A federal District Court judge in Illinois sided with the U.S. Department of Labor (DOL) in ordering Alight Solutions, LLC, an ERISA plan services provider, to comply with an administrative subpoena seeking documents pertaining to alleged cybersecurity breaches. The Court’s order in the case, Walsh v. Alight Solutions, LLC, Dkt. # 20-cv-02138 (N.D. Ill.), is significant as it mandated production of a great deal of information concerning Alight’s cybersecurity practices, finding Alight’s objections on grounds of irrelevance and burdensomeness insufficient to overcome the DOL’s broad investigatory authority and the presumption that investigative subpoenas should be enforced.

According to the Court’s order, the DOL’s investigation of Alight began back in July 2019 based in part on its discovery that Alight had processed unauthorized distributions from its ERISA plan clients’ accounts as a result of cybersecurity breaches and, further, had failed to promptly report the breaches and restore the unauthorized distributions to the affected accounts. DOL’s subpoena sought documents on a number of topics, including Alight’s cybersecurity policies, procedures, assessment reports, and training of its workforce; its business continuity plans pertaining to information security; and communications or other documents regarding any cybersecurity incident pertaining to its ERISA plan clients, dating back to 2015.
Continue Reading District Court Enforces DOL Investigative Subpoena Against Plan Service Provider Concerning Alleged Cybersecurity Breaches

Those involved in disability claims administration may wish to consider the potential impacts of the current global pandemic. In the current crisis, disability claims regulations may not be at the top of many peoples’ minds. However, insurers, plan administrators, and other involved in disability claims administration may wish to reevaluate the applicable Department of Labor deadlines and requirements in light of present pressures on medical personnel, persons with serious health problems, and business disruptions.
Continue Reading Disability Claims Regulations and the COVID-19 Pandemic

The Department of Labor’s (“DOL”) conflict of interest rule, informally coined the “fiduciary rule,” sparked much debate when the regulations were proposed in 2015, and finalized in 2016, to expand the definition of fiduciary under the Employee Retirement Income Security Act of 1974 (“ERISA”).  However, the fiduciary rule was continuously challenged in the courts, and appears to have met its final fate at the hands of the Fifth Circuit nearly 2 years later.
Continue Reading Fifth Circuit Reaffirms Decision to Vacate Fiduciary Rule

On May 22, 2017, Department of Labor (DOL) Secretary Alexander Acosta announced in an op-ed in the Wall Street Journal that the DOL would not issue another delay of the “fiduciary rule,” and that it was set to generally become effective on June 9, 2017. As we now know, certain provisions of the fiduciary rule went into effect on that date, with others being delayed until July 1, 2019. However, the fiduciary rule remains under attack in the courts. Two notable appellate court decisions were issued within days of one another, and both were decided by three judge panels. One case upheld narrow provisions of the fiduciary rule, and the other effectively completely invalidated the rule. Shortly after the second decision, the Department of Labor announced that it would not enforce the fiduciary rule “pending further review.”
Continue Reading The Fate of the Department of Labor Fiduciary Rule Could Be Uncertain