Biden Administration Seeks to Clarify Patient Privacy Protections Post-Dobbs, Though Questions Remain

On July 8, two weeks following the Supreme Court’s ruling in Dobbs v. Jackson that invalidated the constitutional right to abortion, President Biden signed Executive Order 14076 (E.O.). The E.O. directed federal agencies to take various actions to protect access to reproductive health care services,[1] including directing the Secretary of the U.S. Department of Health and Human Services (HHS) to “consider actions” to strengthen the protection of sensitive healthcare information, including data on reproductive healthcare services like abortion, by issuing new guidance under the Health Insurance and Accountability Act of 1996 (HIPAA).[2]

The directive bolstered efforts already underway by the Biden Administration. A week before the E.O. was signed, HHS Secretary Xavier Becerra directed the HHS Office for Civil Rights (OCR) to take steps to ensure privacy protections for patients who receive, and providers who furnish, reproductive health care services, including abortions.[3] The following day, OCR issued two guidance documents to carry out this order, which are described below.

Although the guidance issued by OCR clarifies the privacy protections as they exist under current law post-Dobbs, it does not offer patients or providers new or strengthened privacy rights. Indeed, the guidance illustrates the limitations of HIPAA regarding protection of health information of individuals related to abortion services.

A.  HHS Actions to Safeguard PHI Post-Dobbs

Following Secretary Becerra’s press announcement, OCR issued two new guidance documents outlining (1) when the HIPAA Privacy Rule may prevent the unconsented disclosure of reproductive health-related information; and (2) best practices for consumers to protect sensitive health information collected by personal cell phones, tablets, and apps.

(1) HIPAA Privacy Rule and Disclosures of Information Relating to Reproductive Health Care

In the “Guidance to Protect Patient Privacy in Wake of Supreme Court Decision on Roe,”[4] OCR addresses three existing exceptions in the HIPAA Privacy Rule to the disclosure of PHI without an individual’s authorization and provides examples of how those exceptions may be applied post-Dobbs.

The three exceptions discussed in the OCR guidance are the exceptions for disclosures required by law,[5]  for purposes of law enforcement,[6] or to avert a serious threat to health or safety.[7]

While the OCR guidance reiterates that the Privacy Rule permits, “but does not require” disclosure of PHI in each of these exceptions,[8] this offers limited protection that relies on the choice of providers whether to disclose or not disclose the information. Although these exceptions are highlighted as “protections,” they expressly permit the disclosure of protected health information. Further, while true that the HIPAA Privacy Rule itself may not compel disclosure (but merely permits disclosure), the guidance fails to mention that in many situations in which these exceptions apply, the provider will have other legal authority (such as state law) mandating the disclosure and thus, a refusal to disclose the PHI may be unlawful based on a law other than HIPAA.

Two of the exceptions discussed in the guidance – the required by law exception and the law enforcement exception – both only apply in the first place when valid legal authority is requiring disclosure. In these situations, the fact that HIPAA does not compel disclosure is of no relevance. Certainly, when there is not valid legal authority requiring disclosure of PHI, then HIPAA prohibits disclosure, as noted as in the OCR guidance.  However, in states with restrictive abortion laws, the state legal authorities are likely to be designed to require disclosure – which HIPAA does not prevent.

For instance, if a health care provider receives a valid subpoena from a Texas court that is ordering the disclosure of PHI as part of a case against an individual suspected of aiding and abetting an abortion, in violation of Texas’ S.B. 8, then that provider could be held in contempt of court for failing to comply with the subpoena, despite the fact that HIPAA does not compel disclosure.[9] For more examples on when a covered entity may be required to disclose PHI, please see EBG’s prior blog: The Pendulum Swings Both Ways: State Responses to Protect Reproductive Health Data, Post-Roe.[10]

Notably, the OCR guidance does provide a new interpretation of the application of the exception for disclosures to avert a serious threat to health or safety. Under this exception, covered entities may disclose PHI, consistent with applicable law and standards of ethical conduct, if the covered entity, in good faith, believes the use or disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public. OCR states that it would be inconsistent with professional standards of ethical conduct to make such a disclosure of PHI to law enforcement or others regarding an individual’s interest, intent, or prior experience with reproductive health care. Thus, in the guidance, OCR takes the position that if a patient in a state where abortion is prohibited informs a health care provider of the patient’s intent to seek an abortion that would be legal in another state, this would not fall into the exception for disclosures to avert a serious threat to health or safety.  Covered entities should be aware of OCR’s position and understand that presumably OCR would view any such disclosure as a HIPAA violation.

