Administrative & Regulatory Archives - Page 4 of 94

Tax Relief for American Families and Workers Act of 2024

On January 17, 2024, Senate Finance Committee Chairman Ron Wyden (D-Ore.) and House Ways and Means Committee Chairman Jason Smith (R-Mo.) released a bill, the “Tax Relief for American Families and Workers Act of 2024” (“TRAFA” or the “bill”). All of the provisions in the bill are taxpayer favorable, except those that apply to the “employee retention tax credit”.

In short, the bill, if enacted as introduced, would:
• Allow taxpayers to deduct rather than amortize domestic research or experimental costs until 2026. Under current law, domestic research and experimental expenditures incurred after December 31, 2021 must be amortized over a 5-year period. Starting in 2026, taxpayers would once again be required to amortize those costs (as under current law) over five years (rather than deducting them immediately).
• Allow taxpayers to calculate their section 163(j) limitation on interest deductions without regard to any deduction allowable for depreciation, amortization, or depletion (i.e., as a percentage of earnings before interest, taxes, depreciation, and amortization (EBITDA) rather than earnings before interest and taxes (EBIT)) for tax years 2024-2026. This provision would generally increase the limitation and allow greater interest deductions for taxpayers subject to section 163(j).
• Retroactively extend the 100% bonus depreciation for qualified property placed in service after December 31, 2022 until January 1, 2026 (January 1, 2027, for longer production period property and certain aircraft). 100% bonus depreciation, enacted as part of the Tax Cuts and Jobs Act (the “TCJA”), expired for most property placed into service after December 31, 2022. Under existing law, bonus depreciation is generally limited to 80% for property placed into service during 2023, 60% for 2024, and 40% for 2025.
• Increase the maximum amount a taxpayer may expense of the cost of depreciable business assets under section 179 from $1.16 million in 2023 for qualifying property placed in service for the taxable year, to $1.29 million. The $1.16 million amount is reduced by the amount by which the cost of the property placed in service during the taxable year exceeds $2.89 million. Under the bill, the $2.89 amount is increased to $3.22 million. The provision applies to property placed in service in taxable years beginning after December 31, 2023.
• Effectively grant certain tax treaty benefits to residents of Taiwan, including (i) reducing the 30% withholding tax on U.S.-source interest and royalties from 30% to 10%, (ii) reducing the 30% withholding tax on U.S.-source dividends from to 15% or 10% (if the recipient owns at least 10% of the shares of stock in the payor corporation), and (iii) applying the “permanent establishment” threshold (rather than the lower “trade or business” threshold) for U.S. federal income taxation.
• Extend the qualified disaster area rules enacted in 2020 for 60 days after the date of enactment of the bill; exempt from tax certain “qualified wildfire relief payments” for tax years beginning in 2020 through 2025; exempt certain “East Palestine train derailment payments” from tax.
• Enhance the low income housing tax credit and tax-exempt bond financing rules.
• Increase the threshold for information reporting on IRS forms 1099-NEC and 1099-MISC from $600 to $1,000 for payments made on or after January 1, 2024 and increase the threshold for future years based on inflation.
• End the period for filing employee retention tax credit claims for tax years 2020 and 2021 as of January 31, 2024, and increase the penalties for aiding and abetting the understatement of a tax liability by a “COVID–ERTC promoter”.
• Increase the maximum refundable portion of the child tax credit from $1,600 in 2023 (out of the $2,000 maximum per child tax credit under current law) to $1,800 in 2023, $1,900 in 2024, and $2,000 in 2025; modify the calculation of the maximum refundable credit amount by providing that taxpayers first multiply their earned income (in excess of $2,500) by 15 percent, and then multiply that amount by the number of qualifying children (so that a taxpayer with two children would be entitled to double the amount of refundable credit); adjust the $2,000 maximum per child tax credit for inflation in 2024 and 2025; and allow taxpayers in 2024 and 2025 to use earned income from the prior taxable year to calculate their credit. These provisions would be effective for tax years 2023-2025, after which the maximum per child credit would revert to $1,000.

The bill does not increase the $10,000 limit on state and local tax deductions, or increase the $600 reporting threshold for IRS Form 1099-K (gift cards, payment apps, and online marketplaces).
The bill cleared the House Ways and Means Committee by a vote of 40 to 3 and awaits a vote by the full House (which is not expected to occur before January 29). Although the bill appears to have broad partisan support so far, the timing of final passage and enactment is uncertain.
The remainder of this blog post provides a summary of the key business provisions included in TRAFA.

