY THE COUNCIL OF THE DISTRICT OF COLUMBIA,
That this act may be cited as “Contract No. DCHBX-2023-E-0001 with Experian21
Consumer Services Approval and Payment Authorization Emergency Act of 2023”.22
Sec. 2. Pursuant to section 451 of the District of Columbia Home Rule Act,23
24
25
26
the Council approves Contract No. DCHBX-2023-E-0001 with Experian Consumer27
Services to provide DC Health Link customers with identity and credit monitoring28
29
30
Sec. 3. Fiscal impact statement.
32
33
i
1
2
3
4
5
6
7
8
9
10
11
12
13
' 14
15
16
17
18
19
20
chairman Phil Mendelson 
at the request of the Mayor
To approve, on an emergency basis, Contract No. DCHBX-2023-E-0001 with Experian 
Consumer Services to provide DC Health Link customers with identity and credit 
monitoring protection, and to authorize payment for the goods and services 
received and to be received under the contract.
approved December 24, 1973 (87 Stat. 803; D.C. Official Code § 1-204.51) and 
notwithstanding the requirements of section 202 of the Procurement Practices Reform 
Act
 of 2010, effective April 8, 2011 (D.C. Law 18-371; D.C. Official Code § 2-352.02),
The Council adopts the fiscal impact statement of the Chief Financial Officer as 
the fiscal impact statement required by section 4a of the General Legislative Procedures
31
protection and authorizes payment in the not-to-exceed amount of $3,400,000 for the 
** goods and services received and to be received under the contract.   Act
 of 1975, approved October 16, 2006 (120 Stat. 2038; D.C. Official Code § 1-34
35301.47a).
Sec. 4. Effective date.36
This act shall take effect following approval by the Mayor (or in the event of veto37
38
39
Columbia in section 412(a) of the District of Columbia Home Rule Act, approved40
December 24, 1973 (87 Stat. 788; D.C. Official Code § l-204.12(a)).41
2
by the Mayor, action by the Council to override the veto), and shall remain in effect for 
no longer than 90 days, as provided for emergency acts of the Council of the District of  Consumerinfo.com dba Experian Consumer ServicesProposed Contractor:
Not-to-Exceed (NTE) $3,400,000.00$Contract Amount:
Unit and Method of Compensation: Fixed price
Term of Contract: March 9, 2023 through September 30, 2023
RequirementsType of Contract:
Emergency ContractSource Selection Method:
$3,400,000.00 (NTE)Base Period Amount:
1
Pursuant to section 202(c-l) of the Procurement Practices Reform Act of 2010, as amended, D.C. 
Official Code § 2-352.02(c-l), the following contract summary is provided:
Option Period 2 Amount: $
Explanation of difference from base period (if applicable):
Option Period 3 Amount: $
Explanation of difference from base period (if applicable):
Option Period 4 Amount: $
Explanation of difference from base period (if applicable):
Option Period 1 Amount: $
Explanation of difference from base period (if applicable):
GOVERNMENT OF THE DISTRICT OF COLUMBIA 
Office of Contracting and Procurement
(B) For a contract containing option periods, the contract amount for the base period and for 
each option period. If the contract amount for one or more of the option periods differs from 
the amount for the base period, provide an explanation of the reason for the difference:
COUNCIL CONTRACT SUMMARY 
(Retroactive)
(A) Contract Number: DCHBX-2023-E-0001  There were no protests.
2
(C) The goods or services to be provided, the methods of delivering goods or services, and any 
significant program changes reflected in the proposed contract:
(D) The selection process, including the number of offerors, the evaluation criteria, and the 
evaluation results, including price, technical or quality, and past performance components:
(G) The period of performance associated with the proposed change, including date as of which 
the proposed change is to be made effective:
Identity and credit monitoring protection for DC Health link customers delivered by internet. 
Services also include the facilitation of calls at the contractor’s call center.
The vendor was selected in accordance with HBX’s emergency procurement policies and 
procedures.
 HBX received quotes from two (2) vendors. The selected vendor offered the lowest 
prices that met HBX’s requirements.
March 9, 2023, through September 30, 2023. The proposed change date is to be made effective 
March 17, 2023 through September 30, 2023.
The work or services performed pursuant to an agreement that does not, on its own, require Council 
review, are the following: $315,359.85 plus $388,214.32. The work or services performed pursuant 
to a proposed change are the following: $543,135.58 plus $174,418.50. Moreover, additional work 
or services will be performed (see answer in (I)).
(E) A description of any bid protest related to the award of the contract, including whether the 
protest was resolved through litigation, withdrawal of the protest by the protestor, or 
voluntary corrective action by the District. Include the identity of the protestor, the grounds 
alleged in the protest, and any deficiencies identified by the District as a result of the protest:
(H) The value of any work or services performed pursuant to a proposed change for which the 
Council has not provided approval, disaggregated by each proposed change if more than one 
proposed change has been aggregated for Council review:
(F) The background and qualifications of the proposed contractor, including its organization, 
financial stability, personnel, and performance on past or current government or private 
sector contracts with requirements similar to those of the proposed contract:
Experian is an award winning globally recognized company offering credit and identity protection 
monitoring services. They have decades of experience with over 6000 employees in the United 
States. Experian holds contracts with the federal government. They are a financially stable company 
as demonstrated through their Dun & Bradstreet supplier qualifier report. Additionally, as a 
publicly held company, Experian’s financial information is made publicly available in their 
financial
 reports and updates.  March 16, 2023
i
(L) The reason for the proposed change:
(M) The legal, regulatory, or contractual authority for the proposed change:
3
■i
(K) The reason why the proposed change was sent to Council for approval after it is.intended to 
take effect:
The original contract amount (comprised of orders for services in the amounts of $315,359.85 and 
$388,214.32) is $703,574.17. As referenced in (H), the aggregate dollar value of the proposed 
changes above this amount is $717,554.08 ($543,135.58 plus $174,418.50). The contract approval 
includes an additional amount of up to $1,978,871.75. The additional $1,978,871.75 was calculated 
on a fixed unit price assumption for the number of consumers who enroll in Experian credit and 
identity monitoring services above an initial 7% enrollment rate.
On March 6, 2023, the DC Health Benefit Exchange Authority (“DC Health Link”) received notice 
that data for some DC Health Link customers had been published on a data breach forum. HBX 
immediately launched a comprehensive investigation, began working with law enforcement, and 
engaged a third-party expert forensics firm to investigate. As a result of the investigation, two 
distinct groups were identified - (Group 1) individuals we know were impacted by the data breach 
because their information was taken and posted publicly and (Group 2) individuals whose 
information we now know was stored in the same manner as the first group, but we do not have 
actual evidence that information for Group 2 was compromised.
Preparations could not be made to seek Council approval prior to authorizing contract performance 
because HBX had a legal obligation to immediately address a data breach that involved DC Health 
Link consumers’ personally identifiable information, and to take all actions necessary to mitigate 
the risk of harm to consumers as quickly as possible.
To provide additional DC Health Link customers with credit and identify monitoring protection 
because of the data breach.
All people in Group 1 and Group 2 were provided with three years of free identity and credit 
monitoring services for all-three major credit bureaus. The three years of credit monitoring 
protection includes all dependents, spouses, and children currently enrolled (or enrolled in the past).
In addition, to help regain public trust and out of an abundance of caution, HBX will allow 
customers not impacted to sign up for the same three years of monitoring.
(I) The aggregate dollar value of the proposed changes as compared with the amount of the 
contract
 as awarded:
(J) The date on which the contracting officer was notified of the proposed change:  DC Official Code 31-3171.04(a)(5) and § 2-352.02
There is no subcontracting plan. This procurement was issued as an emergency procurement.
(O) Performance standards and the expected outcome of the proposed contract:
There has been no expenditure of funds.
The contract has been reviewed for legal sufficiency and deemed legally sufficient (Attachment B).
4
(N) A summary of the subcontracting plan required under section 2346 of the Small, Local, and 
Disadvantaged Business Enterprise Development and Assistance Act of 2005, as amended, 
D.C. Official Code § 2-218.01 etseq. (“Act”), including a certification that the subcontracting 
plan meets the minimum requirements of the Act and the dollar volume of the portion of the 
contract to be subcontracted, expressed both in total dollars and as a percentage of the total 
contract amount:
(P) The amount and date of any expenditure of funds by the District pursuant to the contract 
prior to its submission to the Council for approval:
(Q) A certification that the proposed contract is within the appropriated budget authority for the 
agency
 for the fiscal year and is consistent with the financial plan and budget adopted in 
accordance with D.C. Official Code §§ 47-392.01 and 47-392.02:
(R) A certification that the contract is legally sufficient, including whether the proposed 
contractor has any pending legal claims against the District:
(S) A certification that Citywide Clean Hands database indicates that the proposed contractor is 
current with its District taxes. If the Citywide Clean Hands Database indicates that the 
proposed contractor is not current with its District taxes, either: (1) a certification that the 
contractor has worked out and is current with a payment schedule approved by the District; 
or (2) a certification that the contractor will be current with its District taxes after the District 
recovers any outstanding debt as provided under D.C. Official Code § 2-353.01(b):
Experian will provide quality reputable identity and credit monitoring services to DC Health Link 
customers because of the data breach.
The Agency Chief Financial Officer has provided a certification of the availability of funding for 
the proposed contract (Attachment A).
Experian is in compliance with DC taxes per their Clean Hands report dated March 30, 2023 
(Attachment C).
(T) A certification from the proposed contractor that it is current with its federal taxes, or has 
worked out and is current with a payment schedule approved by the federal government: (  None
No determination and findings issues.
www.hbx.dc.gov
www.hbx.dc.gov
5
(U) The status of the proposed contractor as a certified local, small, or disadvantaged business 
enterprise as defined in the Small, Local, and Disadvantaged Business Enterprise 
Development and Assistance Act of 2005, as amended, D.C. Official Code § 2-218.01 et seq.‘.
(V) Other aspects of the proposed contract that the Chief Procurement Officer considers 
significant:
(X) Any determination and findings issues relating to the contract’s formation, including any 
determination and findings made under D.C. Official Code § 2-352.05 (privatization 
contracts):
(Y) Where the contract, and any amendments or modifications, if executed, will be made 
available online:
(Z) Where the original solicitation, and any amendments or modifications, will be made available 
online:
Experian is current with its federal taxes as indicated by the System of Award Management (SAM) 
record results (Attachment D).
Experian is not a certified-local, small, or disadvantaged business enterprise as defined in the Small, 
Local,'and Disadvantaged Business Enterprise Development and Assistance Act of 2005.
Experian has no record of debarment or suspension actions on the federal and District excluded 
parties lists (Attachment E).
(W) A statement indicating whether the proposed contractor is currently debarred from providing 
services or goods to the District or federal government, the dates of the debarment, and the 
reasons for debarment:  Notice Number: L0009406292Date of Notice:March 30, 2023
CERTIFICATE OF CLEAN HANDS
As reported in the Clean Hands system, the above referenced individual/entity has no outstanding
1
1101 4th Street SW, Suite W270, Washington, DC 20024/Phone: (202) 724-S045/MyTax.DC.gov
CONSUMERINFO.COM INC 
475 ANTON BLVD
COSTA MESA CA 92626-7037
To validate this certificate, please visit MyTax.DC.gov. On the MyTax DC homepage, click the 
“Validate a Certificate of Clean Hands” hyperlink under the Clean Hands section.
