December 2024 Legal News: Law Firm News and Mergers, Industry Awards and Recognition, DEI and Women in Law

Thank you for reading the National Law Review’s legal news roundup, highlighting the latest law firm news! As the country enters the final month of the year, the legal industry does not appear to be slowing down. Please read below for the latest in law firm news and industry expansion, legal industry awards and recognition, and DEI and women in the legal field.

Law Firm News and Mergers

Ogletree, Deakins, Nash, Smoak & Stewart, P.C. announced that they are opening the firm’s 58th office in Baltimore. The office will be shared with Shawe Rosenthal, which will help strengthen both firms’ presence in the city.

The new office, which will open its doors on January 2, 2025, will be led by Parker Thoeni. An experience team of attorneys will be joining him, including shareholders Courtney AmelungPaul BurginChad HortonDarryl McCallumMike McGuireFiona OngMark Swerdlin and Veronica Yu Welsh, of counsel Gary SimplerEric HemmendingerStephen Shawe and Elizabeth Torphy-Donzella, and associates Evan ConderJordan Dunham and Jamie Salazer.

von Briesen & Roper, s.c. announced the addition of Erik M. Gustafson as an associate in the Litigation & Risk Management Practice Group in the firm’s Milwaukee office.

Mr. Gustafson will focus his practice on insurance coverage and analysis, first-party property coverage and bad faith counseling and claims. He received a J.D., magna cum laude, and a Certificate in Litigation Practice from Marquette University and a B.A., summa cum laude, from Creighton University.

Jake Oresick joined Tucker Arensberg, P.C. as a Senior Counsel attorney. He brings with him extensive experience in labor and employmentreal estateconstructioninsurancecommerical litigation and environmental law.

Mr. Oresick’s practice focuses on representing individuals, insurers and businesses in matters such as trade secrets, construction defects, breach of contract and insurance bad faith. His client-focused approach has shown a proven track-record of resolving complex disputes.

“We are excited to welcome Jake to the firm,” said Irving Firman, Managing Shareholder. “His legal skills and dedication will enhance our firm’s ability to provide exceptional litigation services.”

Legal Industry Awards and Recognition

Bradley Arant Boult Cummings LLP announced that four of their attorneys were named to Georgia Trend’s Legal Elite for 2024. The list recognizes lawyers from across 15 different fields.

Laura HesterStephen OplerSidney Welch and Scott Zweigel were recognized as among  the best in their respective fields. They were chosen based on nominations by members of the state bar who live in Georgia.

Ward and Smith, P.A. attorneys Grant OsborneWill Oden and Ken Gray are now recognized by the North Carolina State Bar Board of Legal Specialization as specialists in Employment Law. They are among the first twelve ever recognized in the state.

Ronald A. Christaldi, a partner at Shumaker, Loop & Kendrick, LLP and President/CEO of Shumaker Advisors Florida, was awarded the 2024 H.L. Culbreath Jr. Profile in Leadership Award by the Tampa Bay Chamber. It is the region’s most esteemed recognition for those whose leadership has impacted the community.

Mr. Christaldi has previously been named by Florida Trend Magazine as one of the top 100 lawyers in Florida and by the Tampa Bay Business Journal as one of the 100 most influential lawyers in the nation.

“Ron embodies the spirit of this award through his selfless contributions and unwavering commitment to making Tampa Bay a better place for all,” said former Tampa Mayor Bob Buckhorn, who currently serves as Executive Vice President and Principal U.S. Cities Practice for Shumaker Advisors Florida. “His leadership continues to inspire and create a lasting impact across our region.”

DEI and Women in Law

Barnes & Thornburg LLP announced that Dallas partner Ashley Deweese was named a 2024 Connect CRE Lawyers in Real Estate Award honoree for the Texas region. The award recognizes distinguished real estate attorneys.

Ms. Deweese focuses her practice on commercial real estate in the office, multifamily, hospitality, industrial, healthcare and retail arenas. She has broad experience in representing developers, borrowers, buyers and sellers in the development of property, as well as in dispositions and acquisitions.

Bracewell LLP partner Catherine D. Little was named by Hart Energy’s Oil & Gas Investor Magazine as one of its 2025 Influential Women in Energy. The platform recognizes women who have excelled in the oil and gas industry.

Ms. Little was recognized for her track record of helping clients excel during energy transition initiatives and regulatory requirements, as well as counseling clients on oil and gas pipeline compliance and enforcement matters.

She regularly manages large-scale confidential audits and investigations to assist clients in identifying legal risks, as well as preparing defenses to favorably resolve criminal investigation matters.

Moore & Van Allen announced that Wealth & Estate Planning Member Caitlin Horne was appointed to serve a two-year term as Chair of the Board of Directors for InReach, a nonprofit that provides services to individuals with developmental and intellectual disabilities.

Ms. Horne has served as a board member and volunteered with InReach for the past four years. She has held leadership positions as Chair of the Personnel Committee, as well as the Nominating Committee.

Old Standard, New Challenges: The NLRB Restores ‘Clear and Unmistakable Waiver’ Standard

The National Labor Relations Board issued its decision in Endurance Environmental Solutions, LLC, 373 NLRB No. 141 (2024), in which it announced a major precedential shift: a return to the “clear and unmistakable waiver” standard. This shift may make it more difficult for employers to make changes to employee working conditions without union approval.

