Bipartisan Group of Senators Asks Trump to Explain Reasoning for Firing IC Watchdog

Yesterday, Senator Charles Grassley (R-IA) and a bipartisan group of senators sent a letter to President Trump asking for more details regarding the firing of Intelligence Community Inspector General (IC IG) Michael Atkinson. Atkinson was responsible for alerting Congress to the whistleblower complaint that led to Trump’s impeachment.

Grassley, who serves as chairman of the Senate Whistleblower Protection Caucus, argued that Trump provided insignificant reasons for firing the government watchdog.

“Congressional intent is clear that an expression of lost confidence, without further explanation, is not sufficient to fulfill the requirements of the statute. This is in large part because Congress intended that inspectors general only be removed when there is clear evidence of wrongdoing or failure to perform the duties of the office, and not for reasons unrelated to their performance, to help preserve IG independence.”

Trump announced the termination of Atkinson on Friday, citing a lack of “confidence in the appointees serving as inspectors general.” In remarks the following day, Trump defended the decision stating, Atkinson “did a terrible job, absolutely terrible.” He also said Atkinson “took a fake report and gave it to Congress.”

The Senators stressed that “all inspectors general (IG) are designed to fulfill a dual role, reporting to both the President and Congress, to secure efficient, robust, and independent agency oversight.”

The Senators allege that the administration by-passed Congress’s “opportunity for an appropriate dialogue” “by placing the IG on 30 days of administrative leave and naming an acting replacement.”

The Senators ask that President Trump provide a detailed explanation of the removal of Inspector General Atkinson no later than April 13, 2020. And to also explain appointing an acting official before the end of the 30-day notice period comports with statutory requirements.

The day after his termination was made public, Atkinson described how he “faithfully discharged” his duties as “an independent and impartial Inspector General” in a statement encouraging other government whistleblowers to speak up.

Seven other senators signed the letter.

Read the Senator’s letter to President Trump.


Copyright Kohn, Kohn & Colapinto, LLP 2020. All Rights Reserved.

Ben Kostyack also contributed to this article.

New Jersey Closes all Non-Essential Construction Projects

On April 8, 2020, New Jersey Governor Phil Murphy signed Executive Order No. 122, requiring the closure of all non-essential construction projects beginning at 8:00 p.m. on Friday, April 10, 2020. The executive order does not define “non-essential construction project”; instead, it lists the following “essential construction projects” that may continue to operate:

  • Projects necessary for the delivery of health care services (e.g., hospitals, health care facilities, and pharmaceutical manufacturing facilities);
  • Transportation projects;
  • Utility projects;
  • Affordable housing residential projects;
  • School projects (e.g., pre-K-12 schools and higher education facilities);
  • Projects already underway involving single-family homes or apartments with a construction crew of five or fewer individuals;
  • Projects already underway involving a residential unit for which a tenant or buyer has legally agreed to occupy by a certain date and the construction is necessary for the unit’s availability;
  • Projects involving facilities in which “the following takes place: the manufacture, distribution, storage, or servicing of goods or products that are sold by online retail businesses or essential retail businesses (as defined by Executive Order No. 107 (2020) and subsequent Administrative Orders)”;
  • “Projects involving data centers or facilities that are critical to a business’s ability to function”;
  • “Projects necessary for the delivery of essential social services, including homeless shelters”;
  • “Any project necessary to support law enforcement agencies or first responder units in their response to the COVID-19 emergency”;
  • “Any project that is ordered or contracted for by Federal, State, county, or municipal government”;
  • “[A]ny project that must be completed to meet a deadline established by the Federal government”;
  • Any work on a non-essential construction project that is required to physically secure the site, ensure building structural integrity, abate hazards, or confirm that the site is protected and safe during the suspension of the project; and
  • “Any emergency repairs necessary to ensure the health and safety of residents.”

The New Jersey State Director of Emergency Management (who is the Superintendent of the State Police) has the discretion to amend this list of essential construction projects.

