How to Banish the Black Market and Ensure Integrity: What States Legalizing Sports Betting for the First Time Can Learn From Nevada and Legalized Cannabis States

Integrity, integrity, integrity. The integrity of the game is a top concern of regulators and the college and professional sports leagues as legalized sports wagering expands across the United States. But what steps can regulators take to ensure that the “fix” is not in on games being wagered upon?

In theory and in practice, legalization of sports wagering provides a better framework to track and trace aberrations in betting patterns that may indicate game fixing. After all, if sports wagering is illegal, there is no one monitoring the action to ensure that those placing wagers are not being ripped off by game fixing. Once wagers are placed in a legal setting, you can bet that the legal bookmakers will be watching the betting patterns closer than anyone to make sure they are not being taken for a ride. And the veteran Nevada sports book operators who are sure to be running  many of the books in newly legalized states have the experience in tracking the numbers to know when something is off.

Indeed, Nevada sports books have long assisted regulators – and the leagues – in uncovering game-fixing schemes, such as the 1999 Arizona State Sun Devils point-shaving scandal, by tracking and notifying regulators when they have spotted irregular betting patterns.

But what about the black market? In theory, the legalization and regulation of sports wagering should bring the industry into the light, allowing the wagering action to be taxed and the backroom sports books to be shut down. And that certainly is an important policy goal of regulators. But it isn’t necessarily that simple.

States drafting their sports wagering laws and regulations can learn a lot from another black-market activity that has been legalized in a number of states – cannabis – to better understand the impact that legalization has had on the black market for cannabis in those states.

The surprising result: the black market has not magically disappeared in the states where cannabis sales have been legalized. One of the key reasons why is the simple fact that legal cannabis prices are generally higher than black-market cannabis because of the additional costs of state-mandated testing, security systems, etc., and, of course, taxes. Coupled with a lack of adequate resources and funding for local law enforcement to crack down on illegal cannabis sales, this makes for a thriving black market, even in states that have legalized cannabis.

What can the regulators who are drafting sports-wagering laws and regulations take away from this? We would not advocate stepping back from drafting the laws to legalize sports wagering, as a lack of any legal market would only help the black market. Instead, regulators should just keep this issue in mind as they draft regulations and try to find a balance between meaningful regulation and over-taxing and heavy regulatory requirements that will add to the costs of legal sports wagering in a way that will either make it unprofitable for legal sports books to operate or make the costs of such wagers so high that bettors continue to seek backroom options.

 

© Copyright 2018 Dickinson Wright PLLC

Will Your Company’s Insurance Cover Losses Due to Phishing and Social Engineering Fraud?

Six Tips for Evaluating and Seeking Coverage for Business Email Compromises

If your company fell victim to a business email compromise – a scam that frequently involves hackers fraudulently impersonating a corporate officer, vendor, business partner, or others, getting companies to wire money to the hackers – would your insurance cover your loss?  There is reason to be concerned about this sort of attack, as the FBI has explained that the “scam continues to grow and evolve, targeting small, medium, and large business and personal transactions. Between December 2016 and May 2018, there was a 136% increase in identified global exposed losses” in actual and attempted losses in U.S. dollars.  The good news for policyholders is that courts across the country have been ruling that crime insurance policies should provide coverage for this sort of loss, at least where it is not specifically excluded.

How do business email compromises work?

In early versions of business email compromises, the hackers send emails that appear to be from company executives, discussing corporate acquisitions, or other financial transactions, and are received by company employees in the finance department.  See, e.g.Medidata Sols., Inc. v. Federal Ins. Co., 268 F. Supp. 3d 471 (S.D.N.Y. 2017), aff’d, — F. App’x — (2d Cir. 2018).  The employee is told that the transaction is highly confidential, and that the employee should work closely with an attorney or other financial advisor to help close the deal.  The employee then is told to wire money to cover the costs of the transaction, very often to a foreign country.  Having been defrauded, the employee logs in to an online banking site, and approves a wire transfer.

In other versions of a business email compromise, hackers get access to email accounts of one party, sometimes via a brute force attack where an attacker breaks into a system by guessing a password, or via a phishing attackwhere a user is fooled into typing a username and password into a fraudulent site.  Then, the hacker sends out emails from the compromised account, pretending to be a vendor, and asking for payment to be sent to a different bank account.  See, e.g.Am. Tooling Center, Inc. v. Travelers Cas. & Sur. Co. of Am., — F.3d — (6th Cir. 2018).  Again, having been defrauded, the employee has money wired to the fraudster, instead of to the vendor.

Will insurance cover losses due to business email compromises?

The answer to whether insurance carriers will cover these losses – without court intervention – is “it depends.”  Recent decisions have ordered insurance carriers to provide coverage.  And the insurance industry has been scrambling to write new endorsements for their insurance policies that the insurance companies say provide coverage for business email compromises.

A common place for seeking coverage for these losses is under crime insurance policies.  Many crime insurance policies include coverage for “computer fraud,” “funds transfer fraud,” or even “computer and funds transfer fraud.”  Exemplar “computer fraud” coverage applies to “direct loss” of money resulting from the fraudulent entry, change, or deletion of computer data, or when a computer is used to cause money to be transferred fraudulently.  Exemplar “funds transfer fraud” coverage applies to “direct loss” of money caused by a message that was received initially by the policyholder, which purports to have been sent by an employee, but was sent fraudulently by someone else, that directs a financial institution to transfer money.  A reasonable policyholder, which fell victim to a fraudulent scheme via a computer, or transferred funds because of a fraudulent scheme, likely would think that computer and funds transfer fraud coverages would apply to the losses.

What have courts said?

Two recent decisions from federal courts of appeal have resulted in coverage under crime policies for business email compromise losses.

The first is the July 6, 2018 opinion issued in Medidata Solutions, Inc. v. Federal Insurance Co., No. 17-2492 (2d Cir.).  The Medidata trial court ruled that a crime insurance policy provides coverage for a fraudulent scheme and wire transfer.  The Court of Appeals for the Second Circuit affirmed the trial court’s decision.  In Medidata, the policyholder’s employees received emails that purported and appeared to be from high level company personnel but were, in fact, sent by fraudsters.  Based on those emails, and messages from purported outside counsel, Medidata wired nearly $5 million to the fraudsters.  It sought coverage under a crime policy that it bought from Chubb that had computer fraud, funds transfer fraud, and other coverages.  The trial court ruled that computer fraud and funds transfer fraud coverages both applied.  It rejected the arguments that the loss was not “direct” because there were steps in between the original fraudulent message and the wiring of funds.

On appeal, the Second Circuit ruled that Medidata’s loss was “direct” under the insurance policy language.  “Federal Insurance further argue[d],” as carriers have done in many business email compromise cases, “that Medidata did not sustain a ‘direct loss’ as a result of the spoofing attack, within the meaning of the policy.”  Slip op. at 3.  The Court of Appeals held that because “[t]he spoofed emails directed Medidata employees to transfer funds in accordance with an acquisition, and the employees made the transfer that same day,” the loss wasdirect.  Id.  The court rejected the insurance carrier’s argument that the loss was not direct because “the Medidata employees themselves had to take action to effectuate the transfer”; the employees’ actions were not “sufficient to sever the causal relationship between the spoofing attack and the losses incurred.”  Slip op. at 3.  The Court of Appeals did not address the trial court’s ruling that funds transfer fraud coverage applied, “[h]aving concluded the Medidata’s losses were covered under the computer fraud provision.”  Id.

Shortly after Medidata was issued, the Sixth Circuit decided on July 13, 2018 that computer fraud coverage applies to losses resulting from a business email compromise in American Tooling Center, Inc. v. Travelers Casualty & Surety Co., No. 17-2014 (6th Cir.).  There, the policyholder (ATC) wired money to fraudsters, instead of a vendor, because of a business email compromise.  The Sixth Circuit reversed the district court, ruling that the losses are “direct,” covered by crime insurance.