This decision overturns the NLRB’s 2019 decision in MV Transportation, Inc., 368 NLRB No. 66 (2019), in which the NLRB jettisoned the long-standing “clear and unmistakable waiver” standard in favor of the more employer-friendly “contract-coverage” standard. Under the latter rule, an employer could make changes to workplace conditions–without engaging in collective bargaining–as long as those changes generally aligned with the management-rights clause of a collective bargaining agreement, even if the disputed employer action was not mentioned specifically in the contract’s text.

While the clear and unmistakable waiver rule might be familiar territory, an old standard can raise new challenges for employers.

Under this more stringent and labor-friendly standard, an employer may only make a unilateral change to workplace conditions if there is clear and unmistakable language in the collective bargaining agreement permitting the proposed action. In other words, an employer is now required to demonstrate that a union has given a “clear and unmistakable waiver” of its right to bargain over specific changes being implemented for its unilateral change to survive NLRB review.

The NLRB champions its return to this standard as one that better accomplishes the goals of the National Labor Relations Act: to promote industrial peace by “encouraging the practice and procedure of collective bargaining.” The NLRB touts this decision as more consistent with U.S. Supreme Court and NLRB precedent.

Employers negotiating collective bargaining agreements should carefully evaluate their management-rights provisions and consider whether those provisions are now insufficient to enable them to implement unilateral changes without bargaining.

Notably, with the upcoming change in presidential administrations, the effect of Environmental Solutions, LLC may be ephemeralIf (or when) the NLRB comprises a Republican majority, we may be in store for another seismic shift as the NLRB looks for more employer-friendly opportunities, like a potential return to the contract-coverage standard.

Today, the Board issued its decision in Endurance Environmental Solutions, LLC. and restored the “clear and unmistakable” waiver standard for evaluating employers’ contractual defenses to allegations that they have unlawfully changed the working conditions of union-represented employees without first giving the union notice and an opportunity to bargain.

Senate Subcommittee Holds Hearing on Public Health Impacts of PFAS Exposures

On December 5, 2024, the Senate Environment and Public Works (EPW) Subcommittee on Chemical Safety, Waste Management, Environmental Justice, and Regulatory Oversight held a hearing on “Examining the Public Health Impacts of PFAS Exposures.” The Subcommittee heard from the following witnesses (written testimony is not available at this time):

  • Laurel Schaider, Ph.D., Senior Scientist, Environmental Chemistry and Engineering, Silent Spring Institute;
  • Sue Fenton, Ph.D., Director of the Center for Human Health and the Environment, Professor of Biological Sciences, North Carolina State University; and
  • Michael D. Larrañaga, Ph.D., P.E., President and Managing Principal, R.E.M. Risk Consultants, on behalf of the American Industrial Hygiene Association (AIHA).

Schaider testified that there needs to be a comprehensive strategy to address all per- and polyfluoroalkyl substances (PFAS), including fluorinated polymers, as a class. Schaider described how the manufacture of PFAS can expose workers and nearby communities to PFAS and how the disposal of products that contain PFAS can contaminate the environment. Fenton offered a number of suggestions for possible legislation, including: limiting the production and use of PFAS; requiring health insurance companies to pay for PFAS testing in susceptible populations; phasing out PFAS in firefighting foams (FFF); requiring manufacturers to provide standards in purified forms of their PFAS; and requiring PFAS manufacturers to fund the development of safe destruction methods for PFAS. Larrañaga stated that PFAS are part of our critical infrastructure and are used in the manufacture of products such as semiconductors, electronics, medical equipment, pharmaceuticals, herbicides, insecticides, plastics, airplanes, automobiles, and buildings. Larrañaga urged that the use of PFAS be balanced against the risk of alternatives.

The hearing included discussion of the use of PFAS in consumer products, including non-stick pans and waterproof mascara, versus other products, such as cell phones and semiconductors. Schaider stated that the issue is not only non-essential uses of PFAS, as in cookware, but also the lifecycle of products that contain PFAS. There may be environmental contamination in communities where PFAS are manufactured, workers may be exposed during manufacture, and at the end of the lifecycle of the product, the PFAS could end up in a landfill or in emissions when incinerated.

During the hearing, Senator Roger Wicker (R-MS) asked whether all PFAS cause the same level of harm and noted the common definition of PFAS as “any compound containing at least one fully fluorinated carbon atom.” Larrañaga responded that although fluoropolymers contain one fully fluorinated carbon atom, they are less bioavailable than other PFAS of concern. There could be an issue if heating them, but by removing that use from the marketplace, instead of banning all PFAS, there would be no adverse effect to critical infrastructure or defense. Schaider stated that, to her knowledge, no PFAS is completely safe. According to Schaider, newer PFAS replacement chemicals raise many of the same health concerns. Schaider suggested that an essential uses framework could be used to identify where PFAS uses can be reduced immediately.

The hearing included discussion of the best way to move forward. Fenton noted that even for essential uses, there is potential exposure to the waste and that proper disposal is important. According to Fenton, labeling products with intentionally added PFAS would allow consumers to make more informed choices. Subcommittee Chair Jeff Merkley (D-OR) suggested that there may be product categories where labeling is more important because the contamination pathway is more significant. Merkley concluded that Congress should continue to explore how to reduce the risk of PFAS to citizens.

There is much discussion, seemingly everywhere, about PFAS, but no easy answers to the questions the Subcommittee considered. In a perfect world, PFAS would be comprehensively addressed as Schaider recommends, and all the unknowns about disposal, exposure, and toxicity would be known. But we do not live in that world, and many hard questions remain to be answered. The Subcommittee gets points for raising key issues, but did little to move the needle.

