CMS Finalizes Overhaul of the Medicare Shared Savings Program in “Pathways to Success” Final Rule

by Robinson+Cole Health Law Diagnosis

On December 31, 2018, the Centers for Medicare and Medicaid Services (CMS) published a final rule (Final Rule) establishing the “Pathways to Success” program that overhauls the Medicare Shared Savings Program (MSSP). The Final Rule largely mirrors CMS’ proposed rule (see our summary here), but with several modifications in response to public comments. Accountable care organizations (ACOs) may participate in the Pathways to Success program beginning July 1, 2019, and those ACOs interested in beginning participation in July must submit to CMS a notice of intent to apply by January 18, 2019. CMS guidance on submission of the NOIA is available here. CMS expects to release application deadlines in the near future.

Significant features of the Pathways to Success program, which are described in detail below, include:

  • Replacement of Track 1, Track 2 and Track 3 with two participation options: the BASIC track (consisting of five levels) and ENHANCED track (similar to the current Track 3),
  • Creation of a “glide path” that requires ACOs to incrementally accept performance-based downside risk over the agreement period,
  • Requiring ACOs experienced with downside risk to assume downside risk, while allowing inexperienced ACOs an option to begin participation with no downside risk before advancing to riskier models,
  • Replacement of the previous three-year participation agreement period with a five-year period,
  • Creation of a six-month performance year from July 1, 2019 through December 31, 2019 to coincide with the one-time mid-year start date,
  • Revisions to the benchmarking methodology to incorporate regional trends from the beginning of an ACO’s participation in the MSSP,
  • Expansion of ACOs’ use of telehealth and availability of the SNF Three-Day Rule Waiver, and
  • Ability for ACOs to provide monetary incentives to encourage beneficiaries to receive certain primary care services.

MSSP Background

The MSSP was established via regulations issued in November 2011 and subsequently revised in June 2015 (see our analysis of those rules here and here). Under the MSSP, ACOs consisting of ACO participants – such as physician groups and hospitals (identified by Taxpayer Identification Number (TIN)) – and ACO providers/suppliers (individual physicians and other providers/suppliers that may bill through the TINs of participants) agree to become accountable for the quality, cost and overall care furnished to Medicare beneficiaries. ACO participants and providers/suppliers receive Medicare fee-for-service (FFS) payments for services rendered, that are reconciled at the end of each performance year against a historical benchmark determined by CMS. ACOs that satisfy certain quality performance metrics and save money compared to the benchmark are eligible to share savings with CMS. Certain ACOs participating in two-sided models also accept performance-based risk and therefore may be liable for shared losses with CMS in the event costs exceed the ACO’s historical benchmark.


The Final Rule replaces Tracks 1, 2, and 3 under the MSSP with two tracks, referred to as the BASIC and ENHANCED tracks.

The BASIC track contains five levels (Levels A through E), which CMS refers to as a “glide path,” under which ACOs assume incrementally higher levels of risk. Levels A and B of the BASIC track have no downside risk and give ACOs an opportunity to share up to 40 percent of its savings generated in excess of the minimum savings rate (MSR). ACOs participating in Levels C through E would be liable for 30 percent of losses in excess of the minimum loss rate (MLR), but could be eligible for up to 50 percent of savings in excess of the MSR. The losses in Levels C through E are capped at increasing amounts, such that the ACO assumes a potentially higher share of losses as it progresses through the glide path (while remaining eligible for the same amount of shared savings at each level). Notably, Level E of the BASIC track (which is equivalent to the MSSP’s current Track 1+ model) qualifies as an Advanced Alternative Payment Model (AAPM) for purposes of the CMS Quality Payment Program (QPP). The ENHANCED track is essentially the same as MSSP Track 3 and requires the participating ACO to assume performance-based risk. Under the ENHANCED track, as in Track 3, an ACO may be eligible for savings of up to 75 percent, but is exposed to potential shared losses between 40 percent and 75 percent. The ENHANCED track also qualifies as an AAPM.

Each ACO in the BASIC track will automatically advance to the next level within the BASIC track starting after the performance year which commences January 1, 2020 (except for certain inexperienced, low-revenue ACOs). However, low-revenue ACOs that are new legal entities and are inexperienced will be permitted to stay at Level B (with no downside risk) for an additional year and will then be automatically advanced to Level E for the following performance year. An ACO may also choose to advance more quickly along the glide path to accept higher levels of risk by skipping levels.

