Privacy In Pandemic: Senators Announce Covid-19 Data Privacy Bill
May 11, 2020 —
Kyle Janecek & Jeffrey Dennis – Newmeyer Dillion"Data! Data! Data!. . . I can't make bricks without clay." This classic statement from Sherlock Holmes in The Adventure of the Copper Beeches takes on a new meaning in the COVID-19 pandemic. With the plans to begin contact tracing the spread of the COVID-19 pandemic slowly moving towards the forefront, a valid and important issue presents itself: how do we treat and protect the data we so desperately need to trace, track, and address the pandemic? U.S. Senators Wicker, Thune, Moran, and Blackburn introduced a possible solution to this problem with the COVID-19 Consumer Data Protection Act, as announced on April 30, 2020. So what does the Act entail? What information is protected? What action would businesses need to take towards individuals, such as consumers or even employees, in order to comply with this new legislation?
WHAT IS THE COVID-19 CONSUMER DATA PROTECTION ACT?
The Act is meant to address the concern regarding data collection and privacy due to large companies, like Google and Apple, adjusting the software within their devices to facilitate digital contact tracing. The Act can be broken up into three parts - the treatment of information; the privacy notice requirements; and the transparency requirements.
First, the Act prohibits the collection, processing, or transfer of certain categories of data without notice and the affirmative express consent of the individual, in order to:
- Track the spread of COVID-19,
- Trace the spread of COVID-19 through contact tracing, or
- Determine compliance with social distancing guidelines without the requisite notice to individuals and their express consent.
To accomplish this, the Act also restricts entities in their ability to collect excessive information, stating that an entity cannot collect information beyond what is reasonably necessary to conduct any of the three COVID-19 related purposes listed in the statute. The entity must also provide reasonable administrative, technical, and physical data security policies and practices to protect the information collected. Furthermore, in the event that the entity stops using the information for any of the three COVID-19 purposes, it must delete or de-identify the information it has collected.
Next, the Act describes the requirements for notice to individuals. In order to legally collect, process or transfer the information, the entity needs to provide the consumer with prior notice of the purpose, processing, and transfer of the data through their privacy policy within 14 days of the enactment of the law. This policy would have to:
- Disclose the consumer's rights in a clear and conspicuous manner prior to or at the point of collection,
- Be available in a clear and conspicuous manner to the public,
- Include whether the entity will transfer any of the information it collects in order to track or trace COVID-19 or determine compliance with social distancing,
- Describe its data retention policy, and
- Generally describe its data security measures.
Notably, many of these are already requirements common to many privacy policies, including the disclosure regarding the transfer of an individual's information.
In addition, an individual must give their affirmative express consent to such collection, processing and transfer. In other words, an individual must "opt-in" to having their information collected. This would be done through a checked box or electronic signature, as the law prohibits entities from inferring consent through a failure by the individual to take an action stopping the collection. Furthermore, the individual would also need the ability to expressly withdraw their consent, with the entity then having to cease collection, processing, or transfer of the information within 14 days of the revocation. In essence, due to the restriction on transferal, this may result in businesses opting to delete or de-identify data upon a revocation.
Finally, the entity would have to abide by certain reporting and transparency requirements, namely a monthly public report stating how many individuals had information collected, processed or transferred, and describing the categories of the data collected, processed or transferred by the entity and why. This is akin to the California Consumer Privacy Act's treatment of categories of information, though it would require this information to be released on an ongoing, monthly basis.
WHAT DATA IS COVERED?
Notably, the Act only affects a very limited scope of data. The Act covers geolocation data (exact real-time locations), proximity data (approximated location data), and Personal Health Information (any genetic/diagnosis information that can identify someone). This could cover information like Bluetooth communication or real-time tracking based on a cell phone's geolocation features. Notably, Personal Health Information does not include any information that may be covered under HIPAA or the broader categorization of "Biometric" data (i.e. retinal scans, finger prints, etc). Furthermore, and more generally, "publicly available information" is excluded, which includes information from telephone books or online directories, the news media, "video, internet, or audio content" as well as "websites available to the general public on an unrestricted basis." The latter of which potentially would push any and all information made available through social media (i.e. Facebook or Twitter) into the definition of "publicly available information."