In a decision that will be published, the Court of Appeals held there was “‘direct loss’ [that] was ‘directly caused’ by the computer fraud,” even though the policyholder had engaged in “multiple internal actions” and “signed into the banking portal and manually entered the fraudulent banking information emailed by the impersonator” after receiving the initial fraudulent emails.  Id.

Holding that coverage applied, the Sixth Circuit distinguished the Eleventh Circuit’s decision regarding computer fraud coverage in Interactive Communications v. Great American, No. 17-11712, ___ F. App’x ___, 2018 WL 2149769 (11th Cir. May 10, 2018).  Id. at 9-10.  After the policyholder in American Tooling had “received the fraudulent email at step one,” it “conducted a series of internal actions, all induced by the fraudulent email, which led to the transfer of the money to the impersonator at step two.”  The loss occurred at step two; as such, “the computer fraud ‘directly caused’ [the policyholder’s] ‘direct loss.’”  Id. at 10.  By contrast, the Sixth Circuit explained, the policyholder in Interactive Communications only suffered losses at step four in a significantly more complicated chain of events.  See id. at 9-10.

These decisions are great news for policyholders pursuing coverage under crime policies for losses resulting from business email compromises.  And, in light of this new authority, policyholders would be well-advised to examine denial letters carefully, giving due consideration to whether these decisions could be used to argue in favor of coverage.

What options are available to policyholders going forward?

Cynical viewers of insurance history might view the state of coverage as similar to what the industry has done in the past.  That is, initially, cover new claims under “old” policies.  Then, after claims get expensive, hire coverage counsel to tell courts why the carriers must not have meant to cover these new claims (whether the drafting history reflects such an intent or not).  Next, get insurance regulators to approve exclusions purportedly tailored explicitly to the risk, and, at the same time, sell new policy endorsements (often for additional premium) that provide lower limits of coverage for the risk.

That’s what is happening in connection with insurance for business email compromises.  At least one insurance group that drafts crime insurance policies has asked for a definition of computer and funds transfer fraud to be changed, and a new social engineering fraud endorsement to be approved for sale.  Insurers have rolled out these endorsements with limits of coverage that often are capped at low amounts, and might also have high retentions.  These endorsements frequently are available for crime policies and, sometimes, are available for cyberinsurance policies as well.

So what are some options for policyholders trying to structure an insurance program for these risks?  These questions should provide helpful tips:

1. What does the insurance policy include? Policyholders would be well-advised to see whether the insurance program includes social engineering fraud endorsements or coverage parts.

2. What are the applicable limits? Policyholders would be well-advised to check the policy limits that would apply to those coverages.  Binder letters might not disclose a sublimit, and the policyholder might not realize the limit of coverage is lower than the full policy limit until it is too late.

3. Are coverages available under more than one policy? At the time of policy renewal, policyholders would be well-advised to consider asking whether social engineering fraud coverage can be added to a crime program and a cyberinsurance program.

4. Will excess coverage apply, and, if so, when? Policyholders would be well-advised to explore whether excess policies will provide this coverage, and, if so, will “drop down” to attach at the level of any sublimit, to avoid donut holes in the coverage.

5. Will other policy provisions provide coverage, beyond narrow endorsements? If the policyholder faces a claim, policyholders would be well-advised to determine whether other coverages might apply to the losses, notwithstanding a social engineering fraud endorsement.

6. What happens if the insurance carrier says, “no,” or that sublimits apply? If the insurance carrier denies coverage, or tries to apply a sublimit, policyholders would be well-advised to be mindful of the interpretation that two Courts of Appeals have used for computer fraud coverage in similar contexts.

 

© 2018 BARNES & THORNBURG LLP
This post was written by Scott N. Godes of Barnes & Thornburg LLP.

Automatic Renewals of Consumer Contracts: Everything You Ever Wanted to Know But Were Afraid to Ask

Automatic renewals of consumer contracts are governed by overlapping federal and state laws. Such renewals should be used with care, particularly in light of recent changes to state automatic renewal laws (ARLs) and increased scrutiny from government officials and class action lawyers. In this Q&A, members of Drinker Biddle’s Class Actions Team and Consumer Contracts Team provide an overview of the laws governing automatic renewals, with a particular focus on California’s ARL, which is broad in scope, strict in application, and invoked with increasing frequency in class action litigation. See, e.g., Siciliano v. Apple Inc., No. 2013-1-CV-257676 (Cal. Super Ct.) ($16.5 million settlement); Habelito v. Guthy-Renker LLC, No. BC499558 (Cal. Super. Ct.) ($15.2 million settlement). Of course, no alert can capture every nuance of even one ARL, let alone every ARL. Businesses that use automatic renewals would therefore be well-advised to consult counsel and review the statutes directly.

Automatic Renewals Generally

How Are Automatic Renewals Regulated?

Automatic renewals are regulated at both the state and federal levels. At the state level, they are governed by a growing number of ARLs. At the federal level, they implicate Section 5 of the FTC Act, 15 U.S.C. § 45(a), which regulates unfair or deceptive practices, and the Restore Online Shopper’s Confidence Act (ROSCA), 15 U.S.C. § 8403 et seq., which prohibits charging customers unless there has been clear disclosure of, and express consent to, the material terms.

What Does the FTC Act Require?

Federal regulations define a “negative option feature” as “an offer or agreement to sell or provide any goods or services, a provision under which the customer’s silence or failure to take an affirmative action to reject goods or services or to cancel the agreement is interpreted by the seller as acceptance of the offer.” 16 C.F.R. § 310.2(w). The FTC considers automatic renewals to be a type of negative option feature. See, e.g., Negative Options: A Report by the Staff of the FTC’s Division of Enforcement, 2009 WL 356592, at *1. It has also outlined five “principles . . . to guide marketers in complying with Section 5 of the FTC Act when marketing online negative option offers.” Id. at *4. Specifically, it has instructed marketers to:

  1. “[D]isclose the material terms of the offer,” which include the “existence of the offer,” the “offer’s total cost,” the “transfer of a consumer’s billing information to a third party (if applicable),” and “how to cancel the offer.”

  2. “[M]ake the appearance of disclosures clear and conspicuous,” which means that they should “place them in locations on webpages where they are likely to be seen, label the disclosures (and any links to them) to indicate the importance and relevance of the information, and use text that is easy to read on the screen.”

  3. “[D]isclose the offer’s material terms before consumers pay or incur a financial obligation,” for example before consumers “agree to an offer by clicking a ‘submit’ button.”

  4. “[O]btain consumers’ affirmative consent to the offer” rather than “rely on a pre-checked box as evidence of consent.”

  5. “[N]ot impede the effective operation of promised cancellation procedures” by “mak[ing] cancellation burdensome for consumers, such as requiring consumers to wait on hold for unreasonably long periods of time.”

Id. The FTC has filed suit in related contexts to enforce these guidelines. See FTC v. DirecTV, No. 15-1129 (N.D. Cal.) (alleging violations of Section 5 of the FTC Act and ROSCA).

What Does ROSCA Require?

ROSCA contains requirements for negative option features in online transactions. Specifically, it prohibits charging or trying to charge a consumer unless the business:

  1. Provides text that clearly and conspicuously discloses all material terms of the transaction before obtaining the consumer’s billing information.

  2. Obtains a consumer’s express informed consent before charging the consumer’s credit card, debit card, bank account, or other financial account for products or services through such transaction.

  3. [P]rovides simple mechanisms for a consumer to stop recurring charges from being placed on the consumer’s credit card, debit card, bank account, or other financial account.

Id. at §§ 8403(1)-(3).

What Do State ARLs Require?

While their specific requirements vary, ARLs often require: (1) “clear and conspicuous” disclosure of certain terms before the agreement is fulfilled; (2) consent—which in some states must be affirmative and in other states may be passive—to the agreement containing those terms; (3) retainable acknowledgments of those terms; (4) notice of “material” changes to the automatic renewal; and/or (5) reminders in advance of certain renewals.

How Many States Have ARLs?