All eyes are now on the new kids in town — the incoming Trump Administration and U.S. Environmental Protection Agency (EPA) Administrator-Designate Lee Zeldin. We expect in 2025 a decidedly different focus on PFAS, but beyond this, much remains to be seen.

Corporate Transparency Act— Nationwide Injunction Update and Key Considerations

On December 3, 2024, the U.S. District Court for the Eastern District of Texas issued a nationwide injunction halting enforcement of the Corporate Transparency Act (“CTA”).1 In response, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (“FinCEN”) confirmed it will comply with the injunction while also appealing the decision. FinCEN also states on its website that reporting companies are not required to file beneficial ownership information during the injunction and will not incur penalties for failing to do so.

For so long as the injunction remains in place, it is safe not to make CTA filings. On the other hand, it is impossible to know whether and when the injunction may be lifted. And if it is lifted, there may be limited time for filings to be made before penalties accrue. Filers who choose not to file now may wish to assemble their information so they are ready to file on short notice should the need arise. We also recommend that filers who do not have particular privacy or other concerns consider filing notwithstanding the injunction to ensure that they are compliant no matter the outcome of the lawsuit.Ultimately, the decision to file is a personal and business decision that will vary by client.

Below are key points to consider:

  1. If you have already applied for a FinCEN Identifier, your sensitive information is already submitted, so there is less risk in proceeding with the filing.
  2. If privacy and business concerns are minimal, consider filing now to avoid a potential rush if the injunction is lifted and filings become due immediately.
  3. For entities formed in 2024 with a non-12/31 filing deadline, consider filing if privacy is less of a concern. Although FinCEN may provide an extension in these situations, penalties remain steep and the outcome is uncertain.

1See Texas Top Cop Shop, Inc., et al. v. Merrick Garland, et al.

2We previously published some advisories on the general application of the CTA and its specific application for those with entities for estate planning purposes and the rules and guidelines are largely unchanged.

Litigants Beware: Unjust Enrichment v. Quantum Meruit

The distinction between unjust enrichment claims and quantum meruit claims have long bedeviled courts and practitioners. In Core Finance Team Affiliates v. Maine Medical Center, the Law Court provided important guidance regarding the differences between these claims while leaving open a difficult question relating to the implications of pursuing one claim but not the other.

Core Finance involved a suit by a contractor against hospitals relating to the provision of services for reimbursement submittals. The contractor asserted claims for breach of contract and unjust enrichment. After a jury concluded that the contractor failed to prove the existence of a contract, the court held a bench trial and awarded damages to the contractor for unjust enrichment.

The Law Court reversed the judgment on narrow grounds—namely, that the contractor failed to “prove the damages recoverable under either a quantum meruit theory or an unjust enrichment theory.” The Court concluded that, absent proof of conscious wrongdoing, “the appropriate measure of damages” for an unjust enrichment claim is the same as for a quantum meruit claim: “the market value of [defendant’s] uncompensated contractual performance.” The contractor had not presented evidence of the value of its services; rather, its evidence focused on the increase in reimbursement to the hospitals (i.e., the value to the defendants of the services). Thus, the record did not contain a sufficient basis for correctly determining damages.

Although this holding is of note in its own right, it was preceded by a particularly notable discussion of the differences between a quantum meruit claim and an unjust enrichment claim. The parties had disputed whether the trial court should have considered the unjust enrichment claim at all, absent any quantum meruit claim. The hospitals argued that the contractor had to exhaust its legal remedies by pursuing a quantum meruit claim before pursuing an unjust enrichment claim.

Discussing this issue, the Court emphasized that a quantum meruit claim involves “recovery for services or materials provided under an implied contract.” It thus involves enforcement of a promise, and is a legal remedy. An unjust enrichment claim, by contrast, does not involve an implied contract, but rather involves compelled performance “of a legal and moral duty to pay.” Unjust enrichment does not involve any express or implied promise, and is an equitable remedy.

The Court went on to observe that it had “never stated that an unjust enrichment claim involving the rendition of services cannot be adjudicated until after the court has rejected a quantum meruit claim involving the same services.” Importantly, it then acknowledged that this “premise can readily be inferred” for two reasons: (1) the limitation on the availability of equitable remedies if there is an adequate legal remedy, and (2) the primacy over contract over unjust enrichment in the remedial scheme, which requires determining whether an express contract exists before considering quantum meruit or unjust enrichment claims. The Court noted that equitable remedies should be granted “only when there is not an adequate legal remedy,” and that “the court need not consider unjust enrichment if quantum meruit is an adequate remedy.” Having said all that, however, the Court declined “to explore the dilemma further,” instead resolving the case on the damages issue.

The Court’s lengthy discussion is dicta, but it is important nevertheless. Although the Court did not hold that the failure to bring a quantum meruit claim barred an unjust enrichment claim, the Court walked right up to that line. Its language certainly is suggestive that it would so hold if it had to resolve the issue. As such, Core Finance is an important guidepost for litigants considering which claims to bring in the alternative to a breach of contract claim.

Trial Tactics: It Starts in Discovery

Trial preparation starts in discovery.

Yes, that statement seems a bit ridiculous – especially considering the fact that the majority of civil matters will never see a courtroom – but working a case backwards with trial prep as a starting point is truly the only way to ensure you are truly doing everything in your power to zealously protect your client’s interests and fully develop your client’s defenses in each case. This is especially important if the majority of your practice is within the same subset of law, such as toxic torts.

