Hunton Retail Law Resource

On March 16, 2023, the Federal Trade Commission announced it issued orders to eight social media and video streaming platforms seeking Special Reports on how the platforms review and monitor commercial advertising to detect, prevent and reduce deceptive advertisements, including those related to fraudulent healthcare products, financial scams and the sale of fake goods. The FTC sent the orders pursuant to its resolution directing the FTC to use all available compulsory process to inquire into this topic, and using the FTC’s Section 6(b) authority, which authorizes the FTC to conduct studies that do not have a specific law enforcement purpose.

The FTC announced an enforcement action against Instant Brands LLC, manufacturer of Pyrex-brand products, for allegedly marketing certain glass measuring cups as “Made in USA” and “American as Apple Pie” while importing those products from China. A proposed consent order would require Instant Brands to pay a monetary judgment of $129,416 and comply with the agency’s requirements for marketing a product as made or assembled in the United States.

The COVID-19 pandemic has changed most aspects of the economy. The world of consumer products is no exception to this trend. The CPSC has the following notice posted on its website warning that not all recall remedies may be currently available:

This month’s Recall Roundup starts with the wish that the coronavirus could be recalled. Perhaps the would-be CPSC commissioner who could deliver that recall would be unanimously approved.

On the topic of would-be commissioners, President Trump recently announced his intent to nominate Dr. Nancy Beck to be Chairman and Commissioner of the agency. Beck currently serves as the Principal Deputy Assistant Administrator for the EPA’s Office of Chemical Safety and Pollution Prevention. She previously worked in various capacities at the EPA and Office of Management and Budget during the Clinton, Bush and Obama administrations. Beck also worked as the Senior Director for Science Regulatory Policy at the American Chemistry Council, which is a chemical industry lobbyist group.

The new year ushered in a series of warnings from the CPSC about inclined infant sleepers posing suffocation risks and dressers posing tip-over risks to consumers. Both products have been under scrutiny by the CPSC over the past year.

The theme for this Recall Roundup is effectiveness of recalls. In October, the US Senate Committee on Commerce, Science, and Transportation released an investigative report criticizing the CPSC’s data-handling breaches from the spring. This month, the Office of Oversight and Investigations Minority Staff from the same US Senate committee released a report criticizing the CPSC’s handling of three “high-profile failures to effectively recall dangerous products” last year. The report summarizes the CPSC’s actions related to jogging strollers, infant reclined sleeping products and home elevators. The report concludes that the CPSC’s “failures” are “the result of a pattern of inappropriate deference to industry that has characterized CPSC leadership in recent years.” The report recommends that the CPSC “at a minimum” increase the use of imminent health and safety warnings, fine companies that fail to timely report substantial products hazards and use refunds or consumer-friendly repairs as default remedies.

Last month, the CPSC and three affiliated retailers issued a joint warning to consumers after the retailers discovered they sold nearly 1,200 units of 19 previously recalled consumer products between 2014 and 2019. The range of products at issue varied, including infant sleepers, scarves, portable speakers, barstools, children’s cardigan sets, hoverboards, beer mugs, coffee presses and infant rattles. It remains to be seen whether any further CPSC action, such as a civil penalty or a requirement to implement stronger recall systems and protocols, will be taken with respect to these three retailers.

This month, the US Senate Committee on Commerce, Science, and Transportation released its investigative report on the CPSC’s data handling breaches from the spring. In April, the CPSC issued notices to multiple manufacturers explaining that “nonpublic manufacturer information” was released to the public without complying with Section 6(b) of the Consumer Product Safety Act. Section 6(b) prohibits the CPSC from disclosing information reported by product manufacturers without complying with the procedures for and restrictions on the commission’s public disclosure of such information. Section 6(b) aims to incentivize manufacturers to provide more safety information without fear of public backlash. The Senate committee’s report is troubling. It found that the CPSC made “improper disclosures to 29 unique entities” that “contained information on approximately 10,900 unique manufacturers, as well as street addresses, ages, and genders of approximately 30,000 consumers.” The Senate committee reviewed “hundreds of documents and emails and conducted multiple interviews” to conclude that the CPSC’s violations of Section 6(b) “were due to a lack of training, ineffective management, and poor information technology implementation.” The report cited several examples, such as that CPSC employees had “little to no Section 6(b) training” and were provided with “three different software applications to access and process relevant data without the necessary training on how to use these often confusing and idiosyncratic systems.” The Senate committee ended with a list of recommendations for the CPSC to remedy these problems and avoid future data-handling breaches.

With Acting Chairman Ann Marie Buerkle’s earlier announcement  that she will leave the CPSC this fall, this month the commissioners elected Commissioner Robert Adler as the new acting chairman. Adler has been affiliated with the CPSC for more than 40 years. He has served as a commissioner since 2009 and previously served as the acting chairman from December 2013 through July 2014.

This month serves as a reminder to manufacturers, distributors, retailers and importers that consumer products carry strong liability risks when they pose risks of serious injury or death. Steps should be taken to reduce that liability, including the issuance of alerts and recalls to remove the products from the stream of commerce.

With summer in full swing, several U.S. senators have taken a public step to focus the CPSC’s efforts on dangers at the beach. Airborne umbrellas have become a serious hazard to beachgoers. In fact, CPSC data indicates that there have been over 31,000 beach umbrella-related injuries from 2008 to 2017, including the death of a vacationer after she was struck in the torso and killed by a rogue umbrella in Virginia Beach in 2016. In an unusual move, four senators recently issued a letter urging the CPSC to be more proactive about addressing the dangers posed by beach umbrellas. The senators requested more detailed information about umbrella-related injuries, asked about safety standards to prevent such injuries, and encouraged the creation of a public safety campaign to educate the public about the dangers of beach umbrellas.

With the partial federal government shutdown over, the CPSC appears to be quickly returning to normal—it issued 18 recalls in this month. The agency also took an unusual and noteworthy step by issuing notice that the CPSC would regard clothing storage units that do not meet the industry standard designed to reduce tip-over events to have a defect which could present a substantial product hazard.

The partial federal government shutdown forced the U.S. Consumer Product Safety Commission (“CPSC” or “Commission”) along with other agencies to close for 35 days. In fact, the last recall on the Commission’s website is dated December 20, 2018—two days before the unprecedented shutdown began.

