GDPR Privacy Rules: The Other Shoe Drops

Four years after GDPR was implemented, we are seeing the pillars of the internet business destroyed. Given two new EU decisions affecting the practical management of data, all companies collecting consumer data in the EU are re-evaluating their business models and will soon be considering wholesale changes.

On one hand, the GDPR is creating the world its drafters intended – a world where personal data is less of a commodity exploited and traded by business. On the other hand, GDPR enforcement has taken the form of a wrecking ball, leading to data localization in Europe and substitution of government meddling for consumer choice.

For years we have watched the EU courts and enforcement agencies apply GDPR text to real-life cases, wondering if the legal application would be more of a nip and tuck operation on ecommerce or something more bloody and brutal. In 2022, we received our answer, and the bodies are dropping.

In January Austrian courts decided that companies can’t use Google Analytics to study their own site’s web traffic. The same conclusion was reached last week by French regulators. While Google doesn’t announce statistics about product usage, website tracker BuiltWith published that 29.3 million websites use Google Analytics, including 69.5 percent of Quantcast’s Top 10,000 sites, and that is more than ten times the next most popular option. So vast numbers of companies operating in Europe will need to change their platform analytics provider – if the Euro-crats will allow them to use site analytics at all.

But these decisions were not based on the functionality of Google Analytics, a tool that does not even capture personally identifiable information – no names, no home or office address, no phone numbers. Instead, these decisions that will harm thousands of businesses were a result of the Schrems II decision, finding fault in the transfer of this non-identifiable data to a company based in the United States. The problem here for European decision-makers is that US law enforcement may have access to this data if courts allow them. I have written before about this illogical conclusion and won’t restate the many arguments here, other than to say that EU law enforcement behaves the same way.

The effects of this decision will be felt far beyond the huge customer base of Google Analytics.  The logic of this decision effectively means that companies collecting data from EU citizens can no longer use US-based cloud services like Amazon Web Services, IBM, Google, Oracle or Microsoft. I would anticipate that huge cloud player Alibaba Cloud could suffer the same proscription if Europe’s privacy panjandrums decide that China’s privacy protection is as threatening as the US.

The Austrians held that all the sophisticated measures taken by Google to encrypt analytic data meant nothing, because if Google could decrypt it, so could the US government. By this logic, no US cloud provider – the world’s primary business data support network – could “safely” hold EU data. Which means that the Euro-crats are preparing to fine any EU company that uses a US cloud provider. Max Schrems saw this decision in stark terms, stating, “The bottom line is: Companies can’t use US cloud services in Europe anymore.”

This decision will ultimately support the Euro-crats’ goal of data localization as companies try to organize local storage/processing solutions to avoid fines. Readers of this blog have seen coverage of the EU’s tilt toward data localization (for example, here and here) and away from the open internet that European politicians once held as the ideal. The Euro-crats are taking serious steps toward forcing localized data processing and cutting US businesses out of the ecommerce business ecosystem. The Google Analytics decision is likely to be seen as a tipping point in years to come.

In a second major practical online privacy decision, earlier this month the Belgian Data Protection Authority ruled that the Interactive Advertising Bureau Europe’s Transparency and Consent Framework (TCF), a widely-used technical standard built for publishers, advertisers, and technology vendors to obtain user consent for data processing, does not comply with the GDPR. The TCF allows users to accept or reject cookie-based advertising, relieving websites of the need to create their own expensive technical solutions, and creating a consistent experience for consumers. Now the TCF is considered per-se illegal under EU privacy rules, casting thousands of businesses to search for or design their own alternatives, and removing online choices for European residents.

The Belgian privacy authority reached this conclusion by holding that the Interactive Advertising Bureau was a “controller” of all the data managed under its proposed framework. As stated by the Center for Data Innovation, this decision implies “that any good-faith effort to implement a common data protection protocol by an umbrella organization that wants to uphold GDPR makes said organization liable for the data processing that takes place under this protocol.” No industry group will want to put itself in this position, leaving businesses to their own devices and making ecommerce data collection much less consistent and much more expensive – even if that data collection is necessary to fulfill the requests of consumers.

For years companies thought that informed consumer consent would be a way to personalize messaging and keep consumer costs low online, but the EU has thrown all online consent regimes into question. EU regulators have effectively decided that people can’t make their own decisions about allowing data to be collected. If TCF – the consent system used by 80% of the European internet and a system designed specifically to meet the demands of the GDPR – is now illegal, then, for a second time in a month, all online consumer commerce is thrown into confusion. Thousands were operating websites with TCF and Google Analytics, believing they were following the letter of the law.  That confidence has been smashed.

