Public Urged to Use Encryption for Mobile Phone Messaging and Calls

On December 4, 2024, four of the five members of the Five Eyes intelligence-sharing group (the United States, Australia, Canada, and New Zealand) law enforcement and cyber security agencies (Agencies) published a joint guide for network engineers, defenders of communications infrastructure and organizations with on-premises enterprise equipment (the Guide). The Agencies strongly encourage applying the Guide’s best practices to strengthen visibility and strengthen network devices against exploitation by reported hackers, including those hackers affiliated with the People’s Republic of China (PRC). The fifth group member, the United Kingdom, released a statement supportive of the joint guide but stated it had alternate methods of mitigating cyber risks for its telecom providers.

In November 2024, the Federal Bureau of Investigation (FBI) and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a joint statement to update the public on its investigation into the previously reported PRC-affiliated hacks on multiple telecommunications companies’ networks. The FBI and CISA reported that these hacks appeared to focus on cell phone activity of individuals involved in political or government activity and copies of law enforcement informational requests subject to court orders. However, at the time of the update, these U.S. agencies and members of Congress have underscored the broad and significant nature of this breach. At least one elected official stated that the hacks potentially expose unencrypted cell phone conversations with someone in America to the hackers.

In particular, the Guide recommends adopting actions that quickly identify anomalous behavior, vulnerabilities, and threats and respond to a cyber incident. It also guides telecoms and businesses to reduce existing vulnerabilities, improve secure configuration habits, and limit potential entry points. One of the Guide’s recommended best practices attracting media attention is ensuring that mobile phone messaging and call traffic is fully end-to-end encrypted to the maximum extent possible. Without fully end-to-end encrypted messaging and calls, the content of calls and messages always has the potential to be intercepted. Android to Android messaging and iPhone to iPhone messaging is fully end-to-end encrypted but messaging from an Android to an iPhone is not currently end-to-end encrypted. Google and Apple recommend using a fully encrypted messaging app to better protect the content of messages from hackers.

The FBI and CISA are continuing to investigate the hacks and will update the public as the investigation permits. In the interim, telecom providers and companies are encouraged to adopt the Guide’s best practices and to report any suspicious activity to their local FBI field office or the FBI’s Internet Crime Complaint Center. Cyber incidents may also be reported to CISA.

The Privacy Patchwork: Beyond US State “Comprehensive” Laws

We’ve cautioned before about the danger of thinking only about US state “comprehensive” laws when looking to legal privacy and data security obligations in the United States. We’ve also mentioned that the US has a patchwork of privacy laws. That patchwork is found to a certain extent outside of the US as well. What laws exist in the patchwork that relate to a company’s activities?

There are laws that apply when companies host websites, including the most well-known, the California Privacy Protection Act (CalOPPA). It has been in effect since July 2004, thus predating COPPA by 14 years. Then there are laws the apply if a company is collecting and using biometric identifiers, like Illinois’ Biometric Information Privacy Act.

Companies are subject to specific laws both in the US and elsewhere when engaging in digital communications. These laws include the US federal laws TCPA and TCFAPA, as well as CAN-SPAM. Digital communication laws exist in countries as wide ranging as Australia, Canada, Morocco, and many others. Then we have laws that apply when collecting information during a credit card transaction, like the Song Beverly Credit Card Act (California).

Putting It Into Practice: When assessing your company’s obligations under privacy and data security laws, keep activity specific privacy laws in mind. Depending on what you are doing, and in what jurisdictions, you may have more obligations to address than simply those found in comprehensive privacy laws.

Domestic Visa Processing – Application Slots Now Available

On January 29, 2024, the Department of State’s stateside visa pilot renewal program began accepting DS-160s for qualifying individuals seeking to renew their existing H-1B visas while they are in the United States. As discussed in our previous blog post about this new program, the program allows individuals in the United States who are renewing an H-1B visa issued by US consular sections in Canada between 1/1/2020 and 4/1/2023 or one issued by US consular sections in India from 1/2/2021 and 9/30/2023 to do so online through the Department’s CEAC website rather than having to travel outside the US to obtain the visa.