Twenty-five states have ARLs: Arkansas, California, Colorado, Connecticut, Florida, Georgia, Hawaii, Illinois, Iowa, Louisiana, Maryland, Missouri, Nevada, New Hampshire, New Mexico, New York, North Carolina, Oregon, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Utah and Wisconsin. Three of those—Connecticut; New York; and Pennsylvania—are considering amending their ARLs. Eight other states—Alabama, Massachusetts, Minnesota, New Jersey, Vermont, Virginia, West Virginia and Wyoming—are considering enacting ARLs.

Are All ARLs Generally the Same?

ARLs differ not only in terms of what they cover (with some applying to virtually any consumer contract and others applying only to certain categories of contracts) but also in what they require (with, for example, some requiring clear and conspicuous disclosures before a contract is accepted and others requiring an additional reminder before it renews).

What States Have Narrow ARLs?

Fifteen states—Arkansas, Colorado, Iowa, Maryland, Missouri, Nevada, New Hampshire, New York, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Utah and Wisconsin—have narrow ARLs. These focus on professional home security contracts; health club or dance studio contracts; service contracts for repair of real or personal property; leases of personal property or business equipment; certain telecommunications contracts; and/or buyers’ clubs.

What States Have Broad ARLs?

Ten states—California, Connecticut, Florida, Georgia, Hawaii, Illinois, Louisiana, New Mexico, North Carolina, and Oregon—have broad ARLs that apply more generally to consumer and/or service contracts.

How Can Businesses Comply With Every ARL?

Some businesses tailor their practices to what is (and is not) required in a given state. Others use the strictest requirements from each ARL as the highest common denominators for their entire footprints. Although California’s ARL is generally regarded as one of the broadest and strictest, other ARLs have requirements that California’s does not. In light of the substantial volume of litigation in California, however, we will focus on its requirements for the remainder of this alert.

Automatic Renewals in California

What Does California’s ARL Require?

California’s ARL requires (1) “clear and conspicuous” disclosure, before an agreement is fulfilled, of “automatic renewal offer terms” or “continuous service offer terms”; (2) “affirmative consent” to “the agreement containing” those terms; (3) a retainable acknowledgment of those terms and any cancellation policy; and (4) a retainable notice of any “material changes” to those terms. See Cal. Bus. & Prof. Code § 17600 et seq. Recent amendments also added requirements regarding free gifts and trials and the ability to cancel agreements that are accepted online. See infra.

What Terms Must Be Disclosed?

California’s ARL requires that “automatic renewal offer terms” and “continuous service offer terms” be disclosed in a “clear and conspicuous manner.” Id. § 17602(a)(1). “Automatic renewal” is defined as “a paid subscription or purchasing agreement [that] is automatically renewed at the end of a definite term for a subsequent term,” and “continuous service” is defined as “a subscription or purchasing agreement [that] continues until the consumer cancels the service.” Id. §§ 17601(a), (e).

The “terms” of an “automatic renewal offer”—i.e., the terms that must be disclosed in a “clear and conspicuous manner”—are defined as follows:

  1. That the subscription or purchasing agreement will continue until the consumer cancels.

  2. The description of the cancellation policy that applies to the offer.

  3. The recurring charges that will be charged to the consumer’s credit or debit card or payment account with a third party as part of the automatic renewal plan or arrangement, and that the amount of the charge may change, if that is the case, and the amount to which the charge will change, if known.

  4. The length of the automatic renewal term or that the service is continuous, unless the length of the term is chosen by the consumer.

  5. The minimum purchase obligation, if any.

Id. §§ 17601(b)(1)–(5). Although there is no corresponding definition for the “terms” of a “continuous service offer,” it would be prudent to disclose, in a “clear and conspicuous manner,” the fact that the “subscription or purchasing agreement . . . continues until the consumer cancels the service.” Id. § 17601(e).

In addition, effective July 1, 2018, “[i]f the offer also includes a free gift or trial, the offer shall include a clear and conspicuous explanation of the price that will be charged after the trial ends or the manner in which the subscription or purchasing agreement pricing will change upon conclusion of the trial.” Id. § 17602(a)(1).

When Must Those Terms Be Disclosed?

The terms must be disclosed “before the subscription or purchasing agreement is fulfilled and in visual proximity, or in the case of an offer conveyed by voice, in temporal proximity, to the request for consent to the offer.” Id. § 17602(a)(1).

How Must Those Terms Be Disclosed?

Whether terms are disclosed in writing or orally, the disclosure must be “clear and conspicuous.” Id. § 17601(b). In the case of written disclosures, “clear and conspicuous” means “in larger type than the surrounding text, or in contrasting type, font, or color to the surrounding text of the same size, or set off from the surrounding text of the same size by symbols or other marks, in a manner that clearly calls attention to the language.” Id. § 17601(c). And in the case of audio disclosures, “clear and conspicuous” means “in a volume and cadence sufficient to be readily audible and understandable.” Id.

What Kind of Consent Must Be Obtained?

California requires that consumers give “affirmative consent” to “the agreement containing” the automatic renewal or continuous service terms. As of July 1, 2018, that requirement was amended to make clear that it extends to “terms of an automatic renewal offer or continuous service offer that is made at a promotional or discounted price for a limited period of time.” Id. § 17602(a)(2). It should be noted that some states’ ARLs require disclosure but do not require an affirmative act of consent.

What Qualifies as “Affirmative Consent”?

Although California’s ARL does not define “affirmative consent,” the legislative history and recent enforcement actions are instructive. As can be seen in the California Senate’s Bill Analysis, two avenues for securing affirmative consent for purposes of California’s ARL were contemplated:

[I]n any automatic renewal offer made on an Internet Web page, the business [must] clearly and conspicuously disclose the automatic renewal offer terms prior to the button or icon on which the customer must click to submit the order. In any automatic renewal offer made on an Internet Web page where the automatic renewal terms do not appear immediately above the submit button, the customer must be required to affirmatively consent to the automatic renewal offer terms.

Analysis of 2009 Cal. S.B. No. 340 (Apr. 14, 2009).

Two recent cases filed by the City of Santa Monica are also noteworthy. See People v. Beachbody, LLC, No. 55029222 (Cal. Super. Ct.); People v. eHarmony, No. 17-cv-03314 (Cal. Super. Ct.). These cases resulted in consent decrees that require changes to the companies’ website disclosures, which are now required to include “check-boxes” to enable consumers to affirmatively consent to the automatic renewal terms. In this way, the consent decrees appear to reach even further than the California Bill Analysis requires, as the Bill Analysis suggests that placing the terms “above the submit button” would suffice. See S.B. 340 Sen., 4/14/2009.

A recent FTC action also bears mention. See FTC v. AdoreMe, Inc., No. 1:17-cv-09083-ALC, Dkt. No. 4 (S.D.N.Y. Nov. 30, 2017). Like California’s ARL, ROSCA is silent on what constitutes “express” consent. Nevertheless, in settling the action, AdoreMe agreed to obtain consent to any negative option feature “through a check box, signature, or other substantially similar method, which the consumer must affirmatively select or sign to accept the Negative Option Feature, and no other portion of the offer.”

Must an Acknowledgement Be Sent to Consumers?

California’s ARL requires that consumers receive acknowledgments of automatic renewal or continuous service terms. See id. § 17602(a)(3). The acknowledgment may be sent “after completion of the initial order.” Id. § 17602(e)(1).

What Must That Acknowledgement Look Like?

The acknowledgment must be in a format that is “capable of being retained by the consumer” and must include “the automatic renewal or continuous service offer terms, cancellation policy, and information regarding how to cancel.” Id. § 17602(a)(3). With respect to the cancellation policy, the acknowledgement must also “provide a toll-free telephone number, electronic mail address, a postal address if the seller directly bills the consumer, or it shall provide another cost-effective, timely, and easy-to-use mechanism for cancellation. . . .” Id. § 17602(b). Finally, as of July 1, 2018, “[i]f the automatic renewal offer or continuous service offer includes a free gift or trial, the business shall also disclose in the acknowledgment how to cancel, and allow the consumer to cancel, the automatic renewal or continuous service before the consumer pays for the goods or services.” Id. § 17602(a)(3).