Essential construction projects that continue to operate must continue to adhere to guidelines and directives issued by the New Jersey Department of Health, the Centers for Disease Control and Prevention (CDC), and the Occupational Safety and Health Administration to maintain a clean, safe, and healthy work environment for employees. These businesses must also implement policies and protocols to enforce best practices regarding social distancing and good hygiene, including but not limited to:

  • Prohibit all non-essential visitors from entering the worksite;
  • Limit worksite meetings and groups to fewer than 10 people;
  • Require individuals to maintain a minimum 6 feet of social distancing when possible;
  • Stagger work start and stop times to limit the number of individuals entering and leaving the worksite at the same time, to the extent possible;
  • Stagger lunch breaks and work times to enable operations to safely continue while utilizing the fewest number of individuals as possible;
  • Limit the number of individuals who can access common areas at the same time;
  • Provide employees with cloth face coverings and gloves, and require workers to wear them while on premises unless there is a medical reason prohibiting it (Note: If any individual (employee or visitor) declines to wear a face covering on premises due to a medical reason, the business cannot require the individual to produce medical documentation verifying his or her condition.);
  • Require essential visitors to wear cloth face coverings while on premises (Note: If a visitor refuses to wear a face covering for a non-medical reason and if a covering cannot be provided to the visitor, then the business must deny entry to the individual);
  • “Require infection control practices, such as regular hand washing”;
  • “Limit sharing of tools, equipment, and machinery”;
  • Provide hand sanitizer and wipes to employees and visitors; and
  • “Require frequent sanitization of high-touch areas” (e.g., restrooms, breakrooms, equipment, and machinery).

These businesses must also implement policies and protocols in the event the worksite is exposed to COVID-19, including but not limited to:

  • “Immediately separate and send home workers who appear to have symptoms consistent with COVID-19”;
  • “Promptly notify workers of any known exposure to COVID-19 at the worksite, consistent with the confidentiality requirements of the Americans with Disabilities Act and any other applicable laws”; and
  • “Clean and disinfect the worksite in accordance with CDC guidelines when a worker at the site has been diagnosed with COVID-19.”
© 2020, Ogletree, Deakins, Nash, Smoak & Stewart,P.C., All Rights Reserved.

Virginia Enacts Robust LGBTQ Anti-Discrimination and Civil Rights Legislation

On April 11, 2020, Governor Northam signed the Virginia Values Act (SB 868), monumental anti-discrimination legislation that makes Virginia the first state in the South to enact comprehensive protections for the LGBTQ community.  In particular, Senate Bill 868 1) prohibits discrimination in public accommodations on the basis of sexual orientation, gender identity, or status as a veteran; 2) prohibits discrimination in credit on the basis of sexual orientation, gender identity, pregnancy, childbirth, or related medical conditions, disability, and veteran status; and 3) prohibits discrimination in housing based on sexual orientation, gender identity, and status as a veteran. The Virginia Values Act will become effective on July 1, 2020.

In a press release, Governor Northam stated, “This legislation sends a strong, clear message—Virginia is a place where all people are welcome to live, work, visit, and raise a family. We are building an inclusive Commonwealth where there is opportunity for everyone, and everyone is treated fairly. No longer will LGBTQ Virginians have to fear being fired, evicted, or denied service in public places because of who they are.”

The Virginia Values Act amends the Virginia Human Rights Act (VA HRA), Va. Code §§ 2.2-3900 et seq., by barring discrimination on the basis of sexual orientation or gender identity and creating a private cause of action for employment discrimination.  The amended VA HRA authorizes a victim of discrimination to bring a civil action in district or circuit court after receiving a notice of right to file a civil action from the Division of Human Rights of the Department of Law.  Remedies include uncapped compensatory and punitive damages.

What law in Virginia bars employment discrimination?

The VA HRA, amended by SB 868, bars discrimination in private employment on the basis of race; color; religion; sex; sexual orientation; gender identity; marital status; age; veteran status; national origin; or pregnancy, childbirth, or related medical conditions including lactation.

How does the amended VA HRA define gender identity and sexual orientation?

The enacted SB 868 defines gender identity as “the gender-related identity, appearance, or other gender-related characteristics of an individual, with or without regard to the individual’s designated sex at birth.”  It defines sexual orientation as “a person’s actual or perceived heterosexuality, bisexuality, or homosexuality.”

What damages or remedies are available for victims of discrimination in Virginia?

A court or jury may award a prevailing discrimination plaintiff compensatory and punitive damages and reasonable attorneys’ fees and costs.  A court may also grant other equitable relief, such as a permanent or temporary injunction or a temporary restraining or other order, including one enjoining the defendant from engaging in further discriminatory practices.

What is the burden to prevail in a Virginia Human Rights Act case?

To prevail in a VA HRA employment case, plaintiffs must prove only that their protected characteristic was a motivating factor for any employment practice.  This means that a plaintiff can prevail even if other factors also motivated the practice.

How do I bring a discrimination claim in Virginia?

A victim of discrimination in Virginia should file a written complaint with the Division of Human Rights of the Department of Law.  The Division of Human Rights will then issue a charge of discrimination to the offending party and inform all parties of the employee’s rights and the timeline for exercising those rights.  The parties may then agree to go to mediation without waiving any rights.