(2) Protecting the Privacy and Security of Individuals’ Health Information When Using Personal Cell Phones or Tablets

OCR also issued guidance on how individuals can best protect their PHI on their own personal devices. HIPAA does not generally protect the privacy or security of health information when it is accessed through or stored on personal cell phones or tablets. Rather, HIPAA only applies when PHI is created, received, maintained, or transmitted by covered entities and business associates. As a result, it is not unlawful under HIPAA for information collected by devices or apps – including data pertaining to reproductive healthcare – to be disclosed without consumer’s knowledge.[11]

In an effort to clarify HIPAA’s limitation to protect such information, OCR issued guidance to protect consumer sensitive information stored in personal devices and apps.[12] This includes step-by-step guidance on how to control data collection on their location, and how to securely dispose old devices.[13]

Further, some states have taken steps to fill the legal gaps to varying degrees of success. For example, California’s Confidentiality of Medical Information Act (“CMIA”) extends to “any business that offers software or hardware to consumers, including a mobile application or other related device that is designed to maintain medical information.”[14] As applied, a direct-to-consumer period tracker app provided by a technology company, for example, would fall under the CMIA’s data privacy protections, but not under HIPAA. Regardless, gaps remain as the CMIA does not protect against a Texas prosecutor subpoenaing information from the direct-to-consumer app. Conversely, Connecticut’s new reproductive health privacy law,[15] does prevent a Connecticut covered entity from disclosing reproductive health information based on a subpoena, but Connecticut’s law does not apply to non-covered entities, such as a period tracker app. Therefore, even the U.S.’s most protective state privacy laws do not fill in all of the privacy gaps.

Alongside OCR’s guidance, the Federal Trade Commission (FTC) published a blog post warning companies with access to confidential consumer information to consider FTC’s enforcement powers under Section 5 of the FTC Act, as well as the Safeguards Rule, the Health Breach Notification Rule, and the Children’s Online Privacy Protection Rule.[16] Consistent with OCR’s guidance, the FTC’s blog post reiterates the Biden Administration’s goal of protecting reproductive health data post-Dobbs, but does not go so far as to create new privacy protections relative to current law.

B.  Despite the Biden Administration’s Guidance, Questions Remain Regarding the Future of Reproductive Health Privacy Protections Post-Dobbs

Through E.O. 14076, Secretary Becerra’s press conference, OCR’s guidance, and the FTC’s blog, the Biden Administration is signaling that it intends to use the full force of its authorities – including those vested by HIPAA – to protect patient privacy in the wake of Roe.

However, it remains unclear how this messaging will translate to affirmative executive actions, and how successful such executive actions would be. How far is the executive branch willing to push reproductive rights? Would more aggressive executive actions be upheld by a Supreme Court that just struck down decades of precedent permitting access to abortion? Will the Biden Administration’s executive actions persist if the administration changes in the next Presidential election?

Attorneys at Epstein Becker & Green are well-positioned to assist covered entities, business associates, and other companies holding sensitive reproductive health data understand how to navigate HIPAA’s exemptions and interactions with emerging guidance, regulations, and statutes at both the state and Federal levels.

Ada Peters, a 2022 Summer Associate (not admitted to the practice of law) in the firm’s Washington, DC office and Jack Ferdman, a 2022 Summer Associate (not admitted to the practice of law) in the firm’s Boston office, contributed to the preparation of this post. 



[1] 87 Fed. Reg. 42053 (Jul. 8, 2022), https://bit.ly/3b4N4rp.

[2] Id.

[3] HHS, Remarks by Secretary Xavier Becerra at the Press Conference in Response to President Biden’s Directive following Overturning of Roe v. Wade (June 28, 2022), https://bit.ly/3zzGYsf.

[4] HHS, Guidance to Protect Patient Privacy in Wake of Supreme Court Decision on Roe (June 29, 2022),  https://bit.ly/3PE2rWK.

[5] 45 CFR 164.512(a)(1)

[6] 45 CFR 164.512(f)(1)

[7] 45 CFR 164.512(j)

[8] Id.

[9] See Texas S.B. 8; e.g., Fed. R. Civ. Pro. R.37 (outlining available sanctions associated with the failure to make disclosures or to cooperate in discovery in Federal courts), https://bit.ly/3BjX4I2.

[10] EBG Health Law Advisor, The Pendulum Swings Both Ways: State Responses to Protect Reproductive Health Data, Post-Roe (June 17, 2022), https://bit.ly/3oPDegl.

[11] A 2019 Kaiser Family Foundation survey concluded that almost one third of female respondents used a smartphone app to monitor their menstrual cycles and other reproductive health data. Kaiser Family Foundation, Health Apps and Information Survey (Sept. 2019), https://bit.ly/3PC9Gyt.

[12] HHS, Protecting the Privacy and Security of Your Health Information When Using Your Personal Cell Phone1 or Tablet (last visited Jul. 26, 2022), https://bit.ly/3S2MNWs.

[13] Id.

[14] Cal. Civ. Code § 56.10, Effective Jan. 1, 2022, https://bit.ly/3J5iDxM.

[15] 2022 Conn. Legis. Serv. P.A. 22-19 § 2 (S.B. 5414), Effective July 1, 2022, https://bit.ly/3zwn95c.

[16] FTC, Location, Health, and Other Sensitive Information: FTC Committed To Fully Enforcing the Law Against Illegal Use and Sharing of Highly Sensitive Data (July 11, 2022), https://bit.ly/3BjrzNV.

©2022 Epstein Becker & Green, P.C. All rights reserved.