Do Customers Have Specific Cancellation Rights?

As of July 1, 2018, where a consumer accepts an automatic renewal or continuous service offer online, that consumer “shall be allowed to terminate the automatic renewal or continuous service exclusively online, which may include a termination email formatted and provided by the business that a consumer can send to the business without additional information.” Id. § 17602(c) (emphasis added).

Do Customers Need to Receive Renewal Reminders?

California’s ARL does not require that businesses remind customers that contracts are about to renew. It should be noted, however, that several of the other broad ARLs do require renewal reminders in certain circumstances.

Can Businesses Change the Terms of the Agreement?

California’s ARL does not prohibit businesses from changing the terms of covered agreements, but it does require that businesses provide notice of any “material change in the terms of the automatic renewal or continuous service that has been accepted by a consumer in [California.]” Id. § 17602(d). Notably, the plain language of the statute does not purport to require notice of changes—even material changes—to the agreement generally. Rather, it appears to require notice only of material changes to “the terms of the automatic renewal or continuous service.” Id. Where such a change is made, the statute requires that businesses “provide the consumer with a clear and conspicuous notice of the material change and provide information regarding how to cancel in a manner that is capable of being retained by the consumer.” Id. Importantly, that notice must be “clear and conspicuous,” id., which as noted above is defined in a way that imposes specific requirements for the presentation of the changed terms.

Is There a Safe Harbor Under the California ARL?

There is a safe harbor from the ARL’s civil remedies for “good faith” compliance with the ARL’s provisions. See id.§ 17604(b). Courts have yet to address what does (or does not) constitute “good faith” compliance under the statute, and at least one court has held that the issue presents a question of fact not amenable to dismissal at summary judgment. See Roz v. Nestlé Waters N. Am., Inc., No. 16-4418, 2017 WL 6942661, at *3 (C.D. Cal. Dec. 6, 2017).

Are Any Contracts Excluded from California’s ARL?

California’s ARL has several exemptions, including ones for services that are provided by businesses that are (a) “doing business pursuant to a franchise issued by a political subdivision of the state or a license, franchise, certificate, or other authorization issued by the California Public Utilities Commission”; (b) “regulated by the CPUC, the Federal Communications Commission, or the Federal Energy Regulatory Commission”; (c) “regulated by the Department of Insurance”; (d) certain regulated “[a]larm company operators”; (e) “[a] bank, bank holding company, or the subsidiary or affiliate of either, or a credit union or other financial institution, licensed under state or federal law”; and (f) certain regulated “[s]ervice contract sellers and service contract administrators[.]” Cal. Bus. & Prof. Code §§ 17605(a)–(f).

Is There a Private Right of Action under California’s ARL?

Strictly speaking, there is no private right of action under California’s ARL. See Johnson v. Pluralsight, LLC, 728 F. App’x 674, 677 (9th Cir. Mar. 29, 2018) (“Because there is no private cause of action under the ARL, the district court properly dismissed Johnson’s ARL claim.”). However, private litigants can sue under California’s other consumer protection statutes for conduct that violates the ARL. See id. (“Permitting consumers to sue under the [Unfair Competition Law] for ARL violations fulfills [the ARL’s] objective.”).

What Remedies Are Available under California’s ARL?

Goods sent to consumers in violation of the ARL’s affirmative consent requirements are deemed “unconditional gifts.” Specifically, the statute provides:

In any case in which a business sends any goods, wares, merchandise, or products to a consumer, under a continuous service agreement or automatic renewal of a purchase, without first obtaining the consumer’s affirmative consent as described in Section 17602, the goods, wares, merchandise, or products shall for all purposes be deemed an unconditional gift to the consumer, who may use or dispose of the same in any manner he or she sees fit without any obligation whatsoever on the consumer’s part to the business, including, but not limited to, bearing the cost of, or responsibility for, shipping any goods, wares, merchandise, or products to the business.

Cal. Bus. & Prof. Code § 17603.

As the language of Section 17603 suggests, the “unconditional gift” remedy appears limited on its face to instances where fungible “goods, wares, merchandise, or products” are sent to customers. Id. As one court observed, “a consumer could keep a good or product that is sent in violation of the Automatic Renewal Law, but there is nothing to keep when it is only a service that is provided.” Mayron v. Google, Inc., No. 1-15-CV-275940, 2016 WL 1059373, at *3 (Cal. Super. Ct. 2016). Drawing the line between tangible goods and intangible services will be a point of contention in automatic renewal cases going forward. See, e.g., Johnson, 728 F. App’x at 677 (“Assuming arguendo that section 17603 is limited to tangible products, [defendant]’s course slides and sample codes amply qualify as tangible products.”).

Has There Been Litigation under the California ARL?

California’s ARL has been a significant source of class action litigation that has targeted a broad range of industries, including retailers, food distributors, technology companies, and entertainment enterprises. New cases are threatened or filed regularly, including by federal and state regulators. In light of the recent statutory amendments and several seven-figure class action settlements, we expect to see continued interest in these archetypal “gotcha” class actions.

©2018 Drinker Biddle & Reath LLP. All Rights Reserved

Duck Boats Reportedly Designed by Businessman with No Engineering Training

Several major publications are reporting that court records indicate that the deadly duck boats were designed decades ago by a businessman who had no engineering experience.

The Wall Street Journal, the Los Angeles Times and USA Today are among those reporting that the designer and entrepreneur, Robert F. McDowell, had completed only two years of college and “had no background, training or certification in mechanics when he came up with the design for ‘stretch’ duck boats” USA Today, “Court Records show duck boat in Missouri disaster was designed by entrepreneur with no engineering training,” by Matt Pearce, July 24, 2018.

The discovery came upon an examination of a lawsuit filed over a roadway disaster in Seattle involving a similar duck boat in 2015.

Investigators are still trying to determine what caused the duck boat to sink on Table Rock Lake near Branson, Missouri, last week. It was carrying 31 people on a sightseeing tour, killing 17 and injuring 14 more people. U.S. Senator Claire McCaskill (D-Mo) called the duck boats a “sinking coffin” and indicated she intends to draft federal legislation proposing stronger safety standards.

Duck boats were originally created during World War II to transport troops and cargo on land and sea. After the war ended, they reportedly became surplus items and were repurposed as pleasure crafts by tour companies across the country. Since then, they have been involved in multiple deadly accidents on the water and on roads, being amphibious vehicles.

USA Today reported that Ride the Ducks Branson vehicles were modified including lengthening the hull and reassembling the craft, according to the National Highway Transportation Safety Administration. These refurbished duck boats allegedly were designed and developed by McDowell who was “self-educated by going to auto parts stores and talking to different people,'” according to the court filing. The court filing goes on to say that engineers were not consulted. McDowell’s father in the 1970s owned the duck boat company in Branson that was then called Ozark Scenic Tours. He sold the company in 2001-02.

Robert A. Clifford, founder and senior partner at Clifford Law Offices in Chicago and a maritime lawyer who has handled numerous cases involving boat tragedies, has been outspoken on the lack of safety and guidelines for these amphibious vessels. Recently, he was quoted in USA Today, ABC News and WGN Radio as well the National Law Journal where he was quoted by reporter Amanda Bronstad saying,

“Lawsuits will inevitably come from this tragic incident.” … It is clear that the owners and operators of the boat were negligent in the decision to take the boat out in the waters, despite clear weather warnings that it was unsafe that day. In addition, surviving witnesses have stated that they were told it was unnecessary to wear life jackets. I view this as similar to wearing seat belts in a car – you are better off with having them on with the likelihood greater that they may help you. Without them, you have less of a chance of survival.

Clifford believes the U.S. Coast Guard should place a 20 knot forecast and/or observed wind limit and no in-thunderstorm operations restriction on all duck boat in-water operations when paying passengers are on board. Clifford also believes that duck boat operators, in order to adhere to the above restrictions, should be required to check all available National Weather Service forecasts and radar sources for the area of operation within 30 minutes of embarking on in-water operations with paying passengers on board.

