Guardrails for Bank-Fintech Partnerships: The Federal Banking Agencies Finalize Third-Party Risk Management Expectations

The Board of Governors of the Federal Reserve System (Fed), the Federal Deposit Insurance Corporation (FDIC), and the Office of the Comptroller of the Currency (OCC) (collectively, the Agencies) issued the long-awaited final Interagency Guidance On Third-Party Relationships: Risk Management (Final Guidance) on June 6, 2023. The Final Guidance replaces the disparate set of guidance and FAQs separately issued by the Agencies over the years, thereby bringing greater consistency to supervisory expectations for banks in managing risks arising from their business relationships with service providers, contract counterparties, and other third parties.

The Final Guidance will be of particular interest to fintech companies, especially those that partner with or are looking to partner with banks. The Final Guidance explicitly calls out bank-fintech partnerships as within its purview, underscoring the potential risks raised by partnerships that involve novel or complex structures, as well as arrangements where the fintech company rather than the bank serves as the main point of contact for interactions with the end user (such as certain banking-as-a-service models).

Fintech companies that currently partner with banks, or are seeking to, should pay close attention to the Final Guidance, as it is now the definitive source of guidance on supervisory expectations and also a sign of greater supervisory scrutiny on such partnerships. Small banks, which many fintech companies tend to partner with, will likely find the new guidance challenging to implement. In a rare dissenting statement, Federal Reserve Governor Bowman predicted that more resources will be needed to “ensure that small banks understand and can effectively use the guidance to inform their third-party risk management processes.” The Final Guidance notes that the Agencies plan to, but have not yet, developed these additional resources to assist community banks and other smaller banks. Consequently, fintech companies looking to partner with banks, especially small banks, should be prepared for a more rigorous and potentially drawn-out diligence process with their potential bank partner, as well as ongoing monitoring.

Overview of the Final Guidance

Banking organizations are required to operate in a safe and sound manner and in compliance with applicable regulations, whether their activities are performed internally or outsourced to a third party. Operating in a safe and sound manner requires a bank to establish risk management practices governing its activities, including risks arising from its third-party relationships. The Final Guidance provides sound risk management principles that banks can use when developing and implementing risk management practices to assess and manage risks associated with third-party relationships.

The Final Guidance is striking in its expansive scope. It broadly defines third-party relationships, encompassing any business arrangement between a banking organization and another entity, whether the arrangement is formalized by contract or otherwise established. Included in the scope of third-party relationships are:

  • outsourced services,
  • the use of independent consultants,
  • referral arrangements,
  • merchant payment processing services,
  • services provided by affiliates and subsidiaries, and
  • joint ventures.

Importantly, the Final Guidance emphasizes that a bank’s use of such third parties does not diminish or remove its responsibilities to meet those requirements and ensure compliance with applicable regulations, such as those related to consumer protection and financial crimes. In issuing the Final Guidance, the Agencies sought to promote consistency in supervisory approaches to third-party risk management by replacing each agency’s existing guidance on the topic,[1] each of which is rescinded and replaced by the Final Guidance.

Key Considerations for Fintech Companies

The Final Guidance lays out a risk management framework that outlines a series of essential steps for banking organizations that partner with fintech companies, including engaging in sufficient planning, conducting due diligence for third-party selection, negotiating contracts, monitoring on an ongoing basis, and, if necessary, effecting efficient termination. The Final Guidance also details a set of best practices for governance of third-party risk management, including oversight and accountability, independent reviews, and documentation and reporting.

Fintech companies seeking to enter into partnerships with banks should take note of the following key areas in the Final Guidance:

1. Heightened due diligence requirements

The Final Guidance calls for the scope and degree of a bank’s due diligence to align with the level of risk and complexity of the third-party relationship. Fintech companies should pay particular attention to this requirement, as the Final Guidance states that greater operational or technological complexity leads to increased risk. It is likely that a fintech company that is preparing to partner with a bank will have to undergo more thorough and rigorous due diligence with the bank. If the fintech companies will perform higher-risk activities, including critical activities, the Final Guidance calls for more comprehensive diligence.

The Final Guidance sets forth a wide range of topics that, as part of its due diligence, a banking organization should consider about a third party:

  • strategies and goals;
  • legal and regulatory compliance;
  • financial condition;
  • business experience;
  • the qualification and backgrounds of key personnel and other human resources considerations of a third party;
  • risk management;
  • information security;
  • management of information systems;
  • operational resilience;
  • incident reporting and management process;
  • physical security;
  • reliance on subcontractors;
  • insurance coverage; and
  • contractual arrangements with other parties.

2. Contract negotiation

The Final Guidance stresses the importance of contract negotiation for banks when entering into third-party arrangements. While a fintech company may initially seek to offer its own standard contract or form provisions, a bank may try to seek modifications, resulting in a more involved and drawn-out negotiation than a fintech might expect to encounter with other entities. Fintech companies should therefore expect greater attention from banks than their typical transaction counterparties in the following commercial terms, on the basis of the Final Guidance:

  • nature and scope of the arrangement;
  • performance measures or benchmarks;
  • responsibilities for providing, receiving, and retaining information;
  • the right to audit and require remediation;
  • responsibility for compliance with applicable laws and regulations;
  • cost and compensation;
  • ownership and license;
  • confidentiality and integrity;
  • operational resilience and business continuity;
  • indemnification and limits on liability;
  • insurance;
  • dispute resolutions and customer complaints;
  • subcontracting;
  • foreign-based third parties;
  • default and termination; and
  • regulatory supervision.

Moreover, the Final Guidance states that if a contract is unacceptable for a bank, the bank may consider other approaches, such as looking to bring the activity in-house or looking to other third parties. Accordingly, it will be important for fintech companies negotiating with banks to ensure that they are adequately protecting their own interests and, at the same time, address where appropriate the many areas of focus that their bank counterparty is now expected to scrutinize. For additional insights into strategic approaches to contracting for fintech companies, please see a recent article the co-authors have written separately discussing “Financial Infrastructure as a Service: Top Legal Considerations for Innovators.”

3. Ongoing monitoring

The Final Guidance also requires banks to engage in ongoing monitoring throughout the duration of a third-party relationship, commensurate with the level of risk and complexity of the relationship and the activity performed by the third party. Fintech companies should expect the following examples of typical monitoring activities from their bank partner:

  • review of reports regarding their performance and the effectiveness of their controls;
  • periodic visits and meetings with their representatives to discuss performance and operational issues; and
  • regular testing of the bank’s controls that manage risks from its third-party relationships, particularly when supporting higher-risk activities, including critical activities (in certain circumstances, based on risk, a bank may also perform direct testing of the third party’s own controls).

Awareness of the areas of supervisory sensitivity will be critical to a fintech company’s success in partnering with a bank to deliver banking services.

Additional Considerations

The Agencies declined to establish any “safe harbors” in the Final Guidance, even for small banks. Rather, key to the third-party risk management framework—as contemplated under the Final Guidance—is the need for banks to tailor their risk management practices commensurate to their size, complexity, risk profile, and the nature of their third-party relationships. This tailored approach acknowledges the variety among different third-party relationships and the unique challenges that arise from such relationships. However, given the breadth of the Final Guidance, this tailoring may be easier said than done, particularly for community banks.

With respect to supervisory exams of a bank’s third-party risk management, the Final Guidance noted that supervision will also be tailored based on the degree of risk and the complexity associated with the bank’s activities and its third-party relationships. While the Final Guidance focuses on bank responsibility for third-party arrangements, it also recognizes that in certain circumstances, an agency may examine the functions or operations that a third party performs on behalf of a banking organization, allowing the Agencies the flexibility needed to address the unique challenges faced by the range of banking organizations and their various types of third-party relationships. In these cases, the agency may address violations of laws and regulations through corrective measures, including enforcement actions, to address unsafe practices by the third party.

Takeaway

Small banks in particular are likely to face challenges in implementing the Final Guidance and some degree of uncertainty in meeting supervisory expectations, which may translate to more challenging contract negotiation dynamics for fintech companies and greater hesitation by banks to enter into innovative arrangements. As bank-fintech partnerships increase in their complexity and incorporate novel strategies or technologies, the Agencies will require banks to step up their risk management, which their fintech partners will need to address.


  1. SR Letter 13–19/CA Letter 13–21, “Guidance on Managing Outsourcing Risk” (December 5, 2013, updated February 26, 2021); FIL–44–2008, “Guidance for Managing Third-Party Risk” (June 6, 2008); OCC Bulletin 2013–29, “Third-Party Relationships: Risk Management Guidance,” and OCC Bulletin 2020–10, “Third-Party Relationships: Frequently Asked Questions to Supplement OCC Bulletin 2013–29.”

The Corporate Transparency Act: Deniers Beware

The furthest- and widest-reaching federal business entity law ever enacted, the Corporate Transparency Act (“CTA” or “Act”)[1] will impact an estimated 32.6 million current businesses, with its implementation going into effect on January 1, 2024. An estimated additional five million newly formed businesses will also be swept under the CTA’s purview each subsequent year.[2] However, many business owners, investors, and advisers are unaware of the CTA and its looming deadline, and when they learn of it, they are often taken aback by its scope (and even its mere existence). Now is the time to review the CTA’s requirements and get prepared before the law goes into effect at the beginning of next year.

CTA Overview

The CTA requires certain businesses (including privately held and nonprofit entities) to report direct and indirect, human, beneficial ownership, control, and service provider information to the Financial Crimes Enforcement Network (“FinCEN”) of the U.S. Department of Treasury.[3] This information will be used by federal, state, local, and tribal law enforcement authorities to streamline their investigations, bypassing the “shell game” historically posed by multiple levels of business entity ownership and affiliation.[4]

Covered Businesses

The CTA impacts “reporting companies,” which include corporations, limited liability companies, limited partnerships, business trusts, and other “similar entities”[5] that are created or registered by the filing of a document with a secretary of state or a similar Indian tribal office.[6] There is no “grandfathering” of previously formed entities: the CTA will sweep in all business entities in existence on January 1, 2024. Exempted from the CTA’s reporting regime are specified excluded entities, which generally include heavily regulated business entities or large operating companies. However, the vast majority of private businesses and many nonprofit businesses will be swept up in required compliance.

Reportable Information and Owners

The information to be reported to FinCEN (“beneficial owner information,” or “BOI”) is certain personal identifying information (“PII”), which includes (1) full legal name, (2) date of birth, (3) residential (or sometimes business) physical commercial street address, and (4) an image of an acceptable government-issued ID (e.g., a U.S. passport or state-issued driver’s license) that includes both an ID number and the person’s photograph.[7] This reported information must be kept current and accurate with FinCEN by the reporting company on an ongoing basis.

This information will need to be reported for persons who have “substantial control” over the business or who own, directly or indirectly, 25 percent or more of the equity in the business (each a beneficial owner). Every business will have at least one person to report, regardless of its ownership structure. In many instances, informed business decisions will need to be made as to who constitutes reportable beneficial owners.

For reporting companies formed on or after January 1, 2024, the same PII must also be reported for “company applicants” (i.e., incorporators and organizers), including those who directed the formation filing. This reported information is only reported as of the reporting company’s formation and is not required to be updated with FinCEN thereafter.

Mechanics and Timing of Filings

Filings will be made through an electronic interface with the online Beneficial Ownership Secure System (“BOSS”).

Businesses in existence on January 1, 2024, will have one year to file their initial report—but file an initial report they must do, even if they subsequently dissolve or otherwise alter their structure in a manner to become compliant with a CTA exemption. Businesses formed on or after January 1, 2024, will have thirty days from formation to file their initial report with FinCEN.