After issuing a charge of discrimination, the Division of Human Rights will conduct an investigation into the complaint to determine whether there is reason to believe that discrimination occurred, and the Division will issue a report on its findings.

If the Division concludes that there is no reasonable cause to believe that the alleged unlawful discrimination has been committed, then it will dismiss the charge and issue the employee a notice of right to commence civil action.  If the Division concludes that there is reason to believe discrimination occurred, it will attempt to remedy the discrimination through informal methods and discussions with the offending party.  If and when the Division determines that informal methods will not suffice to eliminate the discrimination, it will close the case and give the employee a notice of right to commence civil action.

At any time after the Division issues the charge of discrimination, the complaining party may petition a court with jurisdiction for temporary, equitable relief including for a restraining order or injunction if the circumstances are such that continuing discrimination during the course of the investigation will cause irreparable injury.

An employee may also submit a written request for notice of right to commence civil action, and the Division will issue that notice after either 180 days have passed since the complaint was filed or the Division has determined it will not complete its investigation within 180 days.

After receiving a notice of right to commence civil action from the Division, an employee may file a civil action in a court with jurisdiction over the defending party.

 

© 2020 Zuckerman Law  Posted by: Dallas Hammer , Katherine Krems & Jason Zuckerman

Class Actions Follow Universities’ Moves to Online Learning

After switching to online learning in response to the COVID-19 pandemic and sending students home, colleges and universities are beginning to face class action lawsuits seeking refunds of tuition, housing costs, meal plans, and fees. One such lawsuit is Church v. Purdue University, No. 4:20-CV-0025, in the U.S. District Court for the Northern District of Indiana.

The lawsuit asserts contract and unjust enrichment claims for three general classes, seeking partial reimbursement for: (1) tuition; (2) housing; and (3) meals and fees. Among the many important issues will be whether the damages are so individualized that they are not susceptible to class-wide proof. If so, they would predominate over common, class-wide issues and prevent class certification. The Church complaint, for example, acknowledges that the diminished value may vary for each student. It alleges that academic performance drops from online learning and the adverse effects hit lower ranked students progressively more harshly. Also, the named plaintiff is an engineering senior who is missing out on his senior project of building an airplane. Many other students will have similar stories, but they each will be unique. These and other problems will be a struggle for plaintiffs as they seek to find a class-wide damages model for some or all of the sub-classes they seek to represent.

These suits also may entail issues arising from recent federal legislation enacted to combat the economic fallout from COVID-19, as well as issues regarding financial aid.

These damage issues will be hotly litigated as these cases face motions to dismiss and oppositions to class certification.


© 2020, Ogletree, Deakins, Nash, Smoak & Stewart, P.C., All Rights Reserved.

For more litigation resulting from COVID-19, see the National Law Review Coronavirus News page.

CMS Waives Certain Penalties Classes of the Stark Law

On March 30, 2020, the Centers for Medicare and Medicaid Services (CMS) announced it will waive certain penalties classes of violations of the Physician Self-Referral Law, known as the Stark Law. The affected penalties are those listed under Section 1877(g) of the Social Security Act (42 U.S.C. 1877). These blanket waivers are effective retroactively to March 1, 2020.

The Stark Law is a strict liability statute generally prohibiting a physician from making referrals of Medicare- and Medicaid-designated health services to an entity with which the physician or an immediate family member has a financial relationship. Typically, if such a relationship exists between a physician and an entity, then the arrangement must satisfy an express Stark Law exception for the physician to bill for the referred services.

The blanket waivers temporarily allow payments and referrals between physicians and covered entities if the relationship falls into one of the express categories during the COVID-19 pandemic, even if such an arrangement would otherwise not meet a Stark Law exception. The blanket waivers apply to payments and referrals between an entity covered under the Stark Law and (1) a physician, (2) the physician’s organization defined under 42 C.F.R. 411.354(c) or (3) the physician’s immediate family member.

The blanket waivers must relate to one of the explicitly defined COVID-19 purposes and meet the following conditions:

  1. The providers are acting in good faith to provide care in response to the COVID-19 pandemic.
  2. The financial relationship or referral is protected by one of CMS’s 18 permitted relationships (discussed below).
  3. The government does not determine that the financial relationship creates fraud and abuse concerns.

