"Piggy-Backer" Falls at GAO
Client Alert | less than 1 min read | 06.01.05
In VSE Corp; Johnson Controls World Svs. Inc. (May 23, 2005 http://www.gao.gov/decisions/bidpro/2904523.pdf), GAO held that Johnson Controls could not circumvent GAO's strict timeliness rules by "piggy-backing" an untimely protest of a sole source award by the Department of Homeland Security onto a timely protest previously filed by VSE. Nonetheless, GAO found the sole source bridge construction contract was improper because DHS failed to prepare a required written justification and approval, and it expressly held that Johnson Controls, as well as VSE, must be given an opportunity to demonstrate an ability to satisfy DHS' requirement.
Contacts
Insights
Client Alert | 7 min read | 08.17.26
Delayed Notification of Cyberattacks May Trigger HIPAA Breach Notification Rule
After identifying a ransomware attack in 2021, OSF Healthcare System waited until its forensic investigation had concluded before notifying the U.S. Department of Health and Human Services (HHS) — and the affected individuals — of the breach. The 110-day delay (nearly double the 60-calendar-day notification deadline mandated by the HIPAA Breach Notification Rule) triggered an investigation from HHS’s Office for Civil Rights (OCR). The health system’s investigation determined that protected health information (PHI) had been stolen.
Client Alert | 4 min read | 08.14.26
License to Hack? The White House Greenlights Private-Sector Offensive Cyber Operations
Client Alert | 4 min read | 08.13.26
Supreme Court Confirms Contractual Loss of Bargain Without Repudiatory Breach
Client Alert | 7 min read | 08.12.26
Developments in Canadian Investment Treaty Practice: New FIPA Between Canada and UAE in Force