We are finally seeing the practical effects of the GDPR beyond its simple utility for fining US tech companies.  Those effects are leading to a closed-border internet around Europe and a costlier, less customizable internet for EU citizens. The EU is clearly harming businesses around the world and making its internet a more cramped place. I have trouble seeing the logic and benefit of these decisions, but the GDPR was written to shake the system, and privacy benefits may emerge.

Copyright © 2022 Womble Bond Dickinson (US) LLP All Rights Reserved.
For more articles about international privacy, visit the NLR Cybersecurity, Media & FCC section.

Reform Bill Proposal to Article 8 of The Federal Law of Cinematography in Mexico

A proposal was published in the Gazette of the Chamber of Senators on February 9, 2022, to reform Article 8 of the Federal Law of Cinematography, signed by María del Carmen Escudero Fabre together with other members of the PAN Parliamentary Group.

The intention of the proposed bill is to reform Article 8 of the Federal Law of Cinematography, which may guarantee access to audiovisual material exhibited in movie theaters for people who suffer from some degree of visual disability.

The explanatory memorandum of the proposal states that the General Law for the Inclusion of Persons with Disabilities establishes that the denial of reasonable adjustments constitutes a discriminatory act on the grounds of disability, a provision expressly prohibited in the first article of the Constitution.

It further details that it is necessary to recognize that people who suffer from disability may face difficulties when exercising their rights, such as access to health, work, education, transportation, communications, to culture, tourism, among others, being the responsibility of the State to design a normative framework that allows its access in equitable conditions.

The bill’s author comments that this would be an advancement for Mexicans with some degree of visual impairment, with the understanding that auditory stimuli can be used to compensate for visual ones and build the ideas of the spectators based on them, and that access to educational and recreational material for this group continues to be a challenge under the current legislation.

She continues that for this reason and being aware of the difficulties faced by a person with any type of disability, efforts like this can help reduce barriers found in society, highlighting the importance of adapting places, services, and information, so they are accessible to this sector of the population, ensuring their full inclusion and participation.

The bill proposes that films should be shown to the public in their original version, dubbed and subtitled in Spanish, under the terms established by the Regulations. Those classified for children and educational documentaries must be shown dubbed and always subtitled in Spanish.

This proposal may be unfeasible, since the Federal Law of Cinematography cannot govern by itself in the field corresponding to the Federal Law of Copyright. Forcing audiovisual works in certain categories to be exhibited dubbed, eliminating the possibility of being exhibited in their original language, would constitute a limitations of copyrights, which should be regulated, where appropriate, by the law of the matter, in accordance at all times, to what is established in international treaties that Mexico is a part of.

The protection of copyright and related rights comes from various international treaties considered by the court as human rights treaties, so the proposal would not only constitute a direct violation of the LFDA but of various treaties as well.

The control of conventionality is understood as the tool that allows countries to specify the obligation to guarantee human rights in the internal sphere through the verification of the conformity of national norms and practices with the American Convention on Human Rights and its Jurisprudence. Therefore, the reform to our fundamental law of June 10, 2011 on human rights, orders that the interpretation of the norms related to this subject be carried out in accordance with the Constitution of Mexico and the international treaties that the nation has signed in this matter, observing at all times the pro homine principle.

There are specific treaties that deal with limitations to Author’s Right, such as the Marrakesh Treaty, but what the Legislator intends to reform is not a specific case.

To conclude, this reform would create a direct impediment to access to culture and education, since forcing people to appreciate certain genres of audiovisual productions only in Spanish and not in their original languages, would also create direct harm to those who seek to expand their knowledge and learning of new languages and cultures.

© 2005-2022 OLIVARES Y COMPAÑIA S.C.
Article By Luis C. Schmidt with OLIVARES
For more articles on the arts, visit the NLR Entertainment, Art & Sports section.

New, Immigration-Friendly Mission Statement for USCIS

USCIS has changed its mission statement again – this time to adopt a more immigration-friendly stance.

In 2018, USCIS, under the Trump Administration, changed its mission statement to align with President Donald Trump’s focus on enforcement, strict scrutiny, and extreme vetting. The statement did not emphasize customer satisfaction, i.e., the satisfaction of petitioners, applicants, and beneficiaries. The change in emphasis was stark and did not go unnoticed. Instead, the mission statement focused on protecting and serving the American people and ensuring that benefits were not provided to those who did not qualify or those who “would do us harm ….” The 2018 statement did not speak of the United States as a “nation of migrants” and it focused on efficiency while “protecting Americans, securing the homeland, and honoring our values.”