December was a quiet month in the world of recalls for two reasons. First, there were only 19 product recalls—the second lowest number of monthly recalls in 2019. Second, the partial federal government shutdown has forced the CPSC along with other agencies to close until President Trump and Congress can resolve their well-publicized funding dispute.

With a new commissioner confirmed in September, the Commission once again has five commissioners. A philosophical divide along party lines surfaced this month in two decisions.

The first decision involved the settlement of an administrative lawsuit filed by the CPSC in February. The lawsuit alleged that a distributor refused to recall three-wheeled jogging strollers after consumer complaints that the front wheel can detach suddenly during use, causing injuries to at least 50 children and 47 adults. To settle the lawsuit, the distributor agreed to notify dealers and retailers and to “develop and launch an information campaign that will include an instructional video demonstrating how to safely and correctly operate” the stroller.  Eligible consumers who participate in this campaign can receive “incentives,” such as hardware to repair the stroller or a 20% discount towards the purchase of a new stroller from the same distributor.

A public relations company and a publisher have been caught in the FTC’s net after using influencer marketing to help promote an anti-Zika mosquito repellant during the 2016 Brazil Summer Olympics.

October began with a CPSC announcement that a major retailer agreed to pay a $3.85M civil penalty for failing to report that a trash can it sold contained a defect or created an unreasonable risk of serious injury. The retailer sold 367,000 of the trash cans nationwide between December 2013 and May 2015. Allegedly the trash can’s plastic collar may dislodge, exposing a sharp edge and posing a laceration hazard to consumers. The retailer received 92 consumer complaints about this alleged defect but did not immediately notify the CPSC of the defect. The CPSC announced a recall of the trash can in July 2015. In addition to the civil penalty, the retailer agreed to maintain a compliance program and a system of internal controls and procedures to ensure it discloses information to the CPSC in accordance with applicable law. The Commission voted unanimously (4-0) to accept the settlement.

Brick and mortar retailers are rapidly diversifying checkout and payment methods to combat the erosion of sales to online channels and provide an improved shopping experience for consumers. From self-checkout kiosks, to store-specific mobile applications for payment, scan-as-you-go devices, and even ‘just walk out’ models, retailers are reinventing consumer’s notions of the traditional checkout line by going cashierless. Some estimates predict that these automated technologies could account for 35% of retail sales in the next 20 to 30 years.

September ushered in a shift in political power at the CPSC with the confirmation of a new commissioner. In June, the U.S. Senate confirmed President Trump’s nomination of Dana Baiocco—a Republican—to the CPSC. Commissioner Baiocco’s appointment created the potential for a 2-2 voting tie if issues presented to the CPSC give rise to voting along party lines. One CPSC vacancy remained for which President Trump nominated Peter Feldman—another Republican—in June to both complete the remainder of former Commissioner Joe Mohorovic’s term, which expires in October 2019, and to serve a full seven-year term starting in October 2019. 

This month marks the 10th anniversary of the Consumer Product Safety Improvement Act (“CPSIA”), which was signed into law on August 14, 2008. CPSIA was a bipartisan response to unsettling events in the world of consumer products that occurred in 2007. During that landmark year, reports emerged about lead contamination in a wide range of consumer products—including children’s toys—that forced the CPSC into the national spotlight and facilitated over 400 recalls. The CPSIA aimed to significantly enhance the CPSC’s regulatory and enforcement power by doubling its budget, increasing its staff levels, prohibiting the sale of recalled products and increasing its civil penalties. For example, before CPSIA, the CPSC could impose civil penalties in the amount of $8,000 per violation, with a maximum of $1.825 million. But in 2008, CPSIA increased significantly the amount of civil penalties to $100,000 per violation, with a maximum of $15 million, adjusted for inflation.

As reported on the Hunton Employment & Labor Perspectives blog, the ongoing opioid epidemic is causing employers to consider the best ways to ensure a safe workplace, but companies should be careful when addressing employees’ prescription drug use. Recent court filings and settlements by the Equal Employment Opportunity Commission (“EEOC”) illustrate the potential pitfalls employers face when attempting to implement a drug-free workplace.

July served as another quiet month in the world of recalls. With only 11 recalls issued, July has had the fewest recalls for any month in over a year.

The CPSC made an important announcement this month regarding cedar chests. A company designed cedar chests with lids that automatically lock when closed. The company stopped making the cedar chests in 1987. From 1977 to 2015, 14 children have suffocated to death after climbing into the cedar chests and becoming locked inside. During this time, the company recalled 12 million cedar chests and offered a replacement latch to remedy the defect. Still, the CPSC predicts that millions of these cedar chests remain unfixed in consumers’ homes, posing a continuing danger to children. The CPSC’s announcement served as a plea urging consumers to immediately replace or remove the dangerous latches.

This past week, several consumer actions made headlines that affect the retail industry.

FTC Used Car Lot Sweep Finds 70 Percent Compliance with New “Buyers Guide”

Last month, the FTC announced the results of its compliance sweep of 94 car dealerships in 20 cities across the country, conducted after the FTC’s amended Used Car Rule (the “Rule”) took effect earlier this year. The revised Rule requires dealers to display a revised “Buyers Guide” containing warranty and other important information—such as a new description of an “As Is” sale—on the window of each used car offered for sale. According to the FTC, 70 percent of the 2,300 vehicles inspected displayed a buyer’s guide; over half of those with the guide displayed the updated version. As a follow-up, the FTC sent letters to each dealership inspected, detailing their findings and providing businesses with guidance material to help aid in compliance.

As website accessibility lawsuits continue to surge, places of public accommodation oftentimes battle multiple lawsuits filed by different plaintiffs represented by different attorneys. Even after entering into private settlements, which include detailed website remediation plans, defendants may continue to be the target of these lawsuits by copycat plaintiffs. The Eleventh Circuit recently addressed this dynamic head-on, and held that a private settlement entered into by Hooters and a first-filed plaintiff did not moot a nearly identical, later-filed website accessibility lawsuit by a different plaintiff. This case underscores the importance of quickly remediating website accessibility issues, as well as taking care to draft settlement agreements to maximize arguments that future lawsuits are barred.