Summary of Key Business Provisions
1. Retroactive extension for current deduction of domestic research or experimental costs that are paid or incurred in tax years beginning after December 31, 2021, and before January 1, 2026 under Section 174.
Under current Section 174, specified research or experimental expenditures incurred in taxable years beginning after December 31, 2021 may not be currently deducted. Instead, the expenditures must be capitalized and amortized ratably over a 5-year period (or, in the case of expenditures that are attributable to research that is conducted outside of the United States, over a 15-year period). Before the TCJA, enacted in 2021, research or experimental expenditures were generally deductible in the year in which they were incurred.
The bill proposes to allow taxpayers to deduct domestic research or experimental costs until 2026. However, foreign research or experimental expenditures would continue to be amortizable over 15 years (as under current law).
Generally, a taxpayer who had already amortized the appropriate portion of its domestic research or experimental costs incurred in the 2022 tax year but wanted to switch to deducting these costs would be able to do so by electing to treat the application of the TRAFA provision as a Section 481(a) adjustment for the 2023 tax year and the adjustment would be taken into account ratably in the 2023 and 2024 federal income tax returns.
2. Retroactive extension to allow depreciation, amortization, or depletion in determining the limitation on business interest expense deduction under Section 163(j) for taxable years beginning before January 1, 2026.
Under current section 163(j), a deduction for business interest expense is disallowed to the extent it exceeds the sum of (i) business interest income, (ii) 30% of adjusted taxable income (“ATI”), and (iii) floor plan financing interest expense in the current taxable year. Any disallowed business interest expense may be carried forward indefinitely to subsequent tax years. The interest limitation generally applies at the taxpayer level (although special rules apply in the case of partnerships and S-corporations). Furthermore, in the case of a group of affiliated corporations that file a consolidated return, the limitation applies at the consolidated tax return filing level.
For tax years beginning before January 1, 2022, the ATI of a taxpayer was computed without regard to (i) any item of income, gain, deduction, or loss that is not properly allocable to a trade or business, (ii) business interest expense and income, (iii) net operating loss deductions under section 172, (iv) deductions for qualified business income under section 199A, and (v) deductions for depreciation, amortization, or depletion (“EBITDA computation”). However, for tax years beginning on or after January 1, 2022, ATI is computed taking into account deductions for depreciation, amortization, or depletion (“EBIT computation”). The EBIT computation generally allows less interest deductions than the EBITDA computation.
The bill proposes to apply the EBITDA computation (instead of the EBIT computation) for taxable years beginning before January 1, 2026. the bill provides that this proposal generally is effective for taxable years beginning after December 31, 2023, but includes an elective transition rule, details to be provided by the Secretary of the Treasury, to allow a taxpayer to elect to apply the EBITDA computation for tax years beginning after December 31, 2021.
3. Extension of 100% bonus depreciation deduction for certain business property placed in service during the years 2023 through 2025 under Section 168(k).
A taxpayer generally must capitalize the cost of property used in a trade or business or held for the production of income and recover the cost over time through annual deductions for depreciation or amortization. Changes to section 168(k), under the TCJA, allowed an additional first-year depreciation deduction, known as bonus depreciation, of 100% of the cost of MACRS property with a depreciable life of 20 years or less, water utility property, qualified improvement property and computer software placed into service after September 27, 2017 and before January 1, 2023. Under current law, property placed in service from January 1, 2023 through December 31, 2026 qualifies for partial bonus depreciation – 80% bonus depreciation for 2023, 60% bonus depreciation for 2024, 40% bonus depreciation for 2025 and 20% bonus depreciation for 2026.
The bill proposes to extend the 100% bonus depreciation for property placed in service during the years 2023 through 2025 and to retain the 20% bonus depreciation for property placed in service in 2026.
4. Increase in limitations on expensing of depreciable business assets under Section 179 to $1.29 million and increase the phaseout threshold amount to $3.22 million.
Generally, under Section 179, a taxpayer may elect to immediately deduct the cost of qualifying property, rather than to claim depreciation deductions over time, subject to limitations discussed below. Qualifying property is generally defined as depreciable tangible personal property, off-the-shelf computer software, and qualified real property (including certain improvements (e.g., roofs, heating, and alarms systems) made to nonresidential real property after the property is first placed in service) that is purchased for use in the active conduct of a trade or business. Under current law, the maximum amount a taxpayer may expense is $1 million of the cost of qualifying property placed in service for the taxable year and the $1 million is reduced (but not below zero) by the amount by which the cost of qualifying property placed in service during the taxable year exceeds $2.5 million. The $1 million and $2.5 million amounts are indexed for inflation for taxable years beginning after 2018. For taxable years beginning in 2023, the total amount that may be expensed under current law is $1.16 million, and the phaseout threshold amount is $2.89 million.
The bill proposes to increase the maximum amount a taxpayer may expense to $1.29 million, reduced by the amount by which the cost of qualifying property exceeds $3.22 million, each in connection with property placed in service in taxable years beginning after December 31, 2023. The $1.29 million and $3.22 million amounts would be adjusted for inflation for taxable years beginning after 2024.
5. Adoption of the United States-Taiwan Expedited Double-Tax Relief Act, “treaty-like” relief for Taiwan residents and the United States-Taiwan Tax Agreement Authorization Act, a framework for the negotiation of a tax agreement between the President of the United States and Taiwan.
The United States does not have formal diplomatic relations with Taiwan, and therefore negotiating a tax treaty with Taiwan raises significant difficulties.
Under the bill, new section 894A would grant certain tax treaty-like benefits to qualified residents of Taiwan. A reduced rate of withholding tax would apply to interest, dividends, royalties, and certain other comparable payments from U.S. sources received by qualified residents of Taiwan. Instead of the 30% withholding tax rate generally imposed on U.S.-source income received by nonresident aliens and foreign corporations, interest and royalties would be subject to a 10% withholding tax rate and dividends would be subject to a 15% withholding tax rate (or a 10% withholding tax rate if paid to a recipient that owns at least ten percent of the shares of stock in the corporation and certain other conditions are met).
Additionally, under new section 894A, income of a qualified resident of Taiwan that is effectively connected to a U.S. trade or business would be subject to U.S. income tax only if such resident has a permanent establishment in the U.S., which is a higher threshold than the U.S. trade or business standard generally applied to non-U.S. persons under the Internal Revenue Code. Furthermore, only the taxable income effectively connected to the United States permanent establishment of a qualified resident of Taiwan would be subject to U.S. income tax.
No U.S. Tax would be imposed under section 894A on wages of qualified residents of Taiwan in connection with personal services performed in the United States and paid by a non-U.S. person.
Also, the proposal would impose general anti-abuse standards similar to those in section 894(c) to deny benefits when payments are made through hybrid entities. The proposed rules are applicable only if, and when, the Secretary of Treasury determines that reciprocal provisions apply to U.S. persons with respect to income sourced in Taiwan.
The bill also provides a framework for the negotiation of a tax agreement between the President of the United States and Taiwan. Specifically, the bill would authorize the President to negotiate and enter into one or more non-self-executing tax agreements to provide for bilateral tax relief with Taiwan beyond that provided for in proposed section 894A. Any such negotiation would only be permitted after a determination by the Secretary of the Treasury that Taiwan has provided benefits to U.S. persons that are reciprocal to the benefits provided to qualified residents of Taiwan under proposed section 894A. Furthermore, the bill would require that any provisions in such a tax agreement must conform with provisions customarily contained in U.S. bilateral income tax conventions, as exemplified by the 2016 U.S. Model Income Tax Convention, and any such tax agreement may not include elements outside the scope of the 2016 U.S. Model Income Tax Convention.
6. Changes in threshold for reporting on Forms 1099-NEC and 1099-MISC for payments by a business for services performed by an independent contractor or subcontractor and for payments of remuneration for services from $600 to $1,000 and for payments of direct sales from $5,000 to $1,000.
Under current law, a person engaged in a trade or business who makes certain payments aggregating $600 or more in any taxable year to a single recipient in the course of the trade or business is required to report those payments to the IRS. This requirement applies to fixed or determinable payments of income as well as nonemployee compensation, generally reported on Form 1099-MISC, Miscellaneous Information, or Form 1099-NEC, Nonemployee Compensation. In addition, any service recipient engaged in a trade or business and paying for services is required to file a return with the IRS when aggregate payments to a service provider equal $600 or more in a calendar year. Additionally, a seller who sells at least $5,000 in the aggregate of consumer products to a buyer for resale anywhere other than a permanent retail establishment is required to report the sale to the IRS.
The bill proposes to set the reporting threshold for the payments described in the preceding paragraph at $1,000 for a calendar year (indexed for inflation for calendar years after 2024), effective for payments made after December 31, 2023.
7. New Enforcement Provisions with Respect to COVID-Related Employee Retention Tax Credit
Under current law, an eligible employer can claim a refundable Employee-Retention Tax Credit (ERTC) against applicable employment taxes for calendar quarters in 2020 and 2021 in an amount equal to a percentage of the qualified wages with respect to each employee of such employer for such calendar quarter. The percentage is 50% of qualified wages paid after March 12, 2020, and before January 1, 2021, and 70% of qualified wages for calendar quarters beginning after December 31, 2020, and before January 1, 2022, subject to a maximum amount of wages per employee. An eligible employer may claim the ERTC on an amended employment tax return (Form 941-X) if the employer did not claim (or seeks to correct) the credit on its original employment tax return. For tax year 2020, an amended employment tax return must be filed by April 15, 2024, and for tax year 2021, by April 15, 2025.
The bill proposes to end the period for filing ERTC claims for both 2020 and 2021 as of January 31, 2024. Additionally, the bill would impose large penalties on any “COVID–ERTC promoter” who aids or abets the understatement of a tax liability or who fails to comply with certain due diligence requirements relating to the filing status and amount of certain credits. A COVID–ERTC promoter is defined as any person that provides aid, assistance or advice with respect to an affidavit, refund, claim or other document relating to an ERTC or to eligibility or to the calculation of the amount of the credit, if the person (x) charges or receives a fee based on the amount of the ERTC refund or credit, or (y) meets a gross receipts test. The proposed penalties for an ERTC promoter that aids and abets understatement of a tax liability is the greater of $200,000 ($10,000 in the case of an ERTC promoter that is a natural person) or 75% of the gross income of the ERTC promoter from providing aid, assistance, or advice with respect to a return or claim for ERTC refund or a document relating to the return or claim.
Furthermore, the bill would extend the statute of limitations period on assessment for all quarters of the ERTC to six years from the later of (1) the date on which the original return for the relevant calendar quarter is filed, (2) the date on which the return is treated as filed under present-law statute of limitations rules, or (3) the date on which the credit or refund with respect to the ERTC is made.