The new 2022 USCIS mission statement reflects President Joe Biden’s belief that “new Americans fuel our economy as innovators and job creators, working in every American industry, and contributing to our arts, culture, and government.” Accordingly, he has issued executive orders directing the various immigration agencies to reduce unnecessary barriers to immigration. The 2022 mission statement also reflects President Biden’s directions and USCIS Director Ur M. Jaddou’s “vision for an inclusive and accessible agency.” Director Jaddou “is committed to ensuring that the immigration system . . . is accessible and humane . . . [serving] the public with respect and fairness, and lead with integrity to reflect America’s promise as a nation of welcome and possibility today and for generations to come.”

According to Director Jaddou, USCIS will strive to achieve the core values of treating applicants with integrity, dignity, and respect and using innovation to provide world-class service while vigilantly strengthening and enhancing security. On February 3, 2022, Director Jaddou, along with her deputies, briefed the nation on the agency’s efforts to improve service at USCIS. The leaders of the agency made clear that USCIS knows it must continue to eliminate backlogs, cut processing times, reduce unneeded Requests for Evidence and interviews, eliminate inequities in processing times across service centers and improve the contact center, among other things, to achieve its goals. Using streamlining and technological innovation, USCIS hopes to make itself much more consumer-oriented.

Jackson Lewis P.C. © 2022

FBI and DHS Warn of Russian Cyberattacks Against Critical Infrastructure

U.S. officials this week warned government agencies, cybersecurity personnel, and operators of critical infrastructure that Russia might launch cyber-attacks against Ukrainian and U.S. networks at the same time it launches its military offensive against Ukraine.

The FBI and the Department of Homeland Security (DHS) warned law enforcement, military personnel, and operators of critical infrastructure to be vigilant in searching for Russian activity on their networks and to report any suspicious activity, as they are seeing an increase in Russian scanning of U.S. networks. U.S. officials are also seeing increased disinformation and misinformation generated by Russia about Ukraine.

The FBI and DHS urged timely patching of systems and reporting of any Russian activity on networks, so U.S. officials can assess the threat, assist with a response, and prevent further activity.

For more information on cyber incident reporting, click here.

Even though a war may be starting halfway across the world, Russia’s cyber capabilities are global. Russia has the capability to bring us all into its war by attacking U.S. government agencies and companies. We are all an important part of preventing attacks and assisting others from becoming a victim of Russia’s attacks. Closely watch your network for any suspicious activity and report it, no matter how small you think it is.

Copyright © 2022 Robinson & Cole LLP. All rights reserved.

Ongoing Canadian Protests Shine Spotlight on Ripple Effect of Supply Chain Disruptions

Although the last two years have seen a nearly never-ending line of supply chain impacts for manufacturers, the latest disruption is also serving to shine a spotlight on the broader impact that relatively small disruptions in the supply chain can have on the global economy.  We all know that trucking is a critical component of the economy.  The U.S. estimates seventy two percent of goods in the U.S. travel by truck.  Trucking has become even more important in this era of increased deliveries and backlogs at ports and other logistics hubs.

In Canada, what began as protests by truckers regarding certain pandemic-related restrictions and mandates have snowballed into broader protests and blockages of roads, bridges, and border crossings.

Protesters have been blocking various bridges and roads in Canada in protest of certain pandemic-related restrictions and mandates.  On Tuesday, the bridge connecting Windsor, Ontario to Detroit (a critical linkage for cross-border travel) was largely blocked, with traffic stopped going into Canada and slowed to a trickle going into the United States. The blockades are now leading U.S. automakers to begin trimming shifts and pausing certain operations in their Michigan and Canadian plants. The bridge protests and automakers’ reduction in capacity continued on Thursday without an end in sight.

The ongoing protests in Canada have also served as a reminder of how seemingly local trucking disruptions in one country can cascade through the supply chain.  This is not the first time that trucking strikes and blockages have rippled through the supply chain and economy.  In 1996, a truckers’ strike in France lasted 12 days, barricading major highways and ultimately leading to concessions from the French government over certain worker benefits and hours.  The resulting agreement led to heightened tensions with Spain, Portugal, and Great Britain due to the impact felt across borders.  In 2008, truckers went on strike in Spain and blocked roads and border crossings, protesting fuel prices.  In 2018, truckers in Brazil staged a large strike and protest that lasted for 10 days, blocking roads, disrupting food and fuel distribution, canceling flights, and causing certain part shortages for automakers.

