Complying With Data Breach Regulations in the Construction Industry
November 24, 2019 —
Ryan Bilbrey - Construction ExecutiveRecent data breach incidents—like the massive Capital One cyberattack, where a former employee accessed more than 100 million customer accounts and credit card applications—have left many users questioning how safe their information really is in the hands of companies.
There is reason to be concerned. More than 4.1 billion records were exposed in nearly 4,000 data breaches reported in the first half of 2019 alone, according to the 2019 MidYear QuickView Data Breach Report. Construction companies are not immune.
As the industry becomes more reliant on technology—using augmented reality, Building Information Modeling and drones on construction sites, for example—construction companies are becoming greater targets for hackers looking to gain a financial or strategic advantage.
Instead of assuming a company will never experience a breach (or rather, denying that it will ever happen), it’s important to be aware of possible threats and establish data breach response policies to minimize potentially catastrophic fallout.
Reprinted courtesy of
Ryan Bilbrey, Construction Executive, a publication of Associated Builders and Contractors. All rights reserved.
Read the court decisionRead the full story...Reprinted courtesy of
Mr. Bilbrey may be contacted at
rbilbrey@biaprotect.com
Quick Note: Lis Pendens Bond When Lis Pendens Not Founded On Recorded Instrument Or Statute
May 20, 2019 —
David Adelstein - Florida Construction Legal UpdatesIf a lis pendens is recorded and the lis pendens is NOT founded on a duly recorded instrument (e.g., mortgage) or a statute (e.g., construction lien), a lis pendens bond should be recorded. The lis pendens bond should cover prospective damages associated with the wrongful / unjustified recording of a lis pendens that were suffered by the property owner. The reason being is that the lis pendens has an effect on the title to the property as long as the lis pendens is recorded. Damages could stem from a decline in the market value of the property, continued upkeep and maintenance of the property, and there may also be (and, really, should be) consideration for loss of investment return associated with the equity in that property.
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Kirwin Norris, P.A.Mr. Adelstein may be contacted at
dma@kirwinnorris.com
Settlement Payment May Preclude Finding of Policy Exhaustion: Scottsdale v. National Union
December 11, 2013 —
Heather Anderson — Higgins, Hopkins, McLain & Roswell, LLC.In the last year, the U.S. District Court for the District of Colorado found that a settlement payment from an excess insurance carrier to another primary insurance carrier precluded a finding of vertical exhaustion sufficient to trigger the primary carrier’s duty to indemnify. See Scottsdale Ins. Co. v. National Union Fire Ins. Co. of Pittsburgh, 2012 WL 6004087 (D. Colo. 2012). The Scottsdale case arose out of the construction of a 507-unit apartment complex in Arapahoe County, Colorado in which a number of defects became apparent during construction. As a result, the owner of the project sued the general contractor and/or the construction manager, seeking to recover more than $22 million for various construction deficiencies. Id. at *1.
The general contractor was insured under policies issued by several carriers. Scottsdale Insurance Co. (“Scottsdale”) and National Union Fire Ins. Co. (“National Union) provided umbrella coverage, and CNA and American Zurich Ins. Co. (“Zurich”) provided primary insurance under commercial general liability policies. About five years later, the construction defect case settled for $8.5 million dollars.
Read the court decisionRead the full story...Reprinted courtesy of
Heather AndersonHeather Anderson can be contacted at
anderson@hhmrlaw.com
Snooze You Lose? Enforcement of Notice and Timing Provisions
November 11, 2024 —
Cornelius F. "Lee" Banta, Jr. - ConsensusDocsDeadlines are an inescapable part of the construction industry. Bid deadlines. Submittal deadlines. Material delivery deadlines. Substantial completion. Final completion. And so, inevitably, fighting about deadlines becomes a necessary byproduct. Was the deadline really a deadline? Was the schedule slippage on the critical path? Should there be an equitable extension to the date of substantial completion? Given the amount of attention and concern conferred on deadlines, those drafting construction contracts naturally seek to clarify which deadlines really matter with the inclusion of notice and timing provisions.
A contract’s change order and claims procedures are often a key friction point for those drafting and administering the contract. Should there be a requirement for prior written notice of a claim for cost/time relief? How much advance notice? Who should the request be sent to? Is a specific form of notice required? What are the consequences of failing to provide timely notice? A practitioner should pay careful attention to negotiating these terms on the front end, because rest assured, these contract provisions will garner scrutiny when a change order dispute boils over.