© 2018 by Clifford Law Offices PC. All rights reserved.
This article was written by Robert A. Clifford of Clifford Law Offices

Bitcoin Boom: Are Cryptocurrencies Securities Subject to Regulation by the SEC?

Bitcoin was launched in January 2009 as the world’s first cryptocurrency — a digital asset designed to function as a currency that is created and managed by decentralized computers, using encryption techniques instead of a central bank or other government authority.

Until early 2017, Bitcoin barely registered on the average investor’s radar screen. But beginning in 2017, the price of Bitcoin jumped dramatically from $1,290 in early March to $19,500 in mid-December. With the sharp rise in the price of bitcoin, alternative cryptocurrencies (a/k/a “altcoins”) such as Litecoin and Ethereum saw investor interest spike as well. By May 2018, over 1,800 cryptocurrencies had been created.

Cryptocurrency Boom

The cryptocurrency boom (or bubble, as many economists warn) has spawned interest in the blockchain technology that underlies cryptocurrencies. Broadly, blockchain technologies enable the creation of digital ledgers, or lists of records (or “blocks”) that can be used to share information, transfer value, and record transactions in a secure, decentralized environment. For example, several governments are experimenting with blockchain technologies in land registries to reduce the risk of fraud in real property transactions. The ledger of a particular property would contain a verifiable and validated history of transactions concerning the property. Bloomberg reports that law firms are exploring the use of blockchain to generate, execute and authenticate agreements. IMS anticipates that such applications and many others will increase reliance on experts who understand the underlying technologies and can competently testify concerning infringement of any related patents and/or theft or misappropriation of trade secrets.

Of course, as exciting new technologies become commercialized and investors find themselves smitten by the promise of high returns, there is a foreboding a dark side with con artists seeking to capitalize on gullibility. With cryptocurrencies, frauds have frequently taken the form of initial coin offerings (ICO’s) in which entrepreneurs purport to raise capital for a new venture by exchanging digital “tokens” for investor funds.

The Dispute

In one such scam, the U.S. Attorney for the Eastern District of New York secured an indictment for securities fraud against a defendant who had offered tokens in an ICO for REcoin Group, and promised to invest the proceeds in real estate, and then diamonds. U.S. v. Zaslavskiy, 17 CR 00647 (E.D.N.Y). The defendant moved to dismiss the indictment for lack of jurisdiction based on an interesting defense — he argued that the tokens he had peddled were not securities, but currencies, which are exempted by statute from the definition of “securities.” The broad question thus raised was whether a cryptocurrency issued in an allegedly fraudulent ICO qualifies as a security subject to regulation by the SEC.

In a memorandum of law opposing the motion to dismiss, the government argued that while nominally labeled a currency, the tokens were securities in economic substance since the defendant promised purchasers of the tokens that they would receive a return on their investment. In support, the government cited the Supreme Court’s decision SEC v. W.J. Howey Co., 328 U.S. 293 (1946), which defined an “investment contract” as an investment of money in a common enterprise with a reasonable expectation of profits to be derived solely from the entrepreneurial or managerial efforts of others. In analyzing a particular transaction, the Supreme Court stressed that “form [should be] disregarded for substance and the emphasis placed upon economic reality.”

Here, investors in the REcoin ICO pooled their money in a common enterprise through the purchase of tokens with the expectation that REcoin would pay profits based on the defendant’s skill and effort managing real estate or trading diamonds; they were not directly purchasing real estate or diamonds. Thus, the tokens were securities, the government maintained.

The government further argued that the term “currency” is traditionally defined as a “medium of exchange” approved for the payment of debts and purchase of goods. Typically, courts have found that only cash, or a cash substitute qualifies as currency. Here, the tokens sold by defendant could not function as a medium of exchange anywhere in the physical world or any digital realm. Nor did defendant market the tokens as a substitute for cash.

After oral argument, the judge in the case has taken the matter under advisement. In the meantime, in Congressional testimony and public appearances, SEC officials have repeatedly taken the position that where the economic substance of an ICO is the same as a standard securities offering, the tokens qualify as securities. In contrast, where investors purchase tokens because they require the functionality that the token itself provides — for example, to record a deed or execute a contract in a digital ledger that uses blockchain technology — then the token is not a security.

For example, in April 2018 testimony before the Financial Services and General Government Subcommittee of the House Committee on Appropriations, Chairman of the SEC, Jay Clayton distinguished between cryptocurrencies such as Bitcoin, which are a “pure medium of exchange,” and thus not securities, and tokens used to finance new ventures, which are securities. Subsequently, in a June 14, 2018 presentation at a tech conference, the Director of the SEC’s Division of Corporation Finance, William Hinman, reiterated that a cryptocurrency is not a security when it operates principally as a medium of exchange in a network without any central third party upon whose efforts the success of the network depends.

Conclusion

Hinman added, however, that whether a digital token qualifies as a security or not in a specific context can be a close call, and the outcome will depend on a fact-intensive inquiry. He cited a laundry list of factors that the SEC will examine (including the degree of the promoters’ ongoing involvement and control, the expectations and motivations of investors when making their purchases, the independent utility of the token offered for sale, and the breadth and method of the tokens’ distribution), and invited promoters of digital assets and their counsel to help the SEC work through the issues in particular cases before proceeding. IMS’s roster of blockchain experts can assist counsel with navigating these factors and related intellectual property, technical, and regulatory matters with your own clients.

© Copyright 2002-2018 IMS ExpertServices, All Rights Reserved.
This article was written by Joshua Fruchter, IMS ExpertServices

Germany Provides Draft of Brexit Implementation Act

On 18 July 2018, the German Department of State distributed to associations in Germany, a first ministerial draft of a German Federal Brexit Implementation Act, Brexit-Übergangsgesetz (BrexitÜG), for consultation by 8 August 2018.

The draft Act provides that the UK shall, during the proposed transition period from 30 March 2019 to 31 December 2020, be deemed to be a member state of the EU for all purposes of German Federal Law. However, the BrexitÜG only deals with the Brexit transition on German Federal law level – it does not address the Brexit transition on the level of the state laws of the 16 German states. State-level Brexit transition provisions will need to be adopted by the individual state parliaments.

The BrexitÜG provides for the “grandfathering” of applications by British nationals for German citizenship beyond the end of the transition period, in cases where the application was submitted before the end of the transition period and met all relevant requirements. The purpose of that grandfathering is that British nationals shall not be denied dual citizenship just because of administrative delays. Normally, German law would not allow dual citizenship unless the other citizenship is that from another member state of the EU.

However, the draft BrexitÜG only caters for the “Deal Scenario” and not the “No Deal Scenario”, with the preparatory papers and explanations relating to the draft Act not addressing a situation of “No Deal”, and no subsequent transition period being agreed between the UK and the EU. It remains to be seen if a “No Deal Scenario” will be added to the current draft of the BrexitÜG, or whether this will be postponed until the beginning of 2019.

The grandfathering provisions in favour of British nationals applying for German citizenship do not apply in favour of German nationals applying for  British citizenship. German citizens only granted British citizenship after the end of the transition period would then cease to be German nationals, due to the German law that does not allow dual citizenship other than where that citizenship is from another member state of the EU.

© Copyright 2018 Squire Patton Boggs (US) LLP
This article was written by Jens Rinze of Squire Patton Boggs (US) LLP

Not So Fast – Challenges in Reincorporating from California to Delaware

There are several reasons that a California corporation may want to reincorporate to Delaware. Venture capital funds or other investors may demand a reincorporation to Delaware as a condition to financing. Cumulative voting for director elections, required for California corporations but not required for Delaware corporations, may have become a problem. The corporation may want to take advantage of the flexibility of Delaware’s business laws, the abundance of legal precedent and the availability of the Court of Chancery to resolve corporate disputes.