U.S. Government Pursues More Aggressive Action to Curb Espionage at Universities

The U.S. Governmental Accountability Office (GAO) thinks the FBI and other agencies are not doing enough to address the espionage threat on U.S. university campuses. It issued a report, “Enforcement Agencies Should Better Leverage Information to Target Efforts Involving U.S. Universities” on June 14, 2022, urging the FBI, the Department of Homeland Security, and the Department of Commerce to step up their outreach efforts to address the threat. Commerce, DHS, and FBI have all concurred with GAO’s recommendations. As a result, U.S. colleges and universities to face yet another organizational risk: an increase in campuses visits by export control and law enforcement agents.

The threat: U.S. export control laws consider the disclosure to non-U.S. persons of technology, software, or technical data to be exports, even if the disclosure occurs in the United States.

The overwhelming majority of non-U.S. persons studying and working at U.S. universities are not security risks and are valued members of their academic organizations. But U.S. intelligence agencies have long warned that foreign state actors actively acquire sensitive national security data and proprietary technology from U.S. universities.

A lot of the technology flow abroad from U.S. universities is perfectly legal, for two reasons: First, most university research, even in cutting-edge technology, is exempt from export controls under an exemption known as “fundamental research.” Second, even in cases where the fundamental research exemption does not apply, it takes time for the U.S. government agencies to add new items to the export control lists they enforce; namely the U.S. Munitions List, administered by the U.S. Department of State, Directorate of Defense Trade Controls; and the Commerce Control List, administered by the U.S. Department of Commerce, Bureau of Industry and Security.

But at the same time, either through inadvertence or outright espionage, unlawful transfers of technology to foreign nationals take place. A 2006 report by the U.S. Office of the National Counterintelligence Executive found that a significant quantity of export controlled U.S. technology is released to foreign nationals in the United States unlawfully each year.

Clash of values: One important issue for higher education in addressing trade controls compliance is cultural in nature. U.S. universities value open, collaborative environments which drive and accelerate innovation. For those institutions, the idea of cutting off information flows conflicts with those cultural norms. By contrast, U.S. export controls aim to protect U.S. national security by hindering the flow of sensitive information to potential adversaries.

GAO’s recommendations: The GAO report recommends that U.S. trade control agencies take more aggressive steps to curb foreign access to sensitive technologies at U.S. universities. The recommendations include steps to enhance risk assessment and ranking of universities by risk, and steps to increase agency cooperation in planning and conducting outreach visits to universities. As a direct result of this report, U.S. universities are going to receive more visits from U.S. government agents.

Practical takeaways:

  • Universities: Consider reevaluating your risk. The threat has evolved, and the U.S. government response is also evolving. A risk evaluation using modern tools such as a premortem can help you know where to dedicate resources to update your export control policies, procedures, and training. Any unlawful escape of technology or technical data are much more likely to be detected and punished under the new regime, in part based on the GAO report. Organizations have to evolve with the threat.
  • Students, faculty, and administrators: Consider how to jealously guard your academic freedom, but be wary of the national security risks of sensitive technology falling into the wrong hands.
  • Research sponsors: More and more U.S. university research is sponsored by U.S. companies and government agencies. Research sponsorship agreements play a major role in striving for both national security and academic goals of the U.S. university system. Sponsors need to be sensitive to how these agreements are drafted. Sponsors must be aware of the espionage threat to their technology. But imposing too many restrictions in the contract may undermine the applicability of the fundamental research exemption and hinder the success of the project.

Conclusion: In the face of organizational threats, institutions do best when they heed their values. In the realm of protecting sensitive technology, we must constantly evolve with the threat. But we must also continue to carefully balance national security considerations with our bedrock values of academic freedom and openness.

Copyright © 2022, Sheppard Mullin Richter & Hampton LLP.

Medicare CERT Audits and How to Prepare for Them

CERT audits are an unfortunate part of doing business for healthcare providers who accept Medicare. Failing the audit can mean the provider has to pay back overcharges and be subjected to increased scrutiny in the future. 

The best way to be prepared for a CERT audit is to have a compliance strategy in place and to follow it to the letter. Retaining a healthcare lawyer to craft that strategy is essential if you want to make sure that it is all-encompassing and effective. It can also help to hire independent counsel to conduct an internal review to ensure the compliance plan is doing its job.

When providers are notified of a CERT audit, hiring a Medicare lawyer is usually a good idea. Providers can fail the audit automatically if they do not comply with the document demands.

What is a CERT Audit?

The Comprehensive Error Rate Testing (CERT) program is an audit process developed by the Centers for Medicare and Medicaid Services (CMS). It is administered by private companies, called CERT Contractors, which work with the CMS. Current information about those companies is on the CMS website.

The CERT audit compares a sampling of bills for Medicare fee-for-service (FFS) payments, which were sent by the healthcare provider to its Medicare Administrative Contractor (MAC), against medical records for the patient. The audit looks at whether there is sufficient documentation to back up the claim against Medicare, whether the procedure was medically necessary, whether it was correctly coded, and whether the care was eligible for reimbursement through the Medicare program.