Eligibility for BASIC and ENHANCED tracks

Eligibility for participation in either the BASIC or ENHANCED tracks depends upon an ACO’s experience with performance-based risk and an ACO’s revenue. Under the Final Rule, a low-revenue ACO is an ACO whose total Medicare Parts A and B FFS revenue of its participants is less than 35 percent of the total Parts A and B FFS expenditures of the ACO’s assigned beneficiaries; high-revenue ACOs are ACOs that do not meet the definition of a low-revenue ACO. CMS expects high-revenue ACOs will generally be those ACOs that include an institutional provider (e.g., a hospital) as a participant. An ACO is experienced with performance-based risk where either (1) it is the same legal entity as an ACO that has previously participated in a Medicare performance-based risk initiative, such as Tracks 1+, 2 or 3; or (2) at least 40 percent of an ACO’s participants have participated in a Medicare performance-based risk initiative within the previous five performance years.

High-Revenue ACOs

High-revenue ACOs that have experience with performance-based risk will generally be limited to participating in the ENHANCED track only. However, high-revenue ACOs that are currently participating in Track 1+ and that had a first or second agreement period beginning in 2016 or 2017 may “renew” their participation agreement in the Pathways to Success program on either July 1, 2019 or January 1, 2020, and may participate in either Level E of the BASIC track or the ENHANCED track. High-revenue ACOs that are inexperienced with performance-based risk may generally participate in any Level of the BASIC track or the ENHANCED track. However, such ACO may not enter under Level A if the ACO (1) previously participated in Track 1 of the MSSP or (2) has more than 50 percent of its participants who have experience in a Track 1 ACO. As an example, an ACO that included a hospital as a participant (and thus likely qualified as high-revenue) and previously participated in Track 1, could enter the BASIC track at Level B or higher or the ENHANCED track.

        Low-Revenue ACOs

Low-revenue ACOs that have experience with performance-based risk are able to enter the Pathways to Success program at either Level E of the BASIC track or the ENHANCED track. Low-revenue ACOs that are inexperienced with performance-based risk may generally participate in any Level of the BASIC track or the ENHANCED track. As noted above, new, low-revenue ACOs that are inexperienced with performance-based risk may elect to remain in Level B for an additional year after which the ACO would progress directly to Level E. Low-revenue ACOs may remain in the BASIC track for up to two five-year agreement periods, provided that such a low-revenue ACO must remain at Level E (or move to the ENHANCED track) for the duration of the second agreement period. For example, if a new low-revenue ACO is formed and that ACO is inexperienced with performance-based risk, the ACO could enter the BASIC track under Level A in January 1, 2020, then move to Level B as of January 1, 2021 and remain in Level B until January 1, 2023, at which time it would move to Level E.

2019 Performance Year

Under the Final Rule, ACOs may enter the BASIC or ENHANCED tracks starting on July 1, 2019 – a one-time mid-year start date to accommodate the CMS rulemaking process and ACOs who entered into a six-month extension of their prior agreements as of January 1, 2019. ACOs interested in participation in the MSSP as of July 1, 2019, are required to submit a Notice of Intent to Apply (NOIA) to CMS by January 18, 2019. CMS will resume its annual application and performance year cycle for agreement periods beginning January 1, 2020.

To participate under either track, an eligible ACO (as discussed below) would enter into a five-year participation agreement with CMS to participate in either the BASIC track or ENHANCED track. For ACOs that utilize the one-time start date of July 1, 2019, the initial agreement period will be for five and a half years. CMS explains that MSSP results have shown that “ACOs tend to perform better the longer they are in” the MSSP, and the extended agreement periods give ACOs more time to perform against their benchmark.

ACOs that are currently in the middle of a three-year MSSP participation agreement will be allowed to continue their participation under the terms of that agreement until its expiration; however, CMS affords those ACOs an option to terminate early to join the Pathways to Success program. Additionally, ACOs whose agreements were extended for six months from January 1, 2019 through June 30, 2019, will be able to commence new participation agreements in the Pathways to Success program as of July 1, 2019.

Minimum Savings Rate/Minimum Loss Rate

In the Final Rule, CMS finalized several changes pertinent to the selection and timing of the MSR/MLR, and it also took steps to address the MSR/MLR for ACOs with small population sizes.