Whatever the reason, reincorporating from California to Delaware may be more challenging than originally anticipated due to a few complicating factors: (1) California’s long-arm statute, (2) the availability of exemptions from registration and qualification under state and federal securities laws and (3) restrictions under the company’s contracts.[1]

California’s Long-Arm Statute – CGCL Section 2115

Under California’s long-arm statute, Section 2115 of the California General Corporation Law (“CGCL”), a foreign corporation may be considered a “quasi-California” or “pseudo-foreign” corporation depending on the level of the corporation’s ties to California and, therefore, purportedly subject to certain provisions of the CGCL, including, without limitation, provisions with respect to the following:

  • cumulative voting for director elections;

  • fiduciary duties of directors;

  • dissenters’ rights;

  • indemnification of directors, officers and others;

  • shareholder approval of mergers and other reorganizations; and

  • restrictions on distributions, dividends and share repurchases.

A two-part test is used to determine whether a foreign corporation is subject to CGCL Section 2115:

  1. The Voting Shares Test – Are more than 50% of the corporation’s outstanding voting securities held of record by persons having addresses in California appearing on the books of the corporation?

  2. The Doing Business Test – Is the average of the corporation’s (a) property factor, (b) payroll factor and (c) sales factor more than 50% during the corporation’s last full income year?[2] These three factors are defined in Sections 25129, 25132 and 25134 of the California Revenue and Taxation Code, and are calculated by completing Schedule R as part of the corporation’s California state tax returns:

    1. Property Factor – A corporation’s property factor is calculated by dividing (i) the average value of the corporation’s real and tangible personal property owned or rented and used in California during the taxable year by (ii) the average value of all of the corporation’s real and tangible personal property owned or rented and used during the taxable year.

    2. Payroll Factor – A corporation’s payroll factor is calculated by dividing (i) total compensation paid in California during the taxable year by (ii) total compensation paid elsewhere during the taxable year.

    3. Sales Factor – A corporation’s sales factor is calculated by dividing (i) total sales in California during the taxable year by (ii) total sales everywhere during the taxable year.[3]

If both the “voting shares test” and the “doing business test” are satisfied, then the surviving corporation following the reincorporation merger may subsequently become subject to Section 2115 of the CGCL, potentially frustrating the decision to reincorporate in Delaware, particularly if a primary reason is to escape cumulative voting.

Although CGCL Section 2115 seems problematic as written, its bark may be worse than its bite. California-based Delaware corporations have successfully challenged the enforceability of CGCL Section 2115 in court. For example, in VantagePoint Venture Partners 1996 v. Examen, Inc., 871 A.2d 1108 (Del. 2005), the Delaware Supreme Court rejected CGCL Section 2115 on grounds that it violated the “internal affairs doctrine” under Delaware law, which provides that the law of the state of incorporation should govern any disputes regarding that corporation’s internal affairs. Moreover, both California and Delaware courts have enforced forum-selection clauses set forth in the charter documents of Delaware corporations, and are even more likely to do so in the future following Delaware’s adoption of Section 115 of the Delaware General Corporation Law (“DGCL”) in 2015. DGCL Section 115 explicitly provides that the certificate of incorporation or bylaws of a Delaware corporation may require that any or all internal corporate claims be brought solely and exclusively in Delaware courts.

Exemption from Registration and Qualification under the Securities Laws

Under Rule 145(a)(2), a statutory merger in which the securities of the target corporation will be exchanged for securities of any other person will be deemed to be an offer and sale under the Securities Act of 1933, as amended (the “Securities Act”), unless the “sole purpose of the transaction is to change an issuer’s domicile solely within the United States.” What does “sole purpose” mean in this context? It does not mean that there can be no changes to the rights of shareholders in connection with the reincorporation. The SEC Staff has issued many no-action letters that have permitted changes to be made to shareholder rights in connection with a reincorporation merger while still falling within the Rule 145(a)(2) exception.[4] However, it is not entirely clear how many changes can be made before one may question whether the “sole purpose” of the transaction is to change domicile, as opposed to some other purpose, such as eliminating important shareholder rights.

If the parties cannot get comfortable that the “sole purpose” of the transaction is to change the California corporation’s domicile, as provided in Rule 145(a)(2), then the reincorporation merger must be analyzed as if it involves the offer and sale of shares by the Delaware corporation to the shareholders of the California corporation. Accordingly, under the Securities Act and applicable “blue sky” laws, the transaction must either be registered or qualified or exempt therefrom. In fact, blue sky laws must also be considered in the Rule 145(a)(2) scenario, because there may not be a similar exception to the definition of offer and sale under state law.

If all of the shareholders of the California corporation are “accredited investors,” as defined in Rule 501(a) of Regulation D promulgated under the Securities Act,[5] then the analysis is relatively straight-forward.

Under Rule 506 of Regulation D, a safe harbor for establishing that an offer or sale of securities is a transaction not involving a public offering within the meaning of Section 4(a)(2) under the Securities Act, an issuer may offer and sell securities to an unlimited number of accredited investors and for an unlimited dollar value. Additionally, Rule 506 does not require the issuer to provide any particular information to accredited investors regarding the offering, though the issuer still needs to be mindful of anti-fraud rules, such as Rule 10b-5. Rule 506 has some other requirements, including the requirement to prepare and file with the Securities and Exchange Commission (“SEC”) a notice on Form D no later than 15 days after the first sale of securities in the offering, but they are typically “easy bases to tag” for reincorporation transactions.

Securities issued under Rule 506 are “covered securities” under Section 18 of the Securities Act and therefore preempt regulation under state blue sky laws. However, states may require an issuer to file a notice informing the applicable state agency of the Rule 506 offering. For example, CGCL Section 25102.1(d) provides that the issuer must (1) file a copy of the Form D for any Rule 506 offering with the California State Commissioner, (2) file a consent to service of process pursuant to CGCL Section 25165 and (3) pay a filing fee. If the issuer has shareholders in states other than California, then the laws of those states must also be analyzed to see if a notice and/or fee is required.

The analysis gets more complicated if the California corporation has shareholders that do not qualify as “accredited investors.” Although an issuer can still rely on Rule 506 if securities will be issued to fewer than 35 unaccredited investors, the compliance burden increases significantly because the issuer will be required to provide to unaccredited investors in advance of the sale of securities (i.e., before the purchase agreement, merger agreement or similar agreement is signed) certain disclosures meeting the line item requirements of Rule 502(b)(2) of Regulation D. This is true irrespective of whether the unaccredited investors have a “purchaser representative” as contemplated by Rule 506(b)(2)(ii).

The required disclosures for unaccredited investors under Rule 506 can be costly and time-consuming to prepare. These include prescribed financial statement information and non-financial statement information, including the information required by Form S-4 for business combinations. Some relief is given under Rule 502(b) in that such disclosure only needs to be provided “to the extent material to an understanding of the issuer, its business and the securities being offered.”

However, the fact that any disclosure needs to be prepared at all to rely on Rule 506 in an offering to unaccredited investors significantly increases the compliance burden.

In the event that the California corporation has more than 35 unaccredited investors – or if the issuer does not want to prepare the disclosures required by Rule 506 for unaccredited investors – there are alternatives to Rule 506 for an exemption under the Securities Act. For example, if the total value of securities to be issued is less than $5.0 million, then the issuer may be able to rely on Rule 504 of Regulation D for an exemption from registration.[6]Alternatively, the issuer could conclude that the offer and sale of securities is a transaction not involving a public offering under Section 4(a)(2) of the Securities Act applying the Ralston Purina test.[7] Neither Rule 504 nor Section 4(a)(2) requires the issuer to provide any particular disclosure to unaccredited investors, though as noted above an issuer must always be mindful of anti-fraud rules.

The drawback to using Rule 504 or a “naked” Section 4(a)(2) exemption (i.e., relying on Section 4(a)(2) without the Rule 506 safe harbor) is that the offered securities will not be “covered securities” under Section 18 of the Securities Act and therefore will be subject to regulation under state blue sky laws. In California, because the transaction will involve the exchange of securities incident to a merger, the transaction will need to be qualified under CGCL Section 25120 (not CGCL Section 25110), unless there is an available exemption.[8]

The two most promising exemptions from CGCL Section 25120 are typically CGCL Section 25103(c) and CGCL Section 25103(h).