2024 FLSA Checklist for Employers in the Manufacturing Industry

Wage and hour issues continue to challenge most employers, especially those in the manufacturing industry. The manufacturing industry tends to be more process- and systems-oriented and generally employ many hourly workers who are not exempt from overtime pay under the Fair Labor Standards Act (FLSA).

It is imperative manufacturers ensure they are on the right side of legal compliance. Indeed, non-compliance can trigger audits, investigations, and litigation — all of which can be disruptive, time-consuming, and costly for manufacturers. The U.S. Department of Labor (DOL), which is charged with investigating alleged violations under the FLSA, assesses hundreds of millions of dollars each year in penalties to employers.

With the new year, we offer this short (by no means exhaustive) checklist of common pay issues the manufacturing industry:

1. Donning and Doffing

The FLSA requires employers to compensate non-exempt employees for all time worked, as well as pay the minimum wage and overtime compensation. Whether pre-shift (donning) and post-shift (doffing) activities are included as compensable time is not always clear. Activities including putting on or taking off protective gear, work clothes, or equipment could be compensable time under the FLSA depending on the unique facts of the situation. At bottom, to be compensable, such activities must be found to be integral and indispensable to the “principal activity” of the employer’s work under the FLSA and the Portal-to-Portal Act of 1947.

Courts differ on whether time spent donning and doffing is compensable because these issues often implicate mixed questions of law and fact. Moreover, collective bargaining agreements can affect whether time spent changing clothes and washing is compensable for the purposes of determining hours worked for minimum wage and overtime calculations under the FLSA. Employers should carefully review their policies to ensure the compensability of pre-shift or post-shift activities being performed by non-exempt employees.

2. Rounding Time

Accurately keeping up with time worked by non-exempt employees is critical to compliance with the FLSA. Further, employees forgetting to clock-in and clock-out timely is a persistent issue. While the FLSA allows employers to round employees’ clock-in and clock-out times rather than pay by the minute, it is generally unnecessary (and not recommended) with today’s sophisticated time clocking systems. If employers choose to round time, they must ensure that any rounding policy is neutral on its face and neutral in practice — that is, the policy rounds both in the favor of the employer and the employee at roughly an equal weight. For employers engaging in rounding, audits are crucial as even a facially neutral rounding policy that, in practice, has disproportionately benefited the employer and cumulatively underpays the employees can be found to violate the FLSA.

3. Meal Breaks

Under the FLSA, employers must compensate for short rest breaks that last 20 minutes or less. However, employers do not have to compensate employees for a bona fide meal break, which ordinarily lasts at least 30 minutes. Importantly, an employee must be completely relieved from work duties during this uncompensated time and cannot be interrupted by work (even for a short time). Indeed, some courts have held that, where a meal break has been interrupted by work, the entire meal break (not just the time when work was performed) becomes compensable.

To ensure compliance under these rules, employers should have policies and practices in place so that employees can take an uninterrupted meal break. Employers should also have a well-communicated reporting system in place for employees to record any interrupted meal break to ensure the employee is compensated for the meal break or, when possible, a new meal break is scheduled.

4. Regular Rate

A common and incorrect assumption many employers make is that overtime pay under the FLSA is calculated at one-and-a-half times a non-exempt employee’s hourly rate when they work more than 40 hours in a workweek. In fact, the FLSA states overtime is calculated based on the non-exempt employee’s “regular rate” of pay. The FLSA requires that all payments to employees for hours worked, services rendered, or performance be included in the “regular rate” unless the payment is specifically excluded in the law. Thus, any non-discretionary bonuses, shift differential pay, and other incentive payments such as commissions should be included in the regular rate of pay calculation for purposes of calculating overtime under the FLSA.
This is relatively easy when a bonus is paid during a week where the non-exempt employees work more than 40 hours, but it can become complicated when the additional pay is paid on a monthly or quarterly basis. In this scenario, the payment must be averaged out over that longer time period to determine the regular rate such that overtime can be properly calculated. Thus, employers should review their payment processes on the front end to ensure compliance before any small errors or omissions (quite literally) multiply out of control.