As reported on Hunton’s Privacy and Information Security Law blog, on June 28, 2018, the Governor of California signed AB 375, the California Consumer Privacy Act of 2018 (the “Act”). The Act introduces key privacy requirements for businesses, and was passed quickly by California lawmakers in an effort to remove a ballot initiative of the same name from the November 6, 2018, statewide ballot. We previously reported on the relevant ballot initiative. The Act will take effect January 1, 2020.

This past week, several consumer actions made headlines that affect the retail industry.

District Judge Boots Putative Class Action Against L.L. Bean

A federal district judge has dismissed an attempted class action against L.L. Bean involving the company’s long-standing no-questions-asked warranty policy. In February 2018, L.L. Bean announced that it was changing its policy to limit customers’ return period to one year, while committing to “work with our customers to reach a fair solution” if a problem arises more than a year after purchase. The plaintiff alleged that changing the warranty violated both the Magnusson-Moss Act and Illinois state law as an anticipatory repudiation of the guarantee. But the District Judge ruled that plaintiff neither alleged an injury nor had he stated a claim for which relief could be granted.

It has been a quiet month in the world of recalls with only 13 product recalls issued in June. Still, other CPSC-related news is noteworthy.

Last month, the U.S. Senate confirmed President Trump’s appointment of Dana Baiocco to serve as a CPSC commissioner. If political ideology translates into voting trends on consumer safety issues—and it may not—Baiocco’s appointment creates a potential 2-2 voting “tie” at the CPSC, with two Republican and two Democratic commissioners. Now, Trump seeks to add a third Republican to the CPSC. On June 4, 2018, Trump nominated Peter Feldman to be a commissioner. Feldman is senior counsel to the U.S. Senate Committee on Commerce, Science and Transportation, and therefore advises on consumer protection, product safety, data and privacy issues. If confirmed, Feldman will complete the remainder of former Commissioner Joe Mohorovic’s term, which expires in October 2019. Feldman’s confirmation would mean that for the first time in nearly 12 years, Republican appointees would outnumber Democratic appointees at the CPSC. 

Oregon’s Fair Work Week Act (also known as Oregon’s predictive scheduling law) (the “Act”) is proceeding full speed ahead and will add significant challenges and costs for retailers. The majority of the Act goes into effect on July 1, 2018. Following similar ordinances regulating employee hours passed at municipal levels in Emeryville, California; New York City; San Francisco; San Jose; Seattle; and Washington, D.C., Oregon becomes the latest jurisdiction and the first state to enact a predictive scheduling law. 

In a 5-4 decision with major implications for e-commerce retailers, the Supreme Court has closed the “online sales tax loophole” by holding that a state may collect sales tax from out-of-state sellers that do not maintain a physical presence in the state. The decision, South Dakota v. Wayfair, Inc. et al., No. 17-494, 585 U.S. __ (2018), overturns two prior Supreme Court cases holding that an out-of-state seller’s duty to collect and remit tax to a consumer’s home state depended on whether the seller had a physical presence in that state. The Court found that this “Physical ...

The CPSC experienced a political shake-up this month when the U.S. Senate confirmed Dana Baiocco as the newest commissioner. In September, President Trump nominated Baiocco, a Republican and former partner at Jones Day, but the Senate did not act on the nomination by the end of the 2017 calendar year. So President Trump resubmitted his nomination of Baiocco in January. On May 22, 2018, the Senate confirmed Baiocco by a vote of 50-45, mostly along party lines. Her seven-year term will run through October of 2024.

California is the land of employment legislation, and 2018 is shaping up to be another year of change. We are less than six months into the year, and already several bills that could significantly impact California businesses—for better or for worse—are pending in the California legislature.

April was an historic month for the CPSC. The agency approved a $27.25 million civil penalty—the largest in CPSC history. The significance of this record amount cannot be overstated. The previous record was held by a $15.45 million civil penalty approved in March of 2016. In fact, except for in 2016, the CPSC has never approved civil penalties that totaled $27.25 million in each of the last ten calendar years. Now, it is has done so in 2018 with just one civil penalty.

As reported on Hunton's Privacy and Information Security Law blog, the FTC has modified its 2017 settlement with Uber after learning of an additional breach that was not taken into consideration during its earlier negotiations with the company. The revised proposed agreement goes beyond the FTC’s original settlement mandating that Uber implement a comprehensive privacy program. The expanded FTC order would require Uber to address software design, development and testing; how the company reviews and responds to third-party security vulnerability reports; and prevention, detection and response to attacks, intrusions or systems failures. Uber also would be required to report to the FTC any episode where it has to notify any U.S. government entity about the unauthorized access of any consumer’s information.

As reported on Hunton’s Employment and Labor Perspective blog, earlier this month San Francisco amended its Fair Chance Ordinance, the city and county’s so-called “ban-the-box” legislation that limits how private employers can use an applicant’s criminal history in employment decisions. The amendments, which take effect on October 1, 2018, expand the scope and penalties of the San Francisco ordinance and add to the growing framework of ban-the-box legislation across California and other states.

This past week, several self-regulatory advertising decisions made retail headlines.

Finish Quantum Dishwasher Detergent Beaten by “Unbeatable” Claim

In response to a challenge brought by P&G, the NAD recommended that Reckitt Benckiser LLC, manufacturer of dishwasher detergent brand Finish Quantum, discontinue its claims that the detergent provides an “unbeatable clean.” After reviewing Finish Quantum’s test data, the NAD determined that the “evidence was not sufficiently reliable to support the challenged ‘unbeatable clean’ claim.” Finish Quantum can, however, continue use of its value claim that its product provides “25% more loads,” so long as the claim is qualified by adding the phrase, “based on retail pack size comparison” between Finish Quantum and leading alternatives such as Cascade Platinum. Reckitt Benckiser stated that it will comply with the NAD’s recommendations.

Our retail clients are increasingly deploying cloud services solutions to realize cost savings, gain efficiency and enable scalability across numerous functions. In the past year, we have helped our clients deploy dozens of cloud-based point solutions, Enterprise Resource Planning systems and multi-application platforms. And our clients are not alone. One study forecasts that, in 2020, the worldwide public cloud service revenue will be $411.48 billion. However, while the benefits and popularity of cloud services are clear, cloud solutions are not without risks and challenges.