Every year, the CERT program audits enough of these FFS payments – generally around 50,000 per year – to create a statistically significant snapshot of inaccuracies in the Medicare program.

The results from those audits are reported to CMS. After appropriately weighing the results, CMS publishes the estimated improper payments or payment errors from the entire Medicare program in its annual report. In 2021, the CMS estimated that, based on data from the CERT audits, 6.26 percent of Medicare funding was incorrectly paid out, totaling $25.03 billion.

The vast majority of those incorrect payments, 64.1 percent, were marked as incorrect because they had insufficient documentation to support the Medicare claim. Another 13.6 percent were flagged as medically unnecessary. 10.6 percent was labeled as incorrectly paid out due to improper coding. 4.8 percent had no supporting documentation, at all. 6.9 percent was flagged as incorrectly paid for some other reason.

The CERT Audit Process

Healthcare providers who accept Medicare will receive a notice from a CERT Contractor. The notice informs the provider that it is being CERT audited and requests medical records from a random sampling of Medicare claims made by the provider to its MAC.

It is important to note that, at this point, there is no suspicion of wrongdoing. CERT audits examine Medicare claims at random.

Healthcare providers have 75 days to provide these medical records. Failing to provide the requested records is treated as an audit failure. In 2021, nearly 5 percent of failed CERT audits happened because no documentation was provided to support a Medicare claim.

Once the CERT Contractor has the documents, its team of reviewers – which consists of doctors, nurses, and certified medical coders – compares the Medicare claim against the patient’s medical records and looks for errors. According to the CMS, there are five major error categories:

  • No documentation

  • Insufficient documentation

  • Medical necessity

  • Incorrect coding

  • Other

Errors found during the CERT audit are reported to the healthcare provider’s MAC. The MAC can then make adjustments to the payments it sent to the provider.

Potential Repercussions from Errors Found in a CERT Audit

CERT audits that uncover errors in a healthcare provider’s Medicare billings lead to recoupments of overpayments, future scrutiny, and potentially even an investigation for Medicare fraud.

When the CERT audit results are brought to the MAC’s attention, the MAC will adjust the payments that it made to the provider. If the claims led to an overpayment, the MAC will demand that money back.

But Medicare Administrative Contractors (MACs) can go further than just demanding restitution for overpayments. They can also require prepayment reviews of all of the provider’s future Medicare claims, and can even suspend the provider from the program, entirely.

Worse still, CERT audits that uncover indications of Medicare fraud may be reported to a law enforcement agency for further review. This can lead to a criminal investigation and potentially even criminal charges.

Appealing a CERT Audit’s Results

With penalties so significant, healthcare providers should seriously consider hiring a lawyer to appeal the results of a CERT audit.

Appeals are first made to the MAC, requesting a redetermination of the audit results. The request for redetermination has to be made within 120 days of receiving notice of the audit results. However, if the provider wants to stop the MAC from recouping an overpayment in the meantime, it has to lodge the request within 30 days.

Providers can appeal the results of the redetermination, as well. They can request a reconsideration by a Qualified Independent Contractor within 180 of the redetermination, or within 60 days to stop the MAC’s recoupment process.

Providers who are still dissatisfied can appeal the case to an administrative law judge, then to the Medicare Appeals Council, and finally to a federal district court for review.

How to Handle a CERT Audit

The best way to handle and to prepare for a CERT audit is to hire Medicare audit attorneys to guide you through the process. It would also help to start internal audits within the company.

For providers who have been notified that they are under an audit, getting a lawyer on board immediately is essential. An experienced healthcare attorney can conduct a thorough internal investigation of the claims being audited. This can uncover potential problems before the audit points them out, giving the healthcare provider the time it needs to prepare its next steps.

Providers who are not currently being audited can still benefit from an attorney’s guidance. Whether by drafting a compliance plan that will prepare the provider for an inevitable CERT audit or by conducting an internal investigation to see how well a current compliance plan is performing, a lawyer can make sure that the provider is ready for an audit at a moment’s notice.

Taking these preventative steps soon is important. CMS put the CERT audit program on halt for the coronavirus pandemic, but that temporary hold was rescinded on August 11, 2020. While the CMS has reduced the sample sizes that will be used for its 2021 and 2022 reports, it will likely go back to the original numbers after that. Healthcare providers should prepare for this increased regulatory oversight appropriately.

Oberheiden P.C. © 2022

Monkeypox Outbreak Declared a Public Health Emergency

On August 4, 2022, the Biden administration declared the monkeypox outbreak a public health emergency. This comes at a time where the number of cases in the United States are rapidly rising and with cases found in almost every state. This declaration primarily affects testing and vaccination. The government’s focus on vaccination has primarily been on health care workers treating monkeypox patients and men who have sex with men. The declaration follows the World Health Organization’s (WHO) declaration last month of monkeypox as a public health emergency of international concern.

The information affecting the workplace is still somewhat limited. The U.S. Centers for Disease Control and Prevention (CDC) recommends that people with monkeypox remain isolated at home or in another location for the duration of the illness, which typically can last two to four weeks.