Authorized By Melinda Jenkins
Branch Chief, Collection and Enforcement Administration
Government of the District of Columbia 
Office of the Chief Financial Officer 
Office of Tax and Revenue
FEIN: **-***5932 
Case ID: 1461774
1101 4th Street, SW 
Washington, DC 20024
!
I
I
I
I
% y
X
liability with the District of Columbia Office of Tax and Revenue or the Department of Employment 
Services. As of the dateabove, the individual/entity has complied with DC Code § 47-2862, therefore 
this
 Certificate of Clean Hands is issued.
/ 	i
TITLE 47. TAXATION, LICENSING, PERMITS, ASSESSMENTS, AND FEES
V r y CHAPTER 28 GENERAL LICENSE
SUBCHAPTER II. CLEAN HANDS BEFORE RECEIVING A LICENSE OR PERMIT 
. D.C. CODE § 47-2862 (2006)
§ 47-2862 PROHIBITION AGAINST ISSUANCE OF LICENSE OR PERMIT   Office of the Chief Financial Officer
MEMORANDUM
TO:
FROM:
THRU:
April 5, 2023DATE:
SUBJECT:
Vendor: Experian	Contract#: DCHBX-2023-E-0001
Funding Period: 03/09/2023 to 09/30/2023 (Non-PATEO)Fiscal Year 2023
AmountAccountFund^ProgramFY
70119 71320012023	$3,400,0008362003100080HI0
$3,400,000FY 2023 Contract Total:
Should you have any questions, please contact me at 202-503-5272.
1225 I Street, N.W., Washington, D.C. 20005 (202) 715-7576 FAX (202)730-1658
Delicia V. Moore
Associate Chief Financial Officer
Human Services Support Cluster
Kenneth Wallington
Contracting Officer
DC Health Benefit Exchange Authority
Marjorie V. Edmonds
Agency Chief Financial Officer 
DC Health Benefit Exchange Authority
Agency 
Code
Cost 
Center
GOVERNMENT OF THE DISTRICT OF COLUMBIA 
DC Health Benefit Exchange Authority
Certification of Funding Availability for Experian, Contract #DCHBX-2023-E-0001
The Office of the Chief Financial Officer hereby certifies that the sum of $3,400,000 is included in the 
DC
 Health Benefit Exchange Authority’s Enterprise Fund budget for Fiscal Year 2023 to fund the costs 
associated with the Agency’s contract with Experian to provide credit and identity monitoring for the 
District’s ACA participants. This certification supports the Experian contract during the period from 
March 9, 2023 to September 30, 2023. The fund allocation is as follows:  GOVERNMENT OF THE DISTRICT OF COLUMBIA
LEGAL SUFFICIENCY MEMORANDUM
TO:
FROM:
I
April 7, 2023DATE:
i
SUBJECT:
i
Pursuant to section 451 of the District of Columbia Home Rule Act, approved December 24,1973 
(87 Stat. 803; D.C. Official Code § 1-204.51) and notwithstanding the requirements of section 202 
of the Procurement Practices Reform Act of 2010, effective April 8, 2011 (D.C. Law 18-371; D.C. 
Official
 Code § 2-352.02), Council approval of Contract No. DCHBX-E-2023-0001 between the 
District of Columbia Health Benefit Exchange Authority and Experian Consumer Services 
(Experian), is required for services received and to be received under the contract.
I have reviewed the proposed award and the underlying contract and certify that it is legally 
sufficient.
Tommy Wells, Director
Office of Policy and Legislative Affairs 
Executive Office of the Mayor
Brian K. Flowers
General Counsel
DC Health Benefit 
Exchange Authority
If you have any questions regarding this certification, please do not hesitate to contact me at 
(202)812.8444.
I
Brian K. Flowers
The proposed contract action is to award a new contract in the not-to-exceed amount of $3.4 
million to Experian Consumer Services (Experian) to provide three years of free identity and credit 
monitoring services for all three major credit bureaus to D.C. Health Link customers whose data 
was published on a data breach forum. The three years of monitoring protection includes all 
dependents, spouses, and children enrolled. Experian is a multinational consumer credit reporting 
company that collects and aggregates information on more than a billion people and businesses.
Legal Sufficiency Review of Contract No. DCHBX-E-2023-0001.
Contractor: Experian Consumer Services
Amount: $3,400,000.00   UOCUSign tnveiope II): a/A«AAA2-yi1U-4tCb-A/Ab-hC2318/43«bU
3. Requisition/Purchase Request/Project No. Page 1 of 72. Effective Date1. Contract Number
DCHBX-2023-E-0001
f
5. Delivery Address:
i
8. Accounting and Appropriation Data7. Reserved for future use
9F. Total9E. Unit Price9C. Quantity 9D. Unit9A. Item 9B. Supplies/Services
4
13C. Date12C. Date
M
DocuSigned by.
Contractor agrees to furnish and deliver all items or 
perform all the services set forth or otherwise identified 
above and on any continuation sheets for the 
consideration stated herein. The rights and obligations of 
the parties to this contract shall be subject to and 
governed by the following documents:
Via electronic format through the DC Vendor Portal, 
httDs://vendorportal.dc.gov
See Price 
Schedule
( ) 11. AWARD (Contractor is not required to sign this 
document)
Your offer on Solicitation Number including the additions or 
changes made by you which additions or changes are set forth 
in full above is hereby accepted as to the items listed above and 
on any continuation sheets. This award consummates the 
contract which consists of the following documents: 
(a) The Government's solicitation and your offer, and (b) this 
award/contract. No further contractual document is necessary.
See price 
Schedule
NTE 
$3,400,000.00
Consumerlnfo.com, Inc. aka Experian
Consumer Services
475 Anton Blvd.
Costa Mesa, CA 92626
Tel-714-227-2204
Contact Person- Michael Morelli
Michael.morelli@experian.com
i 
>
^—DocuSigned by:
(AWIHWR^fesentative’s Signature)
/•jhperlonv
v.MZ,./
DC Health Benefit Exchange Authority
1225 T Street, NW, 4* Floor 
Washington, DC 20005
6. Contractor shall submit all invoices to:
13A. Name of Contracting Officer 
Kenneth Wallington
13B. District of Columbia
12A. Name and Title of Signer (Type or print) 
___
David Proctor
I 
3
_____Credit and identity monitoring services
Contracting Officer will Complete Item 10 or 11 as Applicable: Item 10 is Applicable
(X) 10. CONTRACTOR ’S NEGOTIATED AGREEMENT 
^Contractor is required to sign this document and return 
copies to issuing office.)
March 9,2023
4. Name and Address of Contractor:
April e, 2023 i 2:28 PM (Extracting Officer’s Signature)  uocubign tnveiope id: »/AaAAAZ-yiiu-4tc;a-A/’Ab-bU2ji«M3«hD
SECTION B
SUPPLIES OR SERVICE AND PRICE/COST
\
B. 1
B.1.1
B.2
REQUIREMENTS CONTRACTB.3
i
b)
B.4PRICE SCHEDULE
B.4.1
I
This contract is being awarded as authorized by DC Official Code 31-3171.04(a)(5) and 2-351,05(c)(22) 
and in accordance with DC Health Benefit Exchange Authority Contracting and Procurement Policies and 
Procedures, Section III B - Emergency Procurements.
The DC Health Benefit Exchange Authority (HBX) awards a contract to Experian Consumer Services 
(
“Contractor”) to provide credit and identification monitoring services.
The District awards a Requirements type of contract with fixed unit prices and an assumption based on a 
7% fixed redemption rate.
j
1
Delivery or performance shall be made only as authorized in accordance with the Ordering 
Clause, (E.6). The District may issue orders requiring delivery to multiple destinations or 
performance at multiple locations. If the District urgently requires delivery before the earliest 
date that delivery may be specified under this contract, and if the Contractor shall not accept an 
order providing for the accelerated delivery, the District may acquire the urgently required 
goods or services from another source.
There is no limit on the number of orders that may be issued. The District may issue orders 
requiring delivery to multiple destinations or performance atmultiple locations.
The price schedule is in accordance with Identityworks Products & Services Order Form.
B.4.1.1 This contract shall not exceed $3,400,000.00 unless authorized by the Contracting Officer.
The District will purchase its requirements of the articles or services included herein from the 
Contractor. The estimated quantities stated herein reflect the best estimates available. The estimate shall 
not be construed as a representation that the estimated quantity will be required or ordered, or that 
conditions affecting requirements will be stable. The estimated quantities shall not be construed to limit 
the quantities which may be ordered from the Contractor by the District or to relieve the Contractor of 
its obligation to fill all such orders.
a)  Docubign tnveiope id: «/AaAAA2-ynu-4tUb-A/At>-i-U2yia/4J«bD
SECTION C
STATEMENT OF WORK
C.l
C.2
C.3
C.4.1
SCOPE
The DC Health Benefit Exchange Authority (HBX) awards a contract to Experian Consumer Services 
(
“Contractor”) to provide credit and identification monitoring services.
BACKGROUND
I 
i
1
The DC Health Benefit Exchange Authority recently experienced a data breach. HBX takes the data breach 
of enrollee information very seriously. On Monday, March 6, 2023, upon becoming aware of the incident, 
HBX immediately launched an investigation, began working with law enforcement, and engaged a third- 
party forensics firm. The following is an update to the ongoing investigation and data breach situation.
There were 56,415 customers impacted. The data fields include the following, although not all data fields 
were necessarily included for each enrollee: name, Social Security number, date of birth, gender, health 
plan information (e.g. plan name, carrier name, premium amounts, employer contribution, and coverage 
dates), employer information, enrollee information (e.g. address, email, phone number, race, ethnicity, 
and
 citizenship status). 	j
HBX recognizes the seriousness of this incident and have reached out to impacted enrollees to provide 
three years of free identity and credit monitoring for all three major credit bureaus. The three years of 
monitoring protection includes all enrolled dependents, spouses and children. In addition, and out of an 
abundance of caution, HBX is offering the same three years of monitoring to all other customers who 
were not impacted.
REQUIREMENTS
Requirements in this contract are in accordance with the products and services as detailed in Exhibit 1 
(56415), Exhibit 2 (69448), and Exhibit 3 (97162) - Identityworks Products & Services Order Form, 
attached and incorporated by reference.  uocubign tnveiope id: a/A«AAA2-yi iu-4tca-A/'Ab-i-Uz'3i«/4^atD
SECTION D
PERIOD OF PERFORMANCE AND DELIVERABLES
TERM OF CONTRACTD.l
D.1.1 The total duration of this contract shall not exceed September 30, 2023.
' i
■ i
The term of the contract shall b,e from date of notice to proceed (March 9, 2023) through September 30, 
2023.