On the heels of a recent $5 million civil penalty, the CPSC recently secured a $1.5 million civil penalty with help from the U.S. Department of Justice (“DOJ”). The civil penalty concludes a long saga between the CPSC and a large arts and crafts retailer about vases with allegedly defective thin glass that rendered them prone to shattering.

This past week, several consumer actions made headlines that affect the retail industry.

Nectar Brand to Put Its “Made in America” Claims to Bed

Nectar Brand LLC has agreed to stop making unqualified claims that its mattresses were made in the United States. According to the FTC’s complaint, Nectar Brand sells mattresses under several brand names, including Nectar Sleep, DreamCloud LLC and DreamCloud Brand LLC. Nectar Brand’s ads and product labeling included statements that the products were “Designed and Assembled in USA.” In fact, the FTC alleged that the mattresses all are imported from China and that Nectar Brand has no assembly operations in the U.S.

Under the settlement terms, Nectar Brand is prohibited from representing that its products are made in the United States unless it can substantiate its claims. Further, Nectar Brand’s officers are prohibited from misrepresenting the country of origin of its products.

In June, new laws will go into effect that restrict employers’ ability to request and use criminal history information about applicants in three jurisdictions: Kansas City, Missouri; the State of Washington; and the city of Spokane, Washington. Below are summaries of the new restrictions and links to the laws.

The CPSC has flexed its regulatory muscle during the first months of 2018 with respect to products that pose risks to children. With the U.S. Department of Justice’s (“DOJ’s”) help, the CPSC secured a $5 million civil penalty against a drug company for its allegedly deficient child-resistant packaging. In December, the DOJ filed a complaint in federal court against the drug company alleging that it knowingly violated the Poison Prevention Packaging Act and the Consumer Product Safety Act by distributing five household prescription drugs with non-compliant child-resistant packaging and failing to report the noncompliance to the CPSC. The complaint alleges that the drug company’s engineers drafted a “risk analysis” memo identifying the packaging as non-compliant. Rather than halt distribution and immediately report the non-compliance to the CPSC, the drug company continued distribution with non-compliant packaging while concurrently developing compliant packaging. The company also waited nearly 15 months before notifying the CPSC of its non-compliant packaging. In January, the federal court entered a consent decree for the matter. The drug company agreed to pay a $5 million civil penalty, implement and maintain a compliance program, and maintain and enforce a system of internal controls and procedures.

This past week, several consumer actions made headlines that affect the retail industry.

FTC Crack Down on “American Made” Marketing Claims Continues in Settlement with Bollman Hat Company

The FTC announced a settlement in the third case in the last 12 months involving deceptive “Made in USA” claims. Here, the FTC alleged that the Bollman Hat Company and its subsidiary deceived consumers with marketing campaign slogans of “Made In USA,” “American Made Matters,” and “Choose American” for its hats and third-party products, despite more than 70 percent of their hat styles being wholly imported finished products. The FTC also alleged that Bollman launched an “American Made Matters” seal campaign in 2010 that misled consumers in which and how many products Bollman and the companies that leased the seal were actually made in America.

Businesses, financial institutions and governmental entities (state and local) are required to file tax information returns with the U.S. Social Security Administration (“SSA”) or Internal Revenue Service (“IRS”). Common information returns include W-2 and 1099 forms for employees and contractors, 1098s for mortgage interest, and various 1099s for dividends, interest and miscellaneous income. Some organizations file hundreds of thousands of these forms on a regular basis.

Several consumer actions affecting the retail industry have made headlines since the New Year.

FTC Issues Multi-Level Marketing Guidance

On January 4, 2018, the FTC issued updated business guidance to multi-level marketers (“MLMs”) to assist organizations in understanding and complying with the law. The FAQ-style guidelines address how core consumer protection principles apply with equal force to MLMs’ interactions with its own current and prospective participants, especially with regard to the compensation structures that MLMs are famous for. The FTC highlights several distinct MLM practices, explaining how each related to the FTC’s regulatory power and focus, and provides advice on how MLMs could best avoid running afoul of the law.

In a move affecting manufacturers, distributors and retailers in the furniture and other wood-based industries, the Environmental Protection Agency (“EPA”) recently issued a series of amendments to its Final Rule implementing the Formaldehyde Standards for Composite Wood Products Act (the “Formaldehyde Final Rule”), which added Title VI to the Toxic Substances Control Act (“TSCA”). The Formaldehyde Final Rule, 40 CFR Part 770, sets formaldehyde emissions standards for composite wood products and includes requirements for the testing, third-party certification, import certification and labeling of covered products by manufacturers of those products. The Final Rule also imposes requirements on downstream fabricators, distributors and retailers to keep records for at least three years demonstrating that covered products they use, distribute and/or sell are TSCA Title VI-compliant.

On October 23, 2017, the Federal Trade Commission issued a policy enforcement statement providing additional guidance on the applicability of the Children’s Online Privacy Protection Rule (“COPPA Rule”) to the collection of children’s audio voice recordings. The FTC previously updated the COPPA Rule in 2013, adding voice recordings to the definition of personal information, which led to questions about how the COPPA Rule would be enforced against organizations who collect a child’s voice recording for the sole purpose of issuing a command or request.

August was a busy month in the world of recalls. First, the end of August ushered in a hefty $5.7 million civil penalty against a major retailer in the United States. The retailer was allegedly selling and distributing recalled products and has agreed, in addition to the civil penalty, to maintain a compliance program and a system of internal controls and procedures. The CPSC voted 4 to 1 to accept the settlement, with Acting Chairman Buerkle voting to accept a lower civil penalty.

It is no secret that California has had appliance efficiency standards in place for some time now. And it is no secret that the California Energy Commission (“CEC”) has been responsible for crafting those standards. According to the CEC and the California State Legislature, however, compliance with those standards has been hit-or-miss. In 2011, the Legislature found that “significant quantities of appliances are sold and offered for sale in California that do not meet the state’s energy efficiency standards,” and the CEC itself has stated that nearly half of all regulated appliances are non-compliant, and that certain product categories are entirely non-compliant. The broad range of products covered by the CEC’s efficiency standards may be partly to blame for the lack of compliance, as manufacturers may not even realize their product must comply. For example, the efficiency standards encompass nearly every device with a rechargeable battery and that rechargeable battery system, meaning everything from cell phones to laptops to tablets to golf carts must be tested, certified and listed in the CEC’s database before being offered for sale in California. 