Finally, state wage laws should always be top of mind as well. Employers should work with their employment counsel to ensure compliance with all state wage requirements.

February 2024 Visa Bulletin: Advancement of Priority Dates for Employer-Based Petitions Remains Minimal

U.S. Citizenship and Immigration Services (USCIS) and the U.S. Department of State have not indicated significant advancement in the priority dates for employer-based immigrant petitions, continuing the fiscal year (FY) 2024 trend of long wait times for immigrant visas.

Quick Hits

USCIS and the State Department reported minimal movement in the EB-2 and EB-3 categories for Mexico, the Philippines, and all other chargeability areas except India and China.
USCIS authorized use of the Dates for Filing chart.
Continued limitations on immigrant visas particularly impact chargeability areas of India and China where employers and individuals had hoped to take advantage of shorter wait times in the EB-1 category.

The February 2024 Visa Bulletin

USCIS will continue to use the Dates for Filing chart in the February 2024 Visa Bulletin in determining eligibility for I-485, Application to Register Permanent Residence or Adjust Status, filings. The Dates for Filing chart reflects priority dates anticipated to become current during the fiscal year, whereas the Final Action Dates chart reflects priority dates considered current and available for the specific month. This means that while an applicant may file the I-485 based on the Dates for Filing chart, the application will not be adjudicated at least until the applicant’s priority date becomes current on the Final Action Dates chart.

In summary, there is no advancement in final action dates for China and India in all employment-based categories except that the Other Workers category for India has advanced by one month. For all other chargeabilities, Mexico, and the Philippines, the EB-1 category remains current, the EB-2 category advances by fifteen days, the EB-3 category advances by one month, and the EB-4 Certain Religious Workers category remain the same.

The Final Action Dates chart is shown below.

Source: U.S. Department of State, February 2024 Visa Bulletin

USCIS has confirmed its continued use of the Dates for Filing chart for adjustment of status filing purposes. However, the dates for filing remain the same as in the January 2024 Visa Bulletin in all categories for all countries.

The Dates for Filing chart for employment-based categories follows below.

Source: U.S. Department of State, February 2024 Visa Bulletin

Impacts of Immigrant Visa Backlogs, Slow Movement, and Retrogression: EB-1 Considerations

In the January 2024 Visa Bulletin, we saw some forward movement in certain employment-based categories, particularly in the EB-1 category. This movement aligned with the hope that all EB categories, including the EB-1 category, would advance significantly or at least steadily. USCIS and the State Department had also indicated holding this hope in the August 2023 Visa Bulletin. However, the Visa Bulletins for October 2023, November 2023, December 2023, and January 2024 showed slow movement, with the Visa Bulletin for February 2024 indicating little to no movement at all.

The lack of advancement in priority dates particularly impacts those chargeable to India and China. While those chargeable to India and China have historically experienced long green card wait times in the common categories of EB-2 and EB-3, many employers and individuals choose to pursue the EB-1 category in hopes to secure the green card in a much shorter time. The benefits to an employer if a sponsored employee receives a green card earlier is that there is a reduction in immigration costs and a reduction in time that an employer would be beholden to immigration regulations. The employer can also rest assured that their talent can be retained beyond the limits of a nonimmigrant visa status.

However, despite the retrogression of the EB-1 categories for China and India, there still stands a benefit that visa availability wait times for the EB-1 category remains much faster than any other category. Employers considering pursuing the EB-1 process for their employees may want to note that the EB-1 holds an extremely high standard. The EB-1 is generally reserved for highly talented individuals who have risen to the top of their field or individuals who will work in a managerial capacity in addition to meeting other narrow criteria.

Multistate Coalition Supports EPA’s Proposed Revisions to the Safer Choice Standard

As reported in our December 5, 2023, memorandum, the U.S. Environmental Protection Agency (EPA) proposed updates to the Safer Choice Standard on November 14, 2023, that include a name change to the Safer Choice and Design for the Environment (DfE) Standard (Standard), an update to the packaging criteria, the addition of a Safer Choice certification for cleaning service providers, a provision allowing for preterm partnership termination under exceptional circumstances, and the addition of several product and functional use class requirements. 88 Fed. Reg. 78017. On January 16, 2024, California Attorney General Rob Bonta announced that, alongside a coalition of 12 attorneys general, he submitted a comment letter that:

Supports EPA’s proposed revisions to its Safer Choice Standard;
Recommends that EPA not allow products with plastic primary packaging to use the Safer Choice label or DfE logo;
Recommends that if EPA does allow products with plastic primary packaging to use the label and logo, EPA should prohibit the use of chemical recycling in meeting the proposed standard’s plastic packaging recycled content requirements; and
Calls on EPA to exclude any products or packaging that contain any per- and polyfluoroalkyl substances (PFAS), “whether intentionally introduced or not.”

2023 Cybersecurity Year In Review

2023 was another busy year in the realm of data event and cybersecurity litigations, with several noteworthy developments in the realm of disputes and regulator activity. Privacy World has been tracking these developments throughout the year. Read on for key trends and what to expect going into the 2024.

Growth in Data Events Leads to Accompanying Increase in Claims

The number of reportable data events in the U.S. in 2023 reached an all-time high, surpassing the prior record set in 2021. At bottom, threat actors continued to target entities across industries, with litigation frequently following disclosure of data events. On the dispute front, 2023 saw several notable cybersecurity consumer class actions concerning the alleged unauthorized disclosure of sensitive personal information, including healthcare, genetic, and banking information. Large putative class actions in these areas included, among others, lawsuits against the hospital system HCA Healthcare (estimated 11 million individuals involved in the underlying data event), DNA testing provider 23andMe (estimated 6.9 million individuals involved in the underlying data event), and mortgage business Mr. Cooper (estimated 14.6 million individuals involved in the underlying data event).