HOW IS IT ENFORCED?
Generally, the law would be enforced by the FTC, under the provisions regarding unfair or deceptive acts or practices, similar to other enforcement actions arising out of privacy policies. Notwithstanding, state attorney generals may also bring actions to enforce compliance and obtain damages, civil penalties, restitution, or other compensation on behalf of the residents of the state.
WHAT SHOULD MY COMPANY DO?
If your entity plans on collecting information for tracking COVID-19, measuring social distancing compliance, or contact tracing, it is advisable to include language in your privacy policy now. This could be as simple as adding an additional provision within your privacy policy stating that the entity will retain information to conduct one of the three COVID-19 purposes as laid out in the statute. In addition, this also means that should the entity collect and use employee information for contact tracing, tracking the spread of COVID-19 or ensuring compliance with social distancing measures, it will need to disclose some of the specifics of that process to the employees and have them opt-in for the process. Finally, for contact tracing purposes, any individual that shares their diagnosis will have to opt-in for the entity to legally collect, process, and transfer that information to others.
While the time to reach compliance is unknown, it is more important than ever to form a compliance plan for privacy legislation if you do not already have a plan in place. If you decide to prepare with us, our firm has created a 90 day California Consumer Privacy Act compliance program (which can be expedited) where our team will collaborate with you to determine a scalable, practical, and reasonable way for you to meet your needs, and we will provide a free initial consultation. For further inquiries or questions related to COVID-19, you can consult with a Task Force attorney by emailing NDCovid19Response@ndlf.com or contacting our office directly at 949-854-7000.
Kyle Janecek is an associate in the firm's Privacy & Data Security practice, and supports the team in advising clients on cyber related matters, including policies and procedures that can protect their day-to-day operations. For more information on how Kyle can help, contact him at kyle.janecek@ndlf.com.
Jeff Dennis (CIPP/US) is the Head of the firm's Privacy & Data Security practice. Jeff works with the firm's clients on cyber-related issues, including contractual and insurance opportunities to lessen their risk. For more information on how Jeff can help, contact him at jeff.dennis@ndlf.com.
Read the court decisionRead the full story...Reprinted courtesy of
Taking Advantage of New Tax Credits and Prevailing Wage Bonuses Under the Inflation Reduction Act for Clean Energy Construction Projects
September 02, 2024 —
Abby Bello Salinas, Jennifer Harris & Sahara Mokhtari - ConsensusDocsIntroduction: IRA Boosts U.S. Construction Industry
On August 16, 2022, President Biden signed the Inflation Reduction Act of 2022 (the “IRA”) into law.[1] The IRA marked a legislative milestone for clean energy in the United States in part by providing funding mechanisms for clean energy infrastructure projects. This new emphasis on green projects has already created a surge of opportunities across the construction industry—the Internal Revenue Service (“IRS”) estimates that IRA clean energy projects will create over 1.5 million jobs over the next decade.[2]
But what can contractors do to take advantage of IRA incentives to reduce costs, build a reliable workforce, and gain a competitive advantage in the new infrastructure landscape created by the ever-increasing number of IRA-related projects? The IRS Final Rule, 89 FR 53184 (29 CFR 1), effective August 26, 2024, provides some guidance by outlining the increased credits and deductions available to taxpayers that satisfy the criteria under the IRA, such as prevailing wage and registered apprenticeship requirements.
Reprinted courtesy of
Abby Bello Salinas, Peckar & Abramson, P.C.,
Jennifer Harris, Peckar & Abramson, P.C. and Sahara Mokhtari, Georgetown Law Class of 2025
Ms. Salinas may be contacted at asalinas@pecklaw.com
Ms. Harris may be contacted at jharris@pecklaw.com
Read the court decisionRead the full story...Reprinted courtesy of
Pennsylvania Civil Engineers Give the State's Infrastructure a "C-" Grade
November 28, 2022 —
American Society of Civil EngineersPENNSYLVANIA. — The Pennsylvania Council of the American Society of Civil Engineers (ASCE) released the 2022 Report Card for Pennsylvania's Infrastructure today at three congruent news conferences across the state including Harrisburg, Lehigh Valley, and Pittsburgh, with 15 categories of infrastructure receiving an overall grade of a "C-". This is the same grade issued by the council in its 2018 report. A "C-" means Pennsylvania's infrastructure is in mediocre condition and requires attention. Pennsylvania's aviation and rail networks are helping to drive economic growth in the region and an improved roadway network is helping increase efficiency for the regional and national economies, but an aging infrastructure network and struggling water systems threaten the health, safety and welfare of the region. Civil engineers graded aviation (B-), bridges (D+), dams (C), drinking water (D), energy (C), hazardous waste (B-), levees (C), parks (C+), ports (C+), rail (C), roads (C-), solid waste (C+), stormwater (D), transit (D), and wastewater (D-).