Any change to the status quo of a business in existence on January 1, 2024, will need to be reported as a separate amendment filing, delivered with the initial “as of January 1, 2024” report filing required to be made on or before December 31, 2024. Businesses formed on or after January 1, 2024, will have thirty days to file a correction or change to any information previously reported.

Penalties

There are steep, escalating fines ($500 per day up to $10,000 per violation) and possible jail time (up to two years) for those failing to timely and properly comply with the CTA’s requirements.[8]

It bears noting that failure to timely file a required initial report could result in up to a $10,000 fine but that subsequent events that would necessitate an amendment to such required but missing filing, had the initial report been made, would also cause penalties to accrue—meaning that a failure to file an initial report may result in aggregate fines accruing well in excess of $10,000 prior to an initial notification of violation from FinCEN to the reporting company. Also, the intent of the reporting company and its agent with regard to noncompliance will be a factor in FinCEN’s assessment of possible criminal penalties.

Bearing this in mind, the remainder of this article is an appeal to the better angels of our character—as well as a direct rebuttal of initial impulses expressed by many upon first learning of the CTA.

CTA Denial

“I am a sophisticated business owner, and I have never heard of this.”

The enactment of the CTA in 2021 came as a shock to many (to some, a much later aftershock). However, the CTA’s intent—to end the position of the United States as a haven for “shell” companies used in the commission of money laundering, terrorist financing, financial and tax fraud, and other domestic and international illicit activity and corrupt practices—was present in proposed federal legislation for decades.

The CTA marks a seismic shift in the legal landscape for businesses operating in the United States. Prior to the CTA, entity beneficial owner disclosure was solely (if at all) the purview of state or tribal law. Now it is a focus and purview of federal law enforcement agencies.

The CTA has largely flown under the radar to date, but it is now time to become educated on the actions that may be taken prior to the CTA’s January 1, 2024, implementation date, and after. The Act’s impact on and implications for businesses, particularly small businesses, are complicated and difficult to succinctly communicate, and the CTA has not received widespread mass media attention. In fact, federal lawmakers and industry groups have decried the lack of CTA public education undertaken by FinCEN to date.

Many professional advisers and business professionals have been caught off guard by this fundamental change in business entity law, now taking on a federal facet for the first time. Those that are aware have, by and large, taken a wait-and-see approach to either advising their clients and business associates or evaluating their own compliance profile. This is because much of the mechanics of compliance remains elusive. The ability for businesses to begin directly interfacing with FinCEN on filing and compliance continues to be in the future, giving those persons “in the know” little to offer as current action items—causing many to defer sounding the alarm bell until more is known from FinCEN. However, the wait must end, as there is limited and dwindling time remaining to take action before the window of opportunity closes at the end of 2023.

“I have a small business. The Corporate Transparency Act only applies to large businesses.”

The CTA’s impact on small businesses is counterintuitive to many business owners, who erroneously believe that their business is “too small” to be within FinCEN’s sights and the CTA’s purview. Quite the opposite: A business’s small size is precisely why such a business must comply with the Act! The Act is designed to cast a broad net to “catch” a small niche of nefarious actors hiding behind the “corporate veil.”

Unfortunately, the vast majority of business entities that now must comply with the CTA, including most small businesses, are unwitting and innocent bycatch in the CTA’s net. This is because they will not be able to meet the criteria to be a large operating company that is expressly excluded from CTA compliance. The CTA’s “large operating company” exception is an exception to the CTA’s reporting requirements for businesses that meet all three of the following criteria:

  1. The business must have a commercial, physical street address in the United States.
  2. The business must have twenty-one or more full-time employees (excluding full-time equivalent employees, part-time employees, independent contractors, and leased employees).
  3. The business must have filed a prior year’s federal income tax return demonstrating more than $5 million in annual, U.S.-only, gross receipts or sales.

All home-based businesses, and those with only a virtual (online) presence, will not meet the physical street address part of this three-part test. In addition, by necessity, every business entity formed on or after January 1, 2024, will not initially qualify for this exclusion because such business entities will not have the prior year’s tax return necessary to establish the gross revenue part of the test. The same will be true of virtually all business entities formed between January 1, 2023, and December 31, 2023. Further, many large portfolios of business entities will likely not meet this exception because employees of the portfolio’s operations are typically consolidated into one, or a few, of the portfolio’s business entities, with the remaining business entities not having employees, thus failing the employee prong of the test. Under FinCEN’s BOI Final Rule,[9] employee head count may not be attributed across affiliated entities for purposes of meeting the employee count threshold—each business entity must stand alone in this respect.

“My industry’s lobbyists would never allow such a law to get passed.”

Lobbyists had staved off attempts to implement the CTA, and its predecessor bills, for decades. However, in December 2020, the U.S. Congress, majority-controlled by Republican lawmakers in both the House and the Senate, passed the CTA as part of the 2021 National Defense Authorization Act—which then-President Donald Trump vetoed[10] (his sole veto during his term of office). On January 1, 2021, Congress, by a two-thirds vote in both the House and Senate, overrode Trump’s veto and passed the CTA into law.

Since the CTA’s adoption, the political landscape has changed. President Joe Biden and a Democratic-controlled Senate now hold office through at least 2024. A change of party control, if any, of the presidency or the Senate will not take effect until mid-January 2025—and control of the House may then also be uncertain. By that time, all existing business entities will have been required to file their initial CTA report into the BOSS, and a full year of newly formed entities will also have been required to comply with the CTA. In short, hopes of a conservative government sea change, with an overturning of the CTA, doesn’t account for the Act’s conservative lawmaker origins or the political cycle timing between now and the Act’s January 1, 2024, implementation.

Hope for a legislative repeal or delay in the implementation of the CTA likely ended with the recent passage of the bipartisan Fiscal Responsibility Act of 2023 ( “debt ceiling bill”),[11] which lacked provisions pertaining to the CTA. In mid-June 2023, subsequent to the passage of the debt ceiling bill, the Accountability Through Confirmation Act and the Protecting Small Business Information Act were each introduced in the House Financial Services Committee by Committee Chairman Patrick McHenry (R-NC). These bills are intended to effectively delay the date that the BOI reporting requirements go into effect and to “reform” FinCEN with requirements intended to increase transparency and accountability within the agency, while protecting individuals’ privacy and businesses’ sensitive information in the BOSS reporting regime. It bears noting that Representative McHenry was also the sponsor of the debt ceiling bill. With the current gridlock in Congress, these new bills seem unlikely to move beyond the House or to become laws.

Further, the Biden administration has shown no indication of delaying the CTA’s implementation, with the U.S. Department of Treasury and FinCEN expressing publicly, and repeatedly, that implementation of the CTA by the end of 2023 is a top priority. The stated goals of the CTA—combating the use of “shell” companies in the commission of money laundering, terrorist financing, financial and tax fraud, and other domestic and international illicit activity and corrupt practices—appear to align with the administration’s agenda. In other matters, the administration has shown a proclivity to support initiatives to reign in business rather than favor it.

The CTA mandated that FinCEN promulgate regulations under the CTA prior to January 1, 2022. On December 7, 2021, FinCEN published a proposed rule related to BOI under the CTA, with a public comment period extending through February 7, 2022. In response to this notice of proposed rulemaking (NPRM), FinCEN received over 240 formal comments, with submissions coming from a broad array of individuals and organizations, including members of Congress, government officials, groups representing small-business interests, corporate transparency advocacy groups, the financial industry and trade associations representing their members, law enforcement representatives, and other interested groups and individuals. In addition to these formal responses to the NPRM, FinCEN also received, accepted, and considered many additional comments and inquiries from the public. The extensive, thorough, detailed, and pointed feedback, often in direct opposition to the proposed implementation of the Act and to specific components of the Act, was considered, weighed, and utilized by FinCEN in its adoption of the CTA BOI Final Rule, issued on September 30, 2022. FinCEN went to great length in the Final Rule to describe, with specificity, the extreme vetting on each point in the Final Rule. That Final Rule, with limited exceptions, stayed true to the CTA and the proposed rule initially proposed. FinCEN did not exercise its discretion to expand the list or scope of the enumerated reporting company exceptions (in spite of numerous pleas to do so), nor did it show any reluctance to, or anticipate delay in, implementing the CTA. Based on this process, the implementation of compliance and enforcement of the CTA’s reporting obligations will most certainly begin January 1, 2024. Hopes that a “white knight” will ride in to thwart the CTA, or that a delay or elimination of this reporting obligation implementation would occur, were vanquished last year (in 2022) and confirmed by the CTA’s omission from the bipartisan debt ceiling bill.

“That can’t be constitutional.”

A lone small business advocacy group, National Small Business United (affiliated with the National Small Business Association), has filed suit against the U.S. Department of Treasury and FinCEN contesting the constitutionality of Congress’s actions in passing the CTA into law, as well as the CTA’s implementation by FinCEN. Three other advocacy groups (Transparency International U.S., Financial Accountability & Corporate Transparency Coalition, and Main Street Alliance) jointly authored an amicus brief in support of the government’s position and the CTA. This case remains in an early stage of pleadings.[12] Pending the outcome of this case, the constitutionality of the CTA will be affirmed or better defined.

“I just won’t report.”

Statements similar to the foregoing are uttered by a shocking number of business owners with whom I speak about the CTA and its reach, application, and exposure. However, there are a number of factors uniquely associated with the CTA, its origins, and its implementation that make its enforcement and your possible noncompliance exceptionally problematic. Chief among these, at least for individuals,[13] is that their refusal will be conspicuously noted on a reporting company’s filing with FinCEN. A checkbox is included on the BOI reporting questionnaire: “(check if you are unable to obtain any required information on one or more Beneficial Owners).” Once checked, this conspicuous omission will be a red flag to FinCEN, and other law enforcement agencies, for initial or further investigation.

Further, the Internal Revenue Service (“IRS”) recently announced its taxpayer enforcement initiatives, which include plans to hire nearly 87,000 new employees and invest $80 billion over the coming years[14] to improve tax enforcement and customer service, with more than one-third of the new hires being enforcement staff. The agency also plans to hire more data scientists to complement traditional tax attorneys and revenue agents in using new data analytics technology to identify audit targets. FinCEN’s BOSS database, created under the CTA, will likely be a key component to such data analytics technology and will provide an inexpensive, efficient investigative tool and corroborating (or “red flag”) source of taxpayer information for the IRS. The IRS initiatives’ stated aims are to close the “tax gap” between taxes owed and those paid, and to rebuild the IRS’s audit capabilities and computer technology. The IRS’s stated goals also include expanding enforcement for taxpayers with complex tax filings and high-dollar noncompliance, including high-income and high-wealth individuals, complex partnerships, and large corporations.[15]

Hopes that the CTA is nothing more than another pro forma survey data collection initiative by the government are naïve and misguided. FinCEN’s BOSS database will be a critical point of diligence for investigation by federal government agencies. Your business entity’s conspicuous absence from the BOSS database, or your personal omission from a reporting company’s CTA filing, will most certainly be discovered—and will spearhead other federal investigations into you and your business practices.

“If I get caught, I’ll just pay the fine.”

The CTA provides for civil fines of $500 per day, up to $10,000, per violation of the Act. The Act also provides for a criminal penalty of up to two years’ imprisonment for CTA violations. It is important to note that the fine is per violation—not simply for violating the Act. The Act has requirements for filing report corrections and amendments based on changing circumstances, and CTA violations will likely involve multiple instances of noncompliance before FinCEN comes knocking on your door. Each reporting obligation also has a very short window (thirty calendar days) within which to make the required filing, making inadvertent violations of the CTA highly likely. Further, with only twenty days needed to reach the maximum fine of $10,000 per violation, many violations will likely come with the maximum $10,000 price tag.