JPML Creates Several Notable Cybersecurity MDLs

In 2023 the Judicial Panel on Multidistrict Litigation (“JPML”) transferred and centralized several data event and cybersecurity putative class actions. This was a departure from prior years in which the JPML often declined requests to consolidate and coordinate pretrial proceedings in the wake of a data event. By way of example, following the largest data breach of 2023—the MOVEit hack affecting at least 55 million people—the JPML ordered that dozens of class actions regarding MOVEit software be consolidated for pretrial proceedings in the District of Massachusetts. Other data event litigations similarly received the MDL treatment in 2023, including litigations against Samsung, Overby-Seawell Company, and T‑Mobile.

Significant Class Certification Rulings

Speaking of the development of precedent, 2023 had two notable decisions addressing class certification. While they arose in the cybersecurity context, these cases have broader applicability in other putative class actions. Following a remand from the Fourth Circuit, a judge in Maryland (in a MDL) re-ordered the certification of eight classes of consumers affected by a data breach suffered by Mariott. See In Re: Marriott International, Inc., Customer Data Security Breach Litigation,No. 8:19-md-02879, 2023 WL 8247865 (D. Md. Nov. 29, 2023). As explained here on PW, the court held that a class action waiver provision in consumers’ contracts did not require decertification because (1) Marriott waived the provision by requesting consolidation of cases in an MDL outside of the contract’s chosen venue, (2) the class action waiver was unconscionable and unenforceable, and (3) contractual provisions cannot override a court’s authority to certify a class under Rule 23.

The second notable decision came out of the Eleventh Circuit, where the Court of Appeals vacated a district court’s certification of a nationwide class of restaurant customers in a data event litigation. See Green-Cooper v. Brinker Int’l, Inc., No. 21-13146, 73 F. 4th 883 (11th Cir. July 11, 2023). In a 2-1 decision, a majority of the Court held that only one of the three named plaintiffs had standing under Article III of the U.S. Constitution, and remanded to the district court to reassess whether the putative class satisfied procedural requirements for a class. The two plaintiffs without standing dined at one of the defendant’s restaurants either before or after the time period that the restaurant was impacted by the data event, which the Fourth Circuit held to mean that any injury the plaintiffs suffered could not be traced back to defendant.

Standing Challenges Persist for Plaintiffs in Data Event and Cybersecurity Litigations

Since the Supreme Court’s TransUnion decision in 2021, plaintiffs in data breach cases have continued to face challenges getting into or staying in federal court, and opinions like Brinker reiterate that Article III standing issues are relevant at every stage in litigation, including class certification. See, also, e.g., Holmes v. Elephant Ins. Co., No. 3:22-cv-00487, 2023 WL 4183380 (E.D. Va. June 26, 2023) (dismissing class action complaint alleging injuries from data breach for lack of standing). Looking ahead to 2024, it is possible that more data litigation plays out in state court rather than federal court—particularly in the Eleventh Circuit but also elsewhere—as a result.

Cases Continue to Reach Efficient Pre-Trial Resolution

Finally in the dispute realm, several large cybersecurity litigations reached pre-trial resolutions in 2023. The second-largest data event settlement ever—T-Mobile’s $350 million settlement fund with $150 million in data spend—received final approval from the trial court. And software company Blackbaud settled claims relating to a 2020 ransomware incident with 49 states Attorneys General and the District of Columbia to the tune of $49.5 million. Before the settlement, Blackbaud was hit earlier in the year with a $3 million fine from the Securities and Exchange Commission. The twin payouts by Blackbaud are cautionary reminders that litigation and regulatory enforcement on cyber incidents often go-hand-in-hand, with multifaceted risks in the wake of a data event.

FTC and Cybersecurity

Regulators were active on the cybersecurity front in 2023, as well. Following shortly after a policy statement by the Health and Human Resources Office of Civil Rights policy Bulletin on use of trackers in compliance with HIPAA, the FTC announced settlement of enforcement actions against GoodRx, Premom, and BetterHelp for sharing health data via tracking technologies with third parties resulting in a breach of Personal Health Records under the Health Breach Notification Rule. The FTC also settled enforcement actions against Chegg and Drizly for inadequate cybersecurity practices which led to data breaches. In both cases, the FTC faulted the companies for failure to implement appropriate cybersecurity policies and procedures, access controls, and securely store access credentials for company databases (among other issues).

Notably, in Drizly matter, the FTC continued ta trend of holding corporate executives responsible individually for his failure to implement “or properly delegate responsibility to implement, reasonable information security practices.” Under the consent decree, Drizly’s CEO must implement a security program (either at Drizly or any company to which he might move that processes personal information of 25,000 or more individuals and where he is a majority owner, CEO, or other senior officer with information security responsibilities).

SEC’s Focus on Cyber Continues

The SEC was also active in cybersecurity. In addition to the regulatory enforcement action against Blackbaud mentioned above, the SEC initiated an enforcement action against a software company for a cybersecurity incident disclosed in 2020. In its complaint, the SEC alleged that the company “defrauded…investors and customers through misstatements, omissions, and schemes that concealed both the Company’s poor cybersecurity practices and its heightened—and increasing—cybersecurity risks” through its public statements regarding its cybersecurity practices and risks. Like the Drizly matter, the SEC charged a senior company executive individually—in this case, the company’s CISO—for concealing the cybersecurity deficiencies from investors. The matter is currently pending. These cases reinforce that regulators will continue to hold senior executives responsible for oversight and implementation of appropriate cybersecurity programs.

Notable Federal Regulatory Developments

Regulators were also active in issuing new regulations on the cybersecurity front in 2023. In addition to its cybersecurity regulatory enforcement actions, the FTC amended the GLBA Safeguards Rule. Under the amended Rule, non-bank financial institutions must provide notice to notify the FTC as soon as possible, and no later than 30 days after discovery, of any security breach involving the unencrypted information of 500 or more consumers.

Additionally, in March 2024, the SEC proposed revisions to Regulation S-P, Rule 10 and form SCIR, and Regulation SCI aimed at imposing new incident reporting and cybersecurity program requirements for various covered entities. You can read PW’s coverage of the proposed amendments here. In July, the SEC also finalized its long-awaited Cybersecurity Risk Management and Incident Disclosure Regulations. Under the final Regulations, public companies are obligated to report regarding material cybersecurity risks, cybersecurity risk management and governance, and board of directors’ oversight of cybersecurity risks in their annual 10-K reports. Additionally, covered entities are required to report material cybersecurity incidents within four business days of determining materiality. PW’s analysis of the final Regulations are here.