Under the pilot program, each week for five weeks the Department will release 4000 application slots—2000 for applicants whose most recent H-1B visa were issued in Canada, and 2000 for those whose most recent H-1B visas were issued in India. If all designated slots are filled before the next week’s allotment becomes available, the Department will lock the portal until the next group is released. Applications can be submitted online at https://travel.state.gov/content/travel/en/us-visas/employment/domestic-renewal.html, where you can also find program FAQs published by the Department of State.

The first group of application slots was released on Monday, January 29. Later groups will be released on February 5, February 12, February 19, and February 26. The program will end when all available slots are filled or on April 1, 2024, whichever happens first.

Listen to this post.

Canadian PFAS Drinking Water Standards Proposed

We have documented for several years now the U.S. EPA’s efforts to propose enforceable drinking water standards with respect to PFAS, and in September 2022, the World Health Organization (WHO) issues its own draft “PFOS and PFOS In Drinking-Water” Background Document.  Now, on the heels of these developments, Canadian PFAS drinking water standards were introduced, which add another regulatory layer to the globally evolving PFAS regulatory scheme. Notably, Canada takes a different approach than both the United States and the WHO in addressing PFAS drinking water issues, but the proposal will nonetheless have impacts on U.S. PFAS litigation if passed.

Canadian PFAS Drinking Water Standards

Canada’s draft proposal sets a limit of 30 ppt for any detected PFAS combined in a given drinking water source. This is in contrast to the WHO, which only addressed PFOA and PFOS in its draft recommendations for drinking water standards, and the EPA, which by all indications will only propose enforceable drinking water standards for a small subset of the over 12,000 PFAS that exist. The Canadian standards, though, do propose requiring that EPA Testing Methods 533 or 537.1 be used for detection, which only tests for 29 PFAS types. Nevertheless, the large group approach to PFAS drinking water standards is unique for the moment to Canada, although the WHO did include in its proposal a similar limited subset of PFAS for countries to consider when setting or proposing drinking water standards.

Comments to the Canadian draft document are being accepted through April 12, 2023.

EPA’s Drinking Water Actions

We previously detailed how, on June 15, 2022, the EPA issued Health Advisories (HAs) for five specific PFAS, PFOA (interim), PFOS (interim), PFBS (final) and GenX (final). While not enforceable levels for PFAS in drinking water, the EPA’s PFAS Health Advisories are nevertheless incredibly significant for a variety of reasons, including influence on future federal and state drinking water limits, as well as potential impacts on future PFAS litigation.

The levels set by the EPA’s PFAS Health Advisories were as follows:

PFOA .004 ppt
PFOS .02 ppt
GenX 10 ppt
PFBS 2,000 ppt

Since the HAs were published, the EPA has faced several lawsuits challenging the HAs. The lawsuits generally allege that the HAs should be struck down and are not valid, as they were created “arbitrarily and capriciously.”  In support, the moving parties say that the HAs were created in an improper manner because (1) they incorporated toxicity assumptions that deviate from the EPA’s own standard methods; and (2) EPA incorporated grossly incorrect and overstated exposure assumptions―in essence, EPA used the wrong chemical when making its exposure assumptions, thereby resulting in a significantly less tolerant health advisory for [PFAS] than is warranted by the data. In addition, the parties argue that the EPA failed to go through the necessary public comment period before issuing its final GenX HA, and that in creating the GenX HA, the EPA exceeded its authority under the Safe Drinking Water Act.

Canadian PFAS Impacts On EPA Efforts and Litigation

When the WHO PFAS report was released, we wrote that the report will have an impact on existing and future litigation that challenges EPA regulatory actions focused on PFAS. Our reasoning for the prediction was that the standards proposed by the WHO were significantly higher than the EPA’s Health Advisories (which may foreshadow where the EPA’s enforceable drinking water limits will be set) even though the WHO had available to it much of the same scientific literature as the EPA. The Canadian PFAS drinking water proposal of 30 ppt is also higher than the EPA’s Health Advisories and what many predict will be the EPA’s proposed enforceable drinking water limit.  Future legal arguments challenging the EPA will likely say that the EPA is acting by ignoring the science and putting politics over the merits of scientific endeavor.