These factors, in combination, could cause a simple act of not reporting to turn into the accrual of tens of thousands of dollars, or even hundreds of thousands of dollars, in fines by the time FinCEN identifies the violation and pursues collection. This will be particularly true in the first year of implementation, when 32.6 million reporting companies are projected to require reporting, with five million additional reporting companies being added each year thereafter.

Also, did I mention prison time? Noncompliance could be a costly proposition—far in excess of an initial $10,000 price tag.

“CTA responsibilities do not implicate fiduciary duties.”

Persons with “substantial control” over a reporting company under the CTA not only will be required to disclose their own PII as “beneficial owners” of the reporting company but will also, in many instances, owe fiduciary duties to the reporting company as well as to the (other) owners of the reporting company to properly comply with the CTA. Any decision by a reporting company’s management not to report under the CTA, or to partially report or to inaccurately report, will directly implicate actionable duties owed to the reporting company, its owners, and possibly third parties. Further, such actions may constitute “for cause” termination events with respect to such “substantial control” person, as the act or omission may constitute gross negligence, willful misconduct, fraud, material misrepresentation, or an illegal act with respect to the reporting company. A “substantial control” person’s evasion of the law could also implicate denial or cancellation of the reporting company’s directors and officers (D&O) insurance coverage for the event in question, and expose the individual to uncovered personal liability for the action in question. Further, grievous failure to comply with the CTA could result in imposition of a criminal sentence of up to two years in federal prison for the offending individual.

Under most states’ business statutes, the concept of fiduciary duties is prevalent and applies to the behavior of officers, managers, directors, and other governing and management parties to the business entity itself and, in some instances, to the owners of the business entity directly. Principal among the fiduciary duties is the “duty of care.” The duty of care requires that a person act with the prudence that a reasonable person in similar circumstances would use. If a person’s actions do not meet this standard of care, then the acts are considered negligent and may result in actionable damages enforceable against the individual. However, a fiduciary may discharge the duty of care by exerting appropriate diligence and informed consideration with respect to the action in question. Further, in most instances, a fiduciary may discharge its duty of care on a subject by hiring a professional adviser that the fiduciary reasonably believes has the necessary experience and expertise to advise on the subject and by relying on such advice in making the business decision. Thus, “substantial control” persons may insulate themselves against duty-of-care claims by retaining legal counsel to evaluate and advise on the reporting business decisions in question. Further, to the extent that a waiver of fiduciary duties is permitted by the applicable state and included in the applicable business entity’s charter documents, such waiver will not extend to the fiduciary duty of good faith, which could be implicated by a failure to file a CTA report.

Conclusion

The Corporate Transparency Act is a seismic shift in the beneficial owner reporting regimes in the United States, disturbing long-established norms. Beginning January 1, 2024, tens of millions of unwitting and innocent U.S. business entities, and their beneficial owners, will become bycatch in FinCEN’s dragnet designed to catch nefarious actors hiding behind the “corporate veil.” Whether you like it, hate it, or are indifferent, the CTA has been thoroughly vetted and is here to stay. Compliance is both mandatory and advisable. Just as anonymity in the business entity structure has been pierced by the CTA, so has anonymity in the Act’s compliance, with various touch points and red flags aiding in FinCEN’s ultimate enforcement regime, including FinCEN’s discovery of those choosing not to comply.


  1. National Defense Authorization Act for Fiscal Year 2021, tit. LXIV, §§ 6401–6403.

  2. See 31 C.F.R. § 1010.380 (2022).

  3. National Defense Authorization Act for Fiscal Year 2021, tit. LXIV, § 6403.

  4. See 31 C.F.R. § 1010.380.

  5. For example, limited liability partnerships, limited liability limited partnerships, decentralized autonomous organizations (“DAOs”), and other entities created through filings with a secretary of state or tribal authority.

  6. 31 U.S.C. § 5336 (a)(11)(A) (2021).

  7. 31 C.F.R. § 1010.380(g) (“Reporting violations. It shall be unlawful for any person to willfully provide, or attempt to provide, false or fraudulent beneficial ownership information, including a false or fraudulent identifying photograph or document, to FinCEN in accordance with this section.” (emphasis added)).

  8. 31 U.S.C. §§ 5336(h)(1), 5336(h)(3)(A).

  9. Beneficial Ownership Information Reporting Requirements, 87 Fed. Reg. 59,498 (Sept. 30, 2022).

  10. Searches across case law databases for litigation containing the phrase Corporate Transparency Act resulted in only one case found: Trump v. Deutsche Bank AG, 943 F.3d 627, n.55 (2019).

  11. H.R. 3746, 118th Cong. (2023) became Pub. L. No. 118-5 (2023).

  12. Nat’l Small Bus. United v. Yellen, No. 5:22-cv-01448-LCB (N.D. Ala. 2022).

  13. It bears noting that the person responsible for a reporting company’s CTA filing, in some instances, may not be a “beneficial owner” of the business entity, or only one of several “beneficial owners,” and will likely make the filing (even over potential objections) to avoid personal culpability. The willingness of one person to violate the law, problematic on its face, also implicates the rights and risk profile of other persons associated with the reporting company. The other implicated individuals in the business organization may not share this risk tolerance.

  14. Note that section 251 of the debt ceiling bill, Pub. L. No. 118-5 (2023), rescinded $1,389,525,000 of IRS earmarked funding.

  15. See Beware, the IRS Is Coming: More IRS Audits to Focus on High-Net Worth Individuals and Passthrough Entities, Polsinelli (Apr. 18, 2023).

Cloud Computing and Cloud Marketplace Toolkit Project: Toolkit Introduction

At this point, almost every business operates some of its information technology (“IT”) assets in the cloud. Cloud‑based IT resources may be infrastructure (supplementing or replacing on‑site data centers and communications systems), platforms, or applications. Also, essential, enterprise‑level applications are now commonly licensed as subscription services maintained by third parties. Many of these third-party services also operate on IT infrastructure sourced from a cloud provider.

Moves to the cloud are multifaceted and multidisciplinary. Lawyers have an important role advising their clients about the legal rights and obligations in the tangle of licensing arrangements inherent in cloud computing. Determining the sources of those rights and obligations can, itself, be a challenge.

This project focuses on the essential steps for determining the legal rights and obligations attendant to operating in the cloud and provides practical tools to assist business lawyers. The project’s contributors are members of the Business Law Section’s Cyberspace Law Committee.

The initial toolkit includes six tools:

The toolkit will also include a resource focusing on the substance of cloud licensing. The forthcoming tool describes contract terms typical for software and cloud services, highlighting, in particular, subject matter that might be prioritized for attention when opportunities for negotiation are limited.

The Lawyer’s Role: More Counselor than Drafter

A lawyer representing the purchaser/licensee in a cloud transaction will almost always be reviewing vendor contracts, not drafting or modifying purchaser/licensee forms. Opportunities for negotiation are limited by bargaining power, the cadence of business operations and IT development, and the volume of material and services that may be necessary or useful to complete the client’s IT effort. In this circumstance, lawyers add value by issue-spotting and helping the business team assess and contextualize risk reflected in the vendor’s legal terms and service descriptions.

Coordination of Relevant Stakeholders

Lawyers are also often well positioned to identify the right decision makers—or at least the appropriate subject matter domains—and facilitate work across stakeholder groups to understand and manage rights and obligations buried in the fine print of cloud contracts.[1] Establishing and managing online environments and services involve information security (a discipline not entirely the focus of IT architects, engineers, and developers), budget and finance, procurement, compliance and risk, and data management and privacy—each doing its part to support a business team’s advancement of the client organization’s objectives.

The dynamic of coordinating stakeholder input is not new, of course. But lawyers should understand whether processes and controls that the client has in place to bring relevant stakeholders together will operate effectively when technology and services are procured through cloud service providers. Cloud marketplaces make shopping easier and more accessible to more people in an organization. Enabling more people to source material in an online store speeds access to technology components and solutions. Absent proper controls, however, solutions delivered on time with the right functionality may come without adequate attention to budget, security, and other risk considerations.

The following is a rudimentary example: Assume a developer is deploying a new application in an existing cloud environment. The developer enables logging functionality consistent with the organization’s security and operations policies for logging. The logging function can be enabled for no charge, but storage fees will accrue for keeping the log files. The project budget, focused on development and deployment, includes the initial application cost and subscription fees for a term. The budget does not anticipate the incremental cost of storage as log files are retained. What does the organization do when the storage fees begin to accumulate? Turn off logging? (Not likely.) Revise its budget for the ongoing cost?

How could the lawyer have helped the client organization in this illustration? First, the lawyer would have sought out and read the applicable contract. In doing so, the lawyer would probably have found references in the documentation saying that storage is separate. Or, more generally, the lawyer could have reminded the technology team to include colleagues whose role in the design and procurement process is to calculate the cost of ongoing operations and maintenance consistent with security policies and business requirements.

A lawyer engaged early in a project or business process development can work with the organization’s IT department to build review of product documentation into the design process. With proper guidance, a nonlawyer on the project team could be tasked to review documentation for key details—technical, operational, budget, legal red flags—and facilitate communication among relevant stakeholders.

Not a full-time technology lawyer? Business and commercial lawyers with the occasional technology matter in their portfolio add value when they spot issues and raise questions for the technology and business teams to consider. “What’s going on here?” can be a useful flag and does not require the lawyer to be a technology expert. Business lawyers understand that terms drafted by the other side have a thumb on the scale favoring the drafter. (And technology licenses sometimes read like the drafter put an elephant on the scale in the drafter’s favor.) Even when there is no practical likelihood that the organization will be able to negotiate more favorable terms, “What’s going on here?” gives the organization a prompt to consider potential risks, strategies to mitigate risk, and the feasibility of taking a different approach to avoid the risk.

Contracting through a Marketplace Feature

Incorporating cloud-based procurement into an organization’s operations requires a basic understanding of how software, services, and content may be procured from cloud service providers through their “marketplace” features. Organizations need to understand each marketplace through which they source products, material, and services and take appropriate steps to bring marketplace transactions into controls for procurement, contracting, security, and other risk management. Cloud providers have developed account management tools and access controls. It is up to client organizations to take appropriate steps to configure those tools, actively monitor customer portals and notices (and respond as appropriate), and keep account structures and access controls current.

The legal terms for cloud marketplaces and the products, material, and services offered in them are long, winding, and overlapping. They are also subject to provider-instituted changes that can affect ongoing services. Navigating cloud services and the marketplace tries the patience of the most diligent and patient lawyer. Lawyers should anticipate spending some time learning to navigate the legal terms of their clients’ cloud providers. The toolkit includes one paper illustrating contract navigation for the cloud marketplace of one significant service provider.

Lawyers should also keep in mind that cloud marketplaces are not the only channel to acquire software, services, or content for cloud-based systems. Cloud-based information technology may be procured under enterprise agreements with infrastructure or platform providers. Organizations may also engage third parties to manage their information technology. Those managed service providers may build out systems, including applications and storage, in cloud environments or using cloud-based platforms. Many enterprise-wide applications are now provided as a service, for example, office applications like Microsoft 365® and relationship management systems like Salesforce. Organizations may also bring their own software and content to a cloud environment. Managing proprietary and personal information has to be a consideration in reviewing the legal terms for any cloud-based arrangement.

A comprehensive review of procuring software, services, and content for cloud-based systems is beyond the current scope of this project. To start, we aim to contribute some basics that generalist business lawyers will find useful.

The Toolkit: A Dynamic Project

We expect each of the initial tools to evolve over time with feedback from readers and future collaborators. We also recognize opportunities to expand the toolkit with pieces highlighting sector‑specific issues, for example, education, health care, financial services, and service features (such as artificial intelligence components). We welcome volunteers and contributors to the project.