The ongoing protests in Canada have similarly expanded from Ottawa to the current blockage of border crossings, further raising their profile internationally as they begin to impact global trade.  It remains to be seen how the blockades and protests will resolve, as leaders call for de-escalation and re-opening of roads and crossings.  However, the ripple effects of what started as a localized protest will continue to be felt far beyond Canada’s borders.

© 2022 Foley & Lardner LLP

Canada: Upcoming Legislative Changes Taking Effect in January 2022

As we ring in the new year, there are a number of legislative changes that will take effect, impacting workplaces across Canada. Below are the significant changes taking effect by January 1, 2022.

Increase to the Federal Minimum Wage

Effective December 29, 2021, the minimum wage for the federally regulated private sector increased to $15.00 per hour. The Government of Canada announced this wage increase on April 19, 2021. According to the government, the wages of approximately 26,000 employees have increased as a result of this change. Some of the sectors impacted include:

  • banks;
  • postal and courier services;
  • telecommunications; and
  • most federal agencies.

The government will adjust the federal minimum wage every April to address inflation.

Employers in these industry groups may want to keep in mind that impacted employees earning a provincial or territorial minimum wage greater than $15.00 per hour are entitled to the higher wage rate.

British Columbia: Introduction of Five Paid Sick Days

Effective January 1, 2022, employees in British Columbia will have access to five paid sick days per year. To be eligible, employees must be covered by British Columbia’s Employment Standards Act, and they must have worked for their employers for a minimum of 90 days.

Employees will now have up to eight days of sick leave per year in total: five paid days and three unpaid days to be used for illness or injury. These days will not carry over to future years, and employers may request “reasonably sufficient proof of illness.” Though employers are entitled to request proof of illness, in some circumstances the request may not be reasonable.

The reasonableness of a request can be assessed based on:

  • the duration of the employee’s absence;
  • a pattern of absences;
  • the availability of the proof; and
  • the cost associated with the proof.

In cases where the employer’s request is not reasonable, the employee might not have to provide proof of illness.

British Columbia employers may also want to note the following:

  • Full-time, part-time, temporary, and casual employees are covered by the Employment Standards Act and may be eligible for these sick days.
  • Employees are not required to take these sick days consecutively.
  • Employees must be paid an average day’s pay during their sick leave. To calculate the average, employers are required to use the 30 calendar days leading up to the first sick day.

Saskatchewan: Amendments to The Saskatchewan Employment Act

On January 1, 2022, amendments to The Saskatchewan Employment Act, 2021, will take effect, which will make the following changes:

  1. Workplace harassment, including sexual harassment, prohibitions will now protect independent contractors, students, and volunteers.
  2. “Supervisory employees” will now have access to collective bargaining, whereas previously they were presumptively excluded from bargaining units that included employees they supervise.
  3. Mandatory vaccination policies will need to include an option for employees to provide negative COVID-19 test results every seven days, as an alternative to vaccination.

Currently, Saskatchewan’s COVID-19 vaccination regulations allow employees to choose between providing proof of a negative COVID-19 test every seven days, or providing proof of full vaccination. These regulations apply to public employers and to provincially regulated private sector employers that voluntarily implement vaccination policies. To protect these employers from liability, legislators have added a provision to the act covering employers that have complied with the COVID-19 vaccination regulations.

Ontario: Increase to the Minimum Wage

In November 2021, the Government of Ontario announced an increase to the minimum wage effective January 1, 2022. The minimum wage increases are summarized below.

Employees Current Hourly Wage Proposed Hourly Wage
General minimum wage $14.35 $15.00
Students under the age of 18 $13.50 $14.10
Homeworkers (i.e., individuals who work from their  personal residences) $15.80 $16.50
Hunting and fishing guides $71.75 for working less than five consecutive hours in one day $75.00 for working less than five consecutive hours in one day
$143.55 for working five or more hours in one day $150.05 for working five or more hours in one day
Liquor servers $12.55 $15.00

Key Takeaways

As these changes take effect, employers may want to verify whether they will impact their workplaces and adjust their policies and practices accordingly. Employers that are not affected may still find it important to note the trends in Canadian employment legislation because some of these changes may be implemented in their own provinces in the near future. Specifically, both New Brunswick and Nova Scotia are set to raise their minimum wage in 2022.