On June 1, 2017, the new Cybersecurity Law went into effect in China. This post takes stock of (1) which measures have been passed so far, (2) which ones go into effect on June 1 and (3) which ones are in progress but have yet to be promulgated.

On May 12, 2017, a massive ransomware attack began affecting tens of thousands of computer systems in over 100 countries. The ransomware, known as “WannaCry,” leverages a Windows vulnerability and encrypts files on infected systems and demands payment for their release. If payment is not received within a specified time frame, the ransomware automatically deletes the files. A wide range of industries have been impacted by the attack, including retailers and other businesses, hospitals, utilities and government entities around the world.

This past week, several consumer actions made headlines that affect the retail industry.

The NAD Refers Sports Drink Maker to FTC

The NAD has referred BA Sports Nutrition, the maker of BodyArmor sports drinks, to the FTC after the advertiser failed to alter certain comparative ads. The ad at issue implores customers to “Ditch artificial Sports Drink[s]: artificial flavors, artificial sweeteners, artificial colors” and depicts a bottle of a competing sports drink. The NAD found that the ad implied that the competing sports drink contained artificial flavors, sweeteners and colors when, in fact, many of the competitor’s sports drinks did not.

The FDA has announced that it will officially delay the compliance date for its Menu Labeling Rule (the “Rule”) to May 7, 2018, in order to consider how to further reduce the regulatory burden or increase flexibility while continuing to achieve regulatory objectives. Among other concerns, the FDA notes that retailers have raised concerns that the Rule lacks flexibility to permit the provision of meaningful nutrition information to consumers in innovative formats.

On April 19, 2017, the Federal Trade Commission issued warnings to more than 90 brands and “influencers” that their social media posts should more clearly and conspicuously disclose brand connections. The warning letters follow petitions filed by consumer advocacy groups aimed at influencer advertising on Instagram. The FTC’s warning letters show that the agency is committed to capitalizing on its recent enforcement actions against brands and influencers, and will continue to scrutinize social media compliance with the Endorsement Guides.

Read the full client alert.

As posted on the Hunton Privacy and Information Security Law blog, recently, Virginia passed an amendment to its data breach notification law that adds state income tax information to the types of data that require notification to the Virginia Office of the Attorney General in the event of unauthorized access and acquisition of such data. Under the amended law, an employer or payroll service provider must notify the Virginia Office of the Attorney General after the discovery or notification of unauthorized access and acquisition of unencrypted and unredacted computerized data containing a Virginia resident’s taxpayer identification number in combination with the income tax withheld for that taxpayer.

On March 14, 2017, the Consumer Review Fairness Act of 2016 (the “Fairness Act”) will come into effect, 90 days after it was signed into law by President Obama. The Fairness Act voids any provision in a form contract between a consumer and a business that (1) restricts the consumer’s ability to leave reviews, (2) imposes penalties for leaving negative reviews or (3) transfers intellectual property rights in reviews or feedback content from the consumer to the business. The Fairness Act was passed in response to an increase in the use of so-called “non-disparagement clauses” that prohibited consumers from sharing their honest opinions about a seller’s goods, services or conduct.

On March 17, 2017, retailer Neiman Marcus agreed to pay $1.6 million as part of a proposed settlement (the “Settlement”) to a consumer class action lawsuit stemming from a 2013 data breach that allegedly compromised the credit card data of approximately 350,000 customers.

On March 9, 2017, Home Depot Inc. (“Home Depot”) reached an agreement that includes the payment of $25 million and the implementation of new data security measures to resolve a putative class action brought by financial institutions impacted by the company’s 2014 data breach.

The Standing Committee of the National People’s Congress of China enacted a new Cybersecurity Law in November 2016. The final Cybersecurity Law will apply to many multinational companies starting June 1, 2017.

On February 6, 2017, Acting SEC Chairman Michael Piwowar issued a statement instructing the SEC staff to reconsider the implementation of the SEC’s “pay ratio” rule based on any comments submitted and to determine as promptly as possible whether additional guidance or relief may be appropriate. Chairman Piwowar also opened a 45-day public comment period seeking input on any unexpected challenges that public companies have experienced as they prepare for compliance with the rule and whether relief is needed.

This past week, several consumer actions made headlines that affect the retail industry.

The Federal Trade Commission Announced Class Action Settlement of VW 3.0-Liter Claims

The FTC announced a settlement with Volkswagen Group of America (“VW”) requiring VW to fully compensate consumers who purchased its 3.0-liter TDI diesel vehicles. The settlement stems from VW’s installation of emissions defeat devices in its diesel TDI vehicles that deceived consumers and emissions testers. The settlement package requires a combination of repairs, monetary compensation and buyback of certain models. It is estimated that VW will pay at least $1 billion under the settlement but could pay as much as $4 billion if it is unable to provide consumers with an adequate emissions repair. The FTC previously obtained a separate $10 billion judgment against VW to compensate consumer who purchased 2.0-liter TDI diesel vehicles with the defeat device.

As reported on the Privacy and Information Security Law blog, on January 23, 2017, the FTC released a Staff Report (the “Report”) on cross-device tracking technology that can link multiple Internet-connected devices to the same person and track that person’s activity across those devices. The Report follows a November 2015 workshop on the same subject and is based on information and comments gathered during that workshop.

On January 22, 2017, the City of Los Angeles will ‘ban the box’ when the Los Angeles Fair Chance Initiative for Hiring (Ban the Box) (the “Initiative”) goes into effect, prohibiting private employers in Los Angeles “from inquiring into or seeking a job applicant’s criminal history unless and until a conditional offer of employment” is made to the individual. In doing so, Los Angeles will become the fourth California city to ‘ban the box’ with greater protections than the state statute, and the second to do so with respect to private employers. If an employer makes a conditional offer of employment and then receives information about an applicant’s criminal history, the employer cannot take an adverse employment action against the applicant based on that history until (1) a written assessment has taken place and (2) a Fair Chance Process has occurred.