I'
I  Docubign tnveiope ID: ti/AaAAA2-yi lU^bUa-A/Ad-t-U^IB^ybbU
SECTION E
CONTRACTING OFFICER AND CONTRACT ADMINISTRATOR
E.l
AUTHORIZED CHANGES BY THE CONTRACTING OFFICERE.2.
E.2.1 .The CO -is the only person authorized to approve changes in any of the requirements of this contract.
E.2.3
CONTRACT ADMINISTRATOR (CA)E.3
E.3.1.2 Coordinating site entry for Contractor personnel, if applicable;
*
E.3.1.4 Reviewing and approving invoices for deliverables to ensure receipt of goods and services. This includes 
the timely processing of invoices and vouchers in accordance with the HBX payment provisions; and
In the event the Contractor effects any changes at the instruction or request of any person other than the 
CO, the change will be considered to have been made without authority and no adjustment will be made 
in the contract price to cover any cost increase incurred as a result thereof.
CONTRACTING OFFICER (CO)
Contract will be entered into and signed on behalf of HBX only by Contracting Officers. The contract 
information for the Contracting Officer is:
Kenneth Wallington
Contracting Officer 
DC Health Benefit Exchange Authority 
1225 “I” Street, NW, 4th Floor 
Washington,
 DC 20005 
Kenneth.Wallington@dc.gov
<1
E.3.1.3 Reviewing invoices for completed work and recommending approval by the CO if the Contractor’s costs 
are consistent with the negotiated amounts and progress is satisfactory and commensurate with the rate of 
expenditure;
E.3.1 The CA is responsible for general administration of the. contract and advising the CO as the Contractor’s 
compliance or non-compliance with the contract. The CA has the responsibility of ensuring the work 
conforms to the requirements of the contract and such other responsibilities and authorities as may be 
specified in the contract. These include:
E.3.1.1Keeping the CO fully informed of any technical or contractual difficulties encountered during the 
performance period and advising the CO of any potential problem areas under the contract;
E.2.2 The Contractor shall not comply with any order, directive or request that changes or modifies the 
requirements of this contract, unless issued in writing and signed by the CO. .  DOCUStgn bnvelope ID: a/ABAAA2-yi1U-4bUa-A/Ab-|-U2J1b/'43BtU
E.3.2 The address and telephone number of the CA is:
E.4
INVOICE SUBMIT AL AND PAYMENTE.5
ORDERING CLAUSEE.6
9
E.3.L5Maintaining a file that includes all contract correspondence, modifications, records of inspections (site, 
data, equipment) and invoice or vouchers.
Nikki Leon
Privacy Officer, DC Health Link 
Associate General Counsel and Policy Advisor 
DC Health Benefit Exchange Authority 
1225 Eye Street, NW, 4th floor 
Washington, DC 20005 
nicole.leon@dc.gov
E.3.3 The CA shall NOT have the authority to:
1. Award, agree to, or sign any contract; delivery order or task order. Only the CO shall make contractual 
agreements, commitments or modifications;
2. Grant deviations from or waive any of the terms and conditions of the contract;
3. Increase the dollar limit of the contract or authorize work beyond the dollar limit of the contract,
4. Authorized the expenditure of funds by the Contractor;
5. Change the period of performance; or
6. Authorize the use of District property, except as specified under the contract.
The Contractor shall be fully responsible for any changes not authorized in advance, in writing, by the 
CO; may be denied compensation or other relief for any additional work performed that is not so 
authorized; and may also be required, at no additional cost to HBX, to take all corrective action 
necessitated by reason of the unauthorized changes.
E.5.1 The Contractor shall create and submit payment requests in an electronic format through the DC Vendor 
Portal, https://vendorportal.dc.gov.
E.5.2 The Contractor shall submit proper invoice (s) on a monthly basis or as otherwise specified in the Contract 
or task or delivery order.
E.5.3 To constitute a proper invoice, the Contractor shall enter all required information into the DC Vendor 
Portal after selecting the applicable purchase order number listed on the Contractor’s profile.
E.5.4 HBX will make payment to the Contractor, upon the submission of proper invoices, at the prices stipulated 
in the contract (or task or delivery order), for supplies delivered and accepted or services performed and 
accepted, less any discounts, allowances, or adjustments provided for in the Contract.
E.6.1 CAny supplies and services to be furnished under this contract must be ordered by issuance of delivery 
orders, task orders, or purchase orders by the CO. Such orders may be issued during the term of this 
contract.  DOCUSign tnvelope IU: a/ABAAA^yi1U-4tUb-A/Ab-hL;231BM3«tU
E.6.3 Orders may be issued by facsimile or by electronic commerce methods.
ATTACHMENTSF.l
The following attachments are incorporated in this contract by reference:
ORDER OF PRECEDENCEF.2
■|
EXHIBIT 1 (56415) - Identityworks Products & Services Order Form
EXHIBIT 2 (69448) - Identityworks Products & Services Order Form
EXHIBIT 3 (97162) - Identityworks Products & Services Order Form
AMENDMENT No. 1 - DCHBX Amendment No. 1 to IDW Product Agreement,
A conflict in language shall be resolved by giving precedence to the document in the highest order of 
priority that contains language addressing the issue in question. The following documents are incorporated 
into the contract by reference and made a part of the contract in the following order of precedence:
E.6.2, All purchase orders are subject to the terms and conditions of this, contract. In the event of a conflict 
between a purchase order and this contract, the contract shall control.
(1) Contractors Identityworks order forms, as amended (Exhibits 1, 2, 3 and Amendment No. 1)
(2) Contract document  DocuSign
Status: Sent
Location: DocuSign
Signature
Using IP Address: 74.117.21.10
TimestampIn Person Signer Events	Signature
TimestampStatusEditor Delivery Events
TimestampAgent Delivery Events	Status
TimestampStatusIntermediary Delivery Events
Timestamp
Certified Delivery Events	Status
TimestampCarbon Copy Events	Status
Signature Adoption: Pre*selected Style
Using IP Address: 74.117.21.10
Signer Events
Michael Zbawiony
michael.zbawiony@experian.com
Security Level: Email. Account Authentication
(None)
David Proctor
David.Proctor@experian.com
President Experian Partner Solutions
e
Security Level: Email, Account Authentication 
(None)
Signatures: 1 
Initials: 0 
Stamps: 1
Holder: ECS Contracts 
julie.hilliard@experian.com
Envelope Originator:
ECS Contracts 
475 Anton Blvd
Costa Mesa, CA 92626-7037
julie.hilliard@experian.com
IP Address: 74.117.21.10
Electronic Record and Signature Disclosure:
Accepted: 4/6/2023 11:33:41 AM
ID: 5408c366-59e0-411d-9feb-51de4c11cef2
Electronic Record and Signature Disclosure: 
Accepted: 4/6/2023 12:40:18 PM 
ID: 13c406ce-eb87-4bcf-8596-71251fc5a243
Kenneth Wallington
kenneth.wallington@dc.gov
Security Level: Email, Account Authentication
(None)
Electronic Record and Signature Disclosure:
Accepted: 4/7/2023 8:02:58 AM
ID: 6c461c38-dc48-4e88-aac1-bc4423611e62
Sent: 4/6/2023 11:35:18 AM 
Viewed: 4/6/2023 12:40:18 PM 
Signed: 4/6/2023 2:28:44 PM
Sent: 4/6/2023 2:28:50 PM
Viewed: 4/7/2023 8:02:58 AM
Certificate Of Completion ________
Envelope Id: 87A8AAA291104EC8A7A6FC23187438ED
Subject: Complete with DocuSign: Emergency Contract - DCHBX-E-2023-0001_revised.pdf
Source Envelope:
Document Pages: 7
Certificate Pages: 5
AutoNav: Enabled
Envelopeld Stamping: Enabled
Time Zone: (UTC-08:00) Pacific Time (US &
Canada)
Timestamp__________
Sent: 4/6/2023 11:33:22 AM
Viewed: 4/6/2023 11:33:41 AM
Signed: 4/6/2023 11:35:13 AM
Record Tracking 
Status: Original
4/6/2023 11:12:33 AM
Pmu'Z fiWdr
V— tarmF B0C4C«2..  TimestampStatus
]
TimestampSignatureyVitness Events
TimestampSignatureNotary Events
Status
TimestampsStatusPayment Events
Electronic Record and Signature Disclosure
Hashed/Encrypted
Security Checked
Security Checked
Security Checked
Security Checked
Security Checked
Security Checked
Security Checked
tCarbon Copy Events
Michael Morelli
Michael.Morelli@experian.com
Security Level: Email, Account Authentication 
(None)
Electronic Record and Signature Disclosure:
Accepted: 4/30/2021 10:19:07 AM
ID: e6d934e3-9b73-45d7-9d83-4120df65c5ae
Envelope Summary Events
Envelope Sent
Envelope Updated
Envelope Updated
Envelope Updated
Envelope Updated
Envelope Updated
Envelope Updated
Certified Delivered
Timestamps
4/6/2023 11:15:19 AM 
4/6/2023 11:33:21 AM 
4/6/2023 11:33:21 AM 
4/6/2023 11:33:21 AM 
4/6/2023 11:33:21 AM 
4/6/2023 2:19:19 PM 
4/6/2023 2:19:19 PM 
4/7/2023 8:02:58 AM  Electronic Record and Signature Disclosure created on: 10/10/2012 10:02:23 AM 
Parties agreed to: Michael Zbawiony, David Proctor, Kenneth Wallington, Michael Morelli
CONSUMER DISCLOSURE
From time to time, Experian Services Corp, (we, us or Company) may be required by law to 
provide to you certain written notices or disclosures. Described below are the terms and 
conditions for providing to you such notices and disclosures electronically through your 
DocuSign, Inc. (DocuSign) Express user account. Please read the information below carefully 
and
 thoroughly, and if you can access this information electronically to your satisfaction and 
agree to these terms and conditions, please confirm your agreement by clicking the A|I agreeAf 
button at the bottom of this document.
Getting paper copies
At any time, you may request from us a paper copy of any record provided or made available 
electronically to you by us. For such copies, as long as you are an authorized user of the 
DocuSign system you will have the ability to download and print any documents we send to you 
through your DocuSign user account for a limited period of time (usually 30 days) after such 
documents
 are first sent to you. After such time, if you wish for us to send you paper copies of 
any
 such documents from our office to you, you will be charged a $0.00 per-page fee. You may 
request delivery of such paper copies from us by following the procedure described below.
Withdrawing your consent
If you decide to receive notices and disclosures from us electronically, you may at any time 
change your mind and tell us that thereafter you want to receive required notices and disclosures 
only in paper format. How you must inform us of your decision to receive future notices and 
disclosure in paper format and withdraw your consent to receive notices and disclosures 
electronically is described below.
Consequences of changing your mind
If you elect to receive required notices and disclosures only in paper format, it will slow the 
speed at which we can complete certain steps in transactions with you and delivering services to 
you
 because we will need first to send the required notices or disclosures to you in paper format, 
and then wait until we receive back from you your acknowledgment of your receipt of such 
paper notices or disclosures. To indicate to us that you are changing your mind, you must 
withdraw your consent using the DocuSign A'Withdraw ConsentA^ form on the signing page of 
your
 DocuSign account. This will indicate to us that you have withdrawn your consent to receive 
required notices and disclosures electronically from us and you will no longer be able to use your 
DocuSign Express user account to receive required notices and consents electronically from us 
or to sign electronically documents from us.