To offer feedback or contact the Toolkit Project coordinators, please email the project’s virtual mailbox at [email protected].


  1. This project does not purport to be a comprehensive study of cloud computing for lawyers. For additional background about cloud computing, refer to these other ABA publications: Cloud 3.0: Drafting and Negotiating Cloud Computing Agreements (Lisa R. Lifshitz & John A. Rothchild eds., 2019); and H. Ward Classen, The Practical Guide to Software Licensing and Cloud Computing (7th ed. 2020).

Pro Bono Representation Can Be Good for Business—for Clients and Firms Alike

Pro bono work is about more than giving back to the community or meeting a lawyer’s professional obligation to do so. For law firms, it can also make good business sense, prompting a positive domino effect for themselves, the clients they serve, and minority- and women-owned business enterprises (M/WBEs) striving for success in their communities.

Indeed, legal services are a major expense for many small businesses, including M/WBEs. Further, legal services for small businesses can span areas ranging from corporate, employment, and real estate to intellectual property, data privacy and security, and other practice areas in which owners may not even be aware they need assistance. Considering both this reality and the American Bar Association’s Model Rule 6.1 noting that “every lawyer has a professional responsibility to provide legal services to those unable to pay,” it is incumbent on law firms to assist small businesses—particularly those owned by women and minorities, who continue to face systemic challenges in securing loans and other funding and accessing critical services to launch and grow their operations. Equally important for law firms to understand is that providing pro bono services can be beneficial to their own operations, with the potential for pro bono M/WBE clients to become future billable clients. In providing pro bono corporate counseling to early-stage, scalable M/WBEs (for example, preparing for and helping them acquire seed and venture capital investments), law firms eliminate an economic barrier for such businesses. In the event these M/WBEs receive such capital financing, they would likely have the appropriate amount of funding to scale their businesses and possibly become future billable clients of the law firms that initially provided pro bono legal services to them.

Pro bono legal services for small businesses have been especially valuable in the wake of the COVID-19 pandemic, with countless startups and even established small businesses struggling to stay afloat. In 2020, our firm (Gibbons P.C.) was approached by a nonprofit, the Institute for Entrepreneurial Leadership (IFEL), to partner on one of its new initiatives, “Small Businesses Need Us” (SBNU), created to provide free legal counsel and other business services to M/WBEs impacted by the pandemic. Gibbons attorneys have since donated hundreds of hours to SBNU to clients ranging from a STEM enrichment program for students, to an event management company, to a life and business empowerment coach.

Our partnership with IFEL has been so successful that IFEL has since become a billable client of the firm. The organization devotes much of its effort to connecting small businesses with investors and other financing channels—an essential endeavor, given the World Economic Forum report that, in 2021, “Black woman start-up founders received just 0.34% percent of the total venture capital spent in the U.S.”[1] IFEL is in the process of purchasing a for-profit group of diverse women angel investors, with Gibbons as its legal counsel.

One of IFEL’s business cohorts is OneKIN, a fintech company that builds software solutions to help small businesses compete in the digital landscape. Gibbons has assisted OneKIN for the past two years through IFEL’s SBNU program. Our pro bono work for OneKIN involved restructuring its ownership and cleaning up its capitalization table, as well as negotiating the buyout of certain founders. Since we began our engagement with OneKIN, the company has been accepted into MasterCard’s Start Path Program, designed to accelerate companies and set them up for future Mastercard acquisition. Gibbons continues to provide pro bono legal services to OneKIN by (i) reviewing/drafting a MasterCard accelerator agreement; (ii) drafting an Intellectual Property Assignment Agreement between founders of the company; and (iii) reviewing a Statement of Work and Master Services Agreement for product sales overseas. OneKIN now has plans to expand its business with the launch of an AI-powered livestream shopping app and has positioned itself to become a billable client of the firm.

During the COVID pandemic, Gibbons also partnered with the African American Chamber of Commerce of New Jersey (AACCNJ) and its M/WBE members. With many small businesses, M/WBEs in particular, finding it difficult to secure Paycheck Protection Program (PPP) loans during the initial phase of the pandemic, Gibbons connected the AACCNJ with one of our longtime clients—New Jersey Community Capital, a large, regional, community development financial institution—in order for the two organizations to partner for a joint venture called the Equitable Small Business Initiative (ESBI). ESBI is well-supported by large financial institutions, enabling it to facilitate access to critical capital by New Jersey’s Black business enterprises and provide them with hands-on, customized support and pandemic relief loans. After Gibbons structured this joint venture, the AACCNJ not only became a billable client of the firm, but also asked the firm to partner on the AACCNJ Pro Bono Alliance, a joint initiative whereby Gibbons supports AACCNJ member companies, on a pro bono basis, in launching, sustaining, or advancing their businesses.

While certain types of pro bono matters have the potential to become billable matters for law firms, pro bono work can also attract other clients or individuals who look for firms with a demonstrated commitment to pro bono representation. Pro bono work can generate cost savings as well, through its inherent offering of critical training and professional development to attorneys, particularly associates. Attorneys who provide pro bono services gain a valuable, firsthand view of the tangible ways their knowledge and experience are assisting small businesses, which leads to better client service overall. Gibbons regularly holds pro bono clinics for its attorneys, with incentives for reaching a certain numbers of hours per year.

Here at Gibbons, our philosophy is “doing good while doing well.” Without a doubt, establishing and building pro bono relationships has been both rewarding and profitable. Pro bono work should be an economic incentive for all law firms, one that can lead to a win for all parties involved.


  1. World Economic Forum, “Black women lack access to VC funding. Here’s what we can do.” March 27, 2023.

SPAC Litigation Mid-Year Update: Delaware Opens the Gates

With SPAC IPOs virtually gone but SPAC mergers (aka de-SPACs) continuing at a steady pace since the beginning of the year, the questions around getting a deal done boil down to the following:

  • How and where can companies get financing now that the PIPE (private investment in public equity) market has dried up?
  • How long will it really take to get the deal closed, now that target companies are not easy to come by and every deal seems to need an extension?
  • How can the current litigation and regulatory risks be avoided, or at least minimized?

In this article, we’ll focus on the third question, examining how the litigation and regulatory risk for SPACs has shifted since our 2022 year-end report.

SPAC Litigation by the Numbers

Through June 15, 2023, five SPAC-related securities class actions (SCAs) have been filed so far this year. That is not a high number. With 33 total SCAs filed in 2021 and 24 in 2022, we are at a slower pace for securities class actions this year than in the previous two years.

A bar graph shows 2 SPAC/de-SPAC SCAs filed in 2019 (excluding SCAs not related to the company’s former business combination with a SPAC) and 5 in 2020. After a spike to 33 in 2021 and 24 in 2022, as of June 15, 2023 has only seen 5 such SCAs. Source: SPAC Research and Woodruff Sawyer.

Filed SPAC/de-SPAC Securities Class Actions.

Examining the data between January 1, 2021, and June 15, 2023, it takes, on average, 12.82 months after the merger (aka de-SPAC) for an SCA to be filed. Except for a handful of cases, most lawsuits are filed after the de-SPAC has been completed. Considering that there were 199 de-SPACs in 2021, 102 in 2022, and 35 as of June 15, 2023, the downward progression of the number of SCAs this year tied to the downward progression of de-SPACs is not surprising. But that downward progression is somewhat deceptive.

A bar graph shows that as of June 15, 2023 had 35 closed de-SPACs and 5 SPAC-related securities class actions (excluding those not related to the company’s former business combination with a SPAC). 2019 had 28 closed de-SPACs and 2 suits; 2020 had 64 closed de-SPACs and 5 suits. 2021, with the most closed de-SPACs of the past 5 years at 199, had 33 suits. Source: SPAC Research and Woodruff Sawyer.

Number of Suits vs. Number of Closed de-SPACs.

Direct Cases Picking Up Steam in Delaware

What the SCA data does not show is the growing number of direct-action breach of fiduciary duty suits being brought in Delaware. These suits are a progeny of the MultiPlan case in which the Delaware Chancery Court denied the defendants’ motion to dismiss. The parties subsequently settled for $33.75 million in November 2022, and no one in the SPAC world was surprised to see plaintiffs in other cases, including at least three so far in 2023, take a similar route.

Direct cases like MultiPlan and a few news-making examples below are easier to bring because, unlike derivative cases, they do not need to go through an extra step of satisfying demand futility requirements. It is no wonder then that, spurred by several denials of the defendants’ motions to dismiss and an easier procedural hurdle, plaintiffs’ attorneys are trading their SCA strategies for direct fiduciary suits against Delaware SPACs.

Examples of Direct Breach of Fiduciary Duty Suits

Lawsuit

Suit Filed

Outcome

Amount of Settlement

MultiPlan

January 24, 2021

Defendants’ Motion to Dismiss Denied – January 3, 2022

$33.75 Million

GigAcquisitions3

January 4, 2021

Defendants’ Motion to Dismiss Denied – January 4, 2023

Unknown

GigAcquisitions2

September 23, 2021

Defendants’ Motion to Dismiss Denied – March 1, 2023

Unknown

Trident Acquisitions Corp/Lottery.com

April 3, 2023

TBD

Unknown

Lordstown Motors

December 13, 2021

Defendants’ Motion to Dismiss Withdrawn

Unknown

Source: Woodruff Sawyer

From the perspective of directors and officers (D&O) insurance coverage, claims from direct suits, while typically indemnifiable, are not covered by “Side A only” D&O coverage. Many SPAC D&O insurance programs are structured as traditional “ABC” programs that would offer coverage for claims coming out of a direct suit. However, some SPAC teams, as a cost-saving alternative at the peak of the SPAC craze in 2021, when D&O insurance prices were astronomical, chose to structure their programs as Side A only. To the extent that a SPAC purchased a Side A–only policy and the lawsuit is determined, like in MultiPlan, to be a direct one, there may be no D&O insurance response for a settlement (outside of a corporate bankruptcy).

Whose Money Is It Anyway?

Another interesting trend continuing this year is the series of termination fee cases. In the first of these, the FAST Acquisition Corp. lawsuit from August 2022, the plaintiff investors objected to the SPAC team keeping the entire termination fee it had negotiated without sharing it with its investors. Other similar suits, with a few examples noted below, followed shortly after.

A bar graph shows termination fee cases have included FAST Acquisition (8/22, $26 million); Concord Acquisition (12/22, $20 million); Pioneer Merger (12/22, $33 million); and VPC Impact (3/23, $50 million). Source: Woodruff Sawyer.

Examples of Termination Fee Suits.

The interesting element of these suits is that they would likely not have been filed had the SPAC team been able to complete a subsequent acquisition. But because the SPAC team failed to do so and had liquidated instead, the plaintiff investors naturally were not pleased to have been left out of the so-called termination spoils.

Considering the recent spike in liquidations as presented in the graph below, it is likely we will see more of these termination fee cases as more SPACs continue to liquidate—that is, unless the SPAC teams take note of this development and start approaching the apportionment of the termination fee differently.

A bar graph shows SPAC liquidations hovered between 1 and 4 a year from 2017 through 2021, then spiked to 143 in 2022 and 112 in 2023 as of June 15. Source: SPAC Research.

SPAC Liquidations.

SPAC Wins

Not all SPAC-related cases came out on the side of the plaintiffs. There are several notable and interesting SPAC “wins”—decisions that went in the defendant’s favor. A few examples are:

  • Diamond Eagle Acquisition Corp/DraftKings: In January 2023, the United States District Court for the Southern District of New York (SDNY) granted the defendants’ motion to dismiss this SCA. The court held that the plaintiffs’ suit relied entirely on a short seller report with unknown sources, the claims in which were not adequately supported by independent research. As a result, plaintiffs failed to sufficiently allege that (1) any violations or material misstatements were made by the defendants and (2) any defendant acted with scienter as required under the law.