© 2022, Ogletree, Deakins, Nash, Smoak & Stewart, P.C., All Rights Reserved.
For more articles on Canada, visit the NLR Global section.

Patch Up – Log4j and How to Avoid a Cybercrime Christmas

A vulnerability so dangerous that Cybersecurity and Infrastructure (CISA) Director Jen Easterly called it “one of the most serious [she’s] seen in [her] entire career, if not the most serious” arrived just in time for the holidays. On December 10, 2021, CISA and the director of cybersecurity at the National Security Agency (NSA) began alerting the public of a critical vulnerability within the Apache Log4j Java logging framework. Civilian government agencies have been instructed to mitigate against the vulnerability by Christmas Eve, and companies should follow suit.

The Log4j vulnerability allows threat actors to remotely execute code both on-premises and within cloud-based application servers, thereby obtaining control of the impacted servers. CISA expects the vulnerability to affect hundreds of millions of devices. This is a widespread critical vulnerability and companies should quickly assess whether, and to what extent, they or their service providers are using Log4j.

Immediate Recommendations

  • Immediately upgrade all versions of Apache Log4j to 2.15.0.
  • Ask your service providers whether their products or environment use Log4j, and if so, whether they have patched to the latest version. Helpfully, CISA sponsors a community-sourced GitHub repository with a list of software related to the vulnerability as a reference guide.
  • Confirm your security operations are monitoring internet-facing systems for indicators of compromise.
  • Review your incident response plan and ensure all response team information is up to date.
  • If your company is involved in an acquisition, discuss the security steps taken within the target company to address the Log4j vulnerability.

The versatility of this vulnerability has already attracted the attention of malicious nation-state actors. For example, government-affiliated cybercriminals in Iran and China have a “wish list” (no holiday pun intended) of entities that they are aggressively targeting with the Log4j vulnerability. Due to this malicious nation-state activity, if your company experiences a ransomware attack related to the Log4j vulnerability, it is particularly important to pay attention to potential sanctions-related issues.

Companies with additional questions about the Log4j vulnerability and its potential impact on technical threats and potential regulatory scrutiny or commercial liability are encouraged to contact counsel.

© 2021 Bracewell LLP

Current Pandemic-Related Regulations for Business Travel to the United States, Germany, and the EU

Recently, due to the availability of COVID-19 vaccines, many countries decided to lift their entry restrictions or change them in such a way that travelers who had recovered from COVID-19 infections or been vaccinated were allowed entry. Here is an overview of some of the current entry requirements for international travel.

Entry Into the United States

Since November 8, 2021, individuals have been allowed to enter the United States again from Europe. For 20 months, an entry ban had been in place in the United States for travelers from Brazil, China, India, Iran, Ireland, the Schengen Area (26 countries), South Africa, and the United Kingdom. A proclamation issued by President Joe Biden on October 25, 2021—“A Proclamation on Advancing the Safe Resumption of Global Travel During the COVID-⁠19 Pandemic”—ended these entry restrictions and the need for national interest exceptions (NIE) to the restrictions. Travelers from most countries (a recent U.S. ban on travel from eight African countries took effect on November 29, 2021) may enter the United States if they are fully vaccinated and present negative coronavirus test results (via RT-PCR tests or antigen tests) that are no more than three days old at the time of departure.

Travelers must prove to their airlines that they have been fully vaccinated with internationally recognized vaccines prior to their departures. Currently, the United States recognizes vaccines the Pfizer-BioNTech, Oxford-AstraZeneca, Oxford-AstraZeneca/Covishield, Covaxin, Moderna, Johnson & Johnson/Janssen, BIBP/Sinopharm, and Sinovacvaccines. A traveler’s last vaccination must have taken place at least 14 days before the planned date of travel. The United States accepts the EU Digital COVID Certificate as proof of vaccination.

Exempt groups include persons on diplomatic or governmental foreign travel, children under 18 years of age, and persons who cannot be vaccinated with a COVID-19 vaccine for documented medical reasons. Persons exempt from the October 25, 2021, proclamation’s requirements may enter the United States without being fully vaccinated, but they must quarantine for seven days upon arrival and test for COVID-19 infection three to five days after entry.

Regardless of the COVID-19–related entry requirements, all travelers still need an Electronic System for Travel Authorization (ESTA) entry permit issued by U.S. Customs and Border Protection (CBP). CBP advises travelers to apply online for ESTA authorization at least 72 hours in advance of departure.