Defined COVID-19 Purposes

To apply, the blanket waivers must be related to COVID-19 purposes. Such purposes include:

  • “Diagnosis or medically necessary treatment of COVID-19 for any patient or individual, whether or not the patient or individual is diagnosed with a confirmed case of COVID-19;
  • Securing the services of physicians and other health care practitioners and professionals to furnish medically necessary patient care services, including services not related to the diagnosis and treatment of COVID-19, in response to the COVID-19 outbreak in the United States;
  • Ensuring the ability of health care providers to address patient and community needs due to the COVID-19 outbreak in the United States;
  • Expanding the capacity of health care providers to address patient and community needs due to the COVID-19 outbreak in the United States;
  • Shifting the diagnosis and care of patients to appropriate alternative settings due to the COVID-19 outbreak in the United States; or
  • Addressing medical practice or business interruption due to the COVID-19 outbreak in the United States in order to maintain the availability of medical care and related services for patients and the community.”

Those wishing to use the blanket waivers need not provide advance notice to or receive approval from CMS. Those who rely on a blanket waiver, however, must retain records relating to its use, and the records must be available for the U.S. Department of Health and Human Services to review upon request.

The Blanket Waivers

The blanket waivers do not suspend the entire Stark Law. Rather, they apply only to 18 expressly enumerated relationships. These relationships can be divided into two classes: those that address payments and those that address referrals.

Allowed Payments

  1. Personally Performed Services: Remuneration paid by an entity to a physician above or below the fair market value (FMV) for the physician’s personally performed services to the entity is permitted.
  2. Office Space and Equipment Rental Payments: Remuneration paid by an entity to a physician or by a physician to an entity below FMV for rental of office space or equipment is permitted by the waivers. Rental payments exceeding FMV are not covered.
  3. Purchase of Items or Services: Remuneration paid by an entity to a physician or by a physician to an entity below FMV for the purchased items or services, including use of the entity’s premises, is permitted by the purchase waivers. The purpose of these waivers is to permit parties to rapidly source critical items or services without overpaying for the service.
  4. Additional Incidental Benefits to Medical Staff: Remuneration from a hospital to a physician in the form of medical staff incidental benefits that exceed the $36-per-item limit set forth in 42 CFR § 411.357(m)(5) is protected. This waiver permits a hospital to offer a range of benefits to its medical staff members to facilitate participation in the health care workforce, such as childcare services or clean clothing for the physician while at the hospital.
  5. Nonmonetary Compensation: Remuneration from an entity to a physician in the form of nonmonetary compensation that exceeds the $423 annual limit set forth in 42 CFR § 411.357(k)(1) is permitted. Similar to the medical staff benefit waiver, this waiver allows an entity to provide additional services that would otherwise exceed the limits established by the regulations to facilitate participation in the health care workforce during the COVID-19 pandemic. Currently, it is unclear how this waiver will be assessed when the blanket waiver period ends because the public emergency declaration caused by the COVID-19 pandemic is terminated. More guidance from CMS on the application of this waiver may be issued.
  6. Low-Interest or Interest-Free Loans: Remuneration among individuals and entities in the healthcare industry in the form of a loan, with an interest rate below FMV or on terms that are unavailable from another independent lender, is allowed. Essentially, CMS is attempting to increase cash liquidity within the health care industry to mitigate potential cash flow problems among health care workers and providers during the COVID-19 pandemic.