Nevertheless, whether the arguments challenging the EPA are found to be meritorious in litigation or not, the Canadian report will certainly provide ammunition to parties looking to challenge EPA action.

Conclusion

Now more than ever, the EPA is clearly on a path to regulate PFAS contamination in the country’s water, land and air. The EPA has also for the first time publicly stated when they expect such regulations to be enacted. These regulations will require states to act, as well (and some states may still enact stronger regulations than the EPA). Both the federal and the state level regulations will impact businesses and industries of many kinds, even if their contribution to drinking water contamination issues may seem on the surface to be de minimus. In states that already have PFAS drinking water standards enacted, businesses and property owners have already seen local environmental agencies scrutinize possible sources of PFAS pollution much more closely than ever before, which has resulted in unexpected costs. Beyond drinking water, though, the EPA PFAS Roadmap shows the EPA’s desire to take regulatory action well beyond just drinking water, and companies absolutely must begin preparing now for regulatory actions that will have significant financial impacts down the road.

©2023 CMBG3 Law, LLC. All rights reserved.
For more Environmental Law News, click here to visit the National Law Review.

Canada Announces Removal of COVID-19 Border Entry Requirements

The Government of Canada announced, on Monday, September 26, 2022, that after Friday, September 30, 2022, all requirements related to COVID-19 for entering Canada will expire. These include:

  • Providing proof of vaccination and other health information;
  • Mandatory usage of the ArriveCAN application;
  • Pre- or on-arrival testing and/or screening requirements;
  • Random testing at airports;
  • Monitoring and reporting if one develops COVID-19 symptoms;
  • Quarantine and isolation requirements.

As a result, as of September 30, 2022, persons entering Canada would still be required to follow local public health guidelines, where applicable. The removal of measures applies to all forms of travel, including by air, land (including rail), and sea, whether internationally bound or domestic.

Many of these requirements have been in place since early 2020, during the onset of the pandemic. Employers with employees traveling into Canada can be assured that such measures related to COVID-19 will no longer apply as of October 1, 2022. It is important to note that the Government of Canada did leave open the possibility of re-imposing measures if the situation regarding COVID-19 is seen as requiring it.

For more Coronavirus News, click here to visit the National Law Review.

© 2022, Ogletree, Deakins, Nash, Smoak & Stewart, P.C., All Rights Reserved.

Fleeing Ukrainians to Get More Help From United States

The United States has joined many European countries that are opening their doors and offering humanitarian assistance to fleeing Ukrainians.

Ireland, Great Britain and Canada have all started private sponsorship programs for Ukrainians. That assistance is not necessarily a one-way street. Easing the way for incoming Ukrainians may help those nations deal with their own labor shortages.

Ukraine is known for its skilled workforce, including tech engineers, and some companies in Europe are specifically targeting jobs for Ukrainians, offering everything from language training to child care to attract the refugees. Even temporary employment agencies are involved and new companies are being founded for the purpose of matching Ukrainians to jobs across Europe – jobs that run the gamut from highly skilled tech work, to healthcare aids, to retail and hospitality positions.

U.S. employers are generously offering humanitarian aid and donations to help Ukrainian refugees, but now those employers may be able to offer jobs to displaced Ukrainians seeking refuge. The Biden Administration will open various legal pathways that could include the refugee admissions program (which can lead to permanent residence through asylum, but is a long process), visas, and humanitarian parole (a temporary solution). The focus will be on Ukrainians with family in the United States or others considered to be particularly vulnerable. Approximately 1,000,000 people of Ukrainian descent currently live in the United States.

The administration originally believed that most Ukrainians did not want to flee to the United States because it was too far away from other family members who have remained in Ukraine. Secretary of State Antony Blinken had stated that the priority was to help European countries who are the dealing with huge waves for migration instead. But advocates have been arguing that the administration could create special status for Ukrainians to allow them to enter the U.S. or stay with family members.