New State Cybersecurity Regulations

The New York Department of Financial Services also finalized amendments to its landmark Cybersecurity Regulations in 2023. In the amended Regulations, NYDFS creates a new category of companies subject to heightened cybersecurity standards: Class A Companies. These heightened cybersecurity standards would apply only to the largest financial institutions (i.e., entities with at least $20 million in gross annual revenues over the last 2 fiscal years, and either (1) more than 2,000 employees; or (2) over $1 billion in gross annual revenue over the last 2 fiscal years). The enhanced requirements include independent cybersecurity audits, enhanced privileged access management controls, and endpoint detection and response with centralized logging (unless otherwise approved in writing by the CISO). New cybersecurity requirements for other covered entities include annual review and approval of company cybersecurity policy by a senior officer or the senior governing body (i.e., board of directors), CISO reporting to the senior governing body, senior governing body oversight, and access controls and privilege management, among others. PW’s analysis of the amended NYDFS Cybersecurity Regulations is here.

On the state front, California Privacy Protection Agency issued draft cybersecurity assessment regulations as required by the CCPA. Under the draft regulations, if a business’s “processing of consumers’ personal information presents significant risk to consumers’ security”, that business must conduct a cybersecurity audit. If adopted as proposed, companies that process a (yet undetermined) threshold number of items of personal information, sensitive personal information, or information regarding consumers under 16, as well as companies that exceed a gross revenue threshold will be considered “high risk.” The draft regulations outline detailed criteria for evaluating businesses’ cybersecurity program and documenting the audit. The draft regulations anticipate that the audit results will be reported to the business’s board of directors or governing body and that a representative of that body will certify that the signatory has reviewed and understands the findings of the audit. If adopted, businesses will be obligated to certify compliance with the audit regulations to the CPPA. You can read PW’s analysis of the implications of the proposed regulations here.

Consistent with 2023 enforcement priorities, new regulations issued this year make clear that state and federal regulators are increasingly holding senior executives and boards of directors responsible for oversight of cybersecurity programs. With regulations explicitly requiring oversight of cybersecurity risk management, the trend toward holding individual executives responsible for egregious cybersecurity lapses is likely to continue into 2024 and beyond.

Looking Forward

2023 demonstrated “the more things change, the more they stay the same.” Cybersecurity litigation trends were a continuation the prior two years. Something to keep an eye on in 2024 remains the potential for threatened individual officer and director liability in the wake of a widespread cyberattack. While the majority of cybersecurity litigations filed continue to be brought on behalf of plaintiffs whose personal information was purportedly disclosed, shareholders and regulators will increasingly look to hold executives responsible for failing to adopt reasonable security measures to prevent cyberattacks in the first instance.

Needless to say, 2024 should be another interesting year on the cybersecurity front. This is particularly so for data event litigations and for data developments more broadly.

Corporate Transparency Act Requires Disclosure of Information Regarding Beneficial Owners to FinCEN

The new year brings the most expansive disclosure requirements for U.S. business entities since the Depression. Starting January 1, 2024, U.S. companies and foreign companies operating in the United States will be required to report their beneficial owners and principal officers to the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) pursuant to the Corporate Transparency Act (CTA) adopted as part of the 2021 National Defense Authorization Act, unless subject to specific exemptions.

Who Is Required to Report?
The CTA’s filing requirements (31 CFR 1010.380(c)(1)) apply to both domestic reporting companies and foreign reporting companies.

Domestic reporting companies are corporations, limited liability companies and any other entity registered to do business in any state or tribal jurisdiction by the filing of a document with the secretary of state or similar official.
Foreign reporting companies are business entities formed under the law of a foreign country that are registered to do business in any state or tribal jurisdiction by the filing of a document with the secretary of state or similar official

The CTA provides 23 categories of exemption. The following types of entities are not required to file reports with FinCEN:

Large Operating Companies
This exemption applies to entities that (1) have 20 people or more full time employees in the United States, (2) have gross revenue (or sales) in excess of $5 million on their prior year’s tax return and (3) have a physical office in the United States.
Securities Reporting Issuers
Governmental Authorities
Banks
Credit Unions
Depository Institution Holding Companies
Money Services Businesses
Brokers and Dealers in Securities
Securities Exchanges and Clearing Agencies
Other Exchange Act Registered Entities

Investment Companies and Investment Advisers
Venture Capital Fund Advisers
Insurance Companies
State-Licensed Insurance Producers
Commodity Exchange Act Registered Entities
Accounting Firms
Public Utilities
Financial Market Utilities
Pooled Investment Vehicles
Tax-Exempt Entities
Entities Assisting a Tax-Exempt Entity
Subsidiaries of Certain Exempt Entities
Inactive Entities

It is worth noting that the definition of reporting companies is not limited to corporations and limited liability companies. Limited partnerships, professional service entities and other entities may qualify as reporting companies and, if so, are required to comply with the CTA’s reporting requirements.

How Does a Company Comply?
FinCEN requires affected companies to file beneficial ownership information reports (BOI Reports) using an electronic filing system. See the BOI E-Filing System.

What Information Should Be Reported?
Reporting companies must identify beneficial owners in their BOI Reports.

Beneficial owners are defined as individuals who directly or indirectly (1) exercise substantial control over a reporting company or (2) own or control at least 25 percent of ownership interests of a reporting company. Ownership interests covered by the CTA may include profits interests, convertible instruments, options and contractual arrangements as well as equity securities. In addition, owners who hold their ownership interests jointly or through a trust, agent or other intermediary are also required to be identified – although minors are generally exempted from reporting obligations.

Senior officers (typically, the president, CEO, CFO, COO and officers who perform similar functions); individuals with the ability to appoint senior officers or a majority of the board of directors or a similar body; and anyone else who directs, determines or has substantial input to other important decisions of a reporting company also need to be identified in BOI Reports as individuals exercising substantial control over reporting companies.

Reporting companies created on or after January 1, 2024, also must identify “company applicants” in their BOI Reports. Company applicants are the individuals who filed the documents creating the reporting company and individuals primarily responsible for directing or controlling the filing of documents creating a reporting company.

BOI Reports must contain the following information regarding the reporting company:

Legal name
Any trade name or d/b/a name
Address of the company’s principal place of business in the United States
Jurisdiction of formation
Taxpayer Identification Number.