Allowed Referrals

  1. Referrals by Physician-Owner of a HospitalReferrals by a physician-owner of a hospital that temporarily expands its facility capacity above the number of operating rooms, procedure rooms and beds for which the hospital was licensed on March 23, 2010 without prior application and approval of the expansion of facility capacity will temporarily not be prohibited by the Stark Law. (In the case of a hospital that did not have a provider agreement in effect as of March 23, 2010, but did have a provider agreement in effect on December 31, 2010, the effective date of such provider agreement applies.)
  2. Referrals by Physician-Owner of Ambulatory Surgical Centers that Temporarily Convert to HospitalsReferrals by a physician-owner of a hospital that converted from a physician-owned ambulatory surgical center to a hospital on or after March 1, 2020 are permitted provided that:
  • The hospital does not satisfy one or more of the requirements of Section 1877(i)(1)(A) through (E) of the Act.
  • The hospital enrolled in Medicare as a hospital during the period of the public health emergency described in Section II.A of this blanket waiver document.
  • The hospital meets the Medicare conditions of participation and other requirements not waived by CMS during the period of the public health emergency described in section II.A of this blanket waiver document.
  • The hospital’s Medicare enrollment is not inconsistent with the Emergency Preparedness or Pandemic Plan of the state in which it is located.
  1. Referrals by Owners to a Home Health Agency: Referrals are now permitted by a physician of a Medicare beneficiary for the provision of designated health services to a home health agency (1) that does not qualify as a rural provider under 42 CFR 411.356(c)(1) and (2) in which the physician (or an immediate family member of the physician) has an ownership or investment interest.
  2. Referrals for Services at Locations Other than the Health Care Facility: Referrals are now permitted by a physician in a group practice for medically necessary designated health services furnished by the group practice in a location that does not qualify as a “same building” or “centralized building” for purposes of 42 CFR 411.355(b)(2). Also, referrals by a physician in a group practice for medically necessary designated health services furnished by the group practice to a patient in his or her private home, an assisted living facility, or independent living facility where the referring physician’s principal medical practice does not consist of treating patients in their private homes will not violate the Stark Law.
  3. Referrals to Immediate Family Members in Rural Areas: Referrals are now permitted by a physician to an entity with which the physician’s immediate family member has a financial relationship if the patient who is referred resides in a rural area.
  4. Relaxing Compensation Arrangement Written RequirementsStark Law compensation arrangement exceptions frequently require the arrangement to be in writing. However, referrals are now permitted by a physician to an entity that the physician (or an immediate family member of the physician) has a compensation arrangement that does not satisfy the writing requirements of an applicable exception but satisfies all other requirements of the applicable exception, unless that requirement is waived under one or more of the blanket waivers above.

CMS encourages providers to contact CMS with questions regarding the applicability of the blanket waivers. Providers should send any requests to 1877CallCenter@cms.hhs.gov and include the words “Request for 1877(g) Waiver” in the subject line. All requests should include the following minimum information:

  • the name and address of requesting entity
  • the name, phone number and email address of the person designated to represent the entity
  • the CMS Certification Number (CCN) or Taxpayer Identification Number (TIN) of the requesting entity; and
  • the nature of the request.

The contours and applications of these blanket waivers are complex and often require a nuanced understanding of how they are couched into the existing regulatory framework addressing the provision of health care services under the Social Security Act, the Stark Law, and a number of other statutes and regulations.


© 2020 Much Shelist, P.C.

For more on healthcare blanket waivers amidst COVID-19, see the National Law Review Coronavirus News section.

Cybersecurity Whistleblower Protections for Employees of Federal Contractors and Grantees

For information security professionals, identifying cybersecurity vulnerabilities is often part of the job.  That is no less the case when the job involves a contract or grant with the U.S. government.

Information security and data privacy requirements have become a priority at federal agencies.  These requirements extend to federal contractors because of their access to government data.  Often, cybersecurity professionals are the first to identify non-compliance with these requirements.  As high-profile data breaches have become more common, those who report violations of cybersecurity and data privacy requirements often experience retaliation and seek legal protection.

Reporting non-compliance or misconduct in the workplace can be necessary, but it can also be daunting.  It is important for cybersecurity whistleblowers to know their legal rights when disclosing such concerns to management or a federal agency.

In many cases, federal law protects cybersecurity whistleblowers who work for federal contractors or grantees.  This post provides an overview of those protections.

What cybersecurity requirements apply to federal contractors?

Federal contractors are subject to data privacy and information security requirements.

The Federal Information Security Management Act (“FISMA”) creates information security requirements for federal agencies to minimize risk to the U.S. government’s data.  FISMA also applies these requirements to state agencies administering federal programs and private business contracting with the federal government.  Federal acquisition regulations codify the cybersecurity and data privacy requirements applicable to federal contractors.  E.g., 48 C.F.R. §§ 252.204-7008, 7012 (providing for cybersecurity standards in contracts with the U.S. Department of Defense); 48 C.F.R. § 52.204-21 (outlining basic procedures for contractors to safeguard information processed, stored, or transmitted under a federal contract).  

Pursuant to the FISMA Implementation Project, the National Institute of Standards and Technology (“NIST”) produces security standards and guidelines to ensure compliance with FISMA.  Key principles of FISMA compliance include a systemic approach to the data that results in baseline controls, a risk assessment procedure to refine controls, and implementation of controls.  A security plan must document the controls.  Those managing the information must also assess the controls’ effectiveness.  NIST also focuses its standards on determining enterprise risk, information system authorization, and ongoing monitoring of security controls.