All notices and disclosures will be sent to you electronically
Unless you tell us otherwise in accordance with the procedures described herein, we will provide 
electronically to you through your DocuSign user account all required notices, disclosures, 
authorizations, acknowledgements, and other documents that are required to be provided or made 
available to you during the course of our relationship with you. To reduce the chance of you 
inadvertently not receiving any notice or disclosure, we prefer to provide all of the required 
notices and disclosures to you by the same method and to the same address that you have given 
us. Thus, you can receive all the disclosures and notices electronically or in paper format through 
the paper mail delivery system. If you do not agree with this process, please let us know as 
described below. Please also see the paragraph immediately above that describes the 
consequences of your electing not to receive delivery of the notices and disclosures 
electronically from us.
How to contact Experian Services Corp.:  To advise Experian Services Corp, of your new e-mail address
WindowsZOOOA-1 or WindowsXPA^
Internet Explorer 6.0A-' or above
Internet Explorer 6.0A^, Mozilla FireFox 1.0, NetScape 7.2 (or above)
To let us know of a change in your e-mail address where we should send notices and disclosures 
electronically to you, you must send an email message to us at susan.walters@experian.com and 
in the body of such request you must state: your previous e-mail address, your new e-mail 
address. We do not require any other information from you to change your email address..
In addition, you must notify DocuSign, Inc to arrange for your new email address to be reflected 
in your DocuSign account by following the process for changing e-mail in DocuSign.
To request paper copies from Experian Services Corp.
To request delivery from us of paper copies of the notices and disclosures previously provided 
by us to you electronically, you must send us an e-mail to susan.walters@experian.com and in 
the body of such request you must state your e-mail address, full name, US Postal address, and 
telephone number. We will bill you for any fees at that time, if any.
To withdraw'your consent with Experian Services Corp.
To inform us that you no longer want to receive future notices and disclosures in electronic 
format you may:
i. decline to sign a document from within your DocuSign account, and on the subsequent 
page, select the check-box indicating you wish to withdraw your consent, or you may;
ii. send us an e-mail to susan.walters@experian.com and in the body of such request you 
must state your e-mail, full name, IS Postal Address, telephone number, and account 
number. We do not need any other information from you to withdraw consent.. The 
consequences of your withdrawing consent for online documents will be that transactions 
may take a longer time to process..
You may contact us to let us know of your changes as to how we may contact you electronically, 
to request paper copies of certain information from us, and to withdraw your prior consent to 
receive notices and disclosures electronically as follows:
To contact us by email send messages to: susan.walters@experian.com
Access to a valid email account ________
800 x 600 minimum _________________________
A2 Allow per session cookies
A2 Users accessing the internet behind a Proxy Server must enable HTTP
Required hardware and software
Operating Systems:
Browsers (for
SENDERS):
Browsers (for
SIGNERS):
Email:
Screen Resolution:
Enabled Security
Settings:  • I can access and read this Electronic CONSENT TO ELECTRONIC RECEIPT OF 
ELECTRONIC CONSUMER DISCLOSURES document; and
• I can print on paper the disclosure or save or send the disclosure to a place where l ean 
print it, for future reference and access; and
• Until or unless I notify Experian Services Corp, as described above, I consent to receive 
from exclusively through electronic means all notices, disclosures, authorizations, 
acknowledgements, and other documents that are required to be provided or made 
available to me by Experian Services Corp, during the course of my relationship with 
you.
1.1 settings via proxy connection
**' These minimum requirements are subject to change. If these requirements change, we will 
provide you with an email message at the email address we have on file for you at that time 
providing you with the revised hardware and software requirements, at which time you will have 
the right to withdraw your consent.
Acknowledging your access and consent to receive materials electronically
To confirm to us that you can access this information electronically, which will be similar to 
other electronic notices and disclosures that we will provide to you, please verify that you were 
able to read this electronic disclosure and that you also were able to print on paper or 
electronically save this page for your future reference and access or that you were able to e-mail 
this disclosure and consent to an address where you will be able to print on paper or save it for 
your
 future reference and access. Further, if you consent to receiving notices and disclosures 
exclusively in electronic format on the terms and conditions described above, please let us know 
by clicking the A|I agreeAf button below.
By checking the AJI AgreeAf box, I confirm that:  UOCUSign tnvelope iu: fteB9'te/^UAB^'A4-AUeMa0bGB2B1Hb2
WHEREAS, CIC and Client entered into the Agreements:
WHEREAS, CIC and Client desire to amend and modify the Agreement as delineated below.
1.
2.
Amend Section 8, Confidentiality Section 8 of the Agreement shall be amended to include the following:3.
4.
5.
[Signature page follows]
Confidential
1
(1/2020)
“Client shall be fully responsible for all acts, errors, and omissions of its employees, agents, and 
subcontractors."
Complete Agreement. As of the Amendment Effective Date, the parties mutually agree to modify Section 
19 of the Agreement by modifying the second sentence in Section 19 as follows:
“This Agreement, along with any document the parties mutually agree upon and formally executed by 
both parties, contains the entire agreement and understanding concerning the subject matter between 
Client and CIC and supersedes all prior agreements (whether written, oral or electronic), term sheets, prior 
negotiations, or proposals that relate specifically to the subject matter herein. Any pre-printed terms on any 
purchase orders shall be null and void."
Client Indemnification. Client indemnity obligations shall be deleted and replaced in its entirety with the 
following:
“Client will pay CIC for alt Consumer Products and Supplemental Services delivered in accordance with the 
pricing and other requirements contained within the Schedules and each Order Form ("Fees"). All Client 
payments are due thirty (30) days from the date of each CIC invoice. Interest shall accrue on any past due 
amounts at the rate of one-and*one half percent (1.5%) per month.
Amend Section 7, Taxes. Section 7 of the Agreement shall be deleted in its entirety as Client is a tax- 
exempt entity.
“Notwithstanding the foregoing in Section 8, Client agrees to these terms, subject to any FOIA 
reporting requirements."
Amend Section 6. Fees and Payment. , Section 6 of the Agreement shall be deleted in its entirety and 
replacing it with the following, :
AMENDMENT No.1 TO THE 
IDENTITYWORKS™ PRODUCT AGREEMENT
NOW, THEREFORE, in consideration of the foregoing and the mutual promises and covenants contained in this 
Amendment, and for other good and valuable consideration, the receipt and sufficiency of which are hereby 
acknowledged, the parties hereto agree as follows:
This Amendment ("Amendment No.1") is made as of March 21, 2023 ("Amendment Effective Date"), to that certain 
IDENTITYWORKS™ Product Agreement, (the “Agreement") by and between Consumerlnlo.com, Inc. (“CIC") also 
known as Experian Consumer Services, and the DC Health Benefit Exchange Authority (the “Client"). Capitalized 
terms not otherwise defined in this Amendment shall have the meaning as set forth in the Agreement as defined 
below.
“experian 
B 1
Order Form 3: Effective Date of March 9, 2023 with an enrollment end date of June 30, 2023 for 97,162 total 
activation codes; and
Order Form 1: Effective Date of March 9, 2023 with an enrollment end date of June 30, 2023 for 69,448 total 
activation codes;
Order Form 2: Effective Date of March 9, 2023 with an enrollment end date of June 30, 2023 for 56,415 total 
activation codes;  Uocubign tnveiope ID: rtttyrt/r-WA»-4^A4-AUBb-1»U&6B^Bil-t>2
UTHORITY
By:
Name: 
vp Consumer Protection
Title:Title:
DocuSigned by:
k.
u
¥
■[
Confidential
2
(V2D20I
To the extent the terms of the Agreement, or any other document conflict with the terms of this Amendment No.1, the 
- terms of this Amendment No.1 shall control in connection with the subject matter hereof. All terms of the Agreement 
not modified herein shall remain unmodified and in full force and effect
Ts^xperianXi
CONSUMERINFO.COM , INC.
DocuSigned by: 
91C57665CCC8442...
Nam0. Michael Br’uemmer
Texperian,
DC HEALTH BENEFIT EXCHAN' 
 
V\ fit -Ha \hjcdti yhn
Canhj'/cffm
/  PRODUCTS & SERVICES ORDER FORM
Order Date: March 9,2023	RO# (If applicable):
Enrollment End Date: June 30, 2023
Primary Consumer Product: Credit Plus 3B
(V12.2D)Experian Confidential	Pagel of 11
Notwithstanding the above, for all Orders of one (1} Activation Code, CIC will Invoice the fee upon Issuance of the Activation Code and you agree to pay the fee within 
thirty (30) days from the dote of such invoice. Individuals will automatically receive access to Identity Restoration services for the duration of the Product Term noted 
above, measured from the dote of their notification letter, even if no further action is taken by the Individual; if they do enroll in a Consumer Product, their access to 
Identity Restoration services will be automatically extended through the full duration of the Product Term far that Consumer Product.
Notification letters: If Client has requested CIC to facilitate the transmission of Notification Letters via email, CIC offers this Supplemental Service through use of CtC's 
Third-Party Provider (email vendor). Client shall send the email addresses of all such Individuals to whom the Notification Letters should be conveyed as part of the 
Notification File. CIC's Third-Party Provider shall purge and destroy the Notification File promptly upon completion of the emailing services. Client hereby acknowledges 
and agrees that with respect to the Email Notification Letters Service, Client shall be responsible for provision for complete and accurate Instructions regarding the 
date(s) that CIC's Provider is requested to email the Notification Letters.
Additional Activation Codes: If the total number of Activation Codes for this Order Is under 100,000, within ninety (30) days of the Order Date, Client may purchase 
additional Activation Codes (up to 50% of the original Order quantity) by sending CIC an email referencing this Order and the number of additional Activation Codes
uocuSign tnveiope id: yui34ii-i-t35D-4AD5-btJUc:-By5uy2/Ubh4A
•J7A^C7l tUI L
IDENTITYWORKS™
Secondary Consumer Product: Minor Plus 
Product Term: 3 years
Billing Contact Email: 
Billing Contact Phone:
Client Name: DC Health Benefit Exchange__________
Primary Contact: Kenneth Wallington
Address: 12251 (Eye) Street, NW, 4th Floor, Washington
DC 20005_________________________________
Primary Contact Email: kenneth.wallington@dc.gov
Primary Contact Phone:202-679-5952
Gient Information__________________________
State of Incorporation: District of Columbia__________
Billing Contact: See purchase order for billing instructions 
Billing Address:
Total Fee for this Order: 56,415 * 
$5.59 = $315,359.85 (Includes all 
redemptions up to a 7% 
redemption rate. Any redemptions 
above 7% will be billed at an 
additional fee of $30.00 per 
—— redemption)
Consumer Product (Activation Codes) 
Total Activation Codes: 1 multi-use code for Credit Plus 3B capped at 
46,825 redemptions and 1 multi-use code for Minor Plus capped at 
___________
9,590_______________________________________________ 
Fee Per Activation Code Redeemed: Replaced with a flat fee of 
$5.59 per person. Includes all redemptions up to a 7% redemption 
rate. Any redemptions above 7% will be billed at an additional fee of 
$30.00 per redemption.______________________
___________
Fee Per Person for Identity Restoration: Included 
__________
 Total Fee for Identity Restoration: Included
SupplemehtarServices_______________________________
^Notification letter Services: printing and mailing of Notification Letters. The price Is included in the flat fee of $315,359.85 and 
asumes that only 1 data file will be processed with all letters being printed in 1 run (additional waves of mailing are not included). 