As a side note, about 35% of all SPAC-related securities lawsuits involve allegations from a previously published short-seller report.

  • Churchill Capital Acquisition Corporation IV/Lucid Motors: In January 2023, the Northern District of California granted the dismissal of the SCA on the grounds that the plaintiffs failed to plead materiality because they had no reason to know in early 2021 that the SPAC would merge with Lucid, as the parties were not engaged in merger discussions.
  • CarLotz: In March 2023, the SDNY dismissed the SCA assertion against CarLotz and certain directors and officers for plaintiffs’ lack of standing related to allegations of pre-merger statements. The court held that the investor plaintiffs failed to allege that they purchased shares traceable to the registration for the merger transaction.

Settlements

Let’s turn from lawsuits to settlements. There have been very few publicly disclosed settlements, so it is difficult to draw conclusions about trends. The ones that made the news are listed in the graph below.

Of particular interest are the amounts of some of those settlements that were covered by D&O insurance policies. Insurance coverage information is rarely publicly available, so it is possible, and even likely, that other settlements noted in the chart were also at least partially backed by D&O insurance payouts.

A bar graph shows SPAC litigation settlements have ranged from $3 million for Ability Inc. in 2019 to $35 million for Akazoo (2021) and $33.75 million for MultiPlan (2022). Information on insurance coverage is limited, but insurance covered $4.25 million of $9 million for Triterras [2022]; $4 million of $8.5 million, Momentus [2023]); and $19.5 million of $22 million (Clover Health [2023]). Source: Woodruff Sawyer.

Litigation Settlements.

It’s worth remembering that outside of the actual settlement amounts, the defendants also had to pay substantial attorney fees. When deciding on the limit of a D&O policy, it’s worth factoring in the potential costs of the attorney fees, which will be due whether the lawsuit ends up being frivolous or ultimately gets dismissed.

Regulatory Enforcement Actions

Regulatory enforcement actions and investigations are, of course, the other piece of the risk puzzle. With the Securities and Exchange Commission (SEC) taking an openly hostile stance towards SPACs, many of us expected to see a barrage of SPAC-related investigations and enforcement actions. That expectation continues to be unrealized. While rumors are that the SEC is quite busy launching SPAC-related investigations, only several have been publicly reported, and we have seen only a handful of enforcements. Here are some examples that made the headlines:

A bar graph shows settlement and fine totals from $100k (Gordon [CEO], 2019) to $125 million (Nikola, 2021), with most examples included between $1 million and $8 million. Source: Woodruff Sawyer.

Regulatory Enforcement Settlements and Fines.

Some additional details on the settlements and fines listed above are as follows:

  • Gordon: Administrative charges settled against CEO in January 2019 for $100,000. The SEC charged Benjamin Gordon, the former CEO of Cambridge Capital Acquisition Corporation, a SPAC, with failing to conduct appropriate due diligence to ensure that the SPAC’s shareholders voting on the merger were provided with accurate information concerning the target’s business prospects.
  • Momentus: Settlement total of $8.04 million in July 2021. The SEC alleged that Momentus and the founder misled Stable Road, the SPAC with which it planned to merge, about its technology and national security issues and that Stable Road had failed to perform its due diligence to identify those issues.
  • Nikola: Settlement total of $125 million in December 2021. The enforcement was preceded by a short seller report and an SCA and centered around misleading statements about Nikola’s products, technical advancements, and commercial prospects.
  • Perceptive Advisors: Settlement of $1.5 million in September 2022. This case was the SEC’s first enforcement action against an investment adviser. The SEC charged the adviser with violating the Investment Advisers Act in connection with its involvement with SPACs.
  • Morgenthau: Forfeiture of $5.1 million, restitution of $5.1 million, and 36 months in prison for the SPAC’s former CFO in April 2023. In January 2023, the SEC brought fraud charges against Cooper J. Morgenthau, the former CFO of African Gold Acquisition Corp., a SPAC. The charges revolved around Morgenthau orchestrating a scheme in which he stole more than $5 million from the company and from investors in two other SPACs that he incorporated.
  • Corvex: Settlement of $1 million in April 2023. The SEC charged investment adviser Corvex Management LP with failing to disclose conflicts of interest regarding its personnel’s ownership of sponsors of several SPACs into which Corvex advised its clients to invest. Corvex also agreed to a cease-and-desist order and a censure.

Update on the D&O Insurance Market and Rates

Market Conditions

The above data and trends have real implications on the risk and risk mitigation decisions that SPAC sponsors, their target companies, investors, and deal teams make. Higher risk of litigation or enforcement, for example, yields lower availability of D&O insurance coverage and higher premiums. Overall insurance market trends also dictate the kind of coverage and costs a team should expect.

As we noted at the end of 2022, the impossibly hard SPAC D&O market started to turn. In just a few months since the beginning of the year, we witnessed one of the fastest adjustments in the wider public company D&O market ever recorded.

Many new insurers have joined the ranks and now, with an oversupply of insurance capacity and very few IPOs, insurers are competing for public D&O new and renewal business, driving rates and retentions down for almost all companies. Mature public companies are experiencing significant rate relief, and newly public companies are seeing significant rate decreases due to higher starting premiums.

What This Market Means for SPAC D&O Insurance Rates

The pressure on carriers in the overall public D&O insurance market is good news for SPACs. We are seeing more carriers interested or willing to take a second look at SPAC tails, extensions, and new go-forward programs. Competition is driving premiums down. Self-insured retention benchmarks are also dropping. More carriers are willing to be flexible on the structuring of the coverage.

However, the likelihood of a SPAC-related company getting sued continues to be higher than that of a traditional IPO or a mature public company. Carriers are continuing to keep a very close eye on each new court decision and enforcement action. For example, a recent decision from Delaware led to many carriers being unwilling to renegotiate tail pricing on the SPAC IPO policy or imposing coverage exclusions. Many are still wary of granting long extensions or reducing premium pricing on those extensions.

Our Predictions

As we predicted at the end of 2022, SPACs have enjoyed a period of reasonable D&O insurance pricing so far in 2023, and that will likely continue into 2024. However, SPAC teams and their target companies will need to make some program restructuring decisions (with the help of their insurance brokers) to adjust for the new trends in the direct fiduciary duty cases and other court decisions as they affect D&O carriers’ obligations.


An earlier version of this article appeared in the Woodruff Sawyer SPAC Notebook.

Business Lawyers Beware: No-Poaching and Wage-Fixing Agreements Are Now Per Se Criminal in Canada

In June 2022, the Canadian Parliament enacted amendments to the Competition Act (the Act) intended to prohibit agreements between unaffiliated employers to fix wages or terms or conditions of employment (Wage-Fixing Agreements) or not to solicit or hire each other’s employees (No-Poaching Agreements).

The amendments come into force on June 23, 2023, as subsection 45(1.1) of the criminal conspiracy provision in section 45 of the Act.

Once this occurs, any new Wage-Fixing Agreements or No-Poaching Agreements will be per se unlawful and expose the parties to those agreements to significant criminal penalties (i.e., prison sentences of up to fourteen years and/or fines with no statutory limit), as well as to potential civil liability, including by way of class actions for damages.

On January 18, 2023, the Canadian Competition Bureau (the Bureau), the law enforcement agency that administers and enforces the Act, released draft guidelines for public consultation describing its intended approach to enforcing the new criminal prohibitions (the Draft Guidelines).

On May 30, 2023, the Bureau published its final wage-fixing and no-poaching enforcement guidelines (the Final Guidelines). As detailed below, while the Final Guidelines are hardly a model of transparency or clarity, they provide the business community with some comfort with respect to the scope and application of the new prohibitions.

Final Enforcement Guidelines

The key takeaways for business lawyers and their clients from the Final Guidelines are these:

  • Wage-Fixing” Is a Misnomer: The wage-fixing prohibition deals with more than just salaries and wages, also making it an offense for unaffiliated employers to enter into agreements to fix, maintain, decrease, or control “terms and conditions of employment.”
  • One Way” No-Poaching Agreements Not Prohibited: The no-poaching prohibition applies only to agreements between unaffiliated employers that are reciprocal or mutual in nature.
  • Reasonable Clauses in Certain Categories of Business Agreements or Arrangements Should (Generally) Not Raise Concerns: The Final Guidelines confirm that the Bureau will “generally not” pursue a criminal investigation with respect to wage-fixing and no-poaching clauses that are ancillary to merger transactions, joint ventures, strategic alliances, franchise agreements, or staffing or IT service contracts, unless the wage-fixing or no-poaching clause in question is “clearly broader than necessary in terms of duration or affected employees, or where the business agreement or arrangement is a sham.” While the Final Guidelines offer some comfort, it is clear from certain statements in the Final Guidelines that the Bureau is prepared to second-guess the parties’ business judgement regarding the reasonable necessity of a given restraint and to take enforcement action to the extent that the Bureau concludes that an impugned restraint is “clearly” broader than reasonably necessary.
  • Ancillary Restraints Defence May be Available: Outside of the categories of business agreements and arrangements enumerated above, the so-called “ancillary restraints defence” will be available in any case where the parties to the impugned Wage-Fixing Agreement or No-Poaching Agreement (the Restraint) can show that:
    1. the Restraint is ancillary to, or flows from, a broader or separate agreement that includes the same parties;
    2. the Restraint is directly related to and reasonably necessary for achieving the objective of the broader or separate agreement referred to in (a) above; and
    3. the broader or separate agreement referred to in (a) above, when considered without the Restraint, does not violate subsection 45(1.1).
  • New and Ongoing Agreements Captured: The new prohibitions will only apply to new agreements entered into on or after June 23, 2023, except where the parties to agreements entered into before that date engage in conduct that reaffirms or implements those older agreements. Usefully, the Final Guidelines clarify that “at least two parties must reaffirm or implement the restraint for the Bureau to establish the […] consensus or ‘meeting of the minds’” required to ground liability.

    Accordingly, existing agreements need not be formally terminated in order to avoid criminal liability under the Act, but employers should be careful to avoid any conduct that could be seen as reaffirming or giving effect to agreements that precede June 23, 2023. The Final Guidelines also suggest that “employers may wish to update pre-existing company records and agreements, as they arise in the ordinary course, to ensure they accurately reflect its policies and intentions, and avoid unnecessary confusion.”

    Employers should also be mindful that they can be found liable even if their “agreement” was informal, verbal only, or entirely unspoken (e.g., a “wink” or a “nod”). Moreover, the existence of an “agreement” can be established based on circumstantial evidence, with or without direct evidence of communication between or among the alleged parties to it.

    We recommend that clients review all existing agreements with wage-fixing and no-poaching provisions with counsel in order to ensure that existing practices comply with the new prohibitions.

  • Employers Need Not Be Competitors: The new prohibitions apply to Wage-Fixing Agreements and No-Poaching Agreements between unaffiliated employers but do not apply to such agreements between affiliated employers.[1] By way of example, the Bureau states that agreements between two or more corporate entities that are controlled by the same parent company do not violate the new prohibitions.

    The new prohibitions apply regardless of whether unaffiliated employers are competitors in the supply of a product (although the Bureau notes that it will prioritize its enforcement on Wage-Fixing Agreements and No-Poaching Agreements between employers that would otherwise compete in the purchase of labor).

