Justin A. Chiarodo and Daniel A. Broderick

Last November, the U.S. Department of Defense (DoD) issued a final rule imposing enhanced cybersecurity and reporting obligations on contractors and subcontractors with information systems containing unclassified controlled technical information (UCTI). 78 Fed. Reg. 69273 (Nov. 18, 2013). UCTI is defined to mean technical information with a military or space application that is subject to controls on its access, use, reproduction, modification, performance, display, release, disclosure, or dissemination.
The final rule adds a new subpart (224.73) and corresponding contract clause (252.204-7012) to the Defense Federal Acquisition Regulation Supplement (DFARS), and together they direct contractors that handle UCTI to (1) implement enhanced safeguards and (2) report and investigate certain incidents affecting such information.
This final rule implements one part of the broader and more controversial proposed rule, published in June 2011. 76 Fed. Reg. 38089 (June 29, 2011). That rule, which proposed substantial compliance obligations for protection of unclassified information, applied to a larger class of nonpublic information, including nonpublic information either provided by or on behalf of the DoD or collected, developed, received, or transmitted in conjunction with the contractor’s support of an official DoD activity. Unlike the proposed rule, however, this final rule is narrower in scope because it concerns only a single category of data: UCTI. Continue reading “Final DFARS Rule Imposes New Cybersecurity and Reporting Obligations”

The American Arbitration Association (AAA) recently adopted optional Appellate Rules which significantly change the resolution of post-award issues. The new Appellate Rules, effective November 1, 2013, permit appeals of arbitration rulings directly to an AAA appellate panel. Given the difficulty in overturning traditional arbitration awards, these new rules could help protect against factually and legally flawed outcomes. However, they also could add both time and expense to an arbitration, limiting the efficiencies and cost savings that often lead contractors to use arbitration provisions in the first place. This alert discusses the new Appellate Rules, and some things to keep in mind when evaluating whether to use them.
Two recent regulatory actions by the Department of Labor will impose significant new affirmative action and data collection requirements on federal contractors and subcontractors. The final rules will impact many federal prime and subcontracts performed in the United States and warrant close attention by contractors of all sizes. This alert highlights key provisions in those rules, which are presently set to go into effect on March 24, 2014.
False Claims Act (FCA) suits against health care providers have dramatically risen during the last three years. However, recent decisions indicate that courts are becoming increasingly skeptical of suits which allege that technical violations of Medicare regulations are actionable FCA violations. The most recent decision indicating such increasing skepticism was issued by the Eighth Circuit Court of Appeals last week in U.S. ex rel. Ketroser v. Mayo Foundation, 2013 WL 4733986, No. 12-3206 (8th Cir. Sept. 4, 2013). In that case, relators brought a qui tam action under the FCA against the Mayo Clinic and several related entities (Mayo). Relators asserted that Mayo falsely billed Medicare for surgical pathology services when it did not submit written reports for each surgical pathology service billed, which was allegedly required by Medicare regulations. The Eighth Circuit found that the regulations at issue did not require such written reports. However, the Eighth Circuit also signaled that even if Mayo was noncompliant with Medicare’s rules and requirements, the relators had not established the “scienter” necessary to show that Mayo “knowingly” submitted false or fraudulent claims for Medicare payment in violation of the FCA. The court concluded that because Mayo’s interpretation of the applicable requirements was at least reasonable, it did not violate the FCA even if it did make a technical mistake under the rules, because it did not act “with the knowledge that the FCA requires before liability can attach…”
On November 8, 2012, the U.S. Department of Justice (DOJ) announced its intention to continue expanding the False Claims Act’s (FCA) reach by intervening in a lawsuit against Fluor Hanford Inc. and its parent company, Fluor Corporation (collectively Fluor), in the U. S. District Court for the Eastern District of Washington. In this case, DOJ is using the rarely invoked Byrd Amendment as the hook to pursue FCA claims. The complaint alleges that Fluor used federal contract funds to pay for lobbying services in violation of the Byrd Amendment and therefore, violated the FCA and subjected itself to treble damages. 31 U.S.C. § 3729 et seq. (FCA); 31 U.S.C. § 1352 (Byrd).
The Department of Justice (DOJ) and the Securities and Exchange Commission (SEC) jointly issued a new guidance entitled “