If NCOA results need to be reviewed prior to having the file processed for mailing, Expeiran must be notified prior to receiving the 
data file, and 1 business day will be added to the mailing timeline. The fee includes up to 3 letter versions ($500 per additional 
version), up to 56,415 letters (2-sheets, printed on one or both sides, black & white). Every additional sheet after 2 - $0.12/ea. 
Return mall is included, (inclusive of postage)
□Mail Merge: merge Activation Codes into the mailing records data file to be processed. 
□Deduping: exact name match, exact address match only. The price is____________________________________________
□Address Append Services: consumer address look up & confirmation process. The price Is
ISEmall Notification Services: emailing notification letters. The price is included in the $315,359.85 flat fee based on up to 56,415 
records and 1 data file. $1,000 set up fee if email and mall are utilzed. Includes 1 email letter version ($500 per additional version) 
13 Enhanced Customer Care Services: additional call center services. The price is included In the $315,359.85 flat fee based on 
56,415 affected indvidual to answer FAQ's until June 30, 2023 with English support.
This Order Form (the "Order”) Is made by and between Consumerlnfo.com, Inc., a California corporation, also known as Experian Consumer Services ("CIC”), and the 
client listed above ("Client'', "You" or "Your"), and shall be effective as of the date of CIC's acceptance and signature.  Client:
By:By: 
I
Name:Name:
VP consumer Protection
Title:Title: Contracting Officer 
March 10, 2023 I 12:01 PM PST
3/9/2023Date:	Date:
DocuSigned by: •
(V12.2O)Page 2 of 11Experian Confidential
I
Client requires (‘'Additional Codes**). Client agrees that any Additional Codes will have the same Enrollment End Date, Product Term, price, and Terms and Conditions 
as the original Activation Codes.
. i
I
I
UOCUbign tnvelope ID: BUU41i-1-ty5D-4AD5-t3tiDU-tjy5B927U8t4A
IVII k
IDENTITY WORKS™ PRODUCTS & SERVICES ORDER FORM
YOUR ORDER IS ACCEPTED BY CIC SUBJECT TO THE TERMS AND CONDITIONS AND ALL APPLICABLE LAWS AND REGULATIONS. PLEASE READ THE TERMS AND 
CONDITIONS CAREFULLY. YOUR SIGNATURE BELOW CONSTiTUTES YOUR AGREEMENT TO ABIDE BY EACH OF THE TERMS ANDCONDITIONS. You explicitly agree to remit 
payment to CIC for all Consumer Products and Supplemental Services provided by CIC in accordance with the Terms and Conditions.
Kenneth Wallington 
Consumerlnfo.com, Inc. 
DocuSigned by:
AAjrLmL fatu-wwty
91C576S5CCC6442... 	■
Michael Bruemmer
The terms and conditions which apply to all transactions between You and Cohsumerlnfo.com, Inc. with respecVto the Order for Consumer Products and/or 
Supplemental Services attached hereto ('Terms and Condittons'). Any terms not otherwise defined within this Order are defined within the Terms and Conditions. With 
respect to all Orders with a Product Term of greater than one (1) year, CIC reserves the right to migrate the Individuals to an updated Consumer Product with 
substantially the same product features after the first year of the Product Term.   Order Date: March 9,2023	PO# (If applicable):
Enrollment End Date: June 30, 2023
Primary Consumer Product: Credit Plus 38
Experian Confidential	Page 1 of 11	(vU.20)
Additional Activation Codes: If the total number of Activation Codes for this Order is under 100,000, within ninety (90) days of the Order Date, Client may purchase 
additional Activation Codes (up to 50% of the original Order quantity) by sending CIC an email referencing this Order and the number of additional Activation Codes
Notwithstanding the above, for all Orders of one fjj Activation Code, CIC will Invoice the Fee upon issuance of the Activation Code and you agree to pay the Fee within 
thirty {30) days from the date of such Invoice. Individuals will automatically receive access to Identity Restoration services for the duration of the Product Term noted 
above, measured from the date of their notification tetter, even If no further action Is token by the Individual; If they do enroll In o Consumer Product, their access to 
Identity Restoration services will be automatically extended through the full duration of the Product Term for that Consumer Product.
Notification Letters: If Client has requested CIC to facilitate the transmission of Notification Letters via email, CIC offers this Supplemental Service through use of CIC's 
Third-Party Provider (email vendor). Client shall send the email addresses of all such Individuals to whom the Notification Letters should be conveyed as part of the 
Notification File. CICs Third-Party Provider shall purge and destroy the Notification File promptly upon completion of the emailing services. Client hereby acknowledges 
and agrees that with respect to the Email Notification Letters Service, Client shall be responsible for provision for complete and accurate Instructions regarding the 
date(s) that CIC's Provider is requested to email the Notification Letters.
Uocusrgn (envelope ID: bUl34lH-t35U^AU5-ttaDU-tiy5t592/UBt4A 
iui i.
IDENTITYWORKS™ PRODUCTS & SERVICES ORDER FORM
Secondary Consumer Product: Minor Plus 
Product Term: 3 years
Client Information. ___________________________
State of Incorporation: District of Columbia__________
Billing Contact: See purchase order for billing instructions 
Billing Address:
Billing Contact Email: 
Billing Contact Phone:
Client Name: DC Health Benefit Exchange__________
Primary Contact: Kenneth Wallington_____________
Address: 1225 I (Eye) Street, NW, 4,h Floor, Washington 
DC 20020_________________________________
Primary Contact Email: Kenneth.walllngton@dc.gov 
Primary Contact Phone:202-679-5952
Total Fee for this Order: 69,448 * 
$5.59 = $388,214.32 (Includes all 
redemptions up to a 7% 
redemption rate. Any redemptions 
above 7% will be billed at an 
additional fee of $30.00 per 
_________
 redemption)________________ 
Consumer Product (Activation Codes)________
Total Activation Codes: 1 multi-use code for Credit Plus 3B capped at 
57,648 redemptions and 1 multi-use code for Minor Plus capped at 
___________
11,800______________________________________________ 
Fee Per Activation Code Redeemed: Replaced with a flat fee of 
$5.59 per person. Includes all redemptions up to a 7% redemption 
rate. Any redemptions above 7% will be billed at an additional fee of 
$30.00 per redemption.______________________
___________
Fee Per Person for Identity Restoration: Included_______________ 
Total Fee for identity Restoration: Included________
SupplemeritarServices
^Notification Letter Services: printing and mailing of Notification Letters. The price Is included in the flat fee of $388,214.32 and 
asumes that only 1 data file will be processed with all letters being printed in 1 run (additional waves of mailing are not included). 
If NCOA results need to be reviewed prior to having the file processed for mailing, Expelran must be notified prior to receiving the 
data file, and 1 business day will be added to the mailing timeline. The fee includes up to 3 letter versions ($500 per additional 
version), up to 69,448 letters (2-sheets, printed on one or both sides, black & white). Every additional sheet after 2 = $0.12/ea. 
Return mail is included, (inclusive of postage)__________ __________________________________________________
□Mall Merge: merge Activation Codes into the mailing records data file to be processed.______________________________
□Deduping: exact name match, exact address match only. The price is____________________________________________
□Address Append Services: consumer address look up 8i confirmation process. The price is____________________________
13Email Notification Services: emailing notification letters. The price is included in the $388,214.32 flat fee based on up to 69,448 
records and 1 data file. $1,000 set up fee if email and mall are utilzed. Includes 1 email letter version ($500 per additional version) 
^Enhanced Customer Care Services: additional call center services. The price is Included in the $388,214.32 flat fee based on 
69,448 affected Indvidual to answer FAQ's until June 30,2023 with English support.
This Order Form (the 'Order”) is made by and between Consumerlnfo.com, Inc., d California corporation, also known as Experian Consumer Services ('CIC'), and the 
client listed above {'Client”, 'You' or 'Your'), and shall be effective as of the date of CIC's acceptance and signature.  Client:
By: 	By:
, Kenneth Wallington Name:	Name:
VP consumer Protection
Title: Contracting Officer 	Title:
March 10, 2023 I 12:01 PM PST
3/9/2023.Date:	Date:
DocuSigned by:
(V1Z.20)Experian Confidential	Page 2 of 11
I
The terms and conditions which apply to all transactions between You and Consumerlnfo.com, Inc. with respect to the Order for Consumer Products and/or 
Supplemental Services attached hereto ("Terms and Conditions**)- Any terms not otherwise defined within this Order are defined within the Terms and Conditions. With 
respect to all Orders with a Product Term of greater than one (1) year, CIC reserves the right to migrate the Individuals to an updated Consumer Product with 
substantially the same product featuresafterthefirstyearoftheProductTerm. 	1
YOUR ORDER IS ACCEPTED.BY CIC SUBJECT TO THE TERMS AND CONDITIONS AND ALL APPLICABLE LAWS AND REGULATIONS. PLEASE READ THE TERMS AND 
CONDITIONS CAREFULLY. YOUR SIGNATURE BELOW CONSTITUTES YOUR AGREEMENT TO ABIDE BY EACH OF THE TERMS AND CONDITIONS. You explicitly agree to remit 
payment to CIC for all Consumer Products and Supplemental Services provided by CIC in accordance with the Terms and Conditions.
DcXealtn B/nflt Exchange
UOCUSign tnvelope iu: bU1341H-t35U'4AD5-t3BUC-t395by27Utit4A 
lUII.
IDENTITY WORKS™ PRODUCTS & SERVICES ORDER FORM
Client requires ("Additional Codes"). Client agrees that any Additional Codes will have the same Enrollment End Date, Product Term, price, and Terms and Conditions 
as the original Activation Codes.
Consumerlnfo.com, Inc. 
z—— DocuSipned by;
91C576e5CCCM42..
Michael Bruemmer    Order Date: March 16, 2023
PO # (if applicable):
Enrollment End Date: June 30, 2023
Primary Consumer Product: Credit Plus 3B
Experian Confidential	Page 1 of 11	(V12.20)
AddWonal Activation Codes: If the total number of Activation Codes for this Order is under 100,000, within ninety (90) days of the Order Date, Client may purchase 
additional Activation Codes (up to $0% of the original Order quantity) by sending CIC an email referencing this Order and the number of additional Activation Codes
DocuSign tnvelope ID: UdUl-3B4U’UAtjU-4hDD-yU7D-Jty5U2tbl5tj9a 
zexpenan.