In early March, the Biden Administration established Temporary Protected Status (TPS) for Ukrainians who have been in the United States continuously since March 1, 2022, but that did not help those who are still abroad. Visitor visas are hard to come by because applicants for visitor visas need to be able to show that their stay will be temporary and that they have a home to return to in Ukraine, and such temporary nonimmigrant visas may not meet that criterion or be practical in most of these situations. Moreover, consulates abroad are already overwhelmed and understaffed due to COVID-19.

While small numbers of Ukrainians have made it to the United States by finding private or family sponsors, this new policy should at least open the doors to some Ukrainians and likely make it possible for U.S. companies to hire some of the incoming refugees. They will need and want employment, but they will also need support.

Jackson Lewis P.C. © 2022

Ongoing Canadian Protests Shine Spotlight on Ripple Effect of Supply Chain Disruptions

Although the last two years have seen a nearly never-ending line of supply chain impacts for manufacturers, the latest disruption is also serving to shine a spotlight on the broader impact that relatively small disruptions in the supply chain can have on the global economy.  We all know that trucking is a critical component of the economy.  The U.S. estimates seventy two percent of goods in the U.S. travel by truck.  Trucking has become even more important in this era of increased deliveries and backlogs at ports and other logistics hubs.

In Canada, what began as protests by truckers regarding certain pandemic-related restrictions and mandates have snowballed into broader protests and blockages of roads, bridges, and border crossings.

Protesters have been blocking various bridges and roads in Canada in protest of certain pandemic-related restrictions and mandates.  On Tuesday, the bridge connecting Windsor, Ontario to Detroit (a critical linkage for cross-border travel) was largely blocked, with traffic stopped going into Canada and slowed to a trickle going into the United States. The blockades are now leading U.S. automakers to begin trimming shifts and pausing certain operations in their Michigan and Canadian plants. The bridge protests and automakers’ reduction in capacity continued on Thursday without an end in sight.

The ongoing protests in Canada have also served as a reminder of how seemingly local trucking disruptions in one country can cascade through the supply chain.  This is not the first time that trucking strikes and blockages have rippled through the supply chain and economy.  In 1996, a truckers’ strike in France lasted 12 days, barricading major highways and ultimately leading to concessions from the French government over certain worker benefits and hours.  The resulting agreement led to heightened tensions with Spain, Portugal, and Great Britain due to the impact felt across borders.  In 2008, truckers went on strike in Spain and blocked roads and border crossings, protesting fuel prices.  In 2018, truckers in Brazil staged a large strike and protest that lasted for 10 days, blocking roads, disrupting food and fuel distribution, canceling flights, and causing certain part shortages for automakers.

The ongoing protests in Canada have similarly expanded from Ottawa to the current blockage of border crossings, further raising their profile internationally as they begin to impact global trade.  It remains to be seen how the blockades and protests will resolve, as leaders call for de-escalation and re-opening of roads and crossings.  However, the ripple effects of what started as a localized protest will continue to be felt far beyond Canada’s borders.

© 2022 Foley & Lardner LLP

Ontario’s Employment Laws: Several Significant Changes Coming Under Bill 27, the Working for Workers Act, 2021

On November 30, 2021, the Government of Ontario passed Bill 27, the Working for Workers Act, 2021. Bill 27 amends a number of statutes, including the Employment Standards Act and the Occupational Health and Safety Act.

According to the government, this legislation achieves a number of goals, including improving employees’ work-life balance, prohibiting noncompete agreements to increase competition in business and labour markets, facilitating the registration of internationally trained professionals, and implementing a licensing regime for temporary help agencies and recruiters.

Amendments to the Employment Standards Act2000

Right to Disconnect from Work

The Working for Workers Act, 2021requires that employers with 25 or more employees at the beginning of the year implement a written “disconnect from work” policy regarding disconnecting from work during nonworking hours. Under the act, the term “disconnecting from work” is defined as “engaging in work-related communications, including emails, telephone calls, video calls or the sending or reviewing of other messages, so as to be free from the performance of work.” Once an employer prepares or amends a policy, employers will have 30 days to share copies of this policy with employees. Employers must also provide new employees this policy within 30 days of being hired.