  • “Employer” Broadly Defined: The definition of “employer” is broad and includes directors and officers, as well as agents or employees, such as human resources professionals. As a result, corporations may be vulnerable to liability if an offending agreement is entered into between an officer of one corporation and a director of the other, for example.
  • “Employee” Relationship to Be Evaluated on Case-by-Case Basis: Whether an individual is characterized as an “employee” for the purposes of the new prohibitions will be evaluated on a case-by-case basis and will depend on the laws and circumstances under which the relationship with that “employee” or “independent contractor” was entered into. Accordingly, the common law tests on whether a person is properly characterized as an employee or independent contractor may be relevant in considering whether the new prohibitions apply. The Final Guidelines include a reminder to employers that “depending on applicable legislation, their relationship with independent contractors could evolve over time. For example, if an employer treats an independent contractor as an employee, the business contract between them could transform into an employment relationship.”
  • Conscious Parallelism Not Prohibited: “Conscious parallelism” on its own will not be a violation of subsection 45(1.1). According to the Bureau, “conscious parallelism” occurs “when a business acts independently with awareness of the likely response of its competitors or in response to the conduct of its competitors.” However, the Bureau also cautions that parallel conduct coupled with facilitating practices (for example, sharing commercially sensitive employment information, such as employment terms) may be sufficient to prove that an illegal agreement was concluded.

Implications of the New No-Poaching and Wage-Fixing Prohibitions for Business Lawyers and Their Clients

1) No-Poaching Agreements

In section 2.2 of the Final Guidelines, the Bureau confirms that the no-poaching prohibition is limited to instances where unaffiliated employers agree not to poach “each other’s” employees. Therefore, as noted above, agreements must be reciprocal or mutual in nature in order to violate the no-poaching prohibition. “One-sided” or “one-way” agreements, where only one party agrees not to poach another’s employees, will not be an offense.

Importantly, this means that customary one-sided no-poaching/non-solicitation clauses in confidentiality and non-disclosure agreements commonly used in the diligence phase of merger transactions, joint ventures, and strategic alliances will not be subject to enforcement action by the Bureau. It bears noting, however, that the Bureau’s interpretation of the Act is not binding on the courts, and private plaintiffs (including class action plaintiffs’ lawyers) may still seek to bring damages claims with respect to one-way agreements. In this regard, the Final Guidelines note that “[t]he courts are responsible for the final interpretation of the law.”

Further, the Bureau cautions that “separate agreements between two or more employers that result in reciprocating promises not to poach each other’s employees” may trigger liability.

2) Wage-Fixing Agreements

The new prohibitions also criminalize so-called “wage-fixing.” As noted above, the prohibition makes it an offense for unaffiliated employers to enter into agreements to fix, maintain, decrease, or control not only wages and salaries but also “terms and conditions of employment.”

In its Draft Guidelines, the Bureau specified that “‘terms and conditions’ include the responsibilities, benefits and policies associated with a job. This may include job descriptions, allowances such as per diem and mileage reimbursements, non-monetary compensation, working hours, location and non-compete clauses, or other directives that may restrict an individual’s job opportunities” but then unhelpfully undercut this guidance by adding that “[t]he Bureau’s enforcement generally is limited to those ‘terms and conditions’ that could affect a person’s decision to enter into or remain in an employment contract” (emphasis added). Despite extensive criticism of the overbreadth and unhelpfulness of this guidance, no clarification was provided in the Final Guidelines.

Wages, salaries, and other terms and conditions of employment should therefore be treated as competitively sensitive information (CSI) in M&A diligence processes and in developing and implementing appropriate safeguards against the disclosure of CSI in the context of joint ventures, strategic alliances, and other commercial collaborations. Guidance should be sought in advance of providing due diligence information in order to ensure that CSI is not disclosed and that only “clean teams” gain access to CSI.

In the preface to the Final Guidelines, the Bureau states that it “may revisit these Guidelines in the future in light of experience, changing circumstances and legal developments.” As time passes and experience with the new prohibitions grows, one may hope that the Bureau will indeed revisit its enforcement approach vis-à-vis merger transactions, joint ventures, strategic alliances, franchise agreements, and staffing and IT service contracts and, consistent with the economic and procompetitive benefits generated by such business agreements and arrangements, will limit the application of the no-poaching and wage-fixing prohibitions exclusively to circumstances where the broader (or separate) agreement between the parties is a sham.


  1. Under subsection 2(2) of the Act, affiliation is defined with reference to control. When two employers are controlled by the same parent company or individual, they are said to be affiliated.

Introducing ‘Dear Alex’: A DEI Advice Column

Diversity, equity, and inclusion (DE&I) is ever evolving, and the right answer on many DE&I issues is not always immediately evident. People have questions that they may or may not be afraid to ask. “Dear Alex,” a new column created by the ABA Business Law Section’s Diversity, Equity, and Inclusion Committee, is the reader’s chance to ask all about DE&I anonymously. Think of it like the old “Dear Abby” columns, but for DE&I. In each column, the Dear Alex team will answer a question related to DE&I. These questions can be interpersonal, like how to respectfully address a colleague who is transitioning from one gender to another, or even professional, like how to convince senior partners at your firm that investing in DE&I can be a competitive advantage. If you’ve ever had a DE&I question that you have been afraid or otherwise unable to ask, now is your chance to ask “Alex.” Questions can be submitted at the form linked here.

***

Dear Alex,

Another associate at my firm told me that he’s transitioning. He’s the first trans person I’ve met, and I do not want to accidentally offend him. How do I approach this?

Sincerely,

Cis and Confused

 

Dear Cis and Confused,

Your coworker confiding in you is indicative of the trust between you two.

To respectfully approach this, we recommend a follow-up with your coworker over coffee, lunch, or whatever makes sense for your working relationship. Thank them for being open and trusting you. They might’ve chosen new ways to identify themselves, so ask what pronouns and name they prefer you use when referring to them privately and publicly. Ask how private this matter is. You may be the first person at the firm they’ve told, and you never want to out someone without their explicit prior consent; their transition is not your story to tell. Finally, ask what else you can do to support them. Moving forward, honor their wishes and continue business as usual. Be mindful that as your coworker continues their journey, they may change their name, pronouns, or gender presentation one or more times. They’re exploring their identity. It is your job to affirm them at every step.

Transitioning can involve different things for different people, and, importantly, there is no “correct” way. One aspect is internal transition, which is the understanding your coworker did to realize their identity. Another is social transition, or the “coming out” aspect of your coworker changing how they present themselves to others, which may involve changing their name and pronouns. Transitioning can also involve legal processes, such as updating documents with a chosen name, and gender-affirming medical care. But, as we noted, there is no one way to transition. Your coworker may never change their name or pronouns but may change the way they dress. They may choose some types of medical care but not others. All means of transitioning or not are valid, and choosing one type of transition but not another doesn’t make them any less trans.

Importantly, it is up to your coworker to share with you, if they want, any details about their transition. They do not have to tell you, and you should respect their privacy and boundaries.

We want to circle back to pronouns. We noted that your coworker’s pronouns may change as they explore their identity. We’ve been referring to your coworker using “they,” and you used “he” in your question. We aren’t certain if “he” is your coworker’s old pronoun or new since they just came out to you. When unsure, we at Dear Alex opt for gender-neutral pronouns. The follow-up conversation we recommend will allow for the dialogue between you and your coworker and a chance to learn what pronouns to use with your coworker moving forward.

We think a discussion of pronouns may help. As an initial point, people whose gender matches the one they were assigned at birth are referred to as “cisgender,” and like everyone, they have particular sets of pronouns they are or are not comfortable using. For example, if you’re a cisgender man (i.e., you grew up being called a boy, felt affirmed by and comfortable with that, and still identify as a man today), you likely use the pronouns he/him/his. Trans people may switch from one set of gendered pronouns to another (e.g., he/him/his to she/her/hers). On the other hand, they might opt for gender-neutral pronouns like they/them/theirs[1] or xe/xem/xyr.

For both trans and cis people, using the correct pronouns is the only respectful thing to do; for your trans colleague, it’s far from the only way to show you support them, but it’s a starting point. But what if you accidentally use the wrong pronouns or “misgender” them? It can happen, and the important thing is to give a quick apology using your coworker’s correct name and/or pronouns and then, throughout the rest of the conversation, use their correct name and/or pronouns. Don’t ask for forgiveness or get emotional—then you’re making it about you and not them. By correcting yourself and striving to correctly identify them, it will show them the effort you’re making. If your coworker pulls you aside and explains a mistake you made, thank them for telling you, apologize briefly, say you’ll do better, and then do better. Remember when a trans person tells you that you made a mistake, they’re saying, “I value our relationship despite mistakes you might’ve made. My correcting you is a way to preserve it.”

We gave you lots of information. Thankfully, it boils down to this: when your trans coworker tells you how to respect them, do what they ask. We’re excited for you both and hope this information will help you do right by your coworker.

Sincerely,

Alex

 

Dear Alex,

My company just hosted a great information session on neurodiversity. I learned a lot, and I now suspect one of my colleagues might have a neurodivergent condition. How do I ask them about it?

Sincerely,

I just want everyone to feel supported

 

Dear Supporter,

The answer to your question is very simple: you don’t. Neurodivergent conditions like autism and Tourette’s syndrome are, at the end of the day, medical diagnoses. There is no respectful way to ask a colleague if they have a medical condition, and that is none of your business, no matter your intention. The best way you can support your colleague is to continue being kind and respectful. If your colleague does have a neurodivergent condition, they might decide to tell you at some point. It is their choice.

If you are a manager and suspect one of your direct reports may be neurodivergent, it is still their choice whether to tell you. In the meantime, be a good manager—someone your team can trust and come to when they have an issue. Make it clear to your reports that you are on their side and that they can come to you about anything, substantive or otherwise. Create that environment for them. Then, if a neurodivergent direct report or colleague feels like you need to know about their condition, they’ll tell you and let you know how you can specifically support them.

We understand this may not be the answer you were hoping for, but it’s the correct one. Some of us here at Dear Alex are neurodivergent and have had our boundaries crossed, and we hope this helps you to avoid such a scenario.

Sincerely,

Alex


Dear Alex contributors from the BLS Diversity, Equity, and Inclusion Committee rotate and include David Burick and Michael Sabella, among others.


  1. We aren’t going to get into a grammatical discussion of the singular “they,” as it has been in use in written English for over 600 years (see, e.g., the works of William Shakespeare and Geoffrey Chaucer).

A Business Lawyer’s Guide to Captive Insurance

Corporate counsel and other business attorneys may be most familiar with insurance companies in the context of a specific coverage issue or filing a claim. The CFO, risk manager, and others of similar training are often the ones assigned to explore the nuances of the financial aspects of renewing insurance coverage and negotiating with various brokers and prospective insurance carriers. Therefore, a business attorney asked to assist in the formation of a new entity in the corporate family—a licensed insurance company no less—may feel at a bit of a loss as to how to proceed. This article provides an introduction to the formation of a captive insurance company for business attorneys.

Captive Insurance Companies: The Basics

A captive insurance company is, at its center, an insurance company. It assumes risks from a policyholder and becomes responsible for paying out claims and other costs in accordance with the contract of insurance. In exchange, it receives a premium payment. What makes a captive insurance company unique is that its policyholder is usually also its owner. This makes a captive a formalized form of self-insurance. However, unlike regular self-insurance, where funds are stored on the company’s balance sheet, a captive holds its accounts separately from the parent.

The motivation to form a captive can include a necessity to streamline the company’s balance sheet so that held reserves don’t look like the management is just sitting on cash. A captive insurance company can potentially write independently verifiable contracts of insurance, which may be statutorily or contractually required. In certain cases, a captive can write a contract of insurance to a related third party. This can ultimately generate third-party income for the captive insurance company itself.

A captive insurance company is established by forming a company in one of the over thirty US states or territories, or one of many foreign countries such as Bermuda or the Cayman Islands, that authorize the formation of captive insurance companies. The new entity is then licensed by that domicile’s insurance regulator as an insurance company once all local requirements have been met.