Embracing the “work backwards” approach has a few key benefits:

  1. It ensures that nothing will be missed or overlooked in discovery.
  2. It prepares you for the unexpected.
  3. It will ultimately save you time and effort down the line.

Thorough Discovery

The eve of trial is not the time to realize you still have questions about the allegations or facts in a case. Hindsight is always 20/20, and by working backwards you can ensure your path forward in a case is clear.

Preparing a trial cross of the witnesses offered for deposition forces you to conduct a more thorough examination during their deposition, which ensures that no questions are left unanswered – or worse, never even asked. You will also have to look at potential exhibits you would want to use at trial which will ensure discovery is fully developed with all the avenues explored.

If an expert deposition is coming up, drafting potential Daubert motions or motions in limine can help you to fully develop what you need to obtain from their deposition prior to same.

The Unexpected

During settlement negotiations, Plaintiff’s Counsel unexpectedly demands double what the case is worth, in an attempt to catch you off guard and force your hand as trial is approaching. However, since you have worked backwards for this case, you are ready to call their bluff or, better yet, go forward with trial on your client’s behalf.

By embracing this approach, you have already developed potential Daubert motions, motions in limine, and cross examinations of Plaintiff’s expected witnesses, which you used to draft your cross outlines for each deposition. Further, you also identified all the key documents you plan to use as exhibits and have already incorporated those in discovery or witness depositions.

Time Saved

It is true that some trial prep is best saved for right before trial – such as the final draft of your opening statement, cross examinations, etc. However, by taking the work backwards approach, the large portion of the substance – or the most time-consuming part – should already be completed for each trial task.

Arguably, it is an injustice to your client if you are not adequately preparing for all potential outcomes – no matter how unlikely or distant trial may be – but also just as important is it allows you to think outside the box and continue to develop your skills as a trial attorney.

Federal District Court Issues Nationwide Preliminary Injunction Barring Enforcement of Corporate Transparency Act

In Texas Top Cop Shop, Inc., et al. v. Garland, et al., a federal district court judge issued a nationwide preliminary injunction barring enforcement of the Corporate Transparency Act (“CTA”), finding that the CTA likely exceeds Congress’s powers. Therefore, at present, a reporting company is not obligated to comply with the CTA and the government is enjoined from enforcing the CTA’s reporting requirements. As expected, on December 5, 2024, the government entered a notice of appeal of the preliminary injunction and may still seek a stay of the preliminary injunction pending the appeal. If a stay is granted by the Court of Appeals, the reporting obligations would once again be in effect. The Court of Appeals could also decide to keep the preliminary injunction in place while an appeal is pending.

At this time, companies are not required to file Beneficial Ownership Information (“BOI”) reports, although they are free to do so should they choose. Indeed, the Financial Crimes Enforcement Network (“FinCEN”) issued guidance after the entry of the notice of appeal, stating as much: “In light of a recent federal court order, reporting companies are not currently required to file beneficial ownership information with FinCEN and are not subject to liability if they fail to do so while the order remains in force. However, reporting companies may continue to voluntarily submit beneficial ownership information reports.” (available at https://www.fincen.gov/boi.)

At present, it is unknown how long companies would be given to file if the preliminary injunction is stayed, modified or the law is ultimately upheld. However, FinCEN’s statement suggests that a reasonable extension of time for filing can be expected, though that is not a certainty. Of course, if the CTA is ultimately struck down, no filing would be required.

FCA Enforcement & Compliance Digest — Fall 2024 False Claims Act Newsletter

Welcome to the Fall 2024 issue of “FCA Enforcement & Compliance Digest,” our quarterly newsletter in which we compile essential updates on False Claims Act (FCA) enforcement trends, litigation, agency guidance, and compliance tips. We bring you the most recent and significant insights in an accessible format, concluding with our main takeaways — aka “And the Fox Says…” — on what you need to know.

In this Fall 2024 edition, we cover:

  1. Enforcement Trends: Manufacturers challenge AKS intent requirement as reflected in recent denials of OIG Advisory Opinion requests.
  2. Litigation Developments: Implications of Florida judge’s ruling that the FCA qui tam provision is unconstitutional.
  3. Compliance Corner: What health care companies need to know about AI.
  4. ICYMI: Federal Court Permits Investors to Resume Kickback Suit Against Teva

1. Enforcement Trends

Do Violations of the AKS Require a ‘Corrupt’ Intent? Manufacturers Challenge the OIG’s Interpretation of the Statute

In a series of recent lawsuits filed by the pharmaceutical industry against the US Department of Health and Human Services (HHS) Office of the Inspector General (OIG), manufactures are challenging the OIG’s interpretation of the Anti-Kickback Statue (AKS), arguing that violations of the statute require a corrupt intent. While courts have so far ruled in OIG’s favor, should a court accept this argument, the AKS regulatory landscape could be upended, providing health care providers and suppliers the opportunity to develop and implement arrangements that have historically been prohibited by the OIG.

The challenges to OIG’s interpretation of the AKS come in the context of OIG Advisory Opinion requests submitted by the manufacturers (or a related charity) proposing various forms of patient assistance programs under which the manufacturers or their related charities offer financial assistance to patients on the manufacturers’ products. The OIG denied each of the Advisory Opinion requests, finding that the proposed forms of patient assistance would constitute remuneration intended to induce patients to purchase the manufacturers’ drugs in violation of the AKS.