Requirements for Entry Into the European Union

The European Union (EU) has a common approach to travel from third countries to EU member states. Entry requirements are constantly being adapted to the pandemic situation as international travel gradually opens up. Currently, in principle, any person from a third country who has been fully vaccinated with a vaccine approved by the European Medicines Agency (EMA) (BioNTech-Pfizer, Moderna, AstraZeneca, and Janssen-Cilag) may enter the European Union. The last vaccination must have taken place at least 14 days before the planned entry.

EU citizens and residents as well as their family members are allowed to enter EU member states without being fully vaccinated. Further exceptions apply to persons for whom absolutely necessary reasons for entry exist. “Absolutely necessary reasons” may exist, among other things, for highly qualified employees from third countries if their labor is necessary from an economic point of view and their work cannot be postponed or carried out abroad.

The EU also maintains a list of countries where the epidemiological situation has improved sufficiently (the so-called “EU White List”), so that entry from these countries is possible regardless of an individual’s vaccination status. This list is constantly updated according to the epidemiological situation. The United States is not currently on the EU White List, so entry from the United States is only possible for fully vaccinated persons.

Each EU member state may set its own additional entry requirements. The EU’s “Re-open EU,” a clearinghouse of information regarding EU member states’ pandemic-related measures, offers an overview of the quarantine and testing requirements of the individual countries.

Requirements for Entry Into Germany

All travelers to Germany from third countries that are not on the EU White List and are not EU citizens or residents must be fully vaccinated. In exceptional cases, entry is possible if it is absolutely necessary.

In addition, all travelers aged 12 or older must provide proof of vaccination. Before crossing the border, proof of vaccination or convalescence, or a test result showing negative for infection (e.g., an antigen test that is no more than 48 hours old or an RT-PCR test that is no more than 72 hours old), must be presented for inspection by the carrier or at the request of the Federal Police.

For previous stays in high-risk or virus-variant areas, digital travel registration is also mandatory. The Robert Koch Institute provides a current list of all high-risk and virus-variant areas.

Nonvaccinated or recovered travelers entering from high-risk areas must also present a negative test upon entry and enter domestic quarantine for 10 days. The domestic quarantine can be ended prematurely if another negative test result is presented five days after entry.

At present, travel from a virus-variant area is not possible, as a travel ban is in force for countries where virus mutations are widespread. Entry is possible only in a few exceptional cases (for example, for German nationals and persons with residence and an existing right of abode in Germany, as well as their immediate family members). Irrespective of vaccination or convalescent status, these travelers are obliged to register their entries digitally, present negative test results upon entry, and go into quarantine for 14 days. Only vaccinated and recovered persons may shorten their quarantine periods by presenting further negative test results five days after entry.

Employer Inquiries Into Employees’ Vaccination and Recovery Status

These extensive regulations raise a question as to whether an employer may inquire into an employee’s vaccination status, or whether the employee has recovered from a COVID-19 infection in connection with an upcoming business trip.

The vaccination and/or convalescence status of an employee, under 9 (1) of the EU’s General Data Protection Regulation (GDPR), is considered health data and thus protected personal information according to Art. An employer may request and process this information only if there is a legal basis for doing so. If a business trip requires proof of an employee’s vaccination against COVID-19 (e.g., due to entry restrictions), an employer may request and process this information from the employee in individual cases. However, employers may only request the information in the context of specific business trips and are prohibited from retaining the information for any other purposes.”

The COVID-19–related entry regulations of many countries may largely determine the feasibility of a contemplated business trip, as the prospect for international business travel will likely depend on the vaccination status of the employees involved. This situation may result in a legitimate interest on the part of the employer to inquire into employee vaccination status because the employer would otherwise be unable to find out whether a particular employee met the entry requirements of the destination country. Only by inquiring into vaccination status can the employer ensure that the employee is not turned away at the border—i.e., that the employee can fulfill the duty to provide the contractually agreed upon work within the scope of the business trip.

Whether an employer’s query regarding an employee’s vaccination status is legitimate is therefore a case- and fact-specific inquiry, which depends above all on the entry regulations of the destination country. If the destination country requires complete vaccination for entry, it may be permissible from a data protection perspective to ask about an employee’s vaccination status.

Article By Cynthia Lange of Ogletree, Deakins, Nash, Smoak & Stewart, P.C.

For more COVID-19 and travel-related legal news, click here to visit the National Law Review.

© 2021, Ogletree, Deakins, Nash, Smoak & Stewart, P.C., All Rights Reserved.

