Scherzer Blog

Issuers should ensure that investors are not criminals

The JOBS Act requires that issuers wishing to engage in general solicitation take “reasonable steps” to verify the accredited investor status of purchasers. Rule 506(c) sets forth a principles-based method of verification which requires an objective determination by the issuer or its representatives that the steps taken are “reasonable” in the context of the particular facts and circumstances of each purchaser and transaction. But perhaps a question whether the investor is a felon should be added to the list.

A case decided in 2011 by California’s Court of Appeal, Second District, suggests that indeed it may be prudent for issuers to ensure that investors are not criminals. The plaintiff in this case intended to purchase units in a limited liability company, but was rejected after the mezzanine lender would not accept the plaintiff as a member due to his status as a former felon. The plaintiff subsequently sued the lender, alleging a violation of the Unruh Civil Rights Act. After a dismissal by a trial court, the case was appealed, resulting in a conclusion that  (1) status as a felon is not a personal characteristic similar to those enumerated in the statute; (2) criminal convictions raised legitimate questions about the honesty and trustworthiness of the plaintiff, and the lender had legitimate business reasons justifying its decision; and (3) the potential consequences of allowing the plaintiff’s claim would improperly involve the courts in second-guessing a lending institution‘s expertise in determining loan and investment criteria. As lenders are absolved from potential liability under the Act, issuers who unwittingly accept convicted felons as investors may be jeopardizing their funding.

California passes two new data privacy laws

Effective January 1, 2014, California will have two new data privacy laws: AB 370, which mandates disclosure of “do not track” and other tracking practices in online privacy policies, and SB 46, which amends the state’s data security breach notification law.

AB 370 adds to the California Online Privacy Protection Act (“CalOPPA”) a requirement for companies that collect personally identifiable information online to include disclosures regarding (1) how they respond to a web browser’s “do not track” (DNT) signal, and (2) if third-parties can collect personal information across a network of sites. The law does not require websites to honor browser DNT signals or block third-party tracking; it simply tries to increase transparency about the site’s practices.

SB 46 adds a new category of data triggering California’s breach notification requirements, to wit: “a user name or e-mail address, in combination with a password or security question and answer that would permit access to an online account.” The new law requires notification of unauthorized access to user credential information even if that information is encrypted.

Grace period for E-Verify compliance ends November 5, 2013

Now that E-Verify services are back online, employers must create an E-Verify case for each employee hired during the shutdown (October 1-17, 2013) no later than November 5, 2013. When prompted by the E-Verify system to explain why the case was initiated late (a violation of the three-day E-Verify rule), employers should select “other” from the drop-down menu and enter into the text field “federal government shutdown.” See the USCIS E-Verify instructions page for handling specific situations.

Tenant screening laws update: passing background check costs to the applicants

The states of Washington and Oregon recently enacted laws in connection with tenant screening. Among the provisions in both Washington’s RCW §59.18.257 and Oregon’s OAS §90.295, is that the entire cost of the background check can be charged to the applicant, if the screening is performed by a consumer reporting agency (“CRA”). However, if the landlord conducts the background check, it may not charge in excess of the customary fees of the CRAs in its geographical area.

Notably, California’s Civil Code §1950.6(b) provides that a landlord cannot charge (or pass-through) to the applicant more than $30 for a background check. This application screening fee may be adjusted annually by the landlord or its agent commensurate with an increase in the Consumer Price Index. (The current adjusted amount is $41.50.)

New regulation in the UK mandates licensing of private investigators

Presented to the Parliament by the Secretary of State for the Home Department by Command of Her Majesty on July 31, 2013, the new regulation, which will take effect next year, makes operating as an unlicensed private investigator in the United Kingdom a criminal offense. Licenses will be granted by the Security Industry Authority only when an applicant has successfully completed training and achieved a government-recognized qualification, including an understanding of relevant laws and standards, and the skills required to conduct activities ethically; has confirmed his/her identify; and has passed a criminal background check.

Illinois amends its password protection law to exclude financial services firms

In August 2013, Illinois passed an amendment to its existing password protection law that lifts restrictions for financial services firms, enabling them to monitor their employees’ business-related social media communications. Effective January 1, 2014, the law will no longer apply when an employer requests access to a “professional account” to “monitor or retain employee communications as required under the state’s insurance or federal law or by a self-regulatory organization. The amendment also permits Illinois employers to seek access to a professional account when the employer has “a duty to screen applicants or employees prior to hiring.”

New Jersey enacts law for social media password protection

Continuing a nationwide momentum of restricting employers’ access to personal social media content of applicants and employees, in August 2013, New Jersey passed Act 2878 joining eleven other states (Maryland, Illinois, California, Michigan, Utah, New Mexico, Arkansas, Colorado, Washington, Oregon, and Nevada) with similar laws. Dozens more states and the U.S. Congress are considering comparable legislation. New Jersey’s new law, which becomes effective December 1, 2013, prohibits employers from asking or requiring that applicants or employees “provide or disclose any user name or password, or in any way provide the employer access to a personal account through an electronic communications device.”

EEOC fails to prove disparate impact in another case involving background checks

In August 2013, a Maryland federal judge dismissed without a trial a putative suit filed by the Equal Employment Opportunity Commission (the “EEOC”) against event-promoter Freeman for alleged discriminatory background screening practices. Calling the EEOC’s expert report “an egregious example of scientific dishonesty,” the court granted a summary judgment to Freeman based on its findings that the EEOC’s expert testimony was unreliable, and would not support a claim of disparate impact. According to the court’s opinion, the EEOC failed to establish an element of its case when it made no effort to analyze Freeman’s multi-step screening policies to identify the specific practices that caused the alleged disparate impact. The court went on to say: “By bringing actions of this nature, the EEOC has placed many employers in the ‘Hobson’s choice’ of ignoring criminal history and credit backgrounds, thus exposing themselves to potential liability for criminal and fraudulent acts committed by employees, or, on the other hand, incurring the wrath of the EEOC for having utilized information deemed fundamental by most employers.”

The EEOC most likely will appeal the decision, as it has done in another high-profile background check case in Ohio, where in January 2013 the court similarly ruled  that the EEOC failed to prove disparate impact. Although these rulings represent a victory for the employer, the EEOC has not reversed its position, and is expected to continue its attempts to severely limit, if not eliminate, the use of criminal and credit checks by private employers.

California passes bill that would require policy disclosures for “do not track”

On August 28, 2013, the California State Senate and Assembly passed AB 370, to amend the California Online Privacy Protection Act (CalOPPA) that would require operators of commercial websites or “online services” accessible to California residents to disclose how the site responds to “do not track” (DNT) browser settings, which in turn will trigger enforceability by federal and state authorities. The amendment is expected to be signed by Governor Jerry Brown. 

FINRA issues investor alert about calls from brokerage firm imposters

The Financial Industry Regulatory Authority (“FINRA”) issued a new alert on August 6, 2013 labeled as Cold Calls from Brokerage Firm Imposters—Beware of Old-Fashioned Phishing to warn investors of calls from scammers claiming to be representatives of at least one well-known brokerage firm. In this latest twist on phishing scams, the fraudsters are cold-calling investors claiming to offer information about certificates of deposit with yields well above the best rates in the market in an attempt to get potential victims to divulge their personal or financial account information.

FINRA is reminding investors who receive unsolicited calls to never provide personal information or authorize any transfer of funds to any unknown person, and encourages anyone who believes that he/she has been scammed to file a complaint using its online Complaint Center or send a tip to FINRA’s Office of the Whistleblower.

Go to Top