1. Home
  2. |Insights
  3. |Contractor's Report to OIG Insufficient to Trigger Public Disclosure Bar

Contractor's Report to OIG Insufficient to Trigger Public Disclosure Bar

Client Alert | less than 1 min read | 03.27.14

In U.S. ex rel Saunders v. Unisys Corp. (E.D. Va.), the court found that the relator's FCA claim was not precluded by the public disclosure bar despite the defendant providing its internal investigation report to OIG because (1) the report failed to reveal allegations or transactions creating an inference of fraud (its conclusion that the alleged fraudulent billing practices were "unacceptable" was not enough) and (2) it was made available only to the DOD IG and the government agency overseeing the contract and not the general public.


Insights

Client Alert | 13 min read | 06.12.26

EU Cyber Resilience Act Countdown: 11 September 2026 Incident/Vulnerability Reporting Deadline Less Than 100 Days Away

The EU Cyber Resilience Act (CRA) is an EU product cybersecurity law for connected products (formally, “products with digital elements” under the CRA) commercialized in the EU; it entered into force on 10 December 2024, with direct application across the EU. Full application begins 11 December 2027, but one of its most operationally demanding provisions takes effect in just under 100 days, on 11 September 2026: the mandatory vulnerability and incident reporting under Article 14 CRA....