On October 22, 2024, the Department of Justice (“DOJ”) announced that Pennsylvania State University (“Penn State”) has agreed to pay $1,250,000 to settle a False Claims Act (“FCA”) case brought against the University approximately two years ago. The whistleblower in the case, former chief information officer of the Penn State Applied Research Laboratory, alleged that Penn State failed to comply with cybersecurity requirements in fifteen contracts and/or subcontracts with the Department of Defense (“DoD”) and National Aeronautics and Space Administration (“NASA”) between 2018 and 2023.Continue Reading Update – Penn State to Pay Up for Cyber-Related FCA Case

On October 15, 2024, the Department of Defense (“DoD”) published the final version of its Cybersecurity Maturity Model Certification (“CMMC”) rule in Title 32 of the Code of Federal Regulations (the “Final Rule”). (Reminder, there are two CMMC rulemakings going on in parallel. This Final Rule updates DoD national security regulations while the other rulemaking effort under Title 48 will update the Defense Federal Acquisition Regulation (“DFARS”) and trigger requirements for DoD contractors.)Continue Reading Countdown to Compliance: DoD Finalizes the CMMC Program Rule

Well, the wait is over. Just as 2023 came to a close, on December 26, 2023, the Department of Defense (“DoD”) published the much-anticipated Proposed Rule for the DoD’s Cybersecurity Maturity Model Certification (“CMMC”) program (the “Proposed Rule”). It has been just over two years since “CMMC 2.0” was announced in November 2021 (which we previously discussed here). And while there is nothing particularly surprising in the Proposed Rule, there certainly are several notable additions and clarifications. Below we outline the key portions of the Proposed Rule that will be of particular importance to defense contractors.Continue Reading New Year, New Rules: The CMMC Proposed Rule is Here

It is not unusual for agency personnel to request extracontractual changes during performance of a contract, many of which may seem fairly innocuous at first glance. From changing the type of screw used in a machine, to altering the background colors displayed on computer screens, extracontractual changes requested by agency personnel can seem minor or inconsequential, and contractors often readily agree without immediately recognizing the potential adverse consequences or taking the necessary steps to adequately protect themselves. Continue Reading Small Changes During Contract Performance Can Take A Large Bite Out Of The Bottom Line

Just when you didn’t think things could get any weirder, on Friday, January 21, 2022, the U.S. District Court for the Southern District of Georgia issued a ruling clarifying its prior EO 14042 injunction (currently on appeal to the 11th Circuit, and discussed previously here) by refusing to clarify the injunction. Yes, you read that right. Let us explain.
Continue Reading Executive Order 14042 – Update 15.0: U.S. District Court “Clarifies” Its Injunction Applies Only To The Vaccine Mandate

On January 13, 2022, the Supreme Court reinstated the nationwide injunction of the Occupational Safety and Health Administration’s (OSHA) COVID-19 Emergency Temporary Standard (ETS). (Technically, the Court overturned the Sixth Circuit’s decision dissolving the 5th Circuit’s injunction, discussed in the OSHA Emergency Temporary Standard Survival Guide.)  This means the OSHA ETS is no longer in force, and businesses, regardless of size, need not comply with the OSHA ETS vaccine/test mandate.
Continue Reading Supreme Court Enjoins OSHA Emergency Temporary Standard; Keeps CMS Rule Alive

It’s official: the Department of Veterans Affairs (“VA”) Medical Surgical Prime Vendor (“MSPV”) 2.0 Program is no more.  The VA has announced that it will not revive MSPV 2.0 following several unusually painful protests at the U.S. Court of Federal Claims (see our prior blogs here and here). Instead the VA will move on to MSPV-“Z”.  Generally speaking, there seems to be little difference between “2.0” and “Z,” except that some division of geographies may change.  But importantly, the VA plans to make clear in the MSPV-Z solicitation—which currently is in the works—whether and when it will transfer the contracts’ requirements to the Defense Logistics Agency (“DLA”), an issue that has drawn significant criticism to date.  The VA says it is developing the business case for the transfer, and the business case analysis will determine both whether it will happen at all, and how the VA will execute the transfer.  In the meantime, the VA will extend the current bridge contracts under MSPV-Next Generation (“MSPV-NG”) for a full year, running December 2021 to December 2022, while the VA (and likely the DLA) get their ducks in a row.
Continue Reading MSPV 2.0 Is Dead – Long Live MSPV

On September 9, 2021, President Biden signed an Executive Order (EO) to implement COVID safety protocols for Federal service contractors. While the EO did not identify specific safety protocols, it did direct a Federal task force (the “Safer Federal Workforce Task Force,” created by Executive Order in January 2021) to issue COVID-19-related workplace safety guidance for prime contractors and subcontractors in the near future. Specifically, the Task Force is charged with issuing contractor guidance by September 24, 2021, including definitions of relevant terms, specific workplace safety protocols, and applicable exceptions.
Continue Reading COVID-19 Oversight and Enforcement: President Biden’s COVID Executive Order

The U.S. Department of Veterans Affairs (“VA”) Medical Surgical Prime Vendor (“MSPV”) 2.0 Program (discussed previously here and here) has yet to make it off the ground, but in March 2021 the VA announced plans to eliminate the program by September 2023 and instead purchase from the Defense Logistics Agency’s (“DLA”) separate MSPV catalog. The VA and DLA MSPV programs are how the VA and DLA (separately) purchase most of their medical, surgical, and laboratory equipment for care centers across the country (and abroad, in the case of DLA). The VA and DLA have been exploring the possibility of consolidation since at least January 2019, but many vendors relied on the VA’s representations that it would not make any decisions on potential consolidation until at least 2025. So when the VA informed stakeholders of its new September 2023 target, Medline Industries, Inc. (“Medline”), one of the prime vendor awardees under the VA’s MSPV 2.0 Program, responded by filing a bid protest at the U.S. Court of Federal Claims. On May 28, 2021, the VA and DLA decided to take corrective action, asking the Court for six months to re-evaluate the issues raised by the protest. It seems that the government did not have all of its ducks in a row prior to announcing the targeted transition.
Continue Reading Ducks (Not) in a Row – VA Agrees to Take Corrective Action in Transitioning MSPV 2.0 Requirements to DLA

The Biden Administration has taken (at least temporarily) the teeth out of a Trump-era Executive Order that directed the government to “Buy American” for essential drugs and medical devices. President
Continue Reading “Buy American” Update: Essential Medicines May Continue to Come From Abroad (For Now)

With a new presidential administration promising vigorous antitrust enforcement, and a new Democratic majority in Congress seeking to make drastic changes to U.S. antitrust laws, the technology and healthcare industries have found themselves the main targets of increased antitrust scrutiny.  Though companies engaging in government contracting, particularly in the aerospace and defense industries, already have had to deal with a range of antitrust issues – for example, the Department of Justice, Antitrust Division (the “DOJ”) launched the Procurement Collusion Strike Force (“PCSF”) in 2019 (discussed in more detail here), which focused on “deterring, detecting, investigating and prosecuting antitrust crimes … in government procurement, grant and program funding” – they may find themselves subject to increased antitrust enforcement in 2021.  In fact, on February 23, 2021 PCSF Director Daniel Glad confirmed he is “focus[ed] on three things in 2021: expanding our platform with PCSF building out our data analytics program; and bringing investigations to the recommendation/disposition stage.”
Continue Reading How a New Era in Antitrust Enforcement May Impact Government Contractors