Essential standards established by NIST include FIPS 199, FIPS 200, and the NIST 800 series.  Core FISMA requirements include:

  • Federal contractors must keep an inventory of all of an organization’s information systems.
  • Contractors must identify the integration between information systems and other systems in the network.
  • Contractors must categorize information and information systems according to risk. This prioritizes security for the most sensitive information and systems.  See “Standards for Security Categorization of Federal Information and Information Systems” FIPS 199.
  • Contractors must have a current information security plan that covers controls, cybersecurity policies, and planned improvements.
  • Contractors must consider an organization’s particular needs and systems and then identify, implement, and document adequate information security controls. See NIST SP 800-53 (identifying suggested cybersecurity controls).
  • Contractors must assess information security risks. See NIST SP 800-30 (recommending that an organization assess risks at the organizational level, the business process level, and the information system level).
  • Contractors must conduct annual reviews to ensure that information security risks are minimal.

In addition to generally-applicable standards, individual contracts may create other cybersecurity or data privacy requirements for a government contractor.  Such requirements are prevalent when the contractor provides information security products or services for the government.

What protections exist for cybersecurity whistleblowers who work for federal contractors?

Federal law contains whistleblower protection provisions that may prohibit employers from retaliating against whistleblowers who report cybersecurity or data privacy concerns.  See Defense Contractor Whistleblower Protection Act, 10 U.S.C. § 2409; False Claims Act, 31 U.S.C. § 3730(h); NDAA Whistleblower Protection Law, 41 U.S.C. § 4712.  These laws protect a broad range of conduct.

Protected conduct under these laws includes:

  • Efforts to stop false claims to the government;
  • Lawful acts in furtherance of an action alleging false claims to the government; and
  • Disclosures of gross mismanagement, gross waste, abuse of authority, or a violation of law, rule, or regulation related to a federal contract or grant. Id.

These provisions have wide coverage.  They protect any employee of any private sector employer that is a contractor or grantee of the federal government.  In some cases, even the employer’s contractors and agents are protected.

An employer’s non-compliance with information security requirements could breach the employer’s contractual obligations to the federal government and violate federal law and regulation.  Thus, whistleblowers who report cybersecurity or data privacy concerns related to a federal contract or grant may be protected from employment retaliation.

What is the burden to establish unlawful retaliation for reporting cybersecurity concerns?

Exact requirements vary, but an employee typically establishes unlawful retaliation by proving that (1) the employee engaged in conduct that is protected by statute, and (2) the protected conduct to some degree caused a negative employment action.  See, e.g., 10 U.S.C. § 2409(c)(6) (incorporating burden of proof from 5 U.S.C. § 1221(e)); 41 U.S.C. § 4712(c)(6) (same); 31 U.S.C. § 3730(h)(1).  

Under some of the applicable protections, an employee need prove only that the protected conduct played any role whatsoever in the employer’s decision to take the challenged employment action.  See 10 U.S.C. § 2409; 41 U.S.C. § 4712.

What damages or remedies can a cybersecurity whistleblower recover for retaliation?

The relief available depends on which laws apply to the particular case.  Remedies may include an amount equal to double an employee’s lost wages, as well as reinstatement or front pay.  In some cases, a whistleblower may also recover uncapped compensatory damages for harms like emotional distress and reputational damage.  Additionally, a prevailing plaintiff can recover reasonable attorneys’ fees and costs.

Recently, a jury awarded a defense contractor whistleblower $1 million in compensatory damages.  The whistleblower proved that the employer more than likely retaliated by demoting him after he reported issues with tests related to a federal contract, according to the jury.  Specifically, the whistleblower alleged he reported and opposed management’s directive to misrepresent the completion status of testing procedures.

In a recent case under the False Claims Act, a whistleblower received more than $2.5 million for retaliation she suffered after internally reporting off-label promotion for a drug outside its FDA-approved use.  The False Claims Act protects employees from retaliation who blow the whistle on fraud against the government, including those who blow the whistle internally to a government contractor or grantee.

Do any court cases address whether cybersecurity whistleblowers are protected?

Yes.  Judges and juries have applied these laws to protect cybersecurity whistleblowers.

For example, in United States ex rel. Glenn v. Cisco Systems, Inc., defendant Cisco Systems settled for $8.6 million in what is likely the first successful cybersecurity case brought under the False Claims Act.  The plaintiff/relator James Glenn worked for Cisco and internally reported serious cybersecurity deficiencies in a video surveillance system, soon after which he was fired.  Cisco had sold the surveillance systems to various federal government entities, including the Department of Homeland Security, FEMA, the Secret Service, NASA, and all branches of the military.  After monitoring Cisco’s public pronouncements regarding the system and confirming the company had not solved the problems or reported vulnerabilities to customers, Glenn contacted the FBI.  Multiple states joined in the complaint and brought claims under state laws.

