1. Home
  2. |Insights
  3. |FY 2013 NDAA Shines a Spotlight on Contractor Indemnification

FY 2013 NDAA Shines a Spotlight on Contractor Indemnification

Client Alert | less than 1 min read | 01.04.13

Section 865 of the FY 2013 National Defense Authorization Act, signed into law on January 2, requires the Secretary of Defense to report to Congress when "entering into a contract that includes an indemnification provision relating to bodily injury caused by negligence or relating to wrongful death" or modifying an existing contract to include such language. This requirement (which excludes contracts awarded under 10 U.S.C. § 2354 and CERCLA, but not indemnification provisions authorized under Public Law 85-804) ratchets up the recent focus on contractor recovery for work performed under government contracts with its mandate that the Secretary explain to Congress the justification for including the indemnification provision.


Insights

Client Alert | 7 min read | 08.17.26

Delayed Notification of Cyberattacks May Trigger HIPAA Breach Notification Rule

After identifying a ransomware attack in 2021, OSF Healthcare System waited until its forensic investigation had concluded before notifying the U.S. Department of Health and Human Services (HHS) — and the affected individuals — of the breach. The 110-day delay (nearly double the 60-calendar-day notification deadline mandated by the HIPAA Breach Notification Rule) triggered an investigation from HHS’s Office for Civil Rights (OCR). The health system’s investigation determined that protected health information (PHI) had been stolen....