ACOs participating in a one sided model of the BASIC track’s glide path (Levels A or B) will have a variable MSR determined based upon the number of beneficiaries assigned to the ACO. The variable MSR will be determined in the same manner that the MSR was determined under Track 1. Prior to transitioning to a two-sided model under the BASIC track, an ACO will have the opportunity to select its MSR/MLR. ACOs participating in the ENHANCED track will also be able to select their MSR/MLR. Once an ACO selects its MSR/MLR, it may not change it for the duration of the agreement period. ACOs participating in a two-sided model (BASIC track Levels C through E or ENHANCED track) will be able to select a MSR/MLR among the following available options:

  • 0 percent MSR/MLR;
  • Symmetrical MSR/MLR in 0.5 percent increments between 0.5 percent and 2 percent; or
  • Symmetrical MSR/MLR that varies based on the ACO’s number of assigned beneficiaries.

For ACOs that are unable to maintain 5,000 beneficiaries, there is concern that the effects of normal expenditure variation may either unduly reward or penalize such ACOs because of the out-sized effect normal expenditure variations may have on a small population size. In response to this concern, CMS will permit a variable MSR/MLR if an ACO’s assigned beneficiary population falls under 5,000 for the applicable performance year.

Beneficiary Assignment

Under the Final Rule and beginning July 1, 2019, CMS will allow all ACOs participating in the Pathways to Success program (whether on the BASIC or ENHANCED track) to choose their beneficiary assignment methodology: (1) prospective assignment or (2) preliminary prospective assignment with retrospective reconciliation. ACOs will also be allowed an opportunity to change their selection of beneficiary assignment methodology on an annual basis.

Note that the November 2018 physician fee schedule final rule revised the definition of “primary care services” used in the beneficiary assignment methodology. Specifically, the definition of primary care services was expanded to include procedure codes for advance care planning, administration of health risk assessment, prolonged evaluation and management or psychotherapy services beyond the typical time of the primary procedure, annual depression screening, and alcohol misuse screening, as well as add-on codes for visit complexity related to evaluation and management services.

Waiver of the SNF 3-Day Rule

In the Final Rule, CMS adopts its proposal to expand access to the Skilled Nursing Facility (SNF) 3-Day Rule Waiver (SNF Waiver). The SNF Waiver waives applicability of the Medicare payment requirement of a three-day inpatient stay as a prerequisite for Medicare coverage of post-acute SNF services. Eligible ACOs can obtain a SNF Waiver in part by entering into affiliate agreements with SNFs.

The Final Rule expands access to the SNF Waiver to ACOs accepting performance-based risk in the BASIC or ENHANCED tracks, and enables risk-bearing ACOs to apply for the SNF Waiver regardless of their choice of beneficiary assignment methodology. Previously, only ACOs that selected prospective assignment and participated in Track 3 (now the ENHANCED Track) or the Track 1+ model were eligible to apply for the SNF Waiver. Notably, ACOs in the midst of MSSP agreement periods in Tracks 1+ or 3 that continue participating in those tracks also remain eligible to apply for the SNF Waiver.

CMS also expands access to the SNF Waiver by allowing critical access hospitals and other small rural hospitals providing SNF services under a swing bed arrangement to partner with Pathways to Success ACOs as SNF affiliates for purposes of the SNF Waiver.


Currently, CMS calculates the cost benchmark for new participants in the MSSP based in part on the use of national growth rates to trend forward Medicare expenditure data for each of the years making up the ACO’s historical benchmark. Starting with an ACO’s second or successive renewal term in the MSSP, CMS shifts to use regional growth rates to calculate an ACO’s historical benchmark, which is based on the ACO’s actual risk-adjusted historical expenditures. In the Final Rule, CMS revised the ACO benchmarking methodology to address its concerns that (1) the regional adjustment can lead to overly inflated benchmarks for ACOs that are relatively low spending compared to their region, and (2) ACOs with higher spending compared to their region may have little incentive to participate in the MSSP when faced with a significantly reduced benchmark. Effective for all ACOs entering or renewing in the Pathways to Success program beginning on July 1, 2019, historical benchmarks will use a blend of national and regional trend factors; however, the ACO’s historical benchmark will now also incorporate regional adjustments. Further, the weight of the regional adjustment will phase in over time based on whether the ACO has higher or lower expenditures for its service area and is capped at a maximum weight of 50 percent (down from the current cap of 70 percent). These changes are intended to more accurately reflect costs of the regional service area while encouraging greater participation from both higher and lower-cost ACOs.


