October 2023

Recently, NJOY LLC filed a complaint in the U.S. District Court for the Central District of California against more than 30 foreign and domestic defendants that manufacture, market, distribute, and sell tobacco products in an (indirect) effort to force them to comply with federal and state laws. R.J. Reynolds Tobacco Company and R.J. Reynolds Vapor Company (collectively, RJR) also recently filed a complaint with the U.S. International Trade Commission (ITC) against more than 25 foreign and domestic manufacturers, distributors, and retailers (collectively, the respondents) that seeks to prevent the import and resale of certain tobacco products. These lawsuits serve as two examples of how industry is trying to take independent legal action to target allegedly noncompliant actors and force them to comply with applicable law.

On October 16, the Securities and Exchange Commission’s Division of Examinations (the Division) released its 2024 Examination Priorities report. The report highlights that future examinations will focus on “risk areas impacting various market participants,” emphasizing risks posed by products and services: (1) related to cryptocurrency; and (2) that leverage emerging technology. In addition, the report indicates that examinations will focus on market participants’ compliance with Anti-Money Laundering (AML) laws.

On October 12, hemp producers and retailers notched an early win in litigation challenging the legality of Maryland’s cannabis licensing program as it applies to hemp. By way of background, the Maryland General Assembly recently passed the Cannabis Reform Act (CRA), after voters gave their stamp of approval to recreational cannabis in the state via a 2022 referendum. Rather than create a separate licensing system for hemp products, the CRA requires anyone selling a “product intended for human consumption or inhalation that contains more than 0.5 milligrams of tetrahydrocannabinol per serving or 2.5 milligrams of tetrahydrocannabinol per package” to be licensed as a cannabis business. “Tetrahydrocannabinol” (THC) is defined to include delta-8, delta-9, and delta-10 THC. This lack of distinction between hemp- and marijuana-derived products results in the inclusion of existing producers and retailers of hemp-derived THC products into the new cannabis program.

As a result of a legal challenge by the Oregon Cannabis Industry Alliance and cannabis cultivators in Oregon, the Oregon Health Authority’s (OHA) aspergillus fungus testing rule for marijuana, marijuana products, and industrial hemp concentrates and extracts has been withdrawn, and 2,500 pounds of marijuana plus 65,000 units of infused pre-rolls that failed aspergillus testing were released from administrative hold.

Though controversial, cannabis[1] has steadily grown into a booming industry. Despite this rapid growth and the legalization of cannabis in numerous states[2], cannabis is still classified as a Schedule I drug under the Controlled Substances Act (CSA). As cannabis is illegal under federal law, individuals and companies involved or related to the cannabis industry face an uphill battle when insolvency issues arise. Federal forums that traditionally address insolvency matters, such as bankruptcy, have historically been unavailable to those engaged in the cannabis industry, forcing them to seek state-controlled alternatives, such as receivership. However, as more and more states have legalized commercial transactions involving cannabis in some form, bankruptcy courts have begun to adopt two distinct paths: one for individuals and entities directly engaged in growing, processing, distributing, or selling cannabis products, and one for entities that are associated with cannabis more indirectly, which the bankruptcy system recently has been more open to.

On October 17, following Washington Attorney General (AG) Bob Ferguson’s unsuccessful consumer protection action against thrift store chain, Savers Value Village Inc. (Savers), the Washington Superior Court of King County granted Savers’ motion for attorney’s fees and costs in the amount of $4.3 million. This substantial award — which is allowable under the Washington Consumer Protection Act (WA CPA) — represents a substantial recoupment of Savers’ attorneys’ fees spent to defend the almost decade-long litigation.

On October 17, 52 state and territorial attorneys general, in addition to state money transmission regulators, entered into settlements amounting to more than $20 million with ACI Worldwide (ACI), to resolve claims involving a money transmission error that led to the unauthorized withdrawal of $2.3 billion from Nationstar Mortgage (also known as Mr. Cooper) customers.

Rutters, a prominent grocery chain in Pennsylvania with 80 locations statewide, settled a data breach investigation with Attorney General (AG) Michelle Henry’s office by agreeing to pay $1 million and to implement certain injunctive relief. Henry announced the settlement on Wednesday, October 11, following a months-long data breach lasting from 2018 to 2019 that potentially exposed the payment card data of 1.3 million Pennsylvania consumers.

This article was originally published on October 16, 2023 in Reuters and Westlaw Today. It is republished here with permission.

Government regulators are seemingly as numerous as the stars nowadays, especially in the universe of data incidents. When organizations experience a data incident, they will need to quickly assess what happened, why it happened, and who (e.g., clients, consumers, vendors, employees) was affected. They will also need to chart a course by which they resolve the incident while limiting their legal exposure.