140 Days Until The California Consumer Privacy Act Becomes Law - Why Aren't More Businesses Complying?
September 09, 2019 —
Kyle Janecek and Jeff Dennis – Newmeyer DillionCalifornia, for better or for worse, has a reputation as being a trendsetter, and has taken the lead in the United States by passing the "California Consumer Privacy Act," or "CCPA." This massive law has been on the books since 2018, but hasn't taken effect yet. However, the timeframe for businesses to be in compliance is rapidly diminishing. Currently, there are less than five months for businesses to (a) familiarize themselves with what the law requires; (b) determine how and if they are affected by the law; and (c) determine how to be in compliance with the law's demands. Right now, companies aren't making a rush to become CCPA compliant, but this is a mistake. Below are a few of the misconceptions that businesses have, as well as the realities.
MISCONCEPTION 1: It doesn't apply to my company.
For many businesses, it will apply. The baseline of the CCPA is: (1) does the business do anything with California residents (including employees); (2) is it for-profit; and (3) it either has $25 million annual revenue, "sells" 50,000 pieces of personal information or receives 50% or more of its revenue from personal information.
It does not matter if the business is in Nevada, Arizona, Texas or Delaware. So long as there is some connection to Californian residents, exists to make a profit, and otherwise satisfies either the profit, volume, or revenue percentage requirements, it applies. On that note, even if a business does not sell personal information, it does not mean it does not "sell" personal information under the law, as it includes any exchange of personal information for valuable consideration, such as the exchange of consumer data between companies, or the sale of information to a University for study.
MISCONCEPTION 2: The Federal Government will stop it.
One of the main reasons we have the CCPA is because the Federal Government has not acted on this issue. Furthermore, there is a high likelihood that any Federal law will not be substantially different from the CCPA, keeping the core principles in place. It's also unlikely that such a law will take effect and be passed in the remaining five months before the CCPA begins enforcement. Companies must accept that ideals of transparency, choice, consent and reasonable security as they relate to consumers' personal information are here to stay.
MISCONCEPTION 3: California is still changing the law, so I should wait.
California is still in the process of fine-tuning the CCPA, but this is no reason to wait. Fixes to questions arising regarding the CCPA have come out piecemeal, and continued changes, including expansions are likely. For example, employees were previously not addressed specifically within the CCPA, but are being addressed in the planned AB 25, excluding employees from some of the CCPA's protections. Conversely, there have also been planned provisions to expand on the protections and enforcement mechanisms of the CCPA, including a broad and expansive private right of action to permit individuals to sue for technical violations of the statute, like having to wait too long for a response to the demand, even if no actual damage is suffered. Again, the foundational requirements of the CCPA will not change via amendment – so companies should act now.
MISCONCEPTION 4: It's too expensive.
Actually no. Many of the basic actions are not cost-prohibitive, and are actions a business would want to do anyways: (a) Employee training to avoid data breaches and how to respond to user requests; (b) data mapping to quickly find, access, and arrange protections for consumer data; and (c) ensuring you have reasonable cyber security. This can even be turned into a competitive advantage, as consumers increasingly value companies that share their interests, including their privacy.
A compliance mistake could be extraordinarily costly. Currently, a violation for statutory violations of the CCPA can carry a penalty between $2,500 to $7,500 per individual violation. Furthermore, there is a private right of action with statutory damages of $100 to $750 per individual violation that could quickly balloon to exceed $5 million at a minimum, and invites class action/lawsuits for a data breach.
While this is true of almost every legal risk, an ounce of prevention is worth a pound of cure. The penalties on the higher end of the spectrum are for willful violations, and attempts to comply with the law can act to curb potential risks.
What Should I Do?
If you feel CCPA compliance is important to your business, and decide to prepare for the CCPA with us, our firm has created a 90-day CCPA compliance program where our team will collaborate with you to determine a scalable, practical, and reasonable way for you to meet your needs, without breaking the bank. Let us provide you a free initial consultation to see if our CCPA compliance program works for you.
Kyle Janecek is an associate in the firm's Privacy & Data Security practice, and supports the team in advising clients on cyber related matters, including policies and procedures that can protect their day-to-day operations. For more information on how Kyle can help, contact him at kyle.janecek@ndlf.com.
Jeff Dennis is the head of the firm's Privacy & Data Security practice. Jeff works with the firm's clients on cyber-related issues, including contractual and insurance opportunities to lessen their risk. For more information on how Jeff can help, contact him at jeff.dennis@ndlf.com.