"Considering Pennsylvania's aging infrastructure and its critical role in our state's economy, policy makers must continue to prioritize dedicated funding to update and improve all infrastructure assets," said Rep. Mike Carroll, D-118. "Failure to do so will seriously harm the quality of life for every citizen."
"This report shows that Pennsylvania's infrastructure has seen some noteworthy improvements and that our lawmakers are prioritizing the built environment, but out-of-sight, out-of-mind systems such as water and wastewater pipelines are lacking the necessary attention," said David DiGioia, chair, 2022 Report Card for Pennsylvania's Infrastructure. "With help from the Bipartisan Infrastructure Law, we could improve our communities for generations if we double down on investment and close our funding gaps across all sectors included in this report."
The Report Card was created as a public service to citizens and policymakers to inform them of the infrastructure needs in their state. Civil engineers used their expertise and school report card-style letter grades to condense complicated data into an easy-to-understand analysis of Pennsylvania's infrastructure network. ASCE State and Regional Infrastructure Report Cards are modeled after the national Infrastructure Report Card, which gave America's infrastructure an overall grade of 'C-' in 2021.
To view the report card and all five categories, visit https://infrastructurereportcard.org/state-item/Pennsylvania/.
ABOUT THE AMERICAN SOCIETY OF CIVIL ENGINEERS
Founded in 1852, the American Society of Civil Engineers represents more than 150,000 civil engineers worldwide and is America's oldest national engineering society. ASCE works to raise awareness of the need to maintain and modernize the nation's infrastructure using sustainable and resilient practices, advocates for increasing and optimizing investment in infrastructure, and improve engineering knowledge and competency. For more information, visit www.asce.org or www.infrastructurereportcard.org and follow us on Twitter, @ASCETweets and @ASCEGovRel.
Read the court decisionRead the full story...Reprinted courtesy of
Iconic Seattle Center Arena Roof the Only Piece to Stay in $900-Million Rebuild
July 09, 2019 —
Tim Newcomb - Engineering News-RecordThe roof covering the under-construction Seattle Center Arena will remain. And it won’t move, even as contractors remake the entire arena beneath it.
OVG-Seattle has started the task of remaking the city-owned structure—and the only major arena within a park in North America—into the home for the expansion NHL Seattle franchise and the start of the 2021 NHL season.
Read the court decisionRead the full story...Reprinted courtesy of
Tim Newcomb, ENRMr. Newcomb may be contacted at
Appraiser Declarations Inadmissible When Offered to Challenge the Merits of an Appraisal Award
March 14, 2018 —
Valerie Moore and Christopher Kendrick - Publications & InsightsIn
Khorsand v. Liberty Mutual Fire Ins. Co. (No. B280273, filed 2/27/18), a California appeals court affirmed an appraisal award favorable to a homeowners insurer, ruling that it was improper to admit as evidence in opposition to a petition to confirm the award a declaration from the policyholders’ appraiser, except for the limited purpose of showing improprieties in the appraisal, bias, partiality or other improper conduct.
The homeowners had a pipe leak and submitted a claim. The insurer responded to an estimate from the owners’ adjuster by retaining an expert and paying an undisputed amount that was significantly less. Eleven months later the owners had upper deck damage and submitted another claim. Relying on the same expert, the insurer paid another undisputed amount significantly less than the owner’s estimate. The owners requested appraisal but the insurer denied the request, contending that the dispute was over coverage and outside the scope of appraisal.