Read the court decisionRead the full story...Reprinted courtesy of
Cornelius F. "Lee" Banta, Jr., Peckar & Abramson, P.C.Mr. Banta may be contacted at
lbanta@pecklaw.com
The Results are in, CEO/Founding Partner Nicole Whyte is Elected to OCBA’s 2024 Board of Directors!
October 09, 2023 —
Dolores Montoya - Bremer Whyte Brown & O'Meara LLPBremer Whyte Brown & O’Meara, LLP is excited to share that CEO/Founding Partner Nicole Whyte has been elected to the Orange County Bar Associations (“OCBA”) slate of four open Board of Directors for a three-year term beginning January 2024, alongside Casey Johnson (Aitken Aitken Cohn LLP), William O’Neill (Ross, Wolcott, Teinert & Prout LLP), and Lesley Young (Orange County District Attorney’s Office).
“It is one of the greatest honors of my career to have been elected to the OCBA board of directors. Thank you to all those who supported me; I will work tirelessly as your representative to serve our bar and community. I am especially excited to work alongside President Elect Christina Zabat-Fran and the other esteemed members of the board. I look forward to applying my skills and knowledge to serve our legal community as we work to promote excellence, integrity and honor in our profession, and to improve the practice for all.” – Nicole Whyte
Nicole is honored to have the opportunity to continue her support with the OC legal community. For over two decades, she has served on various OCBA legal committees and boards. Nicole currently serves on the board of OCBA Master’s Division and is the 2023 Board President of the Public Law Center, the largest pro-bono law firm in Orange County. She is also a current board member of the Sonenshine Pro Bono Committee. Nicole is a founding fellow of the OC Bar Foundation and served as secretary for the Robert Banyard Inn of Court for eight years. Nicole plans to call upon her experience serving on various boards, and her many years of law practice and management experience, to help identify and support the needs of the OCBA and its thriving and diverse OC legal community.
Read the court decisionRead the full story...Reprinted courtesy of
Bremer Whyte Brown & O'Meara LLP
English v. RKK. . . The Saga Continues
December 16, 2019 —
Christopher G. Hill - Construction Law MusingsRemember back in 2018 when I thought I’d told you the end of the English Construction story regarding its various consultants, etc.? I was wrong. The matter went up on appeal to the 4th Circuit Court of Appeals where the Appeals Court considered the summary judgment granted to the defendant Rummel, Klepper & Kahl (“RKK”) based upon what came down to a contributory negligence reading of the indemnity clause that was allowed to survive in the first district court opinion relating to these ambiguous contracts finding that English was negligent so couldn’t recover. The 4th Circuit also considered the finding that defendant CDM Smith did not breach its contract as a matter of law and that English’s negligence was the cause of the damages.
The Court of Appeals reversed both of the holdings by the Western District of Virginia court, essentially stating that there was enough of a factual dispute to render any summary judgment to be premature.
As to English’s arguments regarding the indemnity scheme in the contracts, the court found that the interpretation was at least ambiguous enough that summary judgment was inappropriate, stating:
While we are not prepared to settle conclusively these interpretation disputes at the summary judgment stage, English’s proffered interpretation is, at the very least. reasonable. Indeed, of the two interpretations, English’s seems to be more closely aligned with the actual language in the contract. The district court thus erred in rejecting English’s interpretation and adopting RK&K’s interpretation as a matter of law.
[A]t bottom, while the district court was authorized to construe unambiguous language as a matter of law, it could not resolve genuine disputes regarding the meaning of ambiguous contractual language against the nonmoving party on summary judgment. We therefore vacate the court’s grant of summary judgment to RK&K and remand for further proceedings.
Read the court decisionRead the full story...Reprinted courtesy of
The Law Office of Christopher G. HillMr. Hill may be contacted at
chrisghill@constructionlawva.com
Funding the Self-Insured Retention (SIR)
August 17, 2020 —
David Adelstein - Florida Construction Legal UpdatesUnlike a deductible, a self-insured retention (referred to an “SIR”) is, as the name suggests, a self-insured obligation of the insured before its insurer picks up coverage. The SIR needs to be exhausted by the insured (as the primary self-insurance component) before the carrier’s excess defense and indemnification obligations kick-in under the terms of the policy. However, an insured can generally exhaust an SIR by paying legal fees and costs associated with a claim.
Oftentimes, the language in the policy requires the SIR to be paid for by the named insured or an insured under the policy. This was an issue addressed by the Florida Supreme Court in Intervest Const. of Jax, Inc. v. General Fidelity Ins. Co., 133 So.3d 494 (Fla. 2014).