The OIG has consistently reiterated its opposition to manufacturer-operated patient assistance programs, with both the OIG’s 2005 Special Advisory Bulletin: Patient Assistance Programs for Medicare Part D Enrollees and the 2014 Supplemental Special Advisory Bulletin: Independent Charity Patient Assistance Programs noting that manufacturers cannot provide co-pay assistance to federal health care program beneficiaries, as doing so would constitute a kickback. However, the guidance also described the parameters under which independent charities can provide co-pay assistance, including assistance to federal health care program beneficiaries (i.e., Medicare beneficiaries). One of the key factors with respect to the operation of charitable patient assistance programs, is the independence of the charities operating the programs. While the independent charities are primarily funded by manufacturers, to be considered independent for OIG’s purposes, the charities must retain independence from donors. This means the donors cannot influence the design or operation of the patient assistance programs, and the programs cannot favor patients on the donor’s drug (e.g., assistance cannot be contingent upon the patient being prescribed a donor’s drug).

In three separate litigations, Pfizer Inc. v. United States Department of Health and Human ServicesVertex Pharmaceuticals Incorporated v. United States Department of Health and Human Services et al., and Pharmaceutical Coalition for Patient Access v. United States of America et al., manufacturers are challenging OIG’s long-held position that manufacturers cannot provide patient assistance, including co-pay assistance, to federal health care program beneficiaries. In doing so, the goal of the manufacturers is to provide assistance to patients, including co-pay support, either directly or through a charity that is not considered independent by OIG’s standards due to the relationship of the proposed charities to the manufactures and the level of influence by the manufacturers over the proposed charities. In each litigation, the manufacturer or, in the case of the Pharmaceutical Coalition for Patient Access (PCPA), the charity controlled by the manufacturers, is challenging an unfavorable Advisory Opinion issued by OIG concluding that the proposed patient assistance programs would constitute remuneration intended to induce patients to use a particular manufacturer’s products.

Under the arrangements proposed by Pfizer and PCPA, the proposed charities would be funded exclusively by manufacturers and would only provide support to patients on those funders’ drugs. In Pfizer’s Advisory Opinion request, the company proposed two potential co-pay assistance programs: (1) a direct co-pay assistance program and (2) a Pfizer-supported charity co-pay assistance program. Similar to the proposed Pfizer-supported charity co-pay assistance program, PCPA, an organization funded by manufacturers of Part-D-covered oncology drugs, proposed to create its own patient assistance program that would provide co-pay assistance to patients who meet certain qualifying criteria and then invoice each participating manufacturer for “the total amount of cost-sharing subsidies provided to eligible Part D enrollees.”

Vertex’s Advisory Opinion request focused on a proposed “Fertility Preservation Program” under which Vertex would pay fertility providers through a third-party vendor for the treatments provided to patients enrolled in the program. While this proposed program involved coverage of related treatment costs (i.e., the costs of the fertility treatments) rather than coverage of the co-pay costs associated with the Vertex drug itself, OIG nonetheless applied the same reasoning as in the Pfizer and PCPA opinions, concluding that the program would constitute remuneration to the patients in violation of the AKS.

In each litigation, the manufacturer (or, in the case of PCPA, the manufacturer-related charity) is challenging OIG’s position that the manufacturer’s subsidies constitute “remuneration” meant “to induce” patients to purchase manufactures’ products. The manufacturers argue that the AKS criminalizes conduct that “leads or tempts to the commission of crime” through “remuneration” that corrupts medical decision-making, as part of a quid pro quo transaction. In other words, according to the manufacturers, “to induce” requires a corrupt intent. Therefore, because the manufactures’ efforts to assist patients with meeting Medicare co-pay obligations or gaining access to Medicare-covered treatments (or treatments otherwise covered by the federal health care programs) are not done with malice or corrupt intent, such programs would not violate the AKS.

To date, no court has agreed with the manufacturers’ position. While Vertex is still pending trial in the District Court for the District of Columbia, the District Court for the Southern District of New York ruled against Pfizer, noting that “the law is clear that absent an express carve-out, the Anti-Kickback Statute prohibits any remuneration intended to induce someone to purchase or receive a drug or medical service.” Similarly, the District Court for the Eastern District of Virginia ruled against PCPA, concluding that HHS OIG’s “interpretation of the AKS adheres faithfully [to] the statute’s plain text, comports with its context, and does not offend its history.” On appeal, the Second Circuit affirmed the District Court’s decision in Pfizer, finding that an AKS violation does not require “corrupt intent.” Pfizer then appealed to the US Supreme Court, which denied certiorari. PCPA’s case is currently on appeal with the Fourth Circuit.

Should the Vertex court or a court of appeals agree that the statutory terms “induce” and “remuneration” should be construed more narrowly and require a corrupt intent to violate the AKS, AKS regulatory interpretation and much of OIG’s guidance could be called into question. Arrangements that have historically been viewed as suspect by the OIG could be considered compliant to the extent the parties lacked a corrupt intent to violate the law.

And the Fox Says… Ongoing efforts challenging OIG’s statutory interpretation of the AKS demonstrate manufacturers’ interests in narrowing the scope of prohibited activities under the law. Providers and suppliers should continue monitoring the ongoing litigation and any future efforts to challenge OIG’s interpretation of the AKS, as any judicial narrowing of the interpretation could provide opportunities to develop innovative arrangements that may be beneficial to patients. Regardless, developing compliant arrangements to benefit patients can be complicated, and legal counsel can help to ensure you remain apprised of all relevant developments and assist in structuring compliant arrangements.