U.S. House and Senate Reach Agreement on Uyghur Forced Labor Prevention Act

On December 14, 2021, lawmakers in the House and Senate announced that they had reached an agreement on compromise language for a bill known as the Uyghur Forced Labor Prevention Act or “UFLPA.”  Different versions of this measure passed the House and the Senate earlier this year, but lawmakers and Congressional staff have been working to reconcile the parallel proposals. The compromise language paves the way for Congress to pass the bill and send it to President Biden’s desk as soon as this week.

The bill would establish a rebuttable presumption that all goods originating from China’s Xinjiang region violate existing US law prohibiting the importation of goods made with forced labor. The rebuttable presumption would go into effect 180 days after enactment.  The compromise bill would also require federal officials to solicit public comments and hold a public hearing to aid in developing a strategy for the enforcement of the import ban vis-à-vis goods alleged to have been made through forced labor in China.

This rebuttable presumption will present significant challenges to businesses with supply chains that might touch the Xinjiang region.  Many businesses do not have full visibility into their supply chains and will need to act quickly to map their suppliers and respond to identified risks.  Importers must present detailed documentaton in order to release any shipments that they think were improperly detained, a costly and time-consuming endeavor.  Notably, the public comment and hearing processes will guide the government’s enforcement strategy, providing business stakeholders an opportunity to contribute to an enforcement process that could have implications for implementation of the import ban more broadly.

China’s Xinjiang region is a part of several critical supply chains, lead among them global cotton and apparel trade, as well as solar module production.  According to the Peterson Institute:

Xinjiang accounts for nearly 20 percent of global cotton production, with annual production greater than that of the entire United States. Its position in refined polysilicon—the material from which solar panels are built—is even more dominant, accounting for nearly half of global production. Virtually all silicon-based solar panels are likely to contain some Xinjiang-sourced silicon, according to Jenny Chase, head of solar analysis at Bloomberg New Energy Finance. If signed into law, the bill will send apparel producers and the US solar industry scrambling to find alternative sources of supply and prices are bound to increase.

Article By Ludmilla L. Kasulke and Rory Murphy of Squire Patton Boggs (US) LLP

For more legal news and legislation updates, click here to visit the National Law Review.

© Copyright 2021 Squire Patton Boggs (US) LLP

9th Cir. Upholds Antitrust Jury Verdict Against Chinese Telescope Company [PODCAST]

Court affirms evidentiary rulings on market definition and overcharges. Agrees evidence supported verdict for collusion and attempted monopolization.

The Ninth Circuit Court of Appeals this month upheld judgment in favor of Optronic Technologies, Inc., finding there was sufficient evidence that Chinese telescope manufacturer, Ningbo Sunny Electronic (“Sunny”), conspired with a competitor in the U.S. consumer telescope market to allocate customers, fix prices, and monopolize the telescope market in violation of federal antitrust laws (Optronic Technologies, Inc., v. Ningbo Sunny Electronic Co., Ltd., No. 20-15837, 9th Cir. 2021). Ninth Circuit Judge Ronald M. Gould wrote the opinion.

California-based Optronic, known commercially as Orion Telescopes & Binoculars, sued Sunny in November 2014. Orion alleged Sunny violated Sherman Act Sections 1 and 2 by conspiring to allocate customers in the telescope market and conspiring to fix prices or credit terms for Optronics in collusion with Suzhou Synta Optical Technology. Orion further alleged Sunny’s 2014 acquisition of independent manufacturer, Meade, violated Section 7 of the Clayton Act. Orion alleged that Sunny engaged in these anticompetitive acts to force Orion out and further monopolize the telescope market.

A California jury found in favor of Orion on all counts and awarded the company $16.8 million in damages, which the district court trebled to $50.4 million. The district court also ordered injunctive relief, directing Sunny to supply Orion and Synta’s Meade on non-discriminatory terms for five years, and not to communicate with Synta about competitively sensitive information.

Rulings on key elements of plaintiff’s economic evidence affirmed.

Sunny appealed on several grounds, including two that challenged key elements of the plaintiff’s expert economic evidence. The jury had found Sunny liable for attempted monopolization and conspiracy to monopolize in violation of Section 2, which makes it unlawful for any person to monopolize or attempt or conspire to monopolize any relevant market. Sunny argued on appeal that the evidence could not support a Section 2 verdict because Orion’s economist failed to define a relevant market. In particular, Sunny claimed the expert did not examine the cross-elasticity between substitute products in the market or perform a SSNIP test, the standard analysis used to delineate the outer boundaries of a relevant market.