It is still not known if monkeypox can be spread through respiratory secretions. Accordingly, a well-fitting mask and frequent handwashing are likely important preventive measures.

Monkeypox can spread to anyone through close, personal, often skin-to-skin contact, including:

  • via direct contact with monkeypox rash, scabs, or body fluids from a person with monkeypox;

  • by touching objects, fabrics (clothing, bedding, or towels), and surfaces that have been used by someone with monkeypox; and

  • possibly through contact with respiratory secretions.

Employers may wish to educate their employees about monkeypox, including that employees with concerns should consult their physicians or health department, and may wish to inquire about testing and vaccination. Employers may also wish to consider how they will handle absences of up to one month, if remote work is not a possibility and/or when remote work is a possibility. Knowledge is often a way to avoid panic in the workplace and both the CDC and WHO have excellent fact sheets on their websites. State health agencies are likely to have them as well.

It may also be worthwhile to consider how to protect employees who are required to handle linens used by other people, people who are frequently in close contact with others for extended periods, or who come into close physical contact with others. For example, in its monkeypox congregate settings guidelines, the CDC recommends that personal protective equipment (PPE) be worn when cleaning the area where an individual with monkeypox has spent time.

The CDC also stated in its monkeypox congregate settings guidelines that “[e]mployers must comply with [the Occupational Safety and Health Administration’s] standards on Bloodborne Pathogens…, PPE…, Respiratory Protection…, and other requirements, including those established by state plans, whenever these requirements apply.”

Public health officials are emphasizing the fact that anyone can get monkeypox. The current outbreak is most prevalent among men having sex with other men, but can spread to anyone. Employers may want to stay attuned to any harassment or discrimination in the workplace resulting from misinformation about the disease.

Ogletree Deakins will continue to monitor and report on developments with respect to monkeypox.

© 2022, Ogletree, Deakins, Nash, Smoak & Stewart, P.C., All Rights Reserved.

Threats of Antitrust Enforcement in the Supply Chain

With steep inflation and seemingly constant disruptions in supply chains for all manner of goods, the Biden Administration has turned increasingly to antitrust authorities to tame price increases and stem future bottlenecks. These agencies have used the myriad tools at their disposal to carry out their mandate, from targeting companies that use supply disruptions as cover for anti-competitive conduct, to investigating industries with key roles in the supply chain, to challenging vertical mergers that consolidate suppliers into one firm. In keeping with the Administration’s “whole-of-government” approach to antitrust enforcement, these actions have often involved multiple federal agencies.

Whatever an entity’s role in the supply chain, that company can make a unilateral decision to raise its prices in response to changing economic conditions. But given the number of enforcement actions, breadth of the affected industries, and the government’s more aggressive posture toward antitrust enforcement in general, companies should tread carefully.

What follows is a survey of recent antitrust enforcement activity affecting supply chains and suggested best practices for minimizing the attendant risk.

Combatting Inflation as a Matter of Federal Antitrust Policy

Even before inflation took hold of the U.S. economy, the Biden Administration emphasized a more aggressive approach to antitrust enforcement. President Biden appointed progressives to lead the antitrust enforcement agencies, naming Lina Kahn chair of the Federal Trade Commission (FTC) and Jonathan Kanter to head the Department of Justice’s Antitrust Division (DOJ). President Biden also issued Executive Order 14036, “Promoting Competition in the American Economy.” This Order declares “that it is the policy of my Administration to enforce the antitrust laws to combat the excessive concentration of industry, the abuses of market power, and the harmful effects of monopoly and monopsony….” To that end, the order takes a government-wide approach to antitrust enforcement and includes 72 initiatives by over a dozen federal agencies, aimed at addressing competition issues across the economy.

Although fighting inflation may not have been the initial motivation for the President’s agenda to increase competition, the supply disruptions wrought by the COVID-19 pandemic and persistent inflation, now at a 40-year high, have made it a major focus. In public remarks the White House has attributed rising prices in part to the absence of competition in certain industries, observing “that lack of competition drives up prices for consumers” and that “[a]s fewer large players have controlled more of the market, mark-ups (charges over cost) have tripled.” In a November 2021 statement declaring inflation a “top priority,” the White House directed the FTC to “strike back at any market manipulation or price gouging in this sector,” again tying inflation to anti-competitive conduct.

The Administration’s Enforcement Actions Affecting the Supply Chain

The Administration has taken several antitrust enforcement actions in order to bring inflation under control and strengthen the supply chain. In February, the DOJ and FBI announced an initiative to investigate and prosecute companies that exploit supply chain disruptions to overcharge consumers and collude with competitors. The announcement warned that individuals and businesses may be using supply chain disruptions from the COVID-19 pandemic as cover for price fixing and other collusive schemes. As part of the initiative, the DOJ is “prioritizing any existing investigations where competitors may be exploiting supply chain disruptions for illicit profit and is undertaking measures to proactively investigate collusion in industries particularly affected by supply disruptions.” The DOJ formed a working group on global supply chain collusion and will share intelligence with antitrust authorities in Australia, Canada, New Zealand, and the UK.

