1. Home
  2. |Insights
  3. |Challenge To OCI Waiver Falls Short

Challenge To OCI Waiver Falls Short

Client Alert | 1 min read | 09.09.10

In MCR Fed., LLC (Aug. 17, 2010) GAO denied the protester's challenge to the agency's decision, in the context of taking corrective action, to waive organizational conflicts of interest for two offerors to facilitate competition, noting that, "[w]here a procurement decision -- such as whether an OCI should be waived -- is committed by statute or regulation to the discretion of agency officials, our Office will not make an independent determination of the matter." GAO found that the agency complied with FAR 9.503, including approval by the agency head's designee and a written determination setting forth (i) the extent of the conflict and (ii) explanation for why application of the OCI rules would not be in the government's interests in the particular procurement.

Insights

Client Alert | 7 min read | 08.17.26

Delayed Notification of Cyberattacks May Trigger HIPAA Breach Notification Rule

After identifying a ransomware attack in 2021, OSF Healthcare System waited until its forensic investigation had concluded before notifying the U.S. Department of Health and Human Services (HHS) — and the affected individuals — of the breach. The 110-day delay (nearly double the 60-calendar-day notification deadline mandated by the HIPAA Breach Notification Rule) triggered an investigation from HHS’s Office for Civil Rights (OCR). The health system’s investigation determined that protected health information (PHI) had been stolen....