Early in the formation process, the prospective captive owner will obtain a feasibility study that will explore the risks to be insured and make recommendations on the appropriateness of a captive, possible lines of insurance coverage and their relation to existing traditional commercial insurance coverage, and estimates on premiums and overhead expenses. This study is typically led either by a full-service insurance broker or an independent captive manager, with input from other experts such as risk management professionals, accountants, actuaries, and attorneys.

Typically, prospective captive owners will have specific risk exposures in mind before considering forming a captive. Volatile high-severity but low-frequency risks such as extreme weather events, cyber-attacks, or key product liability risks are but several types of risk that may be good candidates to partially or fully cover in a captive insurance program. It can be very difficult to obtain insurance coverage for these risks in the traditional commercial marketplace.

Risks for Starting a Captive

A company seeking to self-insure through a captive must consider all scenarios. An ill-timed adverse event may place both the captive and its parent company in dire circumstances. A new captive will not start out with ample capital on hand to deal with one or more serious casualties; in fact, it may take many years for a captive to build up such capital.

Taxation Issues

Any insurance company, from the perspective of the Internal Revenue Service (IRS), basically collects premiums on one day and holds them for an indeterminate time until they are paid as a claim; used toward overhead; or, in most circumstances, held as taxable income.

The IRS has for more than a decade highlighted potential risks of unlawful tax evasion through the use of captives. A poorly designed captive and one not carefully monitored can bring down significant tax penalties for both itself and its parent.

Certain captive insurance companies, electing a provision under I.R.C. § 831(b) as long as their premiums don’t exceed $2.65 million in 2023, will not pay any tax on any underwriting income but also will not gain any deduction if there is an underwriting loss. The problem with this “micro-captive insurance company” arrangement, from the IRS’s perspective, is that if the insurer-owned insurance company could all but guarantee that no claims would be filed, the taxpayer could defer its tax obligations indefinitely. Aggressive captive insurance promoters can entice business owners with the prospect of substantial indefinite tax deferral utilizing an 831(b) election. Businesses can then fall into the difficult circumstances outlined in Avrahami v. Commissioner, 149 T.C. 144 (2017), where the U.S. Tax Court found that the taxpayer’s wholly owned captive was not bona fide insurance, disallowing deductions for premiums paid into the captive and imposing substantial penalties.

Properly designed captives avoid forcing captive owners to take aggressive tax positions. However, the IRS has been less than clear in providing guidelines to aid business owners who legitimately desire to efficiently use a captive for risk management and risk financing purposes. It is essential for corporate attorneys to temper the enthusiasm of business owners for taking overly aggressive tax positions that may end up doing long-term harm. Corporate attorneys should further encourage business owners to make reasoned decisions about a captive insurance program after receiving quality, independent tax, legal, and accounting advice.

Solutions for Problematic Situations

A captive insurance company can provide a unique solution to what would otherwise be an intractable problem. For example, a corporate acquisition may be at an impasse over the status of a preexisting lawsuit against the target company. A captive insurance company may be able to write a specialty line of insurance, ride out the issue at hand, and help facilitate the transaction.

Public companies also can look to a captive to help facilitate a self-insurance strategy. Businesses that value steady and predictable earnings and expenses sometimes shy away from self-insurance solutions where large, expected losses incurred at inconvenient times can wreck an otherwise attractive balance sheet. By transferring those risks to a captive insurance company, the business can appropriately and steadily account for the costs associated with that risk.

Captive insurance can be an effective risk management and risk financing tool. Companies can use a captive to reap the benefit of better-than-peer risk mitigation efforts. Captives can help smooth out the peaks and valleys of a company’s balance sheet. As captive insurance becomes more regularly utilized by businesses large and small, corporate attorneys are increasingly likely to be called upon to opine on the merits of a captive insurance program. Helping a company form a captive for the right reasons and utilizing best business practices can provide a real long-term benefit.


This article is based on a CLE program that took place during the ABA Business Law Section’s 2022 Hybrid Annual Meeting. To learn more about this topic, view the program as on-demand CLE, free for members.

Q&A: CDFI Engagement Opportunities for Legal Professionals

In 2015, Forbes published a report that ranked Grand Rapids, Michigan, fifty-first out of fifty-two markets in the United States where African Americans were doing the best economically. In other words, Grand Rapids[1] was the second worst market in the country for African Americans to experience economic prosperity.[2] Eric K. Foster has cited this report as one of the key catalysts for the formation of Rende Progress Capital (RPC), a Community Development Financial Institution (CDFI) committed to racial equity in lending and economic prosperity.

After connecting through the W.K. Kellogg Foundation Fellows program, Foster and co-founder Cuong Q. Huynh launched RPC in 2018 to support “Excluded Entrepreneurs of Color”[3] with small business loans and business technical support. During the four-plus years following its formation, a period overlapping with the worst of the public health and economic havoc of the COVID-19 pandemic, RPC made more than forty loans in both its Standard/Growth Loan Product and the RACE4Progress COVID Loan to companies owned by Excluded Entrepreneurs of Color. Most of those companies remain in business and are actually growing despite the challenges of the last several years. Underscoring the funding gap that RPC seeks to close, 70% of the enterprises in its loan portfolio are owned by entrepreneurs who had never secured a business loan from any source of debt financing prior to working with RPC.

Miller Johnson is a Michigan-based law firm, with more than 125 attorneys working from offices in Grand Rapids, Kalamazoo, and Detroit. In late 2020 and early 2021, RPC and Miller Johnson developed a pro bono legal services offering for RPC borrowers. The guiding principle of this offering has been for RPC borrowers to receive pro bono legal services, and for Miller Johnson attorneys to provide those services, in substantially the same way that non–pro bono clients interact with their counsel. For example, RPC and Miller Johnson intentionally omitted any kind of hard billable hours cap on client services, and the core team of attorneys working on these matters represented all of the essential competencies of a full-service, mid-size law firm (e.g., corporate, employment, real estate, intellectual property, tax, and so on). Importantly, the team of attorneys working with RPC’s borrowers was also diverse in race and other characteristics. Miller Johnson also modified its timekeeping and accounting systems so timekeepers (including all paralegals, associates, and partners) would receive billable credit (both hours and “phantom” revenue) based on their time commitment and value added to this program.

In the following Q&A, Eric K. Foster (EKF) shares with Erik R. Daly (ERD) of Miller Johnson some of his insights in forming RPC, the choice of a CDFI structure, and making the most of community partnerships, with an emphasis on pro bono legal services offerings.[4]

* * * * * *

ERD: Did you consider structures for funding Excluded Entrepreneurs besides a CDFI? Why did you ultimately decide to form a CDFI instead of another option?

EKF: In forming RPC, we knew our structure needed to match the market we sought to serve. A CDFI loan fund made more sense for our target communities of “Excluded Entrepreneurs of Color” than, say, a venture capital approach, which would have taken ownership away from our entrepreneur customers. We could have pursued a fintech model, but the costs of the technology platform would have been prohibitive at the time. We also would not have had the same level of engagement or trust with the communities of color with which we wanted to work.

A bank would have been too expensive due to regulatory costs and would have been misaligned with our objectives. The CDFI structure allowed for more consideration of subjective criteria in the funding process. It also helps potential customers to understand barriers and access technical assistance better. That said, a CDFI may sound like a simple “capital in, capital out model,” but it is more challenging than it may initially appear. What makes it challenging is also what makes it rewarding, though.

ERD: How did you define the “Excluded Entrepreneur of Color” concept? Were any of the decisions impacted by using a CDFI structure?

EKF: From day one, everything about setting up our racial equity loan fund was focused on “disinvested communities”—particularly at the time of founding in West Michigan. The target market was never in question. The specific terminology developed alongside the structuring in our pre-launch phase.

In market research, the word “excluded” came up very frequently as a barrier to small business financing in our region. Many target customers expressed an experience of “exclusion” from their local economy, funding opportunities, and the marketplace in general. One person stated they felt “isolated from capitalism.” So, our community’s needs pointed us toward a CDFI, not the other way around.

ERD: Can you discuss your approach to partnering with various community organizations to launch and sustain RPC (e.g., funders, directors, advisors)?

EKF: Three philosophical principles drive our approach to partnerships.

First, a partner must demonstrate an understanding of and practiced ability to embrace racial equity (as opposed to “mere” diversity and inclusion). That means all partners (capital or non-capital) must demonstrate an embrace of racial equity. By “racial equity,” we mean “arriving at a condition where one’s racial identity—in a statistical sense—no longer determines how one fares in life.” We partner with those who practice or demonstrably take efforts to understand racial equity, as so defined. We have declined partnerships with organizations that reject this definition of racial equity or that have undertaken no efforts to better understand racial inequity in our communities.

Second, there must be a non-superficial reason for the partnership. We are not interested in working with people who only want to do so for marketing or goodwill reasons. There needs to be a motivating reason beyond public relations. Capital partners need to help grow and sustain returns for investors through operational support or otherwise. Non-capital partners need to be able to provide social capital or in-kind services that would otherwise be a large expense and/or inaccessible for the communities we serve.

Third, we use a partnership agreement to create alignment and understanding across specified key areas of partnership. The partnership agreement helps make sure everybody is aligned in RPC’s racial equity definition and ensures clarity and transparency in a number of critical areas, such as the diversity of our partner’s project/engagement team, racial equity training, nondiscriminatory practices, and related issues. The partnership agreement also helps RPC and its partner define mutual goals and periodically assess how well the arrangement is proceeding.

ERD: What types of attributes do you look for in partners, advisors, and board members?

EKF: First, it is important to reemphasize that racial equity and diversity, equity, and inclusion (DE&I) are distinct tactical goals. So, we may partner with those on the DE&I journey even if they have not yet achieved or fully embraced our definition of racial equity. At a minimum, though, our partners must understand the concept of racial equity, since this will allow them to begin to appreciate where our customers are situated in the broader economic and social environment. Second, they need to have a certain level of understanding and empathy as a basis for engagement with our customers. The ability to listen to clients without making assumptions is critical.

For advisors and board members, we seek out exemplars in the practice of racial equity and/or evidence of willingness to learn about and implement racial equity practices. Of course, we also require proficient knowledge and expertise, together with real world applications in the areas of business, finance, economics, and/or investments. There is absolutely no “tokenism.” There are plenty of extremely competent professionals who qualify as potential advisors and board members. For our loan committee, we require a majority of the members to be people who are representative of our target markets.

ERD: Relatedly, can you discuss your process for achieving alignment with partner organizations through written agreements? As a legal partner, we found the partnership agreement process very helpful in ensuring mission and values alignment.

EKF: Our partnership agreement helps ensure alignment between organizations based on the process of responding to the questions and prompts and, as importantly, discussing those responses. Unfortunately, we have declined to partner with some organizations that did not have any genuine reflective experience or understanding to achieve basic concepts of DE&I, let alone an understanding or embrace of racial equity ideas. Some responses demonstrated a lack of cultural competencies. We have even turned away potential capital partners, and some capital partners have decided against partnering, because of our unequivocal stance on Excluded Entrepreneurs of Color and definition of racial equity. Some were not ready to agree with the notion that certain communities had been denied capital based on racial criteria.

ERD: Do you expect or require your borrowers to clear certain legal hurdles before qualifying for a loan?

EKF: Yes, we require all borrowers to have properly formed their business entities with appropriate governing documents and federal tax ID numbers (EINs). Our Race for Progress loans are also flexible enough for us to consider other factors for those individuals with non-legal status, such as certain immigrants. We also require proof of appropriate and sufficient insurance. While insurance is not necessarily required at the early stage of a business, there needs to be a very good explanation or compelling reason why no insurance needs to be in place at that time. Much of the remaining information required is financial.