IDENTITYWORKS™ PRODUCTS & SERVICES ORDER FORM
Secondary Consumer Product: Minor Plus 
Product Term: 3 years
Client Information
State of Incorporation: District of Columbia__________
Billing Contact: See purchase order for billing instructions 
Billing Address:
Billing Contact Email: 
Billing Contact Phone:
Client Name: DC Health Benefit Exchange 
Primary Contact: Kenneth Wallington 
Address: 122SI (Eye) Street, NW 4th Floor, Washington 
DC 20020_________________________________
Primary Contact Email: Kenneth.wallington@dc.gov 
Primary Contact Phone:202-679-5952
Notwithstanding the above, for all Orders of one li} Activation Code, CIC will Invoice the Fee upon issuance of the Activation Code and you agree to pay the Fee within 
thirty (30) days from the date of such invoice. Individuals will automatically receive access to Identity Restoration services for the duration of the Product Term noted 
above, measured from the date of their notification letter, even if no further action is taken by the Individual; if they do enroll In o Consumer Product, their access to 
Identity Restoration services will be automatically extended through the full duration of the Product Term for that Consumer Product.
Notification letters: if Client has requested CIC to facilitate the transmission of Notification Letters via email, CIC offers this Supplemental Service through use of CIC's 
Third-Party Provider (email vendor). Client shall send the email addresses of all such Individuals to whom the Notification Letters should be conveyed as part of the 
Notification File. CIC’s Third-Party Provider shall purge and destroy the Notification File promptly upon completion of the emailing services. CHent hereby acknowledges 
and agrees that with respect to the Email Notification Letters Service, Client shall be responsible for provision for complete and accurate Instructions regarding the 
date($| that CIC's Provider Is requested to email the Notification Letters.
Total Fee for this Order: 97,162 • 
$5.59 = $543,135.58 (Includes all 
redemptions up to a 7% 
redemption rate. Any redemptions 
above 7% will be billed at an 
additional fee of $30.00 per 
redemption)________________
, Consumerproduct (Activation Codes)________
Total Activation Codes: 1 multi-use code for Credit Plus 3B capped at 
84,512 redemptions and 1 multi-use code for Minor Plus capped at 
____________
12,650 ____________________________________________ 
Fee Per Activation Code Redeemed: Replaced with a flat fee of 
$5.59 per person. Includes all redemptions up to a 7% redemption 
rate. Any redemptions above 7% will be billed at an additional fee of 
___________
 $30.00 per redemption.__________________________________ 
____________
Fee Per Person for Identity Restoration: Included 
___________
 Total Fee for Identity Restoration: Included
_________________________________ Supplemental Services _____________ _____________________ 
^Notification Letter Services: printing and mailing of Notification Letters. The price is included in the flat fee of $543,135.58 and 
asumes that only 1 data file will be processed with all letters being printed in 1 run (additional waves of mailing are not included). 
If NCOA results need to be reviewed prior to having the file processed for mailing, Expelran must be notified prior to receiving the 
data file, and 1 business day will be added to the mailing timeline. The fee includes up to 3 letter versions ($500 per additional 
version), up to 97,162 letters (2-sheets, printed on one or both sides, black & white). Every additional sheet after 2 = $0.12/ea. 
Return mail is included, (inclusive of postage)___________ ____________________________
□Mall Merge: merge Activation Codes into the mailing records data file to be processed.____________________________
□Deduping: exact name match, exact address match only. The price is_________________________
□Address Append Services: consumer address look up & confirmation process. The price Is_________ _______
0 Email Notification Services: emailing notification letters. The price is included in the $543,135.58 flat fee based on up to 97,162 
records and 1 data file. $1,000 set up fee if email and mall are utilzed. Includes 1 email letter version ($500 per additional version) 
0 Enhanced Customer Care Services: additional call center services. The price is included in the $543,135.58 flat fee based on 
97,162 affected Indvidual to answer FAQ's until June 30, 2023 with English support._____________________________
This Order Form (the •’Order*) Is made by and between Consumerlnfo.com, Inc., a California corporation, also known as Experian Consumer Services ("CIC'I, and the 
client listed above ("Client’’, "You" or •Ycur*|, and shall be effective as of the date of CIC's acceptance and signature.  By.By:
Name:Name:
vp consumer ProtectionTide:Tide:
March 23, 2023 | 11:56 AM PDT
Date:Date:
DocuSigned by:
k
i
(V12.20)Page 2 of 11Experian Confidential
The terms and conditions which apply to all transactions between You and Consumer1nfo.com, Inc. with respect to the Order for Consumer Products and/or 
Supplemental Services attached hereto |*Terms and Conditions*'!. Any terms not otherwise defined within this Order are defined within the Terms and Conditions. With 
respect to all Orders with a Product Term of greater than one (1) year, CIC reserves the right to migrate the Individuals to an updated Consumer Product with 
substantially the same product features after the first year of the Product Term.
Client requires (‘’Additional Codes"). Client agrees that any Additional Codes will have the same Enrollment End Date, Product Term, price, and Terms and Conditions 
as the original Activation Codes.
YOUR ORDER IS ACCEPTED BY CIC SUBJECT TO THE TERMS AND CONDITIONS AND ALL APPLICABLE LAWS AND REGULATIONS. PLEASE READ THE TERMS ANO 
CONDITIONS CAREFULLY. YOUR SIGNATURE BELOW CONSTITUTES YOUR AGREEMENTTO ABIDE BY EACH OF THE TERMS AND CONDITIONS. You explicitly agree to remit 
payment to CIC for all Consumer Products and Supplemental Services provided by CIC in accordance with the Terms and Conditions.
Uocubign bnvelope IU: U»UI-3B4U-UAt>U-4tUU-907U-3h»5U2tBBb9»
Texperiair
IDENTITY WORKS™ PRODUCTS & SERVICES ORDER FORM
i
Consumerlnfo.com, Inc.
DocuSlpnad by
-»1CS7WSCCCM«2...
Michael Bruemmer
Client:
l&rtru   2.
5.
7.
Experian Confidential	Page 3 of 11	(V12.2O)
uocubign bnvelope ID: UdUI-3b4LHJA6U-4tDD-yU7D-3t95U2teBe698
zexpenan.
IDENTITYWORKS™ PRODUCTS & SERVICES ORDER FORM
These IDENTITYWORKS Product Agreement (the "Agreement") made by and between Consumerlnfo.com, Inc., a California 
corporation, ("Cl£") also known as Experian Consumer Services, and , identified as "Client" on an Order Form as well as its 
Affiliates (collectively, "Client"). Each of CIC and Client are sometimes referred to herein as a "Party" and collectively as the "Parties."
Any Order Form signed by Client is made a material part of this Agreement and is Incorporated herein by this reference.
1. Agreement. This Agreement contains the standard terms and conditions for CIC's delivery of certain identity theft, credit 
monitoring and protection products and services (collectively, the "Consumer Products"). Separate from or in addition to the 
Consumer Products, Client may elect for CIC to provide certain other supplemental services ("Supplemental Services"). Client 
may also elect to have its Affiliates purchase Consumer Products or Supplemental Services pursuant to this Agreement. An 
"Affiliate" means any entity controlled by, under common control with or that controls the applicable Party, where "control" 
means ownership of fifty percent (50%) or more of the ownership Interest of an entity.
Consumer Product Delivery. Consumer Products will be delivered by CIC to consumers, employees, or other individuals with 
whom Client has a pre-existing relationship and or otherwise maintains such Individuals' personal and/or other sensitive 
information ("Individual"). As a condition of receiving the Consumer Product, each Individual must complete CIC's applicable 
enrollment process and agree to all terms and conditions as well as CIC's privacy policy (collectively, the "End-User Terms and 
Conditions"). The CIC operational terms and conditions that apply to the delivery of the Consumer Products are included herein 
("Operational Terms").
3. Supplemental Services Delivery. Supplemental Services will be delivered by CIC to Client or its Affiliates solely pursuant to the 
terms of this Agreement, including a Supplemental Services Schedule If completed by Client.
4. Term & Termination. The term of this Agreement will begin upon the Effective Date set-out below and will continue In effect until 
the termination or expiration of all Schedules and Orders issued pursuant to this agreement. Either Party may terminate this 
Agreement and/or selected Schedules if the other Party breaches any material term or condition of this Agreement and fails to 
cure such breach within thirty (30) days after receiving written notice of the breach. Either Party may terminate this Agreement 
and/or selected Schedules for any reason at any time, with or without cause, upon thirty (30) days’ prior written notice to the 
other. Notwithstanding the foregoing, the Parties acknowledge and agree that all fully executed Order Forms are non-cancellable 
and non-refundable once submitted to and accepted by CIC. Therefore, in the event of a termination: (i) CIC will fulfill the delivery 
requirement of any active Order Form, but will have no further obligation to accept additional Order Forms following the effective 
date of termination; and (ii) Client will pay all Fees related to Order Forms submitted prior to the effective date of termination. 
Terms which by their nature would survive a termination (indemnity, disclaimers, etc.) shall survive In the event of a termination. 
Schedules & Client Orders. The terms of this Agreement shall be supplemented by individual schedules containing additional 
terms and conditions applicable to the specific Consumer Products or Supplemental Services ("Schedules"). In order to purchase 
any particular Consumer Products or Supplemental Services Client must submit an order form completed and signed by an 
authorized representative of Client ("Order Form"). A sample Order Form may be requested from CIC.
6. Fees and Payment. Client will pay CIC for all Consumer Products and Supplemental Services delivered in accordance with the 
pricing and other requirements contained within the Schedules and each Order Form ("Fees"). All Client payments are due thirty 
(30) days from the date of each CIC invoice. Interest shall accrue on any past due amounts at the rate of one and one half percent 
(1.5%) per month. In addition. Client is liable to CIC for any costs and attorneys' fees incurred by CIC to collect unpaid amounts. 
Taxes. Client is responsible for, and shall promptly pay or reimburse CIC for the payment of, any sales, use, excise, ad valorem, 
value-added or other similar taxes, assessments or duties imposed by any government agency that are associated with the 
Consumer Products or Supplemental Services (other than taxes based on CIC's net income).
8. Confidentiality. Information which is (a) business or technical information of either party including, but not limited to, information 
relating to either party's products, services, plans, designs, costs, product or service prices and names, payments pursuant to this 
Agreement, finances, marketing plans, business opportunities, personnel, research, development or know-how; (b) any 
Information designated by either party as "confidential" or "proprietary" in writing or which, under the circumstances taken as a 
whole, would reasonably be deemed to be confidential; and (c) the terms of and performance under this Agreement, will be 
considered "Confidential Information". Each party agrees it will (d) not disclose to any third party or use the Confidential 
Information disclosed to it by the other party except as expressly permitted in this Agreement; and (e) take all reasonable 
measures to maintain the confidentiality of all Confidential Information of the other party in its possession or control, which will 
in no event be less than the measures it uses to maintain the confidentiality of its own Confidential Information. Confidential 
Information does not include information that (f) is in or enters the public domain without breach of this Agreement; (g) the 
receiving party lawfully receives from a third party without restriction on disclosure and without breach of a nondisclosure 
obligation; (h) the receiving party lawfully knew (without obligation of confidence) prior to receiving such information from the 
disclosing party; (i) the receiving party develops independently without use of the disclosing party's Confidential Information; or 
(j) Is required to be disclosed by the receiving party to comply with a Law or legal process (i.e. a judicial order or decree). With 
regard to subsection (j) the receiving party shall give the disclosing party prompt notice of such a required disclosure and provide 
reasonable assistance to disclosing party If disclosing party opts to take lawful action to minimize the extent of such disclosure.  Experian Confidential	Page 4 of 11	(V12.20)
UOCUSign bnvetope ID: U8d-3d4D-VA6U-4hDD-yU7D-3t:95U2hbbt)98
Texpenan,
IDENTITYWORKS™ PRODUCTS & SERVICES ORDER FORM________
9* Compliance with Laws. Both Parties agree to comply with all applicable Laws with respect to this Agreement and the obligations 
of each Party hereunder. "Law" means any rules, laws, statutes, regulations or judgments, orders or decrees imposed by any 
governmental entity.