In this matter, a personal injury claimant asserted a claim against the contractor dealing with a residential home. The contractor hired a subcontractor to install attic stairs and the subcontract required the contractor to indemnify it. The owner of the house injured herself on the attic stairs and sued the contractor. The contractor, in turn, sought indemnification against the subcontractor that installed the attic stairs.
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Kirwin Norris, P.A.Mr. Adelstein may be contacted at
dma@kirwinnorris.com
We've Surveyed Video Conferencing Models to See Who Fits the CCPA Bill: Here's What We Found
August 10, 2020 —
Shaia Araghi & Kyle Janecek – Newmeyer DillionWorldwide closures as a result of COVID-19 have resulted in an extreme surge in video conferencing use. This spike in use has also resulted in increased concern about the privacy of these video conferencing applications, including a class action lawsuit against one of the applications: Zoom. Because of this, we took a deeper look into the privacy policies of six prominent video conferencing applications and created a chart showing each video conferencing application's compliance with the California Consumer Privacy Act. Reviewing these materials will provide an awareness of the deficiencies within the Privacy Policies, which can help you become more well-informed about your own rights, and more knowledgeable about any deficiencies in your own business' privacy policy. If these widely-used and widely-known companies can have deficiencies, it is an important way to re-examine and fix these issues in your own.
To determine this, we reviewed the CCPA's twenty requirements for compliance, including: (1) the existence of a privacy policy, (2) required disclosures of information regarding the existence of rights under the CCPA, (3) instructions on how to exercise rights, and (4) providing contact information.
Here are the top 5 discoveries from our review:
1)
No videoconferencing applications address authorized agents. This makes sense, as the treatment of authorized agents were just laid out in the recently finalized regulations. This is a reminder to businesses to utilize these regulations when setting up compliance measures to ensure there is no risk in missing out on requirements like this, which will still be required and enforced by the Attorney General.
2)
Three platforms (WebEx, Skype, and Teams) have separate tabs and pages detailing privacy policies, and don't necessarily have a single unified and simple policy. Because of the accessibility requirements, this means that the privacy policy may not be readily accessible on the business's website, and may open companies to arguments that the entirety of their policy is non-compliant if key portions are hidden or otherwise inaccessible. Therefore to eliminate this concern, keep your policy unified, simple and in one location for ease of viewing.
3)
None of the platforms address information relating to minors under the age of 16, which is notable as some of these platforms have been used for online education. The final regulations outline different treatment for minors from ages 13 to 16, and for minors under the age of 13. As a result, privacy policies focused on compliance with the Children's Online Privacy Protection Act (COPPA) may be insufficient as it only applies to those under 13 years old.
4)
While all of the platforms state that no sale of information occurs, two platforms (Zoom and GoToMeeting) go above and beyond to explain the right to opt-out of sales. This is especially great as the CCPA permits that no notice needs to be given if no sale occurs. By taking this extra step, Zoom and GoToMeeting explain to their users that they have additional rights, which may be necessary as these platforms are also used by other entities, which may collect or otherwise use information collected from a videoconference meeting.
5)
Only one platform (Wire) does not give instructions on how to delete information. The CCPA regulations still require that information regarding instructions on how to delete information be given. The lack of instructions does not relieve Wire from its obligations, and similarly situated businesses may find themselves in a position where they will have to comply with a consumer request, in any form, as the regulations require that a business either comply, or list the proper instructions on how to make the request.
Download the Full Breakdown
To learn more about our findings and how the video conferencing companies stacked up against the CCPA, visit: https://www.newmeyerdillion.com/ccpa-privacy-policy-compliance-videoconferencing-platforms/. We hope this serves as a reminder to everyone to read the privacy platforms for the services you use and update your company's privacy policies to comply with the most recent regulations, as none of these services are currently in complete compliance, and it is only a matter of time before enforcement begins.
Shaia Araghi is an associate in the firm's Privacy & Data Security practice, and supports the team in advising clients on cyber-related matters, including compliance and prevention that can protect their day-to-day operations. For more information on how Shaia can help, contact her at shaia.araghi@ndlf.com.
Kyle Janecek is an associate in the firm's Privacy & Data Security practice, and supports the team in advising clients on cyber related matters, including policies and procedures that can protect their day-to-day operations. For more information on how Kyle can help, contact him at kyle.janecek@ndlf.com.
Read the court decisionRead the full story...Reprinted courtesy of