2. Litigation Developments

What Is the FCA Without Its Qui Player? A Look Into Zafirov’s Future Implications and the Enforceability of the FCA Without a Qui Tam Device

As we previously discussed, a Florida federal district court recently held in Zafirov v. Florida Medical Associates LLC that the FCA qui tam provision is unconstitutional. The court reasoned that a relator who litigates an FCA lawsuit on behalf of the United States is not a properly appointed “officer” under Article II of the US Constitution and, thus, does not have the authority to serve in that position. This article examines several questions: What does FCA enforcement look like without a qui tam device? What questions did Zafirov leave unresolved? And what should one expect in the coming years as this issue is litigated on appeal and among other courts?

Can the government successfully enforce the FCA without a qui tam device? If, in the end, the qui tam provision is voided, that does not spell doom for the FCA. This is because the government still has the authority to file FCA actions itself and could hire many more attorneys to investigate and prosecute them. The government also has other mechanisms to entice whistleblowers to come out of the woodwork and inform it of wrongdoing. For example, recently, the US Department of Justice (DOJ) announced the “Corporate Whistleblower Awards Pilot Program.” This enforcement program compensates whistleblowers who inform the DOJ of original and truthful information concerning corporate misconduct. If the information leads to a successful forfeiture of over $1 million, the whistleblower is compensated. Currently, however, the program does not cover FCA claims. But the DOJ or US Congress could theoretically expand this program, or create a new one, to attract whistleblowers who have information concerning FCA violations. Under such a program, the government’s litigation of FCA claims would not be all that different from what happens currently. Rather than intervene in a meritorious FCA case brought by a relator, the government would file its own case based on information provided by a whistleblower. This would avoid the constitutional pitfalls identified in Zafirov. A post-qui tam landscape will certainly see fewer FCA claims being filed overall, but the government would likely file more FCA claims than it does now.

Still, many questions remain unresolved under Zafirov concerning the extent to which relator suits are constitutionally permissible. In Zafirov, the relator was litigating an FCA suit in which the United States declined to intervene. But what happens if the United States does intervene and takes over the case? Are those suits permissible? Does the relator act as an “officer” if her role is just limited to filing a lawsuit? Could the government get around Zafirov by intervening in more cases? Or are all FCA lawsuits filed by a relator invalid ab initio even if the government intervenes? If so, would Congress have to create a mechanism to appoint a relator as an officer for FCA purposes? In short, it is unclear how broadly Zafirov will be read. On one hand, it could be read to only apply to non-intervened cases. On the other hand, the very act of filing a complaint on behalf of the United States may require a constitutional appointment, and the government’s intervention would not cure that taint. These questions will remain unresolved until they are addressed by the Supreme Court.

Only time will tell what will happen as this issue percolates in the courts. Already, several circuit courts have upheld the constitutionality of the qui tam provisions. In the district courts located in circuits that have not yet addressed this issue, defendants are filing dispositive motions arguing that the relator’s appointment is unconstitutional. Though the decision in Zafirov is currently an outlier, it soon may not be as more courts consider arguments that rely on Zafirov’s reasoning.

And the Fox Says… Zafirov is significant because it may be the first blow to a significant enforcement mechanism on which the government heavily relies. But the qui tam provision’s fate is not set in stone. The relator in Zafirov will almost certainly appeal the decision to the Atlanta-based Eleventh Circuit Court of Appeals. That court’s decision may then be appealed to the Supreme Court. The appeals process for Zafirov may take years before the Supreme Court grants certiorari on the issue (if it does at all). In the meantime, the issue is not going away, and Zafirov is unlikely to be a one-off case. Those who are in the throes of an FCA investigation or litigation should raise this issue as a possible litigation risk or as an affirmative defense. The best possible time to raise this issue amid litigation is on a Rule 12(b)(6) motion to dismiss. Even if a case is past this point, Zafirov supports the position that such an argument is not waived, given that the issue goes to the relator’s very authority to bring the suit. So, defendants litigating a case brought by a relator should raise this issue as soon as possible. We at ArentFox Schiff will continue to monitor developments to help our clients navigate this ever-changing legal landscape.

3. Compliance Corner

AI Under the DOJ Microscope: How Health Care Companies Should Respond

Many companies, including health care companies, have incorporated artificial intelligence (AI) into their business practices. While historically, AI has largely been unregulated, that is starting to change. Recently, state governments have begun regulating the use of AI in the health care setting, as our colleagues summarized here regarding recently passed California legislation requiring health care facilities, clinics, and physician practices in the state to disclose the use of AI in communications regarding patient clinical information. Now, AI has the attention of the DOJ.

This past March, Deputy Attorney General Lisa Monaco indicated the DOJ’s interest in AI, stating at the American Bar Association’s 39th National Institute on White Collar Crime that “fraud using AI is still fraud.” Following Monaco’s statement, in September, the Criminal Division of the DOJ updated its Evaluation of Corporate Compliance Programs (ECCP) guidelines to require DOJ prosecutors to consider whether a company’s compliance program safeguards against misuse of AI or other emerging technologies. As a brief primer, the ECCP is a DOJ document that prosecutors use to evaluate the effectiveness of a corporate compliance program in determining whether to criminally charge a company. The document is published publicly and provides helpful insight into the DOJ’s expectations for companies as they build and implement their corporate compliance programs.