10. CIC Warranty & Disclaimers. CIC represents and warrants to Client that it (a) has the power and authority to enter into this 
Agreement and to perform its obligations hereunder; (b) will provide the Consumer Products in a manner consistent with the 
level of service provided to CiC's general customer base for such Consumer Products; (c) will provide the Consumer Products and 
any other products and services provided under this Agreement in a professional manner; and (d) will not provide, in any public 
communication (including press releases and communications with Individuals), any representation, description or other 
statement regarding Client or its Affiliates in any way other than as approved in writing in advance by the Client. THE WARRANTIES 
PROVIDED IN THIS SECTION ARE THE ONLY WARRANTIES CIC PROVIDES TO CLIENT WITH RESPECT TO THE CONSUMER PRODUCTS 
AND SUPPLEMENTAL SERVICES. CIC MAKES NO OTHER REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, WITH RESPECT 
TO THE CONSUMER PRODUCTS OR SUPPLEMENTAL SERVICES OR ANY OTHER MATERIALS (TANGIBLE OR INTANGIBLE) PROVIDED 
BY CIC HEREUNDER. CIC EXPRESSLY DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTIES WITH RESPECT TO THE CONSUMER 
PRODUCTS AND SUPPLEMENTAL SERVICES AND CLIENT ACKNOWLEDGES AND AGREES THAT THE CONSUMER PRODUCTS ARE 
PROVIDED "ASMS".
11. Client Warranty & Indemnification. Client shall be responsible for all acts, errors, and omissions of its personnel, agents, and 
subcontractors."
12. CIC Indemnification. CIC will indemnify, defend, and hold Client and its directors, officers, shareholders and, agents (the "Client 
Indemnified Parties") harmless from and against any and alt Damages, which may be asserted against or incurred by Client or any 
of the Client Indemnified Parties, arising out of or resulting from: (a) any material breach of the End-User Terms and Conditions 
by CIC; (b) any material breach of CIC's obligations under this Agreement; or (c) any failure by CIC to comply with any Law.
13. Indemnification Procedures. A Party seeking indemnification under this Agreement must provide prompt written notice of the 
claim to the other Party, typically within thirty (30) days. The indemnifying Party will assume sole control over the defense or 
settlement of the claim at its expense but will not consent to the entry of any judgment or settlement that provides for non­
monetary relief without the consent of the Indemnified Party. If the indemnifying Party chooses not to assume the defense of the 
claim the other Party may defend or settle the claim and the indemnifying Party will remain responsible for the reasonable legal 
fees and expenses incurred. The indemnified Party will provide the indemnifying Party all information, assistance and authority 
to reasonably evaluate the claim and effect any defense or settlement, and may at Its sole option and expense, engage separate 
counsel to participate in (but not control) the defense or settlement of the claim.
14. Limitation of Liability. IN NO EVENT WILL EITHER PARTY BE LIABLE TO THE OTHER, UNDER ANY LEGAL OR EQUITABLE THEORY, 
FOR ANY CONSEQUENTIAL, INCIDENTAL, SPECIAL OR INDIRECT DAMAGES OF ANY KIND, INCLUDING LOST PROFITS AND LOST 
SALES, SUFFERED BY OR OTHERWISE COMPENSABLE TO CLIENT, ARISING OUT OF, UNDER OR RELATING TO THIS AGREEMENT, 
WHETHER OR NOT ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
NOTWITHSTANDING ANYTHING TO THE CONTRARY HEREIN, CiC's AGGREGATE LIABILITY TO CLIENT AND/OR ITS AFFILIATES FOR 
DAMAGES (i) CONCERNING THE PERFORMANCE OR NON-PERFORMANCE BY CIC OF ITS OBLIGATIONS HEREUNDER, OR (il) IN ANY 
WAY RELATED TO OR ARISING OUT OF OR IN CONNECTION WITH THE SUBJECT MATTER OF THIS AGREEMENT (INCLUDING THE 
PROVISION OF THE CONSUMER PRODUCTS, AND INCLUDING CIC's INDEMNIFICATION OBLIGATIONS SET FORTH UNDER THIS 
AGREEMENT), REGARDLESS OF WHETHER THE CLAIM FOR SUCH DAMAGES IS BASED ON CONTRACT, TORT OR OTHERWISE, WILL 
NOT EXCEED AN AMOUNT EQUAL TO THE FEE PAID BY CLIENT TO CIC UNDER THE TERMS OF THIS AGREEMENT.
15. Assignment. This Agreement will be binding and inure to the benefit of the parties hereto and their respective heirs, 
representatives, successors and permitted assignees. This Agreement may not be assigned, transferred, or otherwise shared in 
whole or in part by Client without CiC's prior written consent.
16. Choice of Law; Jurisdiction. This Agreement shall be governed by and construed In accordance with the Laws of the District of 
Columbia.
17. Notices. Any notice given under this Agreement must be given in writing. All notices will be effective when received, and will be 
delivered personally, mailed by registered or certified mail (return receipt requested), postage prepaid, or sent by express courier 
service. Notice address for Client will be the address on Client's Order Form.
18. Independent Contractors. In performing their respective duties under this Agreement, each of the Parties will be operating as an 
independent contractor. Nothing contained herein will in any way constitute any association, employment, partnership or joint 
venture between the Parties hereto, or be construed to evidence the intention of the Parties to establish any such relationship.
19. Complete Agreement. Any and all Schedules or Order Forms which are entered into by Client and CIC and properly reference this 
Agreement by Effective Date are made a material part of this Agreement and are incorporated herein by reference. This 
Agreement contains the entire agreement and understanding concerning the subject matter between Client and CIC and 
supersedes all prior agreements (whether written, oral or electronic), term sheets, prior negotiations, or proposals that relate 
specifically to the subject matter herein. Any substantive additional Client requirements or other changes or modifications to this 
Agreement may require a signed written amendment to this Agreement. CIC will accept a Client issued purchase order ("PO") for  Experian Confidential	Page 5 of 11	(V12.20)
UOCUSign hnvelope ID: UaCi-3B4U-UAeU>4tUD-9U7U-3ty5U2tB6b9»
• iui I.
TOENTITYWORKS™ PRODUCTS & SERVICES ORDER FORM 
limited administrative processes only (i.e. procurement guideline compliance, bill processing, etc.]. However, in no event will any 
terms and conditions contained within such PO be incorporated into this Agreement, supplement this Agreement or otherwise 
apply to the provision of Consumer Products or Supplemental Services.
20- Publicity; Public Communication. For avoidance of doubt, both parties must agree on the timing and complete content of any 
and all public communications (including but not limited to press releases) which pertain to this Agreement or the provision of 
the Consumer Products or Supplemental Services. Client may in no event refer to the Consumer Products, CIC or its Affiliates In 
any form or format unless expressly approved by CIC in writing In advance.
21, Adequate Revlgyv. Each party represents to the other that, as deemed necessary by such party, this Agreement has been reviewed 
by each party and its legal and other advisors, and such party has had an opportunity to make all relevant inquiries and receive 
sufficient responses relating to this Agreement.  (V12.20)
on the date an Individual completes enrollment
Authentication Process. Client hereby acknowledges that CIC shall maintain strict procedures and protocols relating to its enrollment 
and authentication processes (including timed-out and other security measures), and failure by an Individual to follow such procedures 
and protocols may result in a failed enrollment. Client also acknowledges that there are a number of additional reasons and factors
Experian Confidential 	page 6 of 11
Consumer Product Website. The Consumer Product Website shall be used by the Individuals to enroll in the Consumer Product and 
subsequent to enrollment, to log-in and access their account and all the product features. Unless agreed to in writing by CIC, all 
content, including the design and look and feel, of the Consumer Product Website shall be determined by CIC, at its sole and absolute 
discretion. The Consumer Product Website shall be operated in accordance with CIC's standard procedures and shall be accessible by 
Individuals on the earlier of (a) Custom Consumer Product Website Launch Date as set forth in an Order Form, or (b) upon CIC's 
acceptance of an Order Form in the event Client is utilizing a standard, pre-built CIC site-version (your CIC account representative can 
notify you if this is the easel.
W Dfetributlon of Activation Codes. Client agrees not to sell or otherwise distribute any Activation Codes, except to Individuals and only 
as expressly permitted under this Agreement. In no event shall CIC be liable for any loss, damage, theft, corruption or destruction 
( Loss ) of Activation Codes once issued by CIC to Client, including, but not limited to, any such Loss attributable to Client's distribution 
storage (if applicable) and/or mailing of such Activation Codes. CIC shall be liable and responsible for any Loss while the Activation 
Codes are in either CIC's or a Third-Party Provider's possession or control. Note that if Client has retained an agent or subcontractor 
related to the delivery of Consumer Products (such as a third-party print-shop, call center or law firm), CIC is not obliged to 
communicate with or provide services to any such third-parties who may have contractual or other relationships with Client except as 
explicitly authorized by Client in writing and agreed to by CIC.
Nfl<harge to Consumer for the Consumer Product. CIC shall not charge Individuals for the Consumer Product purchased by Client 
and provided by CIC under this Agreement during the Product Term.
(4) peliMpry Method. The delivery method of the Consumer Products to the Individuals during the Product Term is able to be modified by 
Individual election (i.e., if Individuals enroll online, they may subsequently switch to offline delivery, and vice versa). Due to CIC security 
measures, an Individual attempting to login to their account from a location outside the U.S. may not be able to gain access to their 
account, however, such Individuals may call CIC's international non-toll-free number to obtain account related information while 
located outside the U.S. In accordance with the Consumer Products Schedule, certain products may only be available for enrollment 
and delivery online (i.e. without offline capabilities).
(2) Enrollment. Once an Individual receives an Activation Code they may enroll in the applicable Consumer Product either (a) online via 
the Consumer Product Website, or (b) offline via a telephone call to CIC Customer Care. No other enrollment process shall be applicable 
unless agreed to In writing by both CIC and Client.
UocuSign tnvelope ID: u«Ul-3B4D-UAbU-4hDD-yU7D-3ty5U2tetJWi9«
• (Ml I.