While the case did not proceed to litigation, Glenn received nearly $2 million of the settlement, and the federal government’s attention to the issue proves that cybersecurity and data privacy are of utmost importance.

Surely, as more of our lives and businesses move online, the government will place increased importance on contractors and grantees following data security and privacy requirements and disclosing known vulnerabilities.  Cybersecurity whistleblowers working for government contractors play an important part in revealing these vulnerabilities and keeping the federal government secure.  Still, these whistleblowers may experience retaliation after blowing the whistle internally at their place of work.

How can employees enforce these protections from retaliation?

Employees generally have the right to bring claims of unlawful retaliation for cybersecurity or data privacy whistleblowing in federal court.  However, some claims limit that right to whistleblowers who first exhaust all their administrative remedies.  For example, in some cases whistleblowers will first need to pursue relief from the Office of Inspector General of the relevant federal agency.  Additionally, cybersecurity whistleblower claims are subject to strict deadlines.  See, e.g., 31 U.S. Code § 3730; 10 U.S.C. § 2409; 41 U.S.C. § 4712.


© 2020 Zuckerman Law

Physicians Face Regulatory Exposure for Prescribing COVID-19 Drugs Cited by President Trump

Physicians and medical professionals throughout the world are facing and attempting to treat one of the most serious and deadly viruses that has affected the world in our lifetime. Medical professionals are on the front lines and in a position, despite their best efforts to protect themselves, to contract the disease. Medical professionals do not only fear for their own lives but also for the lives of their family members if they unintentionally bring this disease home.

In light of safety concerns for their family members, over the past few weeks, there have been reports claiming physicians throughout Ohio have prescribed chloroquine and hydroxychloroquine, frequently cited by President Donald Trump, to family members and friends. In some reported instances, prescriptions were issued even when such individuals did not exhibit signs or symptoms of the coronavirus.

In order to preserve the stockpile of medications for patients, on March 22, 2020, the Ohio Board of Pharmacy issued an emergency rule (OAC 4729-5-30.2) that prohibits a pharmacist from filling prescriptions for chloroquine or hydroxychloroquine without a valid COVID-19 diagnosis and positive test result.

On March 30, 2020, the Ohio Attorney General’s Office issued the following statement, which highlighted the Pharmacy Board’s new emergency rule and advised physicians to self-report to the State Medical Board of Ohio if they prescribed these medications improperly:

It has come to my attention that physicians may be abusing their privilege to prescribe medications by writing prescriptions for chloroquine and hydroxychloroquine for themselves, their friends and their families without any legitimate medical need for the medication. As Attorney General, I am very concerned with these reports and will work vigorously with Ohio’s regulatory boards and agencies to address any illegal or prohibited conduct. I encourage anyone who has written a prescription of this type improperly to self-report to their respective regulatory authority.”

The State Medical Board of Ohio is also on record stating that it takes allegations of inappropriate prescribing very seriously, and that it will be actively investigating complaints as they come in and working with the Ohio Attorney General on any necessary enforcement actions for bad prescribing.[i]

In addition to state regulators, the U.S. Attorney’s Office for the Northern and Southern Districts of Ohio have set up a COVID-19 Task Force. One of its responsibilities is to investigate and criminally prosecute physicians who have egregiously prescribed chloroquine and hydroxychloroquine to themselves, family members, or friends without a legitimate medical purpose. The Task Force is comprised of representatives of the United States Attorney’s Office, Ohio Attorney General’s Office, State Medical Board, and the Pharmacy Board.[ii]

Physicians who recently prescribed chloroquine and hydroxychloroquine and who are considering whether they should self-report to the Medical Board should first contact experienced legal counsel to determine the implications of a possible self-report, including the potentiality of license discipline and/or criminal charges.


[i] See:  https://clt945532.bmeurl.co/A27E486

[ii] Seehttps://www.dispatch.com/news/20200324/feds-yost-will-prosecute-doctors-who-abuse-power-with-personal-coronavirus-prescriptions


© 2020 Dinsmore & Shohl LLP. All rights reserved.

For more COVID-19 developments, see the dedicated National Law Review Coronavirus News page.

A Registered Copyright is the Only Way to Guard Against Infringement

The legal world and the media closely monitor every move the Supreme Court makes or considers. However, some rulings attract more attention than others. One that the general public might have overlooked was a 2019 ruling involving infringement claims. Trying to clean up some inconsistent decisions in the Circuit Courts, the high court ruled unanimously that copyright infringement claims are valid only when there is a copyright registered with the United States Copyright Office.