About Newmeyer Dillion
For 35 years, Newmeyer Dillion has delivered creative and outstanding legal solutions and trial results that align with the business objectives of clients in diverse industries. With over 70 attorneys working as an integrated team to represent clients in all aspects of business, employment, real estate, privacy & data security and insurance law, Newmeyer Dillion delivers tailored legal services to propel clients' business growth. Headquartered in Newport Beach, California, with offices in Walnut Creek, California and Las Vegas, Nevada, Newmeyer Dillion attorneys are recognized by The Best Lawyers in America©, and Super Lawyers as top tier and some of the best lawyers in California and Nevada, and have been given Martindale-Hubbell Peer Review's AV Preeminent® highest rating. For additional information, call 949.854.7000 or visit www.newmeyerdillion.com.
Read the court decisionRead the full story...Reprinted courtesy of
Motion to Dismiss COVID Claim Granted in Part, Denied in Part
February 06, 2023 —
Tred R. Eyerly - Insurance Law HawaiiThe insurer's motion to dismiss the insured's claim for business losses due to COVID-19 was granted in part, denied in part. SRL v Zurich Am. Ins Co., 2022 U.S. Dist. LEXIS 210058 (N.D. Ill. Nov. 21, 2022).
Excelsior owned and managed the Westin Excelsior Rome, a luxury hotel in Rome. The hotel suffered business income losses with the onset of the pandemic.While the hotel was not forced to close, its bookings decreased to virtually nothing. The Excelsior's complaint alleged that the COVID-19 virus was present in and around the hotel as multiple guests and at least six employees tested positive for COVID-19. It further alleged that the virus attached to interior property and was in the air.
Excelsior was insured under a commercial property policy issued by Zurich. The court agreed there was no direct physical loss because no structure suffered damage. Among the coverages under the policy, however, was a "Cancellation of Bookings" provision. Zurich agreed there was coverage under this provision, but argued that Excelsior had already reached its annual limit for Cancellation of Bookings claims.
Read the court decisionRead the full story...Reprinted courtesy of
Tred R. Eyerly, Damon Key Leong Kupchak HastertMr. Eyerly may be contacted at
te@hawaiilawyer.com
Boston Catwalk Collapse Injures Three Workers
May 10, 2022 —
Scott Van Voorhis - Engineering News-RecordThe collapse of a catwalk in a defunct, 124-year-old power plant building in Boston on May 4 injured three workers in the latest in a spate of serious construction accidents in the city and its environs.
Reprinted courtesy of
Scott Van Voorhis, Engineering News-Record
ENR may be contacted at enr@enr.com
Read the full story... Read the court decisionRead the full story...Reprinted courtesy of
The United States Court of Appeals, Fourth Circuit, Finds Wrap-Up Exclusion Does Not Bar Coverage of Additional Insureds
February 18, 2020 —
Callie E. Waers - Florida Construction Law NewsThe United States Court of Appeals, Fourth Circuit, recently took a close look at the application of a “controlled insurance program exclusion” (wrap-up exclusion) to additional insureds on a commercial general liability policy. In Cont’l Cas. Co. v. Amerisure Ins. Co., 886 F.3d 366 (4th Cir. 2018), the Fourth Circuit examined the interplay of an enrolled party’s additional insured status on an unenrolled party’s commercial general liability (“CGL”) policy with a wrap-up exclusion. The court applied North Carolina law and found that pursuant to the policy’s own language, the exclusion only applied to the original named insured, not the additional insureds.
The case arose out of an injury incurred by an employee of a second-tier subcontractor during the construction of a hospital. On this particular project, the owner maintained a “rolling owner controlled insurance program” (wrap-up insurance program) in which all tiers of contractors were required to enroll, but enrollment was not automatic. The general contractor was enrolled in the owner’s wrap-up policy, but neither the steel manufacturer subcontractor nor its sub-subcontractor, the steel installation company, were enrolled. The underlying plaintiff was injured while he was an employee of the steel installation company, but he did not name his employer in his personal injury lawsuit.
The Cont’l Cas. Co. case was instituted by Continental Casualty Company (“Continental”) after it defended and settled the underlying plaintiff’s claims against its insured and additional insured, the steel manufacturer and general contractor, respectively. Continental sought to be reimbursed for the $1.7 million settlement and attorneys’ fees and costs incurred for the defense and indemnity of the underlying lawsuit.
Continental alleged that Amerisure Insurance Company (“Amerisure”) breached its duty to defend and Amerisure’s policy provided the primary coverage for both the general contractor and steel manufacturer, who were additional insureds on the Amerisure policy. Amerisure denied a duty to defend the additional insureds based on the presence of the wrap-up exclusion.