This past week, several consumer and self-regulatory actions made headlines that affect the retail industry.

Court Dismisses ‘Made in USA’ Claims against Citizens of Humanity

A California federal judge dismissed claims against Citizens of Humanity alleging that it falsely labeled its products as “Made in the USA.” While plaintiffs alleged that the fabric, thread, buttons and other components were foreign-made, the court found that this was not enough to satisfy California’s standard, allowing the use of “Made in the USA” labels on products containing 5 to 10 percent of foreign materials. Significantly, the court applied the 5 to 10 percent standard found in the California rule despite the fact that the products at issue had been purchased prior to the rule’s enactments. The court also dismissed claims under the Unfair Competition Law and California Legal Remedies Act, finding that the plaintiffs failed to plead with particularity. 

This past week, several self-regulatory consumer actions made headlines that affect the retail industry.

VitaPulse Modifies Ad Practices after NAD Review

Princeton Nutrients LLC, the maker of the dietary supplement, VitaPulse, has agreed to modify its advertising practices following an investigation by the National Advertising Division (“NAD”). The NAD investigated claims that the product reduces cholesterol, lowers blood pressure and increases energy, as well as the company’s use of online reviews and testimonials. As a result, Princeton Nutrients elected to permanently discontinue its health claims rather than provide NAD with supportive substantiation.

This past week, several consumer actions made headlines that affect the retail industry.

Eleventh Circuit Stays FTC Order in LabMD Case

The Eleventh Circuit Court of Appeals stayed an FTC Final Order requiring the now-defunct LabMD to implement numerous compliance measures stemming from a 2008 data leak. In July, the FTC ordered LabMD to establish an information security program and notify those affected by the data leak. LabMD closed in January 2014, citing prohibitive costs related to the FTC litigation. An Eleventh Circuit panel found that “[t]he costs of complying with the FTC’s Order would cause LabMD irreparable harm,” noting that the company has under $5,000 cash on hand, a pending $1 million judgment against it and is no longer operational. The court granted LabMD’s motion to stay the Order pending appeal.

On November 15, 2016, the Federal Trade Commission released a new policy statement announcing how the agency will examine over-the-counter (“OTC”) homeopathic drugs going forward. The policy statement explains that the FTC will hold OTC homeopathic products to the same standards as non-homeopathic drugs making similar wellness claims in terms of efficacy and safety.

This past week, several consumer actions made headlines that affect the retail industry.

On October 19, 2016, Chemence, Inc., the manufacturer of products such as Hammer Tite, Krylex Glues and Kwik Fix, agreed to resolve an FTC challenge of the company’s “Made in USA” and “Proudly Made in USA” claims. The settlement  requires Chemence to pay $220,000 and substantiate any future “Made in USA” claims.

Recently, the EEOC has announced the approval of a revised EEO-1 report (“Revised Report”), applying to the 2017 calendar year with the first report due by March 31, 2018. In addition to the disclosures required by the current EEO-1 report, the Revised Report will require employers with 100 or more employees to provide compensation data and the number of hours worked by employees across 12 separate pay bands, categorized by gender, race and ethnicity. The current EEO-1 report only collects data regarding the number of employees categorized by gender, race and ethnicity in 10 different job groupings.

The first blow to the recent expansive application of the New Jersey Truth-in-Consumer Contract, Warranty and Notice Act (“TCCWNA”) was struck by a federal court in California last month. In Candelario v. Rip Curl, Inc., the Central District of California granted a motion to dismiss a complaint alleging a TCCWNA violation of website terms and conditions because the plaintiff lacked Article III standing. The plaintiff has appealed the decision to the Ninth Circuit.

This past week, several regulatory and self-regulatory enforcement actions made headlines:

FTC Settles with NutraClick Over Deceptive Billing Practices

The FTC has settled claims that supplement maker NutraClick engaged in deceptive billing practices. According to the FTC, NutraClick offered “free” samples through its website, but consumers who ordered these samples were then enrolled into a membership program with monthly bills of $29.99 - $79.99. Over 70,000 people registered complaints about these practices with the FTC.

Under the Fair Labor Standards Act’s (“FLSA’s”) white-collar exemptions, an employee must meet both a duties and a salary basis test in order to be exempt from overtime requirements. Currently, the salary basis test requires that the employee receive at least $455 per week in salary. However, under a recent Department of Labor rulemaking, the weekly salary amount is set to more than double to $913 per week effective December 1, 2016. Thus, employers must ensure that any white-collar-exempt employee making less than $913 per week either (1) receives a salary increase to at least $913 per week to continue the overtime exemption or (2) is reclassified to non-exempt and receives overtime when working more than 40 hours in a week. 

This past week, several consumer, self-regulatory and regulatory actions made headlines:

Clearblue Label Not So Clear

A Second Circuit panel affirmed a district court ruling that SPD Swiss Precision Diagnostics GmbH, maker of the Clearblue Advanced Pregnancy Test with Weeks Estimator, violated the Lanham Act. While medical professionals estimate the length of pregnancy by the date of a woman’s last menstrual period, the Clearblue test estimates it by the length of time since a woman ovulated, but does not disclose this difference in measurement. The appeals court rejected Clearblue’s argument that the Lanham Act claim was precluded because it's label and marketing materials had been approved by the U.S. Food and Drug Administration. The case was brought by competitor Church & Dwight Co. Inc.

The National Advertising Division (“NAD”) was busy this past week. The organization recommended that several companies modify or discontinue claims made for the following consumer products.

As reported on the Privacy & Information Security Law blog, on July 29, 2016, the FTC announced that it had issued an opinion and final order concluding that LabMD, Inc. (“LabMD”) violated the unfairness prong of Section 5 of the FTC Act by failing to maintain reasonable security practices to protect consumers’ sensitive personal information. The unanimous decision reverses a November 2015 administrative law judge’s initial decision that, as we previously reported, dismissed the FTC’s charges against LabMD for failing to show that LabMD’s allegedly unreasonable data security practices caused, or were likely to cause, substantial consumer injury.