Under the updated guidance, the DOJ emphasizes that companies need to assess AI-related risks as part of their overall enterprise risk management systems. Specifically, a corporate compliance program must consider whether it has specific policies and procedures to prevent “any potential negative or unintended consequences” resulting from the use of AI in its business practices and compliance program. Additionally, a company should proactively conduct risk analyses of its use of AI and mitigate the potential for “deliberate or reckless misuse of technologies” by company insiders. Other key considerations are whether the company trains its employees on the use of AI, whether there is a baseline of human decision-making used to assess AI-generated content, and how the company implements accountability over the use of AI.

In its September update, the DOJ also revised a section of the ECCP, asking whether compliance personnel have access to relevant data sources to allow for “timely and effective monitoring and/or testing” of policies, controls, and transactions. A key consideration is whether the assets, resources, and technology available to compliance programs are comparable to those available elsewhere in the company. An imbalance in access to technology and resources may indicate a compliance program’s inability to detect and mitigate risks, particularly if a business unit is given unfettered access to AI tools while compliance lags behind.

Compliance officers at health care companies should take steps now to ensure that the implementation and use of AI within their organizations do not raise any compliance red flags. Consider the recent Texas Attorney General settlement with Pieces Technologies, a company that markets generative AI products, which resolved allegations that the company made misleading statements regarding the accuracy of its products. As part of the settlement, Pieces agreed to provide more explicit disclosures to customers related to how the company’s products should be used and the potential harm that could result from the products.

Providers using such technologies may encounter data privacy and security risks, including cybersecurity risks such as ransomware and malware attacks, bias and fairness concerns with respect to the training of the AI systems that may result in preference for a particular drug or treatment, and reliability and accountability concerns affecting a health care professional’s ability to provide patient care. With that being said, the DOJ could conduct investigations similar to the Pieces investigation against health care providers that use AI without considering these risks.

To help mitigate the risks associated with AI, including in the event of a DOJ investigation, compliance officers should be involved during all stages of discussions around AI initiatives, including through implementation and use. Compliance officers should ensure their companies have appropriate policies and procedures governing the use of AI once it is introduced to their organizations and provide training to employees both on the AI technology and on the policies governing its use. Finally, compliance officers should ensure they have the necessary access to AI systems to conduct compliance oversight measures. Such oversight measures may include assessing AI-related risks as part of their organization’s annual risk assessment, conducting AI-related auditing, and monitoring to help identify potential issues with the technology as they arise.

And the Fox Says… The DOJ’s AI-focused compliance guidance is a call to action for companies to proactively address the legal and regulatory implications of AI technologies, reminding them that the age of AI requires more than just innovation — it demands robust compliance strategies. Companies that conduct regular risk assessments of their practices must consider the use of AI, update policies and procedures to address its use, provide compliance teams with equal data access, and regularly update training on the lawful use of these technologies. Empowering compliance personnel and working with outside compliance experts to make these regular updates will put a company in a good position to meet these new standards. By embracing these guidelines, companies can mitigate legal and regulatory risks while leveraging the capabilities of AI technologies.

4. In Case You Missed It

Our most popular blog post from the last quarter: Federal Court Permits Investors to Resume Kickback Suit Against Teva.

CFPB Takes Aim at Data Brokers in Proposed Rule Amending FCRA

On December 3, the CFPB announced a proposed rule to enhance oversight of data brokers that handle consumers’ sensitive personal and financial information. The proposed rule would amend Regulation V, which implements the Fair Credit Reporting Act (FCRA), to require data brokers to comply with credit bureau-style regulations under FCRA if they sell income data or certain other financial information on consumers, regardless of its end use.

Should this rule be finalized, the CFPB would be empowered to enforce the FCRA’s privacy protections and consumer safeguards in connection with data brokers who leverage emerging technologies that became prevalent after FCRA’s enactment.

What are some of the implications of the new rule?

  • Data Brokers are Now Considered CRAs. The proposed rule defines the circumstances under which companies handling consumer data would be considered CRAs by clarifying the definition of “consumer reports.” The rule specifies that data brokers selling any of four types of consumer information—credit history, credit score, debt payments, or income/financial tier data—would generally be considered to be selling a consumer report.
  • Assembling Information About Consumers Means You are a CRA. Under the rule, an entity is a CRA if it assembles or evaluates information about consumers, including by collecting, gathering, or retaining; assessing, verifying, validating; or contributing to or altering the content of such information. This view is in step with the Bureau’s recent Circular on AI-based background dossiers of employees. (See our prior discussion here.)
  • Header Information is Now a Consumer Report. Under the proposed rule, communications from consumer reporting agencies of certain personal identifiers that they collect—such as name, addresses, date of birth, Social Security numbers, and phone numbers—would be consumer reports. This would mean that consumer reporting agencies could only sell such information (typically referred to as “credit header” data) if the user had a permissible purpose under the FCRA.
  • Marketing is Not a Legitimate Business Need. The proposed rule emphasizes that marketing is not a “legitimate business need” under the FCRA. Accordingly, CRAs could not use consumer reports to decide for an advertiser which consumers should receive ads and would not be able to send ads to consumers on an advertiser’s behalf.
  • Enhanced Disclosure and Consent Requirements. Under the FCRA, consumers can give their consent to share data. Under the proposed rule, the Bureau clarified that consumers must be provided a clear and conspicuous disclosure stating how their consumer report will be used. It would also require data brokers to acknowledge a consumer’s right to revoke their consent. Finally, the proposed rule requires a new and separate consumer authorization for each product or service authorized by the consumer. The Bureau is focused on instances where a customer signs up for a specific product or service, such as credit monitoring, but then receives targeted marketing for a completely different product.