Two things stand out about this new initiative. First, the initiative is not limited to a particular industry, signaling an intent to root out collusive schemes across the economy. Second, the DOJ has cited the initiative as an example of the kind of “proactive enforcement efforts” companies can expect from the division going forward. As the Deputy Assistant Attorney General for Criminal Enforcement put it in a recent speech, “the division cannot and will not wait for cases to come to us.”

In addition to the DOJ’s initiative, the FTC and other federal agencies have launched more targeted inquiries into specific industries with key roles in the supply chain or prone to especially high levels of inflation. Last fall, the FTC ordered nine large retailers, wholesalers, and consumer good suppliers to “provide detailed information that will help the FTC shed light on the causes behind ongoing supply chain disruptions and how these disruptions are causing serious and ongoing hardships for consumers and harming competition in the U.S. economy.” The FTC issued the orders under Section 6(b) of the FTC Act, which authorizes the Commission to conduct wide-ranging studies and seek various types of information without a specific law enforcement purpose. The FTC has in recent months made increasing use of 6(b) orders and we expect may continue to do so.

Amid widely reported backups in the nation’s ports, the DOJ announced in February that it was strengthening its partnership with and lending antitrust expertise to the Federal Maritime Commission to investigate antitrust violations in the ocean shipping industry. In a press release issued the same day, the White House charged that “[s]ince the beginning of the pandemic, these ocean carrier companies have been dramatically increasing shipping costs through rate increases and fees.” The DOJ has reportedly issued a subpoena to at least one major carrier as part of what the carrier described as “an ongoing investigation into supply chain disruption.”

The administration’s efforts to combat inflation through antitrust enforcement have been especially pronounced in the meat processing industry. The White House has called for “bold action to enforce the antitrust laws [and] boost competition in meat processing.” Although the DOJ suffered some well-publicized losses in criminal trials against some chicken processing company executives, the DOJ has obtained a $107 million guilty plea by one chicken producer and several indictments.

Most recently, the FTC launched an investigation into shortages of infant formula, including “any anticompetitive [] practices that have contributed to or are worsening this problem.” These actions are notable both for the variety of industries and products involved and for the multitude of enforcement mechanisms used, from informal studies with no law enforcement purpose to criminal indictments.

Preventing Further Supply-Chain Consolidation

In addition to exposing and prosecuting antitrust violations that may be contributing to inflation and supply issues today, the Administration is taking steps to prevent further consolidation of supply chains, which it has identified as a root cause of supply disruptions. DOJ Assistant Attorney General Kanter recently said that “[o]ur markets are suffering from a lack of resiliency. Among many other things, the consequences of the pandemic have revealed supply chain fragility. And recent geopolitical conflicts have caused prices at the pump to skyrocket. And, of course, there are shocking shortages of infant formula in grocery stores throughout the country. These and other events demonstrate why competition is so important. Competitive markets create resiliency. Competitive markets are less susceptible to central points of failure.”

Consistent with the Administration’s concerns with consolidation in supply chains, the FTC is more closely scrutinizing so-called vertical mergers, combinations of companies at different levels of the supply chain. In September 2021, the FTC voted to withdraw its approval of the Vertical Merger Guidelines published jointly with the DOJ the year before. The Guidelines, which include the criteria the agencies use to evaluate vertical mergers, had presumed that such arrangements are pro-competitive. Taking issue with that presumption, FTC Chair Lina Khan said the Guidelines included a “flawed discussion of the purported pro-competitive benefits (i.e., efficiencies) of vertical mergers” and failed to address “increasing levels of consolidation across the economy.”

In January 2022, the FTC and DOJ issued a request for information (RFI), seeking public comment on revisions to “modernize” the Guidelines’ approach to evaluating vertical mergers. Although the antitrust agencies have not yet published revised Guidelines, the FTC has successfully blocked two vertical mergers. In February, semiconductor chipmaker, Nvidia, dropped its bid to acquire Arm Ltd., a licenser of computer chip designs after two months of litigation with the FTC. The move “represent[ed] the first abandonment of a litigated vertical merger in many years.” Days later Lockheed Martin, faced with a similar challenge from the FTC, abandoned its $4.4 billion acquisition of missile part supplier, Aerojet Rocketdyne. In seeking to prevent the mergers, the FTC cited supply-chain consolidation as one motivating factor, noting for example that the Lockheed-Aerojet combination would “further consolidate multiple markets critical to national security and defense.”

Up Next? Civil Litigation

This uptick in government enforcement activity and investigations may lead to a proliferation of civil suits. Periods of inflation and supply disruptions are often followed by private plaintiff antitrust lawsuits claiming that market participants responded opportunistically by agreeing to raise prices. A spike in fuel prices in the mid-2000s, for example, coincided with the filing of class actions alleging that four major U.S. railroads conspired to impose fuel surcharges on their customers that far exceeded any increases in the defendants’ fuel costs, and thereby collected billions of dollars in additional profits. That case, In re Rail Freight Fuel Surcharge Antitrust Litigation, is still making its way through the courts. Similarly, in 2020 the California DOJ brought a civil suit against two multinational gas trading firms claiming that they took advantage of a supply disruption caused by an explosion at a gasoline refinery to engage in a scheme to increase gas prices. All indicators suggest that this trend will continue.