Once the act receives Royal Assent, employers will have six months from that date to develop their written policies. Following this initial year, employers will have to prepare their policies by no later than March 1 of each year.

The regulations that will be promulgated to establish the content of the policy have not yet been published. As such, it is not yet known what specific steps employers must take to prohibit after-hours work and whether they will be restricted in terms of which employees may or may not be permitted or required to perform after-hours work, in addition to other unsettled issues.

Prohibition of Noncompete Agreements

The act prohibits employers from including noncompete clauses in any agreement they form with an employee. If this provision is violated, the noncompete agreement will be void.

There are two exceptions to this rule.

  1. Employees in an executive role are excepted from this provision. An “executive” is an employee who holds the office of a chief executive position, including that of president, chief executive officer, and chief administrative officer.
  2. There is also an exception when there has been “a sale of a business or part of a business” (which includes a lease). If the purchaser and seller enter into a noncompete agreement, and the seller becomes an employee of the purchaser immediately after the sale, this prohibition will not apply.

Once Royal Assent is received, the noncompete prohibition is deemed to come into force on October 25, 2021.

With the passing the act, Ontario has become the first province to require “disconnect from work” policies and to prohibit noncompete agreements outright.

Licensing Requirements for Temporary Help Agencies

The act specifies that temporary help agencies and recruiters must now apply for a license. Anyone wishing to engage with a temporary help agency or recruiter must ensure that they are licensed, as knowingly doing business with an unlicensed agency or recruiter is prohibited under the act.

Temporary help agencies or recruiters may be refused a license and may have their licenses revoked or suspended for a number of reasons, including:

  • using recruiters that charge fees to foreign nationals;
  • providing “false or misleading information in an application”; and
  • situation in which the director of Employment Standards has reasonable grounds to believe that “the applicant will not carry on business with honesty and integrity and in accordance with the law.”

If applicants dispute the refusal, revocation, or suspension of their licenses, they can seek a review at the Ontario Labour Relations Board.

These amendments will come into force on a day to be proclaimed by the lieutenant governor.

Amendments to the Employment Protection for Foreign Nationals Act, 2009

Prohibition on the Collection of Recruitment Fees

To protect foreign nationals from predatory recruitment practices, the act prohibits employers and recruiters from knowingly using the services of recruiters that charge foreign nationals for their services.

A recruiter that charges a fee, and an employer or recruiter that violates this prohibition will be liable for repaying the fees charged to the foreign national.

These amendments will come into force on the day the Working for Workers Act, 2021 receives Royal Assent.

Amendments to the Fair Access to Regulated Professions And Compulsory Trades Act, 2006

Facilitating the Registration of Internationally Trained Professionals

To facilitate the registration of internationally trained professionals, the act specifies that Canadian experience will not be a qualification for registration in a regulated profession. Regulated professions may apply to be exempted from this rule “for the purposes of public health and safety in accordance with the regulations.” Regulated professions will also be required to develop accelerated registration processes to aid with emergency preparedness.

The fairness commissioner will also evaluate language proficiency requirements to ensure that any French or English testing does not contravene the regulations.

These amendments will come into force on the day the act receives Royal Assent.

Amendments to the Occupational Health and Safety Act

Mandating Washroom Access for Delivery Persons

Under the act, a new requirement is created that if a person requests washroom access in the course of delivering or picking up a package from a business. Business covered by the act must allow use of their washrooms.

Businesses will be exempt from this requirement if:

  • Sharing the washroom is unreasonable or impractical because of health and safety reasons;
  • The context makes sharing the washroom unreasonable or impractical; or
  • The delivery person would have to enter a dwelling to use the washroom.

These amendments will come into force on a day to be proclaimed by the lieutenant governor.