The appeals court found these contentions lacked merit. The plaintiff’s economist had testified that the relevant product market was the market for telescope manufacturing services. The purpose of the SSNIP test is to determine whether the relevant market is drawn too narrowly and should be expanded to include potential substitutes. But because no other manufacturing capacity can substitute for telescope manufacturing services, wholesale purchasers of telescopes cannot turn to other manufacturers to fulfill orders. Without substitutable manufacturers, a SSNIP test boils down to whether new manufacturers would enter the market fast enough to make an increase in price unprofitable for a hypothetical monopolist, which they could not. As a result, the court held that the economist reasonably could forgo performing a SSNIP analysis.

Sunny also challenged the economist’s estimate of anticompetitive overcharges that could not directly be observed. Neither the “benchmark” nor “before-and-after” estimation methods were available. Therefore, to develop a measure of damages, the plaintiff’s expert presented two different methods of estimating the overcharges. In the first method, the expert collected data on cartel overcharges from the economic literature on markets with structures and conditions similar to telescope manufacturing. The average of those overcharges was then used as an estimate of the overcharge resulting from defendants’ collusion. As a check on this estimate, the economist also submitted a theoretical Cournot equilibrium model of market prices based on assumptions drawn from the record in the case. The two methods yielded similar and consistent results. Affirming the admissibility of the expert’s damages estimates, the appellate court found the expert’s report and testimony “were sufficiently tied to the facts of this case such that the district court properly admitted this evidence.”

In rebuttal, the defendant’s economist testified to the high sensitivity of the assumptions used in the plaintiff’s theoretical model. Interestingly, defendants were not permitted to submit their own estimate of damages for the first time on rebuttal, so the defendants’ expert had to limit her testimony to the sensitivity of the model without the ability to show the jury any resulting alternative estimate of the anticompetitive overcharge. The appeals court affirmed the trial court’s limitation on the defendants’ rebuttal expert.

Price fixing and a larger scheme.

Sunny also argued that Orion failed to present sufficient evidence to support Orion’s Section 1 claims. Section 1 prohibits unreasonable restraints of trade. Horizontal price fixing and market allocation are per se unreasonable and support Section 1 liability without regard to any purported justification or defense. The Ninth Circuit noted that Orion offered evidence that Synta executives encouraged Sunny’s purchase of Meade, an acquisition that was part of a larger scheme by Sunny and Synta to jointly control the telescope manufacturing market, even though federal regulators had already prohibited such a combination. The court also declined to upset the jury’s finding that Sunny conspired with a Synta subsidiary to fix prices and credit terms to Orion, a per se violation of Section 1.

“If you break it, you buy it.”

Finally, it is notable that the appellate court affirmed the award of damages accruing after September 2016, when the defendant and Synta took their last steps to eliminate Meade, and Synta entered a Settlement and Supply Agreement with Orion. The court held that, even if the conspiratorial acts of Sunny and Synta ended in 2016, Orion could still recover post-2016 damages “because it continued to suffer economic harm from the harm to competition caused by the illegal concerted activity.” Thus, where collusion causes a durable change in market structure or sets the pattern of a continuing collusive practice, it is no defense that the conspirators may have ceased engaging in concerted action.

The rule adopted by the Ninth Circuit in Optronics is clear: “[W]here an antitrust plaintiff suffers continuing antitrust injuries from anticompetitive changes to market structure that arose from a proven antitrust violation, we hold that the violation may be a material cause of that injury, and so recovery of damages is permitted, even after the last proven date of the violative conduct. This rule accords with the common-sense principle that ‘if you break it, you buy it.’”

Welcomed clarity.

The Ninth Circuit’s opinion brings welcomed clarity on several points. It demonstrated that plaintiffs need not perform a SSNIP test where market-specific circumstances define a market’s outer boundary. For claimants facing the need to estimate unobservable anticompetitive overcharges, it affirms an ingenious method for arriving at a reasonable and reliable estimate. And, for past conspiracies with continuing anticompetitive effects, the decision announces the common-sense principle that a defendant “remains liable for the continuing injuries suffered by plaintiffs from the structural harm to competition that its unlawful scheme brought about.” Put simply, this is a well-articulated decision by a capable panel that adds precision and certainty to antitrust.

Edited by Tom Hagy for MoginRubin LLP

© MoginRubin LLP

For more articles on 9th Circuit decisions, visit the NLR Litigation section.