Friday, June 4, 2010

Businesses Handling Personal Information of Massachusetts Residents Must Have a Written Data Security Program

All businesses handling the “personal information” of Massachusetts residents (employees or customers) are required to implement a written information security program (“WISP”) to safeguard physical and electronic records, according to Massachusetts business regulations (201 CMR 17.00). This requirement took effect March 1, 2010.
The new regulations affect all such businesses, including those that are not located in Massachusetts, as well as the self-employed. The “personal information” includes a Massachusetts resident’s name in combination with a Social Security number, a driver’s license number, or some account, credit or debit card number.

The rule adopts a risk-based approach so that each business’ WISP should take into account the size of the business, the amount of resources, and its need for security (e.g., employee data, customer data).

Among other concerns, businesses should consider updating their employment contracts to require employees to comply with the WISP and their contracts with third-party service providers to ensure that the providers are implementing appropriate security measures for personal information.

The regulations may be enforced by the Attorney General. In addition to possible civil fines, violators could be exposed to private lawsuits and possible actions under Chapter 93A for unfair and deceptive trade practices.

Monday, May 24, 2010

Increased Federal and Massachusetts Scrutiny of Worker Misclassification (Independent Contractor vs. Employee):

As I previously discussed in an Alert in February 2009, the possible misclassification of employees as independent contractors is a significant concern for Massachusetts businesses due to significant liability under wage and independent contractor laws, and ramped up enforcement by the Attorney General.

For instance, see the AG’s recent settlement involving restaurant meal delivery companies’ misclassifying their drivers as independent contractors, and the August 2009 SJC case favoring an employee who had been misclassified, even though the worker received more money as an independent contractor than he would have as a correctly classified employee.

In 2008, the Massachusetts Attorney General issued an “Advisory” alerting businesses to the importance of properly classifying “employees” and “independent contractors”. The Commonwealth is concerned that misclassification of workers affects tax revenues and may deprive a worker of unemployment insurance, workers’ compensation benefits or other protections.

Businesses are subject to civil and criminal penalties for misclassification; the company’s president, treasurer and CEO could have personal liability (with claims possibly excluded from coverage under a Director’s and Officer’s insurance policy); and, the worker could potentially recover triple damages and attorneys’ fees.

The Attorney General’s Advisory concerned the Massachusetts Independent Contractor Law or Misclassification Law, General Laws Chapter 149, section 148B (“Law”). The Law provides that an individual shall be considered an employee unless the business can prove otherwise. The business has the burden of proving compliance with a 3-part test:

1. the individual must be “free from control and direction” both in the contract and in fact;

2. the individual must perform work outside the usual course of the business of the employer; and,

3. the individual must be engaged in an independently established trade or business.


The Attorney General provided the following classification examples:

- A worker completes the job using her own approach with little direction from the business and dictates the hours that she will work on the job – independent contractor.

- A worker’s services form a regular and continuing part of the company’s business and the worker does not operate as an independent business – employee.

- A worker performs services that are part of an independent, separate and distinct business from that of the company – independent contractor (possibly).

- A painting company hires an individual as an independent contractor to finish a painting job – employee.

- A painting company hires a second company as a subcontractor to finish a painting job, and all of the second company’s workers are employees – independent contractor.

- An appraisal company hires an individual to appraise property – employee.

- An accounting firm hires an individual to move office furniture – independent contractor.

- A company in the business of selling a product hires an individual to make sales calls as a sales representative – employee.

In addition to the State liability concerns, the federal Labor and Treasury Departments are stepping up enforcement, including the IRS’s random audit of 6,000 businesses to see if they are properly classifying employees and complying with laws on paying employment taxes and protecting workers (e.g., Social Security, Medicare, health benefits, overtime, unemployment, anti-discrimination, etc.).

Thursday, May 13, 2010

Commercial Tenant Not Required to Indemnify Landlord Despite Clear Lease Terms:

The Supreme Judicial Court recently voided a commercial lease provision that required a tenant to indemnify a landlord for the landlord's own negligence. The Court held that the statute (G.L. c.186, §15) prevented a landlord from shifting responsibility for its own negligence to its tenant, even if the tenant had signed a lease agreeing to such indemnification. In that same case, the SJC upheld a lease provision requiring the tenant to acquire general liability insurance for the benefit of the landlord. (Norfolk & Dedham Mutual Fire Insurance Company v. Morrison)

Based on the Norfolk & Dedham case, commercial landlords and tenants (and their legal counsel) need to carefully review their lease terms to ensure that the indemnification and insurance provisions appropriately apportion the risk of injury and damage.