Reducing Antitrust Risk in the Supply Chain and Ensuring Compliance

Given the call to action for more robust antitrust enforcement under Biden’s Executive Order 14036 and the continued enhanced antitrust scrutiny of all manner of commercial activities, companies grappling with supply disruptions and rampant inflation should actively monitor this developing area when making routine business decisions.

As a baseline, companies should have an effective antitrust compliance program in place that helps detect and deter anticompetitive conduct. Those without a robust antitrust compliance program should consider implementing one to ensure that employees are aware of potential antitrust risk areas and can take steps to avoid them. If a company has concerns about the efficacy of its current compliance program, compliance reviews and audits – performed by capable antitrust counsel – can be a useful tool to identify gaps and deficiencies in the program.

Faced with supply chain disruptions and rampant inflation, many companies have increased the prices of their own goods or services. A company may certainly decide independently and unilaterally to raise prices, but those types of decisions should be made with the antitrust laws in mind. Given the additional scrutiny in this area, companies may wish to consider documenting their decision-making process when adjusting prices in response to supply chain disruptions or increased input costs.

Finally, companies contemplating vertical mergers should recognize that such transactions are likely to garner a harder look, and possibly an outright challenge, from federal antitrust regulators. Given the increased skepticism about the pro-competitive effects of vertical mergers, companies considering these types of transactions should consult antitrust counsel early in the process to help assess and mitigate some of the risk areas with these transactions.

© 2022 Foley & Lardner LLP

GAO Publishes Report on Technologies for PFAS Assessment, Detection, and Treatment

The U.S. Government Accountability Office (GAO) published a report on July 28, 2022, entitled Persistent Chemicals: Technologies for PFAS Assessment, Detection, and Treatment. GAO was asked to conduct a technology assessment on per- and polyfluoroalkyl substances (PFAS) assessment, detection, and treatment. The report examines the technologies for more efficient assessments of the adverse health effects of PFAS and alternative substances; the benefits and challenges of current and emerging technologies for PFAS detection and treatment; and policy options that could help enhance benefits and mitigate challenges associated with these technologies. GAO assessed relevant technologies; surveyed PFAS subject matter experts; interviewed stakeholder groups, including government, non-governmental organizations (NGO), industry, and academia; and reviewed key reports. GAO identified three challenges associated with PFAS assessment, detection, and treatment technologies:

  • PFAS chemical structures are diverse and difficult to analyze for health risks, and machine learning requires extensive training data that may not be available;
  • Researchers lack analytical standards for many PFAS, limiting the development of effective detection methods; and
  • The effectiveness and availability of disposal and destruction options for PFAS are uncertain because of a lack of data, monitoring, and guidance.

GAO developed the following three policy options that could help mitigate these challenges:

  • Promote research: Policymakers could support development of technologies and methods to more efficiently research PFAS health risks. This policy option could help address the challenge of limited information on the large number and diversity of PFAS, as well as a lack of standardized data sets for machine learning;
  • Expand method development: Policymakers could collaborate to improve access to standard reference samples of PFAS and increase the pace of method and reference sample development for PFAS detection. This policy option could help address the challenges of a lack of validated methods in media other than water, lack of analytical standards, and cost, which all affect researchers’ ability to develop new detection technologies; and
  • Support full-scale treatment: Policymakers could encourage the development and evaluation of full-scale technologies and methods to dispose of or destroy PFAS. This policy option could help address the challenges of cost and efficiency of disposal and destruction technologies and a lack of guidance from regulators.

GAO notes that these policy options involve possible actions by policymakers, which may include Congress, federal agencies, state and local governments, academia, and industry.

©2022 Bergeson & Campbell, P.C.

USDA To Declare Salmonella An Adulterant in Some Raw Poultry

  • On August 1, the USDA’s FSIS announced that it will declare Salmonella an adulterant in breaded and stuffed raw chicken products. Breaded and stuffed raw chicken products will be considered adulterated when they exceed 1 colony forming unit (CFU) of Salmonella per gram. Products that exceed the limit would be subject to regulatory action. FSIS believes the limit of 1 CFU/gram will significantly reduce the risk of illness from consuming such products.
  • Breaded and stuffed raw chicken products have been associated with up to 14 food safety outbreaks and approximately 200 illnesses since 1998. The products at issue are those found in the freezer section and that appear to be cooked, but are only heat-treated to set the batter or breading; the products contain raw poultry. FSIS has found that continual efforts to improve product labeling have not reduced consumer illnesses.
  • FSIS is expected to publish a notice in the Federal Register in the fall and will be seeking public comments on whether a different standard for adulteration (i.e., zero tolerance or one based on specific serotypes) would be more appropriate, an implementation plan, and a verification testing program.
  • This announcement is part of FSIS’ effort to reduce Salmonella illnesses associated with poultry. In October 2021, USDA announced that it was reevaluating its Salmonella control strategy. USDA plans to present a proposed framework for a new comprehensive strategy to reduce Salmonella illnesses attributable to poultry in October and convene a public meeting to discuss in November.
© 2022 Keller and Heckman LLP

NLRB To Begin Partnering With DOJ To Combat Collusion

The National Labor Relations Board and The Department of Justice joined forces to sign a memorandum of understanding (“MOU”) between the two entities. The MOU follows President Biden’s Executive Order in 2021 aimed at increasing competition in the economy. The NLRB and DOJ plan to coordinate in order to ensure workers are able to freely exercise their rights and to protect competitive labor markets.