Read the court decisionRead the full story...Reprinted courtesy of
Ryan M. Charlson, Cole, Scott & Kissane, P.A.Mr. Charlson may be contacted at
Ryan.Charlson@csklegal.com
Shaken? Stirred? A Primer on License Bond Claims in California
July 14, 2016 —
Garret Murai – California Construction Law BlogShaken?
Stirred?
A bit hot under the tuxedo collar perhaps?
Maybe it’s time for a martini. Or two.
When your project’s a mess, your contractor isn’t returning your calls, and you don’t have a license to kill it’s only natural that you would want to go after that other license: the contractor’s license bond.
However, except for smaller claims, or situations where you discover that the contractor is or might be judgment-proof, going after a contractor’s license bond isn’t necessarily the panacea many might hope it to be. Read on to learn why.
What is a license bond?
First, a license bond is not insurance. While insurance is typically limited to property damage and personal injury, a license bond covers a contractor’s violation of the Contractors State License Law. All California contractors are required to have on file a license bond (or, alternative, such as a cash deposit) with the California Contractors State License Board (“CSLB”).
Read the court decisionRead the full story...Reprinted courtesy of
Garret Murai, Wendel Rosen Black & Dean LLPMr. Murai may be contacted at
gmurai@wendel.com
Trends: “Nearshoring” Opportunities for the Construction Industry
July 22, 2024 —
Jerry P. Brodsky & Roberto Hernandez - Peckar & Abramson, P.C.“Nearshoring” is a hot topic throughout Latin America and is receiving increasing attention in the United States. We offer this introduction to “Nearshoring” and the opportunities it presents for your reference.
“Nearshoring” has become increasingly relevant in the context of the globalized economy. This phenomenon describes relocating production and service operations to countries geographically close to consumer markets, instead of opting for more distant locations as in traditional “offshoring”, considering, as dominant criteria, production conditions and costs.
Mexico, for example, given its strategic geographic closeness to the United States and its highly skilled labor force, is an attractive location for companies in a wide range of industries which are considering relocation or construction of new facilities and seeking to optimize costs, maintain efficiency and mitigate supply chain risks.
Reprinted courtesy of
Jerry P. Brodsky, Peckar & Abramson, P.C. and
Roberto Hernandez, Peckar & Abramson, P.C.
Mr. Brodsky may be contacted at jbrodsky@pecklaw.com
Read the court decisionRead the full story...Reprinted courtesy of
Construction-Industry Clients Need Well-Reasoned and Clear Policies on Recording Zoom and Teams Meetings
June 19, 2023 —
Stu Richeson - The Dispute ResolverThe use of Zoom, Microsoft Teams, and similar communication platforms has become increasingly common in the construction industry. While these platforms can greatly facilitate communication between project participants, they potentially create a source of ESI – electronically stored information – that must be understood and considered by the businesses using those systems.
Businesses using Zoom, Microsoft Teams, and similar platforms should have policies in place to address whether and why to record video conferences, how long to preserve any recorded meetings, and retention policies for instant messaging systems. The failure to adopt appropriate policies could prove quite costly in any future litigation or criminal investigation.
Federal Rule of Civil Procedure 37(e) sets out the duty to preserve ESI and provides significant penalties for failing to do so once litigation is anticipated. It is important to note: there is generally no obligation to create ESI, such as recording Zoom or Teams meetings. At the same time, if the ESI is created but litigation is not anticipated, businesses are generally free to establish their own retention policy for that ESI. However, once litigation is anticipated, potential litigants have the obligation to preserve the ESI and, in connection therewith, to conduct a reasonable search for relevant information (to ensure its proper preservation).
Read the court decisionRead the full story...Reprinted courtesy of
Stu Richeson, PhelpsMr. Richeson may be contacted at
stuart.richeson@phelps.com
Businesspeople to Nevada: Revoke the Construction Defect Laws
March 01, 2012 —
CDJ STAFFThe Nevada chapter of the National Federation of Independent Businesses has said that Nevada’s construction defect and minimum wage laws are hampering job growth. The organization conducted a survey, and although only about two percent of the members responded, they passed the opinions of the group on to Governor Brian Sandoval. Sandoval has said, according to the report by Fox News Reno, that he wants the state to be more business friendly. He supports reforms to Nevada’s construction defect laws, saying that he’d “like to see some reform” on the issue of mandatory attorney’s fees.
Randi Thompson, the spokesperson for the Nevada chapter of the National Federation of Independent Businesses, said that members of her organization would like to see current Nevada construction defect law revoked. She described current law as “driven towards lawyers and not toward protecting consumers.”
Read the full story…
Read the court decisionRead the full story...Reprinted courtesy of