BOI Reports must contain the following information regarding each beneficial owner and company applicant:

Full legal name
Date of birth
Current address
Copy of a passport, driver’s license or other identification document.

Every person who files a BOI Report must certify the information contained is true, correct and complete.

Information contained in BOI Reports will not be available to the public. However, FinCEN is authorized to disclose such information to:

U.S. federal agencies engaged in national security, intelligence or law enforcement activity
With court approval, to certain other state or local law enforcement agencies
Non-U.S. law enforcement agencies at the request of a U.S. federal law enforcement agency, prosecutor or judge
With the consent of the reporting company, financial institutions and their regulators
Federal regulators in assessing financial institutions compliance with customer due diligence requirements
The U.S. Department of the Treasury for purposes including tax administration.

Is There a Fee?
No fee is required in connection with filing of BOI Reports.

When Do Companies Need to File?
U.S. and foreign reporting companies that were formed or registered to do business in the United States prior to January 1, 2024, must file their initial BOI Reports no later than January 1, 2025. U.S. and foreign reporting companies formed on or after January 1, 2024, must file their initial BOI Reports within 90 days of receipt of notice of formation.

Reporting companies are required to file updated reports with FinCEN within 30 days of occurrence of a change in any of the information contained in their BOI Reports.

What If There Are Changes or Inaccuracies in the Reported Information?
Inaccuracies in BOI Reports must be corrected within 30 days of the date a reporting company becomes aware of or had reason to know of such inaccuracy. FinCEN has indicated that there will be no penalties for filing inaccurate BOI Reports if such reports are corrected within 90 days of their filing.

What If a Company Fails to File?
The willful failure to report the information required by the CTA or filing fraudulent information under the CTA may result in civil or criminal penalties, including penalties of up to $500 per day as long as a violation continues, imprisonment for up to two years and a fine of up to $10,000. Senior officers of an entity that fails to file a required report may be held accountable for such failure.

If you have questions regarding the provisions of the CTA or its applicability to your company, you may go to the FinCEN website.

Updated Merger Guidelines Finalized

On December 18, 2023, the Federal Trade Commission (FTC) and the U.S. Department of Justice (DOJ) jointly issued a significantly revised version of the Merger Guidelines that describes the frameworks the enforcement agencies use when evaluating potential mergers.

The newly finalized Merger Guidelines are the result of a nearly two-year effort that involved both agencies soliciting public input via listening sessions, written comments, and workshops.

The agencies describe the new Merger Guidelines as necessary to address the modern economy and how firms now do business. The Merger Guidelines are broken into multiple sections: Guidelines 1–6 describe the frameworks the agencies use when attempting to identify a merger that the agencies believe raises a prima facie concern, while Guidelines 7–11 explain how to apply those frameworks in specific settings. The guidelines also identify evidence the agencies will consider to potentially rebut an inference of competitive harm. Finally, these guidelines include a discussion of the tools the agencies use when evaluating the relevant facts, the potential harm to competition, and how to define the relevant markets.

The Merger Guidelines are notable for signaling the FTC’s and DOJ’s desire to pursue a more aggressive enforcement agenda, specifically, by lowering the threshold at which proposed mergers will be deemed presumptively anticompetitive by those enforcement agencies. The new guidelines also seek to address relatively new concerns the agencies have identified, such as cross-market transactions and sequences of smaller transactions.

DOL Announces New Independent Contractor Rule

On January 9, 2024, the United States Department of Labor (“DOL”) announced a new rule, effective March 11, 2024, that could impact countless businesses that use independent contractors. The new rule establishes a six-factor analysis to determine whether independent contractors are deemed to be “employees” of those businesses, and thus imposes obligations on those businesses relating to those workers including: maintaining detailed records of their compensation and hours worked; paying them regular and overtime wages; and addressing payroll withholdings and payments, such as those mandated by the Federal Insurance Contributions Act (“FICA” for Social Security and Medicare), the Federal Unemployment Tax Act (“FUTA”), and federal income tax laws. Further, workers claiming employee status under this rule may claim entitlement to coverage under the businesses’ group health insurance, 401(k), and other benefits programs.

The DOL’s new rule applies to the federal Fair Labor Standards Act (“FLSA”) which sets forth federally established standards for the protection of workers with respect to minimum wage, overtime pay, recordkeeping, and child labor. In its prefatory statement that accompanied the new rule’s publication in the Federal Register, the DOL noted that because the FLSA applies only to “employees” and not to “independent contractors,” employees misclassified as independent contractors are denied the FLSA’s “basic protections.”

Accordingly, when the new rule goes into effect on March 11, 2024, the DOL will use its new, multi-factor test to determine whether, as a matter of “economic reality,” a worker is truly in business for themself (and is, therefore, an independent contractor), or whether the worker is economically dependent on the employer for work (and is, therefore, an employee).

While the DOL advises that additional factors may be considered under appropriate circumstances, it states that the rule’s six, primary factors are: (1) whether the work performed provides the worker with an opportunity to earn profits or suffer losses depending on the worker’s managerial skill; (2) the relative investments made by the worker and the potential employer and whether those made by the worker are to grow and expand their own business; (3) the degree of permanence of the work relationship between the worker and the potential employer; (4) the nature and degree of control by the potential employer; (5) the extent to which the work performed is an integral part of the potential employer’s business; and (6) whether the worker uses specialized skills and initiative to perform the work.

In its announcement, the DOL emphasized that, unlike its earlier independent contractor test which accorded extra weight to certain factors, the new rule’s six primary factors are to be assessed equally. Nevertheless, the breadth and impreciseness of the factors’ wording, along with the fact that each factor is itself assessed through numerous sub-factors, make the rule’s application very fact-specific. For example, through a Fact Sheet the DOL recently issued for the new rule, it explains that the first factor – opportunity for profit or loss depending on managerial skill – primarily looks at whether a worker can earn profits or suffer losses through their own independent effort and decision making, which will be influenced by the presence of such factors as whether the worker: (i) determines or meaningfully negotiates their compensation; (ii) decides whether to accept or decline work or has power over work scheduling; (iii) advertises their business, or engages in other efforts to expand business or secure more work; and (iv) makes decisions as to hiring their own workers, purchasing materials, or renting space. Similar sub-factors exist with respect to the rule’s other primary factors and are explained in the DOL’s Fact Sheet.