Amendments to the Workplace Safety and Insurance Act, 1997

Distribution of Surplus Insurance Fund

The act includes a provision that specifies that if there is a surplus in the Workplace Safety and Insurance Board’s insurance fund, this surplus may be distributed among eligible employers. The insurance board will have discretion to determine the timing and the amounts to be granted to eligible employers, based on factors such as adherence to the Workplace Safety and Insurance Act. Based on these factors, the insurance board will also be empowered to exclude any eligible employers from the distribution of surplus funds. Employers will not be able to appeal the funding decisions made by the insurance board in this respect.

These amendments will come into force on a day to be proclaimed by the lieutenant governor.

Amendments to the Ministry of Agriculture, Food and Rural Affairs Act

Increasing Information Gathering in Relation to “agriculture, food or rural affairs”

Under the act, the minister of Agriculture, Food and Rural Affairs is granted the authority to “collect information, including personal information, directly or indirectly” related to “agriculture, food or rural affairs” for the purposes of emergency response and public health. Personal information will not be collected, used, or disclosed in cases where other sources of information are available to fulfil the same purpose.

These amendments will come into force on the day the act receives Royal Assent.

Next Steps

Bill 27 passed its third reading on November 30, 2021. At the time of publication of this article, the legislation has not received Royal Assent, but it likely will shortly. Once Royal Assent is received, some amendments come into force immediately, while others follow different timelines. Employers may want to begin reviewing the new legislation, noting any important dates and features relevant to their organizations. In addition, employers may want to review their policies, practices, and contracts to ensure compliance.

For more labor and employment legal news, click here to visit the National Law Review.
© 2021, Ogletree, Deakins, Nash, Smoak & Stewart, P.C., All Rights Reserved.

Trump Administration Notifies Congress of Intent to Renegotiate NAFTA

The White House formally notified Congress on Thursday of the Trump administration’s intent to renegotiate the North American Free Trade Agreement (NAFTA). The notification letter from U.S. Trade Representative Robert Lighthizer marked the start of a 90-day window to consult with members of Congress on developing negotiation priorities before beginning formal negotiations with Canada and Mexico as early as August 16, 2017.NAFTA, USA, Mexico, Canada

Currently, there is no indication that renegotiations will impact NAFTA-related immigration programs. However, under the Bipartisan Congressional Trade Priorities and Accountability Act of 2015, the administration’s negotiation objectives are required to be made public 30 days before formal negotiations begin. While the letter to Congressional leadership did not discuss any specific changes to NAFTA, the administration indicated that it would aim to modernize outdated chapters of the agreement and address challenges faced by U.S. consumers, businesses, and workers.

NAFTA Immigration Programs

Among other economic and trade relationships established under NAFTA, the agreement created the TN nonimmigrant classification, which allows certain citizens of Canada and Mexico to work temporarily in the United States in a professional capacity. The agreement also provides an expanded range of permissible business activities for Canadian and Mexican citizens in B-1 visitor status and permits Canadian citizens to submit L-1 intracompany transferee petitions directly at U.S. ports of entry and pre-flight inspection stations for adjudication by U.S. Customs and Border Protection.

Whether the Trump administration intends to alter existing immigration programs under NAFTA is not yet known.

This post was written by Kara Kelly of Ogletree, Deakins, Nash, Smoak & Stewart, P.C.

Canada to Implement Electronic Travel Authorization System

Starting in March 2016, Canada will require individuals who may visit Canada without a visa to first obtain approval from its electronic travel authorization system (eTA). Visitors to the United States will recognize eTA as similar to the ESTA (Electronic System for Travel Authorization), which is used by the United States to pre-screen its visa-exempt visitors. Applicants will be able to use the eTA system starting Aug. 1, 2015.

The eTA will only be required for visa-exempt individuals seeking to travel to Canada by air for a short-term visit. Applicants must pay a CAD $7.00 processing fee and the resulting electronic travel authorization will be valid for five years or until the applicant’s passport expires, the eTA is cancelled, or a new eTA is issued. The eTA will include the applicant’s name, date, place of birth, gender, address, nationality, and passport information.

Notably, U.S. citizens are exempt from the eTA requirement, as are individuals who already have a Canadian visitor visa in their passport.

Authored by Rebecca Schechter of Greenberg Traurig

©2015 Greenberg Traurig, LLP. All rights reserved.