In December 2014, the New York Attorney General’s Office initiated an investigation into Jimmy John’s corporate office and its New York franchises. Jimmy John’s is a sandwich shop with franchises throughout New York and the United States. The investigation in New York concerned whether the use of a non-compete clause that barred departing employees from taking a job with any employer within two miles of a Jimmy John’s store that made more than 10 percent of its revenue from sandwiches was legal.

The tidal wave of New Jersey Truth-in-Consumer Contract, Warranty and Notice Act (“TCCWNA”) claims just swept up a novel argument: a class complaint against Facebook, Inc. argues that the popular social media site’s terms of use is subject to TCCWNA because Facebook profits from users’ personal information and intellectual property.

President Obama signed the Frank R. Lautenberg Chemical Safety for the 21st Century Act (“Lautenberg Act”) into law in June 2016, amending the core provisions of the Toxic Substances Control Act (“TSCA”) for the first time in nearly 40 years. Last month, Hunton & Williams detailed how the Lautenberg Act considerably broadens the Environmental Protection Agency’s (“EPA’s”) authority to evaluate chemical safety and regulate use of chemicals in all stages of the supply chain, including manufacturing, distribution and retail sale. Within six months, EPA must select at least 10 chemical substances and begin risk evaluations on them. EPA must also classify chemicals – including those currently in the retail supply chain – as “high priority” or “low priority” for review, and begin risk evaluations on 20 high priority chemicals within the next three and a half years.

This past week, several consumer protection and regulatory actions made headlines:

Technology

Volkswagen to Pay an Additional $86 Million to California

On July 6, California Attorney General Kamala Harris announced that Volkswagen (“VW”) will pay the state an additional $86 million in a second partial settlement over VW’s emissions “defeat devices.” This civil penalty sum is the largest amount ever recovered by California from an automaker, and comes on the heels of the recently announced $14.7 billion settlement negotiated by the EPA and the FTC over the German automaker’s emissions-cheating scandal. The $86 million is part of a total $603 million VW has agreed to pay to resolve consumer-protection claims with 46 jurisdictions. As part of the settlement, VW agreed to strict injunctive terms, including prohibitions on false advertising and affirmative disclosure of defeat devices.

If you live in an urban environment, you have likely seen food trucks on city streets, in parking lots or at any number of local events. The mobile food industry has grown significantly over the last few years and, with that growth, vendors and their brick-and-mortar competition have been faced with a changing regulatory landscape. 

For many consumers, online reviews play a role in the decision to make any purchase. Before making dinner reservations, choosing a hotel, hiring a service provider or even buying a toaster, consumers often look to online reviews as an assessment of the product, service or experience they want to buy. In a market where a negative online review or rating from a dissatisfied customer can influence countless other potential buyers — not just people the dissatisfied customer knows in real life — companies have a strong incentive to maintain a positive reputation online. However, in a desire to separate themselves from the competition with strong reviews, some companies have taken the race for positive online reviews too far, and the Federal Trade Commission is watching.

This past week, several consumer protection and regulatory actions made headlines:

FTC Issues Closing Letter in Bedrock “Made in USA” Labeling Investigation

On June 16, 2016, the FTC issued a closing letter in its investigation of Bedrock Manufacturing Company, the parent of Filson and Shinola. The FTC had raised concerns regarding Bedrock’s unqualified use of the phrases “Made in USA” and “Built in USA.” Despite using these labels, many of Shinola and Filson’s products were made with materials mostly or entirely sourced from outside of the US. The FTC closed its investigation as a result of Bedrock’s self-imposed corrective actions, including replacing hangtags and information cards for various products, updating employee training materials and advertising materials, and changing labelling integrated on the products themselves.

As we reported on the Hunton Employment & Labor Law blog, the recently enacted Defend Trade Secrets Act of 2016 (“DTSA”) provides a new form of expedited relief in federal court for owners of misappropriated trade secrets through an ex parte seizure of property. In “extraordinary circumstances,” DTSA permits a court to issue an order to authorize law enforcement officials to seize property – without advanced notice to the accused – in order to prevent the propagation or dissemination of the trade secret. The utilization of this ex parte seizure does not come without risk. Section 2(b)(2)(G) provides that in the case of wrongful or excessive seizure, a person who suffers damages has a cause of action against the applicant and can seek reasonable attorneys’ fees, damages for lost profits, cost of materials, loss of good will and punitive damages.

TCCWNA. The very acronym evokes head scratches and sighs of angst and frustration amongst many lawyers in the retail industry. You have probably heard about it. You may have even been warned about it. And you may currently be trying to figure out how best to minimize your risk and exposure this very moment. But what is it and why has virtually every retailer been hit with a TCCWNA class action demand letter or lawsuit in the past few months? And why are most retailers scrambling to update the terms and conditions of their websites?

This week, the following consumer protection actions made headlines:

Teavana Settles with Consumer Product Safety Commission

Teavana, a Starbucks-owned tea retailer, settled allegations with the Consumer Product Safety Commission (“Commission”) that Starbucks failed to report complaints of exploded tea tumblers. The settlement split the Commission on a company’s obligation to report complaints to the agency. Commissioner Joseph P. Mohorovic, who opposed the settlement with its $3.75 million civil penalty, said that Teavana did not have a clear obligation to report the complaints saying, “The [Consumer Product Safety Act] and our rules under it do not establish a clear line for when a company must report, but at best blurred zone of indecision.”

This past week, several consumer protection and regulatory actions made headlines:

FTC to Host Consumer Disclosure Workshop in September

The Federal Trade Commission has announced that it will be hosting a September 15, 2016 workshop, “Putting Disclosures to the Test,” on the efficacy and costs of consumer disclosures in advertising and in privacy policies. Planned discussion topics include examining disclosures meant to avoid deception in advertising, disclosures designed to inform consumers of data tracking, and industry-specific disclosures for jewelry, environmental and fuel-saving claims. The workshop is open to the public and will take place at the FTC’s Constitution Center offices in Washington, D.C. The FTC currently is soliciting presentation proposals for the workshop; submissions may be sent to disclosuretesting@ftc.gov.

Seattle may be the next municipality to propose a predictable scheduling ordinance requiring employers to provide advanced notice of work schedules and compensation in the event schedules are changed. The Seattle City Council’s Civil Rights, Utilities, Economic Development and Arts Committee recently initiated regular meetings to discuss the issue of “Secure Scheduling,” and confirmed plans to continue discussions over the next several months to further develop the proposed ordinance. The Mayor’s office is also pursuing its own inquiry into this issue. 