The owners’ petition for appraisal was granted, with the court ordering separate listing of items the insurer disputed regarding coverage or causation. The appraisal panel issued an award stating that total damage was $132,293, of which $96,530 was contested by the insurer. The insurer filed a petition to confirm the award, which was granted despite the fact that the owners’ appraiser had refused to sign it.
Reprinted courtesy of
Valerie Moore, Haight Brown & Bonesteel LLP and
Christopher Kendrick, Haight Brown & Bonesteel LLP
Ms. Moore may be contacted at vmoore@hbblaw.com
Mr. Kendrick may be contacted at ckendrick@hbblaw.com
Read the court decisionRead the full story...Reprinted courtesy of
Home Prices in 20 U.S. Cities Increased 4.3% in November
January 28, 2015 —
Victoria Stilwell – Bloomberg(Bloomberg) -- Home prices in 20 U.S. cities rose at a slower pace in the year ended in November, a sign the industry struggled to find momentum even amid low mortgage rates.
The S&P/Case-Shiller index of property values increased 4.3 percent from November 2013 after rising 4.5 percent in the year ended in October, the group said Tuesday in New York. The median projection of 28 economists surveyed by Bloomberg called for a 4.3 percent year-over-year advance. Nationally, prices rose 4.7 percent after a 4.6 percent gain in the year ended in October.
Read the court decisionRead the full story...Reprinted courtesy of
Victoria Stilwell, BloombergMs. Stilwell may be contacted at
vstilwell1@bloomberg.net
Loss Ensuing from Faulty Workmanship Covered
April 28, 2014 —
Tred R. Eyerly – Insurance Law HawaiiThe court found coverage for damage resulting from faulty workmanship. Drury Co. v. Mo. United Sch. Ins. Counsel, 2014 Mo. App. LEXIS 319 (Mo. Ct. App. March 25, 2014).
The School District entered a contract with general contractor, Penzel Construction Company, Inc., to build an addition to a high school. Under the prime contract, the School District was to purchase property insurance, including builder's risk "all-risk" coverage. The policy was to cover the interests of the owner, the contractor, subcontractors and sub-subcontractors in the project.
The School District obtained a policy from Missouri United School Insurance Counsel (MUSIC). Exclusions in the all-risk policy included loss due to faulty workmanship or materials, "unless loss by a peril not otherwise excluded ensues and then MUSIC shall be liable only for such ensuing loss."
Read the court decisionRead the full story...Reprinted courtesy of
Tred R. Eyerly, Insurance Law HawaiiMr. Eyerly may be contacted at
te@hawaiilawyer.com
Winter COVID-19 Relief Bill: Overview of Key Provisions
January 04, 2021 —
White and Williams LLPIn a much needed holiday gift for businesses and individuals who continue to be affected by COVID-19, Congress finally approved a $900 billion aid package follow-up to the CARES Act (the Winter Covid-19 Relief Bill), the several trillion dollar stimulus that was enacted early in the pandemic. The bill, part of the larger annual spending bill, will hopefully be signed into law by President Trump in the coming days although the President has indicated his disappointment about the small amount of direct relief to individuals included in the bill. The bill was passed by both houses of Congress by a veto proof majority and is expected to become law whether or not the President chooses to exercise his veto power.
White and Williams has and will continue to provide more detailed updates on important components of the legislation, some of which address matters beyond COVID-19-related relief and support, including a new Paycheck Protection Program and tax deductibility of expenses paid for with PPP funds, extension and expansion of the employee retention tax credit, direct payments to individuals, additional unemployment assistance, restrictions on surprise medical billing, rental assistance and extension of the eviction moratorium, education funding, vaccine distribution, testing and tracing, and other healthcare funding. In the meantime, here is a brief overview of several pieces of the legislation:
Paycheck Protection Program
The Winter COVID-19 Relief Bill provides for $284 billion of funding for a new round of the popular Paycheck Protection Program (PPP), which was established by the CARES Act and allowed borrowers to receive forgivable loans to be used to retain employees and cover certain other basic operating expenses. New and existing businesses may participate in the program. However, eligibility for PPP Part II is more restrictive and targeted then the original PPP.
Read the court decisionRead the full story...Reprinted courtesy of
White and Williams LLP