The rule will likely face legal challenges by business groups. Further, according to the online newsletter of the U.S. Senate Health, Education, Labor and Pensions Committee, its ranking member, Senator Bill Cassidy, has indicated that he will seek to repeal the rule. Also, in the coming months, the United States Supreme Court is expected to decide two cases that could significantly weaken the regulations issued by federal agencies like the DOL’s new independent contractor rule, Loper Bright Enterprises v. Raimondo and Relentless Inc. v. U.S. Dept. of Commerce. We will continue to monitor these developments.1

In the meantime, we recommend that businesses engaging or about to engage independent contractors take heed. Incorrect worker classification exposes employers to the FLSA’s significant statutory liabilities, including back pay, liquidated damages, attorneys’ fees to prevailing plaintiffs, and in some case, fines and criminal penalties. Moreover, a finding that an independent contractor has “employee” status under the FLSA may be considered persuasive evidence of employee status under other laws, such as discrimination laws. Additionally, existing state law tests for determining employee versus independent contractor status must also be considered.

1 The DOL’s independent contractor rule is not the only new federal agency rule being challenged. On January 12, 2024, the U.S. House of Representatives voted to repeal the NLRB’s recently announced joint-employer rule, which we discussed in our Client Alert of November 10, 2023.

Eric Moreno contributed to this article.

OSHA and NLRB Set Forth MOU to Strengthen Protections for the Health and Safety of Workers: A 2024 Outlook

On October 31, 2023, the National Labor Relations Board (NLRB) and Occupational Safety and Health Administration (OSHA) entered into a Memorandum of Understanding (MOU) to strengthen their interagency partnership. The purpose of this partnership is to establish a process for information sharing, referrals, training, and outreach between the agencies. Additionally, the agencies wish to address certain anti-retaliation and whistleblowing issues through this collaboration.

Since 1975, the NLRB and OSHA have engaged in cooperative efforts during investigations. According to NLRB General Counsel Jennifer Abruzzo and OSHA Assistant Secretary Doug Parker, the MOU seeks to strengthen this interoffice coordination in an effort to provide greater protection for workers to speak out on unsafe working conditions without fear of punishment or termination.

Exchange of Information

According to the MOU, the NLRB and OSHA “may share, either upon request or upon the respective agency’s own initiative, any information or data that supports each agency’s enforcement mandates, whether obtained during an investigation or through any other sources.” This information may include complaint referrals and information in complaint or investigative files. The MOU notes that this information will be shared only if it is relevant or necessary to the recipient agency’s enforcement responsibilities and ensures that the sharing of information is compatible with the purposes of the agency that is collecting the records.

For example, if OSHA learns during an investigation that there are potential victims of unfair labor practices who have not filed a complaint with the NLRB, OSHA will explain the employees’ rights and provide them with the NLRB’s phone number and web address. Additionally, if an employee files with OSHA an untimely complaint of retaliation, OSHA may then advise the employee to file a complaint with the NLRB, because the NLRB has a six-month time limit for filing such complaints whereas OSHA’s time limit is only 30 days. As a result, employers may be facing both agencies during an investigation.

Coordinated Investigations and Enforcement

The NLRB and OSHA will determine whether to conduct coordinated investigations and inspections in order to facilitate appropriate enforcement actions. If coordinated investigations occur and there are overlapping statutory violations, each agency may take relevant enforcement actions. In practice, employers should assume that if either agency is conducting an investigation into alleged retaliation, that agency will consider involving the other.

Takeaways for Employers

Heading into 2024, employers can expect to see more interagency coordination between the NLRB and OSHA during investigations. While the two agencies remain separate, there is a clear entanglement of enforcement action as the NLRB seeks to increase federal agency collaboration. As such, employers may presume that information collected by one agency will be provided to the other. As the agencies seek to increase worker protection across the board, employers will want to ensure that their management personnel are trained and up-to-date on the anti-retaliation and whistleblowing provisions of the Occupational Safety and Health Act and the National Labor Relations Act.

United States | Roundup: Immigration Policies Update in Final Weeks of 2023

Federal agencies announced several important changes to immigration programs in the last two weeks of 2023, including the details of a new domestic visa renewal program, the extension of interview waiver authorities and premium processing fee hikes. For those who missed any of the announcements, here’s a roundup of key developments:

Domestic visa renewal: The State Department will allow a limited number of H-1B holders to renew their visas in the United States under a new pilot program, the details of which were published Dec. 21, 2023. The pilot will begin Jan. 29 and will be open to 20,000 H-1B visa holders whose previous visas were approved in certain time frames by U.S. visa processing posts in Canada and India. Read BAL’s full news alert here.
Interview waiver authorities: On Dec. 21, 2023, the State Department announced that it would extend interview waiver authorities for certain nonimmigrant visa applicants. Under the updated policy, which took effect Jan. 1, consular officers will have the authority to waive interviews for (1) first-time H-2 visa applicants and (2) other nonimmigrant visa applicants who were previously issued a nonimmigrant visa in any classification (other than a B visa) and are applying within 48 months of their most recent nonimmigrant visa’s expiration date. Applicants renewing a nonimmigrant visa in the same classification within 48 months of the prior visa’s expiration date continue to be eligible for an interview waiver as well. Read BAL’s full news alert here.
Premium processing fees: U.S. Citizenship and Immigration Services will increase premium processing fees on Feb. 26. Under a regulation published Dec. 28, 2023, premium processing fees will increase by about 12% to account for inflation. Read BAL’s full news alert here.
Schedule A input: On Dec. 20, 2023, the Department of Labor asked for public input on whether to revise its list of Schedule A job classifications that do not require permanent labor certification. Read BAL’s news alert here.
F and M student nonimmigrant classifications: USCIS issued policy guidance Dec. 20, 2023, regarding the F and M student nonimmigrant classifications, including the agency’s role in adjudicating applications for employment authorization, change of status, extension of stay and reinstatement of status for these students and their dependents in the United States. Find USCIS’ updated policy guidance here. Read BAL’s news alert here.

Additional Information: The Biden administration’s top regulatory priorities on employment-based immigration in 2024 include H-1B and H-2 modernization, fee hikes and changes to the green card process, according to the Department of Homeland Security’s regulatory agenda published in December.

Category: Administrative & Regulatory

Tax Relief for American Families and Workers Act of 2024

Like this: