Change #7- Contractor’s Means & Methods (law note)
March 28, 2018 —
Melissa Dewey Brumback - Construction Law in North CarolinaFirst, a little history: as you know, means, methods, techniques, sequences, and procedures are all part of the Contractor’s responsibility on a construction site. However, when the AIA A201 was last revised, in 2007, there was a provision put in for that rare time when the Contract Documents gave specific instructions concerning a particular construction method. If the Contractor viewed such instructions as unsafe, he was to give notice to the Owner and Architect, and was not to proceed with that portion of the Work without further written instructions from the Architect. If the Architect directed him to proceed, the Contractor was absolved from any risks with following that instruction. Instead, the Owner assumed the responsibility for any loss or damage.
Read the court decisionRead the full story...Reprinted courtesy of
Melissa Dewey Brumback, Construction Law in North Carolina
Three Reasons Late Payments Persist in the Construction Industry
December 22, 2019 —
Patrick Hogan - Construction ExecutiveConstruction professionals are all too familiar with the payment issues that plague the construction industry. Contractors, subcontractors and material suppliers often have to deal with payment delays and even nonpayment—affecting cash flow and their ability to meet expenses.
According to an Atradius study, a quarter of all B2B invoices issued in North America are overdue. The construction industry accounted for one-third of those past-due invoices, and many contractors and construction business owners do not have a positive outlook on the industry's payment issues. The same survey found 55% of U.S. firms think there will be no change in the industry’s payment practices over the coming months—one-third even expects an increase in late payments.
These findings show that managing cash flow is a significant challenge in the construction industry. Having a negative cash flow will push the company toward financial trouble, which may ultimately lead to its demise. Understanding the reasons why payment issues persist in construction will help contractors protect their business, prevent these issues from happening or at least minimize their effect on the current operations.
Reprinted courtesy of
Patrick Hogan, Construction Executive, a publication of Associated Builders and Contractors. All rights reserved.
Read the court decisionRead the full story...Reprinted courtesy of
California’s Prompt Payment Laws: Just Because an Owner Has Changed Course Doesn’t Mean It’s Changed Course on Previous Payments
April 20, 2016 —
Garret Murai – California Construction Law BlogWe’ve written before about California’s prompt payment laws which are designed to help contractors get paid in a timely and orderly fashion, which is always nice, right?
California’s prompt payment laws require that project owners pay their direct contractors, who are in turn required to pay their subcontractors who are in turn required to pay their sub-subcontractors and so on within certain statutorily set deadlines, or be subject to prompt payment penalties nearly as high as the interest you pay on your credit cards.
Read the court decisionRead the full story...Reprinted courtesy of
Garret Murai, Wendel Rosen Black & Dean LLPMr. Murai may be contacted at
gmurai@wendel.com
Construction Defects and Second Buyers in Pennsylvania
February 07, 2013 —
CDJ STAFFThe ability to sue over construction defects has typically been limited to the initial purchaser of a home. But as Kevin F. McKeegan writes in the Pittsburgh Post-Gazette, the Pennsylvania Superior Court recently expanded that to subsequent purchasers. As Mr. Keegan notes, "not only can the first buyer of a new home bring a lawsuit against a builder, but now any subsequent buyer within 12 years of the home's construction can file a claim."
Mr. Keegan, a lawyer with Meyer, Unkovic & Scott, notes that in the underlying case, the second owners of a home in Jamison, Pennsylvania filed a claim that the water infiltration violated the "implied warranty of habitability."
There are still limitations on construction defects in Pennsylvania. The suit must be filed within twelve years of completion of the construction, and a breach of implied warranty must be proven. Mr. Keegan notes that "the homeowner must show that a defect is hidden and non-obvious, that it is the result of the builder's design or construction, and that it affects the habitability of the residence."
Read the court decisionRead the full story...Reprinted courtesy of
More Thoughts on “Green” (the Practice, not the Color) Building
February 01, 2021 —
Christopher G. Hill - Construction Law MusingsIt has been a while since I “mused” on the green building landscape. While I am a LEED AP and have presented on green (read “sustainable”) building in the past, I am not totally sold on LEED as the be all end all in sustainable construction (the USGBC is a private rating organization that, like the rest of us, is imperfect). I’ve also discussed, both here and elsewhere, the potential risks that come with any new(ish) building process.
A recent post by my fellow construction attorney Matt Bouchard (@mattbouchardesq) piqued my interest and started me thinking yet again. Matt’s recent post, entitled Is the U.S. Green Building Council Becoming a Not-So-Jolly Green Giant? outlines recent developments in the sustainable building world (remember “green” is not a specification, but a color), and some of the debate out there among those in the know. From a great infographic on the Top 10 LEED states (Virginia is 3rd) to some sniping from the USGBC (read the LEED folks) toward the GBI (Green Globes) to the fact that LEED is losing some traction as the primary governmental green building certification platform, Matt’s post is worth a read.
Read the court decisionRead the full story...Reprinted courtesy of
The Law Office of Christopher G. HillMr. Hill may be contacted at
chrisghill@constructionlawva.com
Blackstone to Buy Apartments From Greystar in $2 Billion Deal
December 10, 2015 —
Sarah Mulholland – BloombergBlackstone Group LP agreed to buy 32 multifamily properties for about $2 billion from Greystar Real Estate Partners LLC as the private equity giant expands its push into the U.S. apartment market.
The buildings, with a total of 10,399 units, are spread throughout the country in states such as California, Florida, Washington and New York, Greystar said in a statement Tuesday. The Charleston, South Carolina-based company, the largest U.S. apartment manager, will continue to oversee the properties. Peter Rose, a Blackstone spokesman, declined to comment on the transaction.
Read the court decisionRead the full story...Reprinted courtesy of
Sarah Mulholland, Bloomberg
Privacy In Pandemic: Senators Announce Covid-19 Data Privacy Bill
May 11, 2020 —
Kyle Janecek & Jeffrey Dennis – Newmeyer Dillion"Data! Data! Data!. . . I can't make bricks without clay." This classic statement from Sherlock Holmes in The Adventure of the Copper Beeches takes on a new meaning in the COVID-19 pandemic. With the plans to begin contact tracing the spread of the COVID-19 pandemic slowly moving towards the forefront, a valid and important issue presents itself: how do we treat and protect the data we so desperately need to trace, track, and address the pandemic? U.S. Senators Wicker, Thune, Moran, and Blackburn introduced a possible solution to this problem with the COVID-19 Consumer Data Protection Act, as announced on April 30, 2020. So what does the Act entail? What information is protected? What action would businesses need to take towards individuals, such as consumers or even employees, in order to comply with this new legislation?
WHAT IS THE COVID-19 CONSUMER DATA PROTECTION ACT?
The Act is meant to address the concern regarding data collection and privacy due to large companies, like Google and Apple, adjusting the software within their devices to facilitate digital contact tracing. The Act can be broken up into three parts - the treatment of information; the privacy notice requirements; and the transparency requirements.
First, the Act prohibits the collection, processing, or transfer of certain categories of data without notice and the affirmative express consent of the individual, in order to:
- Track the spread of COVID-19,
- Trace the spread of COVID-19 through contact tracing, or
- Determine compliance with social distancing guidelines without the requisite notice to individuals and their express consent.
To accomplish this, the Act also restricts entities in their ability to collect excessive information, stating that an entity cannot collect information beyond what is reasonably necessary to conduct any of the three COVID-19 related purposes listed in the statute. The entity must also provide reasonable administrative, technical, and physical data security policies and practices to protect the information collected. Furthermore, in the event that the entity stops using the information for any of the three COVID-19 purposes, it must delete or de-identify the information it has collected.
Next, the Act describes the requirements for notice to individuals. In order to legally collect, process or transfer the information, the entity needs to provide the consumer with prior notice of the purpose, processing, and transfer of the data through their privacy policy within 14 days of the enactment of the law. This policy would have to:
- Disclose the consumer's rights in a clear and conspicuous manner prior to or at the point of collection,
- Be available in a clear and conspicuous manner to the public,
- Include whether the entity will transfer any of the information it collects in order to track or trace COVID-19 or determine compliance with social distancing,
- Describe its data retention policy, and
- Generally describe its data security measures.
Notably, many of these are already requirements common to many privacy policies, including the disclosure regarding the transfer of an individual's information.
In addition, an individual must give their affirmative express consent to such collection, processing and transfer. In other words, an individual must "opt-in" to having their information collected. This would be done through a checked box or electronic signature, as the law prohibits entities from inferring consent through a failure by the individual to take an action stopping the collection. Furthermore, the individual would also need the ability to expressly withdraw their consent, with the entity then having to cease collection, processing, or transfer of the information within 14 days of the revocation. In essence, due to the restriction on transferal, this may result in businesses opting to delete or de-identify data upon a revocation.
Finally, the entity would have to abide by certain reporting and transparency requirements, namely a monthly public report stating how many individuals had information collected, processed or transferred, and describing the categories of the data collected, processed or transferred by the entity and why. This is akin to the California Consumer Privacy Act's treatment of categories of information, though it would require this information to be released on an ongoing, monthly basis.
WHAT DATA IS COVERED?
Notably, the Act only affects a very limited scope of data. The Act covers geolocation data (exact real-time locations), proximity data (approximated location data), and Personal Health Information (any genetic/diagnosis information that can identify someone). This could cover information like Bluetooth communication or real-time tracking based on a cell phone's geolocation features. Notably, Personal Health Information does not include any information that may be covered under HIPAA or the broader categorization of "Biometric" data (i.e. retinal scans, finger prints, etc). Furthermore, and more generally, "publicly available information" is excluded, which includes information from telephone books or online directories, the news media, "video, internet, or audio content" as well as "websites available to the general public on an unrestricted basis." The latter of which potentially would push any and all information made available through social media (i.e. Facebook or Twitter) into the definition of "publicly available information."
HOW IS IT ENFORCED?
Generally, the law would be enforced by the FTC, under the provisions regarding unfair or deceptive acts or practices, similar to other enforcement actions arising out of privacy policies. Notwithstanding, state attorney generals may also bring actions to enforce compliance and obtain damages, civil penalties, restitution, or other compensation on behalf of the residents of the state.
WHAT SHOULD MY COMPANY DO?
If your entity plans on collecting information for tracking COVID-19, measuring social distancing compliance, or contact tracing, it is advisable to include language in your privacy policy now. This could be as simple as adding an additional provision within your privacy policy stating that the entity will retain information to conduct one of the three COVID-19 purposes as laid out in the statute. In addition, this also means that should the entity collect and use employee information for contact tracing, tracking the spread of COVID-19 or ensuring compliance with social distancing measures, it will need to disclose some of the specifics of that process to the employees and have them opt-in for the process. Finally, for contact tracing purposes, any individual that shares their diagnosis will have to opt-in for the entity to legally collect, process, and transfer that information to others.
While the time to reach compliance is unknown, it is more important than ever to form a compliance plan for privacy legislation if you do not already have a plan in place. If you decide to prepare with us, our firm has created a 90 day California Consumer Privacy Act compliance program (which can be expedited) where our team will collaborate with you to determine a scalable, practical, and reasonable way for you to meet your needs, and we will provide a free initial consultation. For further inquiries or questions related to COVID-19, you can consult with a Task Force attorney by emailing NDCovid19Response@ndlf.com or contacting our office directly at 949-854-7000.
Kyle Janecek is an associate in the firm's Privacy & Data Security practice, and supports the team in advising clients on cyber related matters, including policies and procedures that can protect their day-to-day operations. For more information on how Kyle can help, contact him at kyle.janecek@ndlf.com.
Jeff Dennis (CIPP/US) is the Head of the firm's Privacy & Data Security practice. Jeff works with the firm's clients on cyber-related issues, including contractual and insurance opportunities to lessen their risk. For more information on how Jeff can help, contact him at jeff.dennis@ndlf.com.
Read the court decisionRead the full story...Reprinted courtesy of
140 Days Until The California Consumer Privacy Act Becomes Law - Why Aren't More Businesses Complying?
September 09, 2019 —
Kyle Janecek and Jeff Dennis – Newmeyer DillionCalifornia, for better or for worse, has a reputation as being a trendsetter, and has taken the lead in the United States by passing the "California Consumer Privacy Act," or "CCPA." This massive law has been on the books since 2018, but hasn't taken effect yet. However, the timeframe for businesses to be in compliance is rapidly diminishing. Currently, there are less than five months for businesses to (a) familiarize themselves with what the law requires; (b) determine how and if they are affected by the law; and (c) determine how to be in compliance with the law's demands. Right now, companies aren't making a rush to become CCPA compliant, but this is a mistake. Below are a few of the misconceptions that businesses have, as well as the realities.
MISCONCEPTION 1: It doesn't apply to my company.
For many businesses, it will apply. The baseline of the CCPA is: (1) does the business do anything with California residents (including employees); (2) is it for-profit; and (3) it either has $25 million annual revenue, "sells" 50,000 pieces of personal information or receives 50% or more of its revenue from personal information.
It does not matter if the business is in Nevada, Arizona, Texas or Delaware. So long as there is some connection to Californian residents, exists to make a profit, and otherwise satisfies either the profit, volume, or revenue percentage requirements, it applies. On that note, even if a business does not sell personal information, it does not mean it does not "sell" personal information under the law, as it includes any exchange of personal information for valuable consideration, such as the exchange of consumer data between companies, or the sale of information to a University for study.
MISCONCEPTION 2: The Federal Government will stop it.
One of the main reasons we have the CCPA is because the Federal Government has not acted on this issue. Furthermore, there is a high likelihood that any Federal law will not be substantially different from the CCPA, keeping the core principles in place. It's also unlikely that such a law will take effect and be passed in the remaining five months before the CCPA begins enforcement. Companies must accept that ideals of transparency, choice, consent and reasonable security as they relate to consumers' personal information are here to stay.
MISCONCEPTION 3: California is still changing the law, so I should wait.
California is still in the process of fine-tuning the CCPA, but this is no reason to wait. Fixes to questions arising regarding the CCPA have come out piecemeal, and continued changes, including expansions are likely. For example, employees were previously not addressed specifically within the CCPA, but are being addressed in the planned AB 25, excluding employees from some of the CCPA's protections. Conversely, there have also been planned provisions to expand on the protections and enforcement mechanisms of the CCPA, including a broad and expansive private right of action to permit individuals to sue for technical violations of the statute, like having to wait too long for a response to the demand, even if no actual damage is suffered. Again, the foundational requirements of the CCPA will not change via amendment – so companies should act now.
MISCONCEPTION 4: It's too expensive.
Actually no. Many of the basic actions are not cost-prohibitive, and are actions a business would want to do anyways: (a) Employee training to avoid data breaches and how to respond to user requests; (b) data mapping to quickly find, access, and arrange protections for consumer data; and (c) ensuring you have reasonable cyber security. This can even be turned into a competitive advantage, as consumers increasingly value companies that share their interests, including their privacy.
A compliance mistake could be extraordinarily costly. Currently, a violation for statutory violations of the CCPA can carry a penalty between $2,500 to $7,500 per individual violation. Furthermore, there is a private right of action with statutory damages of $100 to $750 per individual violation that could quickly balloon to exceed $5 million at a minimum, and invites class action/lawsuits for a data breach.
While this is true of almost every legal risk, an ounce of prevention is worth a pound of cure. The penalties on the higher end of the spectrum are for willful violations, and attempts to comply with the law can act to curb potential risks.
What Should I Do?
If you feel CCPA compliance is important to your business, and decide to prepare for the CCPA with us, our firm has created a 90-day CCPA compliance program where our team will collaborate with you to determine a scalable, practical, and reasonable way for you to meet your needs, without breaking the bank. Let us provide you a free initial consultation to see if our CCPA compliance program works for you.
Kyle Janecek is an associate in the firm's Privacy & Data Security practice, and supports the team in advising clients on cyber related matters, including policies and procedures that can protect their day-to-day operations. For more information on how Kyle can help, contact him at kyle.janecek@ndlf.com.
Jeff Dennis is the head of the firm's Privacy & Data Security practice. Jeff works with the firm's clients on cyber-related issues, including contractual and insurance opportunities to lessen their risk. For more information on how Jeff can help, contact him at jeff.dennis@ndlf.com.
About Newmeyer Dillion
For 35 years, Newmeyer Dillion has delivered creative and outstanding legal solutions and trial results that align with the business objectives of clients in diverse industries. With over 70 attorneys working as an integrated team to represent clients in all aspects of business, employment, real estate, privacy & data security and insurance law, Newmeyer Dillion delivers tailored legal services to propel clients' business growth. Headquartered in Newport Beach, California, with offices in Walnut Creek, California and Las Vegas, Nevada, Newmeyer Dillion attorneys are recognized by The Best Lawyers in America©, and Super Lawyers as top tier and some of the best lawyers in California and Nevada, and have been given Martindale-Hubbell Peer Review's AV Preeminent® highest rating. For additional information, call 949.854.7000 or visit www.newmeyerdillion.com.
Read the court decisionRead the full story...Reprinted courtesy of