According to the DOJ, this new partnership will allow the two agencies to “share information on potential violations of the antitrust and labor laws, collaborate on new policies and ensure that workers are protected from collusion and unlawful employer behavior.” The two agencies plan on greater coordination in information sharing, enforcement activity and training. Furthermore, the two agencies will now refer potential violations that they discover in their own investigations to each other.

For employers, this continues the trend of the federal government stepping up their investigatory and enforcement actions.

© Polsinelli PC, Polsinelli LLP in California

Estate Planning Considerations That Apply to Nearly Everyone

This article contains core information about the vital estate planning measures that almost all North Carolinians should have in place. 

Why You Need an Estate Plan

Estate planning is not just for affluent individuals.  While good estate planning can lead to desirable financial outcomes under the right circumstances, estate planning in its most basic form involves implementing the legal steps and directives that are necessary to ensure that your health and your assets are managed properly in the event of incapacity and death.

Everyone should consider:

  • Do you want to make sure that your family has the legal authority to direct and take part in your medical care if you become ill?
  • Do you care whether your assets will pass to your spouse, children, or other beneficiaries after your death?
  • Do you want to avoid a costly and uncertain court proceeding if you, your spouse, or your adult child becomes mentally incapacitated?
  • Do you have minor children or grandchildren, and specific desires about how they would be cared for in the event of your death?
  • Do you care about your finances and affairs becoming part of the public record when you die?

If your answer to any of the these questions is “yes,” then you likely need an estate plan.

Foundational Estate Planning Documentation

The following documents are the foundation of any good estate plan.

  • Last Will and Testament. A simple Will directs the disposition of a person’s assets and names someone to handle final affairs, in the event of death.  In the absence of a Last Will and Testament, the disposition of your assets may be controlled by state law, and the result may be much different from what you intended.
  • Revocable Trust. A revocable trust can help ensure that the management and disposition of your assets is more private and efficient during your lifetime and at death.
  • Durable Power of Attorney. A durable power of attorney typically names a spouse, adult child, or other individual(s) of your choosing to step in and handle your financial and legal affairs when you are unable due to incapacity or absence.
  • Health Care Power of Attorney. A health care power of attorney is a document that nominates a trusted person (usually a family member) to make health care decisions in the event of your incapacity.  Without this document, decisions about your medical treatment may be made by the attending physician or might involve petitioning the court for a guardianship – an expensive and cumbersome process.
  • Living Will. A living will addresses medical decisions and directives related to end-of-life care.
  • HIPAA Authorization. The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) protects an adult’s private medical information from being released to third parties without the patient’s consent.  Without a valid HIPAA authorization on file, a doctor or medical provider legally cannot, and frequently will not, discuss the patient’s medical information with family members.

Ownership and Beneficiary Designations

An essential component to planning for death involves reviewing the way that your assets and accounts are structured.  Asset ownership and account-specific beneficiary designations can supersede and undermine even the most carefully-drafted estate planning documentation.  Unfortunately, these aspects are often overlooked, and unintended consequences ensue.  Having the advice of an attorney with significant experience in estate planning and administration is the best way to ensure that your assets and your estate plan will work hand in hand.

Changes in Circumstances

If you already have an estate plan in place, that’s great.  But in the vast majority of cases, an estate plan will need to be updated over the course of a person’s life.  If your estate plan no longer addresses your needs or accurately expresses your wishes, it’s time for an update.

The following are common reasons for updating one’s plan:

  • Children grow up and become able to manage a parent’s healthcare and estate matters.
  • Changes in financial circumstances.
  • Relocation to a new state.
  • Separation, divorce, or remarriage.
  • Changes to applicable law.
  • Birth, death, or marriage of a beneficiary.
© 2022 Ward and Smith, P.A.. All Rights Reserved.

NYS Sexual Harassment Hotline Goes Live

Effective July 14, 2022 (pursuant to legislation amending the New York State Human Rights Law that was signed by New York State Governor Kathy Hochul in March 2022), New York established a telephone hotline that employees can use to report incidents of sexual harassment to the New York State Division of Human Rights.   The hotline number is 800-HARASS-3 ((800) 427-2773) and will be staffed, on a pro bono basis, by NYS attorneys who have expertise in employment law and sexual harassment issues.  The hotline can be called Monday through Friday, 9:00 a.m. to 5:00 p.m.

Because, under the law, information about the hotline must be contained in workplace policies and postings about sexual harassment, employers need to revise their anti-harassment policies promptly to include this information.

© 2022 Vedder Price