Comments on the rule must be received on or before March 3, 2025.

Putting It Into Practice: With the release of the rule so close to the end of Director Chopra’s term, it will be interesting to see what a new administration does with it. We expect a new CFPB director to scale back and rescind much of the informal regulatory guidance that was issued by the Biden administration. However, some aspects of the data broker rule have bipartisan support so we may see parts of it finalized in 2025.

…But Wait, There’s More!

In 2025, eight additional U.S. state privacy laws will go into effect, joining California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia:

  1. Delaware Personal Data Privacy Act (effective Jan. 1, 2025)
  2. Iowa Consumer Data Protection Act (effective Jan. 1, 2025)
  3. Nebraska Data Privacy Act (effective Jan. 1, 2025)
  4. New Hampshire Privacy Act (effective Jan. 1, 2025)
  5. New Jersey Data Privacy Act (effective Jan. 15, 2025)
  6. Tennessee Information Protection Act (effective July 1, 2025)
  7. Minnesota Consumer Data Privacy Act (effective July 31, 2025)
  8. Maryland Online Data Privacy Act (effective Oct. 1, 2025)

While many of these eight state privacy laws are similar to current privacy laws in effect, there are some noteworthy differences that you will need to be mindful of heading into the New Year. Additionally, if you did not take Texas, Oregon and Montana into consideration in 2024, now is the time to do so!

Here is a roadmap of key considerations as you address these additional state privacy laws.

1. Understand What Laws Apply to Your Organization

To help determine what laws apply to your organization, you need to know the type and quantity of personal data you collect and how it is used. Each of the eight new state laws differ with their scope of application, as their thresholds vary based on the 1) number of state residents whose personal data controlled or processed and 2) the percentage of revenue a controller derives from the sale of personal data.

Delaware, New Hampshire, and Maryland have the lowest processing threshold – 35,000 consumers.

Nebraska’s threshold requirements are similar to Texas’ threshold requirements: the law applies to any organization that operates in the state, processes or sells personal data, and is not classified as a small business as defined by the U.S. Small Business Administration.

Notably, Maryland and Minnesota will apply to non-profits, except for those that fall into a narrow exception.

See our chart at the end of this article for ease of reference.

2. Identify Nuances

Organizations will need to pay particular attention to Maryland’s data minimization requirements as it is the strictest of the eight. Under Maryland, controllers will have unique obligations to meet, including the following:

  • Limit the collection or processing of sensitive data to what is “reasonably necessary and proportionate to provide or maintain a specific product or service requested by the consumer to whom the data pertains.”
  • Cannot process minors’ (under 18 years old) personal data for targeted advertising.
  • A broad prohibition on the sale of sensitive data.

If a controller engages in the sale of sensitive data, under Texas’ privacy law, which went into effect in July 2024, requires controllers to include the following notice in the same place your privacy policy is linked: “NOTICE: We may sell your sensitive personal data.” Similarly, if a controller engages in the sale of biometric personal data, the following notice must be included in the privacy policy: “NOTICE: We may sell your biometric personal data.” Nebraska requires companies to obtain opt-in consent before selling sensitive data. Maryland prohibits the sale of sensitive data altogether.

Minnesota takes data inventory a step further, requiring companies to maintain an inventory of personal data processed and document and maintain a description of the policies and procedures that they adopt to comply with the act.

3. Refine Privacy Rights Management

All states provide consumers with the right to access, delete, correct (except Iowa), and obtain a copy of their personal data.

Minnesota’s law provides consumers with two additional rights:

  1. The right to request the specific third parties to whom a business has disclosed personal data. Controllers may choose to respond to such a request either by providing the names of the specific third parties to which it has disclosed the consumer’s personal data or the name of third parties to which it has disclosed any personal data.
  2. The right to question the results of a controller’s profiling, to the extent it produced legal effects. Consumers will have the right to be informed of the reason that the profiling resulted in a specific decision and be informed of the actions the consumers may take to secure a different decision in the future.

Aligning with California and Utah, Iowa requires controllers to provide notice and an opportunity to opt out of the processing of sensitive data.

Interestingly, Iowa does not affirmatively establish a right to opt-out of online targeted advertising.

4. Conduct Data Privacy Impact Assessments

Most state privacy laws require controllers to conduct data privacy impact assessments for high-risk processing activities such as the sale of personal data, targeted advertising, profiling, and sensitive data processing. Nebraska, Tennessee, Minnesota, and Maryland follow Oregon by including any processing activities that present a heightened risk of harm to a consumer. Maryland takes this a step further in requiring the assessment include an assessment of each algorithm that is used.

5. Update Privacy Notices

All state privacy laws require privacy notices at the time of collecting personal data. It is essential you keep your privacy notice up-to-date and ensure (at a bare minimum) it covers data categories, third-party sharing, consumer privacy rights options, and opt-out procedures. Minnesota also requires controllers to provide a “reasonably accessible, clear, and meaningful” online privacy notice, posted on its homepage using a hyperlink that contains the word “privacy.”

As state privacy laws stack up, having a structured, adaptable, and principles-based approach paves the path to sustainable compliance.

Make 2025 the year your privacy program doesn’t just meet the minimum—it excels.

Click here to view the 2025 US State Privacy Laws Applicability Chart