ERD: Did your borrowers ask RPC for advice on legal issues or referrals for legal counsel before RPC and Miller Johnson partnered on the pro bono legal service program? Do you know if they were receiving legal advice at all?

EKF: Prior to our partnership with Miller Johnson, RPC did not get many specific requests for referrals for the broader suite of services that a law firm is able to offer. Sometimes, there would be a reactive issue that a borrower brought up, such as contract or collections disputes with customers. For example, timeliness of payment on invoices may be different and also other lessons learned on contract terms. However, borrowers often expressed legal issues as “frustrations,” rather than legitimate grievances that somebody could help them respond to or for which they could obtain a remedy.

During the first two years of the pandemic, we also received a number of inquiries and questions about COVID-related issues, such as small business grants, loans (PPP and EIDL), and state/local regulations.

ERD: What factors were/are important to RPC in establishing and sustaining a legal services partner for your borrowers/customers?

EKF: A key benefit of partnership has been providing a constructive forum for our borrowers to discuss their businesses with professionals who maintain confidence, identify risks and opportunities, and take action zealously to advance their interests. Putting issues out on the table as legal issues—as opposed to simply frustrations—opened up conversations and opportunities for confidentiality, attorney-client privilege, and other topics. Most borrowers were expressing frustration, but not really accessing legal advice outside of the minimum hurdles we require to obtain a loan. It’s very likely that some borrowers would have just tried to persist through a legal issue rather than pursue a legal ally and advocate.

Also, working with pro bono clients in the same fashion as billable clients was a very important factor. For example, working with a borrower/client on cross-disciplinary issues and identifying, not just legal challenges, but opportunities proactively, has been a big benefit to our borrowers. Some “pre-packaged” or standardized legal services can be helpful very early on, but customizing the client relationship and thinking about the client as a longer-term relationship was an important distinction.

ERD: What issues did you observe in your borrowers accessing COVID-related loans, grants, and other financial assistance in the 2020–2022 timeframe?

EKF: Many borrowers (or potential borrowers) came to RPC for our COVID relief loan product, which we call the “Race for Progress COVID Relief Loan.” Our community partners encouraged us to provide this loan product, especially for those businesses that were unable to take full advantage of PPP loans and/or employee retention tax credits. RPC was also able to provide a longer-term financial foundation and partnership as opposed to a one-off grant or tax credit.

Tragically, we also saw authentic business harm and intimate stories of very difficult choices between personal and family health issues and supporting businesses financially. Specifically, we saw businesses having to choose between investing in their commercial survival versus providing financial support to family members (or survivors of those lost to COVID).

ERD: Has the COVID experience significantly impacted your approach to lending and/or technical support?

EKF: We provided some new loan products, as mentioned previously, but also now provide different technical support. To that end, during the COVID experience, we observed more tangibly the latent risks that businesses face. We are still seeing the impacts of COVID on general economic conditions, as our borrowers continue to dig out and recover. We try to be patient and creative in offering workout plans with those borrowers hit hardest.

ERD: You hold a stakeholder conference at least once a year. Can you describe the goals of the stakeholder summit?

EKF: The main goals are providing transparency in our progress toward stated goals and accountability toward mutually agreed upon desired outcomes. The summits are also opportunities to solicit dialogue among RPC and our stakeholders to explore new ideas and opportunities. We try to create a shared space for the community of partners to collaborate and share best practices.

ERD: Do you have any advice to share with other CDFIs or law firms thinking of forming partnerships to provide pro bono support to CDFI borrowers?

EKF: For CDFIs, I would say, “Do it!” Referring borrowers to law firm partners helps manage the latent risk factors I mentioned earlier. These partnerships also enhance borrowers’ social capital and open up opportunities for firms to provide technical assistance about legal service providers. Even though the pro bono relationship may not last indefinitely, participation can help our borrowers become savvier about using lawyers in the future.

At a recent CDFI conference, during a seminar on “best practices” for risk management, we shared our experience working with your pro bono program. Our peers’ eyes opened wide. We realized and shared with our colleagues that it is beneficial to both the borrower and to the CDFI itself to form these partnerships. It’s not just a “nice thing” for your borrowers to be able to access but can enhance the CDFI’s revenue and manage risk in the long term. It’s also a great way for law firms, such as Miller Johnson, to make sure they are consciously thinking about “blind spots” in their communities and working toward racial justice and racial equity.


This article is related to a CLE program that took place during the ABA Business Law Section’s 2023 Hybrid Spring Meeting. All CLE programs were recorded live and will be available to view free for Business Law Section members.


  1. Grand Rapids, Michigan, is located in Western Michigan. Detroit is approximately 160 miles east of Grand Rapids, and Chicago is roughly 180 miles southwest. Other Michigan locations within a roughly one-hour drive from Grand Rapids include Lansing, Kalamazoo, Muskegon, Grand Haven, and Holland (among others).

  2. Other “Rust Belt” cities toward the bottom of this 2015 list included Milwaukee, WI; Cincinnati, OH; Pittsburgh, PA; and Cleveland, OH. Worth noting, though, is that a number of prosperous West Coast hubs (at least, prosperous for some people) were also included in the bottom half of the list, including San Francisco-Oakland, CA; Los Angeles, CA; and Seattle, WA.

  3. RPC defines “Excluded Entrepreneurs” to encompass “African-American, Asian, Latino, Native American, and Immigrant business owners facing racial bias and exclusion in some traditional lending.”

  4. Following is the Mission Statement created jointly by the core team of Miller Johnson attorneys that worked with Rende Progress Capital to launch this pro bono legal services partnership: “Our mission is to provide high caliber, no cost pro bono legal services and value to Michigan’s African-American, Asian, Hispanic/Latino, Native American and Immigrant business owners of color through professional services with a personal touch, while seeking opportunities to engage and network with Excluded Entrepreneurs for mutual growth, ally ship and opportunity.”

The Rule of Law and the Need for Employers to Include People with Disabilities in Businesses

The responsibility to create diverse and inclusive environments is part of a business’s success.[1] Not only is it a moral obligation, but also it brings a range of benefits. This responsibility can also be seen as part of a business’s adherence to the rule of law, particularly when connected to its legal obligations to avoid discrimination. Further, the rule of law is enhanced by including many perspectives in the legal system. For an enterprise to reflect its customers and employees, it must include people with disabilities.

People with disabilities represent 27.2 percent of people living in the United States according to a November 2018 report of the US Census Bureau, and yet employers have much to do to improve their inclusion in organizations, the economy, and our societies.[2]

The legal profession is no exception to this: it needs to do a better job of employing and including all professionals with disabilities. In fact, as Michelle DeVos of Holland & Knight wrote in an October 2020 piece about the need to break down more barriers for attorneys with disabilities, “The legal profession is one of the least diverse professions in the nation.”

The National Association for Law Placement (NALP) published research in December 2022 indicating that law firms consisted only of 1.2% of lawyers with disabilities in 2021. The NALP piece also notes that law school graduates with disabilities were more likely to hold some other marginalized identities.[3] As it’s Pride Month, it’s worth noting that graduates with disabilities from the Class of 2021 were more than twice as likely to identify as LGBTQ compared to the class overall; people with disabilities can experience the workplace and discrimination in it differently depending on other aspects of their identities. In its 2019 Report on Diversity in U.S. Law Firms, NALP also reported: “Just under half of one percent of partners (0.46%) self-reported as having a disability in 2019, down slightly from 0.52% in 2018.”[4]

Employing people with disabilities is a rule of law issue. The World Justice Project’s Rule of Law Index, which evaluates the rule of law in countries around the world on an annual basis, includes absence of employment discrimination within its measurements. As part of evaluating whether the rule of law in a country is strong enough to deliver fundamental human rights, sub-factor 4.1, “Equal treatment and absence of discrimination,” measures “whether individuals are free from discrimination… with respect to public services, employment, court proceedings, and the justice system.”

Hiring people with disabilities is not only the right thing to do from a moral and rule of law standpoint, but it can also provide a range of benefits to the enterprise. First, hiring people with disabilities can improve an employer’s reputation and public image. In today’s society, consumers are increasingly looking for providers that are committed to diversity and inclusion, and hiring people with disabilities can help the employer stand out positively.

Second, hiring people with disabilities can bring a unique perspective and set of skills to the organization. People with disabilities often have to overcome challenges and develop creative solutions. They may also have expertise in areas related to disability law, such as special education or accessibility laws. Accordingly, they are excellent members of a legal team that is focused on offering creative solutions and can have a piece of deep knowledge about problems the project can face.

Third, hiring people with disabilities can help an employer comply with various laws. For example, the Americans with Disabilities Act (ADA) requires employers to provide reasonable accommodations to employees with disabilities, and the failure to do so can result in legal consequences. By hiring and appropriately providing accommodations to people with disabilities, an employer can proactively meet one aspect of its obligations under the ADA and avoid potential legal issues. The ADA served as inspiration for the later framework developed by Mexico and other countries in enacting the United Nations’ Convention on Rights of Persons with Disabilities (CRPD).

The work to be inclusive and equitable doesn’t stop at hiring. One international investment bank includes employees and allies of people with disabilities by creating an employee resource group. (Notably, one of the group’s founders, Meg Cimino, is an American lawyer who has spoken to the American Bar Association Business Law Section.)

Further, the UK government recently funded a report through its organization DRILL (Disability Research on Independent Living & Learning) to learn more about career experiences of disabled people in the legal profession. It shows that lawyers with disabilities face bias and makes detailed recommendations to employers and the profession at large to address issues in hiring and in the workplace. Even though the recommendations were made in the UK context, they would also help employers in other jurisdictions. In one example, the recommendations supported efforts by professional associations to support lawyers with disabilities through organizations like the ABA Commission on Disability Rights in the United States. (In one illustration of the support businesses can have for disability inclusion when working with professional organizations, the ABA partnered with a major international business to support law students with disabilities through a summer internship program.)

Employers internationally should ensure disability is part of their DEI efforts. Consideration of ability status belongs alongside thoughtful attention to race, gender, sexual orientation, and religion in both social and corporate legal environments. As part of that, not only organizations’ work environments but also their digital offerings, websites, and mobile apps should be accessible to and usable for people of all abilities. As the AccessAbility Works podcast says, in addition to “the value of true inclusion,” “maximizing the full use and functionality of digital platforms and technologies makes good business sense.”

To hire effectively and support people with disabilities (whether employees or customers), employers should take a few fundamental steps. First, they should make sure their physical space is accessible, with features such as ramps and accessible bathrooms. They should also provide any necessary accommodations, such as assistive technology or modified work schedules. Additionally, employers should provide training to their staff on disability awareness and inclusion. This can help ensure that people with disabilities are treated with respect and given the support they need to thrive.

In conclusion, hiring people with disabilities is not only the right thing to do, but it can also bring a range of benefits to an employer. By creating an inclusive and diverse work environment, a business can improve its reputation, bring unique perspectives and skills to its team, and comply with the law.

Employers can play a key role in promoting inclusion, diversity, equity, and access (IDEA) in their organizations and creating a more inclusive legal profession. All employers need to prioritize the hiring, retention, and promotion of people with disabilities to create a more diverse and inclusive workplace.


  1. Note that the term employer follows the broad practice of the American Bar Association Business Law Section and does not refer to the work environment. The work environment can be a government entity, a company, a nonprofit organization, a law firm, etc.

  2. See also the US Census Bureau’s webpage collecting data and publications related to disability.

  3. Earlier NALP publications on attorneys with disabilities can be found within NALP’s Research & Statistics resources.

  4. Table 11 in the report (“Lawyers with Disabilities — 2019,” page 30) provides more details.