Scherzer Blog

Proposed bill would establish standards for national data security

The bill, introduced in the Senate on January 15, 2014 and cited as the Data Security Act of 2014, would require entities such as financial institutions, retailers, and federal agencies to better safeguard sensitive information, investigate security breaches, and notify consumers when there is a substantial risk of identity theft or account fraud. The new requirements would apply to businesses that take credit or debit card information, data brokers that compile private information, and government agencies that possess nonpublic personal information.

January 23rd, 2014|Legislation|

Justice Department collected more than $8 billion in civil and criminal cases in 2013

Attorney General Eric Holder announced on January 9, 2014 that the Justice Department collected at least $8 billion in civil and criminal actions in the fiscal year ending Sept. 30, 2013. The statistics indicate that in FY 2013, approximately $5.9 billion was collected by the department’s litigating divisions and the U.S. Attorneys’ offices in individually and jointly handled civil actions. The largest civil collections were from affirmative civil enforcement cases, in which the United States recovered money lost to fraud or other misconduct and collected fines imposed on individuals and/or corporations for violations of federal health, safety, civil rights or environmental laws.

January 23rd, 2014|Judgment|

FFIEC finalizes guidance for social media risk management

The Federal Financial Institutions Examination Council (FFIEC) released on December 11, 2013 final guidance on the applicability of consumer protection and compliance laws, regulations, and policies to activities conducted via social media by banks, savings associations, and credit unions, as well as nonbank entities supervised by the Consumer Financial Protection Bureau. The guidance provides considerations that financial institutions may find useful in performing risk assessments and developing and evaluating policies and procedures regarding social media.

January 17th, 2014|Social Media|

Stricter Volcker Rule final; banking entities have until July 21, 2015 to conform

On December 10, 2013, five federal agencies approved the regulation known as the Volker Rule which introduces a variety of guidelines to limit risk-taking by banks with federally insured deposits. The Federal Reserve Board announced that banking entities covered by section 619 of the Dodd-Frank Wall Street Reform and Consumer Protection Act will be required to fully conform their activities and investments by July 21, 2015. The compliance requirements will vary based on the size of the entity and the scope of activities conducted.

The rule prohibits insured depository institutions and any company affiliated with an insured depository institution from engaging in short-term proprietary trading of certain securities, derivatives, and other financial instruments for the firm’s own account, subject to certain exemptions, including market making and risk-mitigating hedging. It also imposes limits on banking entities’ investments in, and other relationships with, hedge funds and private equity funds.

December 10th, 2013|Educational Series, Legislation|

Scrutiny of predictive scoring products is on the FTC’s agenda in 2014

According to the Federal Trade Commission (‘the “FTC”) and media reports, companies are using predictive scoring for a variety of purposes, ranging from identity verification and fraud prevention to marketing and advertising. The scores, are touted to predict, for example, the likelihood that a person has committed identity fraud or that a certain transaction will result in fraud; the credit risk associated with mortgage loan applications; whether contacting a consumer by mail or phone will lead to successful debt collection; or whether sending a catalog to a certain address will result in an in-store or online purchase.

Consumers are largely unaware of these scores, and have little or no access to the underlying data. As a result, predictive scoring products raise a variety of privacy concerns and questions that the FTC intends to explore. Among the issues, are what consumer protections exist or should be provided, and whether certain scores are considered eligibility determinants that fall under the ambit of the Fair Credit Reporting Act.

December 9th, 2013|Educational Series, Fraud|

New York joins in efforts to root out misclassification of independent contractors

On November 18, 2013, New York’s attorney general and the state labor department entered into agreements with the U.S. Department of Labor’s Wage and Hour Division to coordinate investigations, make referrals, share data and take other actions to combat worker misclassification. Fourteen other states (California, Colorado, Connecticut, Hawaii, Illinois, Iowa, Louisiana, Maryland, Massachusetts, Minnesota, Missouri, Montana, Utah and Washington) already participate in this national “misclassification initiative” that is a collaboration between the U.S. Department of Labor and the Internal Revenue Service.

An employer that misclassifies an employee as an independent contractor faces significant consequences that can include the payment of back taxes plus interest, overtime and state workers’ compensation, and the provision of health and welfare benefits.