CGCL Section 25103(c) is useful if a number of shareholders have addresses of record outside of California. CGCL Section 23103(c) provides that a transaction incident to a merger is exempt from qualification under CGCL Section 25120 if fewer than 25% of shareholders of each class of stock have addresses in California. However, for purposes of this calculation, under CGCL Section 25103(d), any securities held to the knowledge of the issuer in the names of broker-dealers or nominees of broker-dealers or any securities controlled by any one person who controls directly or indirectly 50% or more of the outstanding securities of that class shall not be considered outstanding. It is important to note that the exemption is based on shareholders with “addresses” in California, not “residences” in California, so there is a little room to maneuver there.

CGCL Section 25103(h) provides an exemption from qualification under CGCL Section 25120 if the following criteria are satisfied:

  • The transaction, had the exchange transaction involved the issuance of a security in a transaction subject to the provisions of Section 25110, would be exempt from qualification under Section 25102(f); and

  • Either:

    • Not less than 75% of shares voted for the transaction, not less than 10% of shares voted against the transaction and shareholders have dissenters’ rights with respect to the transaction; or

    • The transaction is “solely for the purposes of changing the issuer’s state of incorporation or organization” or form of organization, all securities of a similar class are treated equally, and the holders of nonredeemable voting equity securities receive nonredeemable voting equity securities.

Turning to the first prong of the test under CGCL Section 25103(h), the following criteria would need to be satisfied for a transaction to be exempt under CGCL Section 25012(f):

  • Sales of the security must not be made to more than 35 unaccredited investors, including persons not in California (no limit on accredited investors);

  • Each of the participants in the exchange must have a preexisting business relationship with the offeror or any of its partners, officers, directors or controlling persons, or by reason of his or her business or financial experience could be reasonably assumed to have the capacity to protect his or her own interests in connection with the transaction;

  • Each of the participants in the exchange must be purchasing for his or her own account and not with a view to or for the sale in connection with any distribution of the security; and

  • The offer and sale of the security must not be accomplished by the publication of any advertisement.

Other potential bars for the applicability of CGCL Section 25103(h) would be if dissenters’ rights do not apply to the transaction. In that case, the Delaware corporation would not qualify for an exemption based on the requirement under CGCL Section 25103(h)(1)(A) that the proposed transaction provide for dissenters’ rights. We note that a potential work-around here could be to contractually provide for dissenters’ rights in connection with the reincorporation transaction.

In addition, whether a reorganization merger would be “solely for the purposes” of changing the state of incorporation, as required under CGCL Section 25103(h)(1)(B), could be challenged to the extent there are differences in shareholders’ rights under the surviving corporation when compared to the disappearing corporation, such as the removal of cumulative voting of directors.

California law lacks helpful precedent on the issue of whether a reorganization merger would be “solely for the purposes” of changing the state of incorporation. As persuasive authority, the SEC has issued some no-action letters that address the issue of whether the “sole purpose” of a transaction is “to change an issuer’s domicile solely within the United States,” in the context of interpreting Rule 145(a)(2). In such letters, the Staff granted no-action relief in certain situations where a change in the state of domicile was accompanied by revisions to the issuer’s charter and bylaws that included provisions that could not have been adopted under the laws of the company’s prior state of incorporation. It is unclear, however, whether California would grant similar relief.

Fairness Hearing

If Rule 506 does not work and you do not qualify for an exemption from qualification under the CGCL, you would need to apply for a permit to qualify the issuance of shares with the California Department of Business Oversight (“DBO”). You would do so through the process of a fairness hearing, which is provided for under CGCL Section 25142.

During the fairness hearing, the DBO will examine all relevant factors in determining whether the transaction is fair and equitable, with the following factors considered to be the most material:

  • the primary reasons for the reincorporation;

  • whether there are any significant objections to the reincorporation;

  • how shareholders are treated in connection with the reincorporation;

  • whether adequate notice of the reincorporation was provided to shareholders; and

  • whether the reincorporation was approved by shareholders.

If the DBO determines that the transaction is fair, the Commissioner will issue a permit allowing the Delaware corporation to issue shares to the California corporation’s shareholders in connection with the reincorporation merger. As an added bonus, the transaction would then qualify for an exemption under Section 3(a)(10) of the Securities Act based on the DBO approving the issuance of shares through the fairness hearing process, so the reincorporation would also be covered on the federal side.

Other State Exemptions

As noted above (in the context of offerings to accredited investors), if some shareholders are located in states other than California, you would need to look at securities regulations in those states to determine whether the merger transaction would qualify for a securities exemption or would need to be registered and qualified in those states.

Contractual Approvals

Aside from procedural and securities law requirements of reincorporating a California corporation in Delaware, you need to consider the effect of the merger on the corporation’s contracts.

As part of the merger transaction, the California corporation would be assigning its assets and liabilities by operation of law to the newly-formed Delaware corporation, including its existing contracts with customers, suppliers, landlords, lenders and other counterparties. To the extent that any of your agreements contain language restricting assignment – by operation of law or otherwise – reincorporating would constitute a technical breach of these agreements. As a result, before deciding to reincorporate, it is advisable to review your material contracts to confirm whether the merger transaction would require notice or consent, constitute an event of default, or otherwise constitute a breach. If so, it may be worth requesting counterparty consent for any material contracts prior to reincorporating.


[1]  The basic process for reincorporating your California corporation in Delaware is relatively straightforward. The first step is organizing a new corporation in the State of Delaware by submitting a Certificate of Incorporation with the Delaware Secretary of State. In conjunction with filing the Certificate of Incorporation, the Delaware corporation would adopt bylaws to establish the governing rules of the corporation in the reincorporation merger. Next, the California and the Delaware corporations would merge, with the California corporation as the disappearing corporation and the Delaware corporation as the surviving corporation.

To complete the merger, you would be required to comply with the requirements under both California and Delaware corporate law. Under California law, both board and shareholder approval must be obtained. Although CGCL Section 1201(b) provides that shareholder approval is not required if the shareholders of the disappearing corporation possess more than five-sixths of the voting power of the surviving corporation, CGCL Section 1201(d) states that the principal terms of the merger must be approved by shareholders if the shareholders receive shares of the surviving corporation having different rights, preferences, privileges or restrictions than the shares surrendered. CGCL Section 1201(d) also states that shares in a foreign corporation received in exchange for shares in a domestic corporation are necessarily considered to have different rights, preferences, privileges or restrictions.

After board and shareholder approval of the merger is obtained, the California corporation would file a Certificate of Ownership with the California Secretary of State. The filing would be accompanied by a resolution or plan of merger adopted by the board of the California corporation, authorizing the merger and setting forth its terms. As a final step, upon receipt of the Certificate of Ownership and Merger from the Delaware Secretary of State, the California corporation would submit a certified copy of the Certificate of Ownership and Merger to the California Secretary of State to complete the merger filings in California.

In Delaware, only board approval and Secretary of State filings are required. To complete the merger in Delaware, the Delaware corporation would file a Certificate of Ownership with the Delaware Secretary of State as well as the merger authorizing resolutions adopted by its board. Shareholder approval would not be required because, under DGCL Section 253(a), the California corporation would own more than 90% of the outstanding shares of the Delaware corporation upon its formation.

[2] Because the “doing business test” calculations are dependent on the availability of year-end financial information, the requirements of CGCL Section 2115(b) become applicable only upon the first day of the first income year of the corporation commencing on or after the 135th day of the income year immediately following the latest income year with respect to which the “voting shares test” and the “doing business test” have been met, per Section 2115(d) of the CGCL.

[3] Schedule R and its accompanying instructions can be located on the California Franchise Tax Board’s website (Schedule R for 2017; instructions for Schedule R for 2017).

[4] For example, Russell Corp. (March 18, 2004) (https://www.sec.gov/divisions/corpfin/cf-noaction/russellcorp031804.pdf).