This past week, the following regulatory and consumer actions made headlines:

Cheez-It Whole Grain Crackers ‘Not Ready,’ lawsuit claims

The Kellogg Company is being sued over its “whole grain” Cheez-It crackers. According to the complaint filed in U.S. District Court for the Eastern District of New York, the claim that these crackers are whole grain is “false and misleading, because the primary ingredient in Cheez-It Whole Grain crackers is enriched white flour.”

While the Cheez-It Whole Grain crackers do contain some whole wheat flour, plaintiffs argue it is almost negligible. A comparison of the Cheez-It Original crackers and the Cheez-It Whole Grain crackers shows identical nutritional values in every category, except fiber. The Original crackers contain “less than 1g,” while the Whole Grain crackers contain 1 gram.

Plaintiffs argue the Cheez-It claims are thus misleading, and have caused consumers to purchase or pay a premium for a product, that they otherwise would not have paid. The Kellogg Company has denied any misconduct, including any alleged impropriety in its labeling.

This week, the following consumer protection actions made headlines:

Mortgage Scammer Under Water After FTC Settlement

On May 9, 2016, the FTC announced that it is returning $1.87 million to 1,630 consumers who lost money in the Expense Management America telemarketing scheme that never provided debt or mortgage relief services after absconding with homeowners’ up-front fees. The repayment to consumers is a capstone on a three and a half year joint effort with the DOJ, FBI and HUD to crack down on mortgage scammers taking advantage of distressed homeowners. Related efforts, underway since 2008, resulted in a new FTC rule providing increased protection to homeowners by prohibiting any collection of fees until the homeowner has an acceptable written offer from their lender. In prosecuting Expense Management America, the FTC worked closely with various enforcement agencies in Canada to track down and prosecute the scammers.

Earlier this month, teen clothing retailer Aéropostale filed for Chapter 11 bankruptcy protection, seeking to immediately close 154 of its over 800 stores located throughout the United States and Canada. Many of these stores are located in smaller shopping malls, which have been hit the hardest by the shift to online shopping.

The continued march of retail bankruptcies since 2015 includes Sports Authority, Vestis Retail Group, Inc. (the operator of Sports Chalet, Eastern Mountain Sports, and Bob’s Stores), Radio Shack, American Apparel, Quicksilver, Wet Seal, Delia’s and PacSun.

This post has been updated. 

In the midst of the press and politics currently surrounding the issue of bathroom policies and laws with respect to transgender employees, it is helpful to remember that government organizations have been issuing guidance to employers to assist them in dealing with these issues, especially in places where gender identity and expression constitute protected characteristics under anti-discrimination laws.

We previously reported on the proposed regulations initiated by the California Office of Environmental Health Hazard Assessment and its impact on retailers. Retailers should take steps to ensure that they are protected from Prop 65 claims, particularly with the proposed regulations in the pipeline. As with any regulatory requirements that impact businesses, often the best defense is a good offense -- forethought, assessment and implementation of a compliance program can minimize the costs, headaches, business disruption and negative publicity that may otherwise occur.

Mars, Inc. and its M&M’s Minis candy are the latest targets in a wave of “slack-fill” litigation.

Slack-fill is empty space in product packaging – i.e., the difference between the maximum capacity of a product’s container and the actual volume of product inside. Slack-fill litigation has increased in recent years as class plaintiffs allege that companies are deliberately including empty space in their packaging to deceive consumers into paying higher prices for lower product quantities.

On April 21, 2016, Hunton & Williams LLP announced the launch of a cross-practice 3D printing team to advise clients as they explore this revolutionary technology. Also known as additive manufacturing, 3D printing is being adopted by manufacturers in many industries, including consumer products, aviation, energy, medical, prosthetic and transportation, and is becoming integrated into the production process.

On April 14, 2016, after four years of drafting and negotiations, the long awaited EU General Data Protection Regulation (“GDPR”) has been adopted at the EU level. Following the EU Parliament’s Committee on Civil Liberties, Justice and Home Affairs’ vote earlier this week and the EU Parliament in plenary session, the GDPR is now officially EU law and will directly apply in all EU countries, replacing EU and national data protection legislation.

As we previously reported, the Prop 65 statute prohibits businesses from exposing people in California to any of the over 800 listed chemicals without first providing a “clear and reasonable” warning. Currently, California’s Office of Environmental Health Hazard Assessment is working to repeal existing Prop 65 warning regulations and adopt new requirements. However, the proposed regulations contain several problematic provisions regarding the content and method of transmission for required warnings. Retailers need to be aware of proposed provisions which clearly apportion responsibility for providing warnings throughout the chain of commerce. Though purportedly aimed at reducing retailers’ Prop 65 warning burden, if implemented as written, the provisions will actually increase retailers’ risks and allow manufacturers to insulate themselves from liability at retailers’ expense.

This past week, the following regulatory and consumer actions made headlines:

FDA Scratches Out Shionogi’s Misleading Labeling on its Children’s Head Lice Lotion

On April 1, 2016, the Food & Drug Administration (“FDA”) hit Shionogi & Co. Ltd. with a warning letter stating that it had mislabeled its Ulesifa children’s head lice lotion because the labeling failed to inform patients that it should not be used on children under six months old and that it does not eliminate lice eggs. The labeling was in Shionogi & Co.’s recently issued customer co-pay assistance voucher that offered patients discounts to bring their co-pays down to $10. The FDA acknowledged that the voucher’s fine print stated it was only indicated for children over six months of age, but the FDA said that was not enough to avoid mislabeling violations. The agency requested that Shionogi & Co. cease the mislabeling immediately and submit a written response within two weeks.

On April 4, 2016, the Commodity Futures Trading Commission (“CFTC”) announced a $10 million whistleblower bounty, its largest to date.

Similar to a program administered by the Securities and Exchange Commission (“SEC”), CFTC whistleblowers are eligible for an award worth 10 to 30 percent of an enforcement penalty if they bring original information to the CFTC which leads to an enforcement action that nets more than $1 million in sanctions.