December 9th, 2013|Educational Series|

SEC’s whistleblower program gains momentum

On November 15, 2013, the SEC released its third annual Whistleblower Report to Congress. According to the report, In the fiscal year 2013, the SEC paid four major awards, one of which was for over $14 million for information leading to an enforcement action that recovered substantial investor funds. Three other payments totaling $832k were made for information regarding a bogus hedge fund.

The report states that the number of complaints and tips increased from 3,001 in the 2012 fiscal year to 3,238 in 2013. The three most common complaints or tips were about corporate disclosures and financials, offerings fraud, and manipulation. The number of FCPA-related tips also rose, from 115 to 149.

December 9th, 2013|Fraud|

Remedying Rule 506 “bad actor” disqualification through reasonable care

The SEC’s Rule 506 “bad actor” amendments went into effect September 23, 2013. As we reported previously, these amendments add Rule 506(d) to implement Regulation 926 of the Dodd-Frank Wall Street Reform and Consumer Protection Act. Under the rule, securities offerings involving certain “felons and other ‘bad actors'” are disqualified from the Rule 506 exemption unless the disqualification is waived or remedied through a “reasonable care” exception. (See Securities Act Release No. 9414, 78 Fed. Reg. 44,729; July 24, 2013).

The rule’s long list of disqualifying events – and an even longer list of covered persons – is raising consternation as issuers and practitioners come to grips with the challenges of compliance. A disqualification due to the presence of “bad actors” can be catastrophic, resulting in the loss of the exemption altogether, spilling into regulatory actions, litigation, and reputational issues. And any impediment to raising capital is likely to scare away investors.

The rule provides an exception from disqualification if the issuer is able to demonstrate that it did not know and, in the exercise of reasonable care, could not have known that a covered person with a disqualifying event participated in the offering. The SEC has not prescribed specific steps to establish reasonable care; however, it has indicated that the concept includes a factual inquiry in view of the particular facts and circumstances and other offering participants. Despite the procedural ambiguity, the message is clear that is not enough to show that the issuer was unaware of the disqualifying event – the issuer must establish that in exercising “reasonable care,” could not have known that a disqualification existed.

In anticipation of this ruling, SI has been including “disqualifying event” searches in many of its reports for over two years. Now that the ruling has gone into effect, SI also offers a specialized factual inquiry service to help our clients evidence “reasonable care” under the highest standards. For information, please contact Dave Lazar at 440-423-1157 or e-mail dlazar@scherzer.co or Jessica Staheli at 818-227-2598 or e-mail jstaheli@scherzer.co.

October 29th, 2013|Dodd-Frank|

California passes two new data privacy laws

Effective January 1, 2014, California will have two new data privacy laws: AB 370, which mandates disclosure of “do not track” and other tracking practices in online privacy policies, and SB 46, which amends the state’s data security breach notification law.

AB 370 adds to the California Online Privacy Protection Act (“CalOPPA”) a requirement for companies that collect personally identifiable information online to include disclosures regarding (1) how they respond to a web browser’s “do not track” (DNT) signal, and (2) if third-parties can collect personal information across a network of sites. The law does not require websites to honor browser DNT signals or block third-party tracking; it simply tries to increase transparency about the site’s practices.

SB 46 adds a new category of data triggering California’s breach notification requirements, to wit: “a user name or e-mail address, in combination with a password or security question and answer that would permit access to an online account.” The new law requires notification of unauthorized access to user credential information even if that information is encrypted.

October 25th, 2013|Educational Series, Legislation, Privacy|

Tenant screening laws update: passing background check costs to the applicants

The states of Washington and Oregon recently enacted laws in connection with tenant screening. Among the provisions in both Washington’s RCW §59.18.257 and Oregon’s OAS §90.295, is that the entire cost of the background check can be charged to the applicant, if the screening is performed by a consumer reporting agency (“CRA”). However, if the landlord conducts the background check, it may not charge in excess of the customary fees of the CRAs in its geographical area.

Notably, California’s Civil Code §1950.6(b) provides that a landlord cannot charge (or pass-through) to the applicant more than $30 for a background check. This application screening fee may be adjusted annually by the landlord or its agent commensurate with an increase in the Consumer Price Index. (The current adjusted amount is $41.50.)

September 12th, 2013|Business Transactions, Legislation|