[5]  “Accredited investor” is defined in Rule 501(a) of Regulation D, and includes the following main categories:

  1. Directors, executive officers, and general partners of the issuer.

  2. Any natural person whose net worth either individually or jointly with their spouse equals or exceeds $1 million.

  3. Natural person investors who have income in excess of $200,000 in each of the two most recent years and who reasonably expect an income in excess of $200,000 in current year (or $300,000, jointly with their spouse).

  4. Any trust not organized for the specific purpose of acquiring the securities offered, in which case each beneficial owner of the security is counted separately.

[6] As with an offering exempt from registration under Rule 506 of Regulation D, Form D must be filed in connection with an offering that relies on Rule 504 of Regulation D for an exemption from registration.

[7] Under the Ralston Purina test, an offering is exempt from registration if it would be considered a “private offering” as opposed to a “public offering,” with a balancing of four factors: (a) the number of offerees and their relationship to each other and the issuer, (b) the number of securities offered, (3) the size of the offering and (4) the manner of the offering. The relationship of the offerees to the issuer is significant, where an offering to members of a class who should have special knowledge based on their relationship to the issuer being less likely to be a public offering than an offering to members of a class who do not have that advantage.

[8] Transactions subject to CGCL Section 25120 are not also subject to CGCL Section 25110. Per Section 4.5 of the Guide to California Securities Law Practice, Corporations Committee of the Business Law Section of the State of California, “by its express terms, [CGCL Section] 25110 applies only to those issuer transactions that are not subject to [CGCL Section] 25120. If an issuer transaction is subject to [CGCL Section] 25120 et seq., then [CGCL Section] 25120 and the regulations related thereto, and not [CGCL Section] 25110, apply to the transaction.”

Copyright © 2018, Sheppard Mullin Richter & Hampton LLP.

New Report Finds Health Care Industry Bears Highest Data Breach Costs

Health care data breaches cost health care entities an average $408 per record– the highest of any industry for the eighth straight year, according to IBM and the Ponemon Institute’s 2018 Cost of a Data Breach Report, and three times higher than the cross-industry average of $148 per record. The cost for a health care data breach increased from last year’s reported average of $380 per record. Contributing factors to the high costs include compliance with laws and regulations and abnormally high churn rates due to consumer mistrust.

The report was comprised of data collected from interviews with over 2,000 IT, data protection, and compliance professionals across 477 companies around the world that experienced data breaches in the last year. Some of the most significant findings from the report include the following:

  • Notification costs for organizations are the highest in the United States at $740,000, due in part to costs associated with determining regulatory requirements. In contrast, India had the lowest notification costs at $20,000.
  • Hackers or criminal insiders cause 48 percent of all data breaches analyzed in the report. The cost per record to resolve such attacks was $157, compared to $131 per record for data breaches caused by system glitches, human error, or negligence.
  • Third party involvement in a data breach and extensive cloud migration at the time of the breach increases the cost by more than $13 per compromised record.
  • For the fourth year in a row, the report showed that the faster a data breach can be identified and contained, the lower the costs for the breach. The average time to identify a data breach for the sample of 477 companies was 197 days, and the average time to contain a data breach was 69 days. Companies that identified a breach in less than 100 days saved more than $1 million as compared to those that averaged longer than 100 days. Likewise, companies that contained a breach in less than 30 days saved over $1 million as compared to those companies that took longer than 30 days.
  • Incident response teams reduce the cost of a data breach by as much as $14 per compromised record and extensive use of encryption reduces the cost by $13 per capita.
  • Organizations that lose 1 percent of customers due to a data breach result in an average total loss of $2.8 million. Organizations that lose 4 percent or more customers average a total cost of $6 million.

While the costs of data breaches continue to rise for health care as well as other industries, the study showed signs of cost savings through the use of newer technologies, such as automation tools, artificial intelligence, and machine learning to support or replace human intervention in data breach identification and response.

©2018 Drinker Biddle & Reath LLP. All Rights Reserved
This article was written by Sumaya M. Noush of Drinker Biddle & Reath LLP

Lack of Presidential Appointment May Invalidate ALJ Decisions

In one of its last opinions of the term, the U.S. Supreme Court held in Lucia v. U.S. Securities and Exchange Commission (SEC) on June 21, 2018, that administrative law judges (ALJs) are officers of the United States, not mere employees, and therefore must be appointed under the Constitution’s Appointments Clause. The decision leaves important questions open for individuals that have faced or are currently facing administrative proceedings before the SEC and other government agencies.

The Constitution’s Appointments Clause requires that “inferior officers” be appointed to their positions by the President, the courts or the Heads of Departments, or agency commissioners. The case at hand, Lucia v. SEC, concerned an administrative proceeding by the SEC against investment broker Raymond Lucia, whom the SEC accused of using misleading marketing practices to deceive prospective clients.

Mr. Lucia appealed the decision of the administrative law judge, who had fined him $300,000 and barred him for life from the investment industry, on the grounds that the presiding judge had been unconstitutionally appointed. The judge that heard Mr. Lucia’s case, along with the four other ALJs at the SEC, was not appointed by Commissioners, but by staff. Shortly after the case was filed, the SEC sought to remedy any potential constitutional violation by having the Commissioners simply appoint the five ALJs. The Court overturned the ruling against Mr. Lucia after the majority concluded that administrative law judges are “officers” of the United States. The Court went on to hold that Mr. Lucia was entitled to have his case heard before a new ALJ, despite the fact that the ALJ that heard his case had subsequently constitutionally appointed.

What remains to be seen is how federal courts will treat appeals by defendants from adverse administrative decisions in cases where an objection was made to the constitutionality of the presiding judge. Did the SEC remedy the issue in these cases completely when the Commissioners appointed the five administrative judges or will new proceedings be required? If so, can the same judge who heard a case before his/her appointment by the Commissioners, then hear the same case a second time? Perhaps most importantly, will litigants succeed in bringing challenges to the constitutionality of presiding ALJs in other governments agencies such as the Social Security Administration, which employs more than 1,400 ALJs who oversee more than 700,000 cases a year? While Lucia involved highly specific facts, the logic of the majority opinion would appear to apply to agencies outside the SEC.

 

© Polsinelli PC, Polsinelli LLP in California
This article was written by Michael M. Besser, Edward F. Novak of Polsinelli PC.

On the Edge of Our Seats: Court Stays Putative TCPA Class Action Pending Forthcoming ATDS Functionality Ruling in Related Case

Cavalry Portfolio Services is defending two nearly-identical putative TCPA class actions in California, and recently obtained a stay in one of those cases, pending a forthcoming ruling on ATDS functionality in the other.

In Krejci v. Cavalry Portfolio Servs., No. 3:16-cv-0211-JAH-WVG, 2018 U.S. Dist. LEXIS 122904 (S.D. Cal. July 17, 2018), Cavalry moved for a stay of the action until the court in the related case of Horton v. Calvary Portfolio Services, LLC, 13-cv-0307-JAH (WVG) (S.D. Cal.) rules on the parties’ cross-motions for summary judgment concerning whether the Aspect dialing system used by Cavalry “is an ATDS within the meaning of the TCPA.”  Krejci, supra at *5.

Judge John A. Houston of the Southern District of California granted Cavalry’s motion, finding a stay was appropriate for three reasons: (1) Plaintiff had failed to demonstrate any potential harm that would result from a limited stay; (2) Cavalry’s burden in having to litigate the same issue over again; and (3) “a determination as to whether or not Cavalry’s Aspect system qualifies as an ATDS,” in Horton would have a “substantial impact” on the Krejci case.

This was a prudent exercise of discretion by Judge Houston, and his ruling illustrates the importance of every unpublished District Court decision on key issues like ATDS functionality.  As we’ve covered on the Ramble in past episodes, every one of these lower court decisions has the potential to cause significant ripples throughout TCPAland.  And that’s part of what makes this place special.

Oral argument on the Horton cross-summary judgment motions is scheduled for August 13, 2018.  We wait on the edge of our seats to provide you with our reporting and analysis on this next upcoming episode in the ATDS functionality saga.

Copyright © 2018 Womble Bond Dickinson (US) LLP All Rights Reserved.
This article was written by Artin Betpera of Womble Bond Dickinson (US) LLP