This is a significant shift

Before this ruling, the courts were often more open to protecting copyrightable property even if it was not officially registered with the Copyright Office. For example, the Fifth and Ninth Circuit ruled that protection comes as soon as the owner applies for the copyright and pays the registration fee. The Tenth and Eleventh Circuits, on the other hand, ruled that protection was only valid when the application was approved. In the past, it was sometimes enough to say “patent pending” to dissuade infringers even if the application was later rejected. This phrase is now irrelevant.

What does this mean for applicants?

The processing time can vary but takes several weeks, which means that applicants will are vulnerable during the application process, which can important in fast-moving businesses like technology. Moreover, some thought the application was too long or too expensive. This ruling makes it clear that the only protection is when the companies, inventors, entrepreneurs, or content creators register their idea.


© 2020 by Raymond Law Group LLC.

Forests Recognized as Contributors to Washington State’s Response to Climate Change

On March 25, 2020, Governor Jay Inslee signed HB 2528 into law which recognizes the contributions of the state’s forests and forest products sector as part of the state’s global climate response.

Relying on recent climate reports recognizing the importance and function of working forests, the law states that sustainable forest management and forest products could be used to increase carbon sequestration by expanding forestland base, or reducing emissions from land conversation to nonforest use. For example, the hundreds of trees on a working forest can store carbon dioxide, which can help mitigate the effects of climate change. However, if the working forest is converted into agricultural, residential, or industrial land—all nonforest uses—then there is no longer the ability to store carbon.

The law recognizes that one way to satisfy Washington State’s greenhouse gas emissions reduction goals articulated in RCW 70.235.020, can occur by supporting the economic vitality of the sustainable forest products sector and other business sectors capable of sequestering and storing carbon. Other sectors included in the law are working forests and the necessary manufacturing sectors that support the transformation of stored carbon into long-lived forest products.

The law then establishes a number of policies regarding the recognition of the forestry and forest products sectors as a climate solution:

  • It is the policy of the state to support the contributions of all working forests and the synergistic forest products sector to the state’s climate response. This includes, but is not limited to, landowners, mills, bioenergy, pulp and paper, and other sectors necessary for forestland owners to continue the rotational cycle of carbon capture and sequestration in growing trees.
  • It is the policy of the state to support the participation of working forests in current and future carbon markets, strengthening the state’s role as a valuable contributor to the global carbon response
  • The legislature intends to recognize and support industry sectors that can act as sequesterers of carbon, such as Washington’s working forests and associated forest products industry.

The enactment of this law provides an opportunity for the forestry and forest products sector to expand its services and contribute to the state’s climate goals. Specifically, it encourages the planting of trees, which supports carbon sequestration; it supports the entire supply chain of the forest products sector, which in turn supports rural communities; and it encourages healthy forest management, which can mitigate the risk of wildfires.


© 2020 Beveridge & Diamond PC

California Judicial Council Adopts Emergency Rules Affecting Unlawful Detainer Actions and More

The Judicial Council of California adopted 11 temporary emergency rules in response to the COVID-19 pandemic affecting eviction proceedings, judicial foreclosures, and statutes of limitations for civil causes of actions, among other things. The rules, adopted April 6, 2020, are effective immediately and apply to all California state courts.

Rules of particular interest:

  •  Emergency Rule 1: Unlawful Detainers
    • Prohibits courts from issuing a summons on an unlawful detainer complaint until 90 days after the Governor declares the state of emergency related to the COVID-19 pandemic is lifted. This rule applies to all new unlawful detainer actions – whether or not the eviction action is related to nonpayment of rent for COVID-19 related issues. The only exception is for an unlawful detainer action necessary to protect public health and safety.
  • Emergency Rule 2: Judicial Foreclosures
    • Stays any action for judicial foreclosure and tolls any statute of limitations for filing such action until 90 days after the state of emergency is lifted.
  • Emergency Rule 9: Tolling of Statutes of Limitations for Civil Causes of Action
    • Tolls statutes of limitations for civil causes of action from April 6, 2020, until 90 days after the Governor declares the state of emergency is lifted.
  • Emergency Rule 10: Extension of 5-Year Rule for Civil Actions
    • Extends the five-year deadline to bring a civil action to trial to five years and six months for all actions filed on or before April 6, 2020.
  • Emergency Rule 11: Depositions through Remote Electronic Means
    • Allows a deponent to not be present with the deposition officer at the time of deposition.

© 2010-2020 Allen Matkins Leck Gamble Mallory & Natsis LLP