1. Home
  2. |Insights
  3. |CFC Weighs in on Timeliness of OCI Protest

CFC Weighs in on Timeliness of OCI Protest

Client Alert | less than 1 min read | 01.26.12

In a case of first impression for the Court of Federal Claims and a victory for C&M, which represented the intervenor, the court concluded in CRAssociates v. U.S. (Dec. 23, 2011) that the protestor waives an organizational conflict of interest challenge when it (1) knows that a firm intends to compete, (2) knows the facts giving rise to an OCI concern, (3) notifies the agency of the OCI concern, (4) receives an indication that the agency will not take any remedial action, and (5) fails to file a pre-award challenge to the agency’s decision. The court’s analysis is generally consistent with GAO precedent.

Insights

Client Alert | 7 min read | 08.17.26

Delayed Notification of Cyberattacks May Trigger HIPAA Breach Notification Rule

After identifying a ransomware attack in 2021, OSF Healthcare System waited until its forensic investigation had concluded before notifying the U.S. Department of Health and Human Services (HHS) — and the affected individuals — of the breach. The 110-day delay (nearly double the 60-calendar-day notification deadline mandated by the HIPAA Breach Notification Rule) triggered an investigation from HHS’s Office for Civil Rights (OCR). The health system’s investigation determined that protected health information (PHI) had been stolen....