IDENTITY WORKS™ PRODUCTS & SERVICES ORDER FORM________
IDENTITYWORKS™ OPERATIONAL TERMS
These IDENTITYWORKS Operational Terms ("Operational Terms") supplement and form a part of the IDENTITYWORKS Product 
Agreement ("Agreement") Client has previously or simultaneously entered into with CIC. The Operational Terms apply to CIC's 
provision of Consumer Products to Client, and to Clients' Individuals. Please note that the majority of defined terms used throughout 
these Operational Terms are already defined within the Agreement (please refer to that document for their definitions), and the 
following section of "Additional Defined Terms" is not intended to be a comprehensive list of all defined terms used herein.
Additional Defined Terms:
"Activation Code" means a unique, single use code with respect to each Individual that allows such Individual to enroll for and 
receive the Consumer Product. Each Individual may only redeem his/her Activation Code for only one applicable Consumer 
Product.
"Consumer Product Website" is the web site built, hosted and maintained by CIC where each Individual may enroll for the 
applicable Consumer Product during the Enrollment Period. If Client requires a custom or unique website, such website shall be 
referred to as a "Custom Consumer Product Website."
"Notification Letter" means the communication developed and written by Client which notifies Individuals of the availability of 
Consumer Products.
"Enrollment Period" means the period commencing on the date stipulated within the relevant Order Form and ending on the 
Enrollment End Date as set forth within the same Order Form. This Is the period during which Individuals may redeem their 
Activation Code and thereby enroll in the Consumer Product.
"Product Term" means the period set forth within an Order Form commencing
for the Consumer Product.  Experian Confidential	Page 7 of 11
(V12.20)
DOCUSign tnvelope ID: UBUh3b4D-UAbU-4bDD-yU7D-3ty5U2tbtjt>y«
■ IVUI I.
IDENTITYWORKS™ PRODUCTS & SERVICES ORDER FORM________
that may cause Individuals to fail authentication or enrollment, including, without limitation: corporate firewalls, proxy servers, spam 
blockers, fraud alerts, credit file freezes, data errors, inaccurate out-of-waliet information, or incorrect social security numbers. Upon 
any such failure, each affected Individual shall be provided with the toll-free number to ClC Customer Care. When an Individual initiates 
such a call, a CIC customer care representative will attempt to manually authenticate such Individual by asking additional security 
questions. In the event such a telephonic authentication is not possible, additional steps may be taken. CIC shall endeavor to make 
the enrollment process as "user-friendly" as reasonably possible without compromising its security standards. CIC reserves the right, 
at its sole and absolute discretion, to modify or alter the enrollment process and/or the services associated therewith from time to 
time without notice to Client.
(8) Customer Care. Customer care will be available to Individuals via a toll-free number that is only available to U.S. callers, which may be 
maintained by a third party engaged by CIC ("CIC Customer Care"). No credit information of any Individuals shall be maintained outside 
of the United States. Identity Restoration and ExtendCARE shall be available to Individuals via a separate team of customer care 
representatives in the United States. The services available via CIC Customer Care are limited to: assistance with telephone and email 
inquiries regarding enrollment for the Consumer Product and technical issues relating to redemption of Activation Codes, 
authentication failure, username and password assistance, cancellations, locked accounts, changes in personal information, billing 
questions about additional products, general credit-related questions, monitoring and alert information, credit reports obtained as 
part of an Individual's enrollment in the Consumer Products, and genera! Consumer Product Website navigation. Customer Care Center 
hours of operation are Monday through Friday, 6 a.m. to 6 p.m. Pacific Time, and Saturday through Sunday, 8 a.m. to 5 p.m. Pacific 
Time. The Customer Care Center will not have access to and will not provide any information related to Client or its business and/or 
Clients legal decisions in making the Consumer Product available to Individuals on a complimentary basis, and will refer any such 
inquiries back to Client.
Third-Party providers; Credit Reporting Company Requirements. Portions of the Consumer Product will be provided by CIC's partners, 
Affiliates and certain third parties, including the consumer reporting companies (collectively, "Third-Party Providers") and are 
therefore subject to each of those entities' respective standard terms, conditions and policies. Third-Party Providers who may be 
utilized by CIC in delivery of the Consumer Products include but are not limited to the following: Equifax, Inc., TransUnion, LLC, Affiliates 
of CIC, and American International Group, Inc.. Additional Third-Party Providers may be added from time to time at CIC's discretion. If 
applicable, Individuals must comply with the Third-Party Providers requirements in order to receive portions of the Consumer Product 
(as an example, AIG insurance claim processing requirements). The consumer reporting companies are not subcontractors or agents 
of CIC, and therefore, CIC does not control such terms and conditions or requirements and may be unable to intervene or assist 
Individuals in any way in meeting such varying consumer reporting company requirements. Individuals shall be solely responsible for 
handling any Issues relating to such terms and conditions and requirements directly with any such consumer reporting company. 
Without limiting the generality of the foregoing. Individuals shall be required to provide all necessary information and meet other 
criteria required by each applicable consumer reporting company (Experian Information Solutions, Inc., Equifax, Inc. and TransUnion 
LLC) in order to receive a credit report or other products and services from such company.
(10) Intellgctual Property and Branding of Consumer Products. Unless otherwise agreed to in writing by CIC, the Consumer Products shall 
be branded as determined by CIC, at its sole and absolute discretion, and Client shall not designate (through trademark, trade name, 
trade dress or otherwise) the Consumer Products as being provided by Client. CIC and/or its Affiliates or Third-Party Providers shall 
exclusively own all right, title and Interest, Including all copyrights, trade secrets, know-how, goodwill, trademarks, service marks, 
trade names, trade dress, logos, patents or other intellectual property (or any derivative works thereof) and underlying technology in 
(I) the Consumer Products and all other products provided by CIC hereunder, (ii) the Consumer Product Website, and (iii) all other 
materials and information provided by CIC to Client hereunder. No grant to use any intellectual property (Including any trademarks) 
of CIC, its Affiliates or Third-Party Providers is made pursuant to the Agreement. Client shall retain ownership of any and all pre-existing 
Client intellectual property, including but not limited to Client's trademarks, patents and trade dress.
(11) gyent Notification tojpdlviduals. Within a mutually agreeable period of time following submission of an Order Form Client shall 
prepare a Notification Letter to be sent via U.S. Mail or email which must include:
(a) one Activation Code per each Individual identified as affected by Client's subject data breach or data loss incident,
(b) the procedures for enrollment in the Consumer Product (including, but not limited to the (i) Consumer Product Website where
lnforfnation Collected From Individuals. All information obtained by CIC directly from such Individual, including without limitation, 
(a) through Individual enrollment for the Consumer Product or by such Individual visiting CIC's website(s), or (b) through provision of 
the Consumer Product is collected and used by CIC in accordance with the End-User Terms and Conditions, which is available for 
review by all Individuals prior to completing their enrollment in the Consumer Products. End-User Terms and Conditions (Including 
Privacy Policies) may be amended from time to time.  f
(
Experian Confidential	Page Bof 11	(vllJO)
■I
I
UocuSign tnveiope iu: U8CI-3B4D-UA6U-4tUU-yU7-U-3h95U2tBe69a 
ar CApCTI IVII I.
IDENTITY WORKS™ PRODUCTS & SERVICES ORDER FORM ______
such Individuals may properly utilize their Activation Code and (H) the appropriate CIC Customer Care phone numbers), and
(c) a listing of the key Consumer Product features.
Any and all planned Client notification processes that include elements other than the Notification Letter (i.e. website postings, e- 
mails, newspaper or published notice, etc.) which explicitly mention CICor the Consumer Products by name must be pre-approved bv 
CIC In writing. Client, shall not provide, in any Notification Letter or any other public communication (including but not limited to 
communications with Individuals), any representation, description or other statement regarding the Consumer Products or otherwise 
refer to CIC or its Affiliates In any way other than language provided expressly by CIC or otherwise pre-approved by CIC in writing. 
Client shall provide CIC with a final copy of the Notification letter at least five (5) days prior to the distribution of the Notification 
Letters and CIC may withhold delivery of Activation Codes to Client until a final Notification Letter has been received by CIC.
(12) Large Incident Notices. In the event Client requests 50,000 or more Activation Codes and upon CIC's reasonable request, Client must 
provide CIC a mailing schedule at least five (5) days prior to Client commencing delivery of any and all Notification Letters to Individuals. 
Once provided by Client, CIC will allocate CIC Customer Care and other resources in accordance with such schedule; any significant 
updates or modifications by Client to the schedule must be provided to CIC immediately and may result In increased costs for CIC that 
will require revised pricing discussions with Client.
Glent Requirements, Placing an Order & Changes to the Agreement. During the Term of the Agreement, Client may submit additional
Order Forms for the purchase of additional Activation Codes. 	•-
(14) Insurance- The insurance provided to Individuals pursuant to the Consumer Products is strictly subject to the policies, terms and 
conditions of the designated third-party insurers. Such policies, and associated terms and conditions are provided to Individuals at the 
time each Individual enrolls for the Consumer Product. CIC does not directly sell such insurance to Client or Individuals. Individuals 
should carefully review such policies to determine the insurance terms and conditions, including limits and coverage of insurable 
losses. At the election of the designated third-party insurer or CIC, (a) the amount of insurance coverage to be provided to Individuals, 
and/or (b) the designation of the third-party insurer(s) are both subject to change at any time. Notwithstanding the foregoing, identity 
theft insurance may not be provided to any Individuals residing in any state where the provision of such insurance is prohibited by 
Law.  K:-- pVV 
Daily Credit Monitoring lor 3 Bureau lor 3 Bureau
Credit.Reoort Upon.Enrollment’,	* .
Identitv.Restoration.iuoon
oID Theft Insurance2
eInternet Surveillance
Minor SSN Monitoring	IBureau
.Minor-Internet Surveillance 
Product Delivery Method
Online (email) Online (email)
Enrollment (Phone and Online)	Online orfy Online only
e
e
»
I
Page 9 of 11	(V12.20)
Ms
>i
!
1
-4i
Online (email)
Offline.iLLS. Maill__
Ini
Online(email) 
nfflina riLC-MaM . . __
Online (email) 
nfflino/iiC.Maili.
........— _
IDENTITYWORKS™ CONSUMER PRODUCT SCHEDULE
CIC offers the Consumer Products detailed within this Schedule subject to the following product descriptions and additional terms 
and conditions:
UOCUSign Envelope IU: 0BUI-3B4D-UA6U’4tUU’yU7U-3t95U2teBtte9e
lUAJJCI IUI I.
IDENTITY WORKS™ PRODUCTS & SERVICES ORDER FORM
Identity Restoration (pre­
enrollment)4
ExtendCARE™ 3
iJPJdentitY^ .
«,'5
Identity Minor
Daily Credit Reports (Online)1
‘ Credit report upon enrollment is a I Bureau (Experian) report.
1 Daily credit reports for online members consist of a daily I Bureau (Experian) report- After enrolling, offline members will be eligible to call for additional reports on 
a quarterly basis
! 2 Identity theft insurance Is underwritten by insurance company subsidiaries and affiliates of American International Group. Inc.
5 This post-membership service is available from the date an individual's membership term ends. It does not include insurance.
4 This pre-cnrollment service is available from the date an Individual receives their Notification Letter. It does not include insurance. /
Experian Confidential
i
■ Credit Plus