Currently, there are several requirements for Medicare reimbursement of telehealth services. Some of those requirements include that the patient receiving telehealth services must be at an “originating site” located in certain geographic areas. The originating site also must be a physician’s office, hospital or other specified health center. In the Final Rule, CMS relaxes these requirements for telehealth services provided by an ACO provider/supplier to beneficiaries prospectively assigned to an ACO during the relevant performance year. For certain telehealth services provided by eligible practitioners billing through the TIN of an ACO participant, CMS removes the geographic limitation on the originating site and permits a patient to use his or her home as an originating site. However, Medicare will not pay a facility fee where the originating site was a patient’s home, nor does this policy apply to telehealth services not appropriate for furnishing in a patient’s home if the originating site is the patient’s home. These telehealth payment policies are effective for services furnished on and after January 1, 2020 and apply only to ACOs participating in a two-sided risk model that choose to assign beneficiaries using the prospective assignment method.

Beneficiary Incentives

Under the Final Rule, ACOs bearing two-sided risk may establish beneficiary incentive programs that provide incentive payments to assigned beneficiaries who receive qualifying primary care services. Incentive payments to beneficiaries may be in amounts up to $20 (adjusted annually by the percentage increase in CPI) and must be cash equivalents (such as a check, debit card or other traceable cash equivalent) and not cash. A qualifying primary care service is a service with respect to which coinsurance applies under Part B and is furnished by an ACO professional who qualifies as a primary care physician, a physician assistant, nurse practitioner, certified (i.e., clinical) nurse specialist, a federally qualified health center or rural health clinic. Incentive payments must be provided by the ACO within 30 days of a beneficiary receiving a qualifying service.

ACOs must notify beneficiaries of the incentive program prior to or at a beneficiary’s first primary care service visit of each performance year. Otherwise, the ACO may not advertise the program to a beneficiary or any potential patient enrolled in a federal health care program. ACOs must also maintain records of the incentive payments and may not accept funds for incentives from an outside entity or otherwise shift such costs to a federal health care program.

Importantly, material changes to existing beneficiary incentive programs and all new programs must be approved by CMS. CMS will approve programs established as of July 1, 2019 for an 18-month term, or as of January 1, 2020, for a 12-month term. Additionally, in the Final Rule CMS also amends a current regulation that allows ACOs and their participants to provide in-kind items and services as incentives to beneficiaries to clarify that such in-kind incentives can be provided to all Medicare fee-for-service beneficiaries – not just beneficiaries assigned to an ACO – as long as they meet applicable requirements.

Repayment Mechanism

ACOs applying to enter a two-sided model under the Pathways to Success program have specific requirements with respect to demonstrating that they have established an adequate repayment mechanism to repay shared losses to CMS. The repayment mechanism may be through an escrow account, line of credit or surety bond. The repayment mechanism amount varies based upon the applicable track. For a BASIC or ENHANCED track ACO, the amount must be equal to the lesser of (1) 1 percent of the Medicare Parts A and B FFS expenditures for the ACO’s assigned beneficiaries for the most recent calendar year for which 12 months of data is available; or (2) 2 percent of the Medicare Parts A and B FFS revenue of its ACO participants for the most recent calendar year for which 12 months of data is available. CMS will annually recalculate the repayment mechanism amount, and if it falls below a certain level, CMS will require the ACO to increase its repayment amount. Generally, the mechanism must be in effect for the duration of the ACO’s participation in a two-sided model and for 12 months thereafter.

Beneficiary Notifications

In the Final Rule, CMS also addressed its concern that beneficiaries may be unaware of the different resources available regarding the MSSP and what participation means for the beneficiary’s care. CMS therefore expanded requirements for content and delivery of beneficiary notifications. Going forward, ACOs must notify all Medicare FFS beneficiaries of the following: (1) each ACO provider/supplier participating in the ACO, (2) the beneficiary’s ability to decline claims data sharing and (3) the beneficiary’s ability to change the clinician designated as their primary clinician for purposes of voluntary alignment (and the process for doing so). In addition, the ACO must notify its assigned beneficiaries of any beneficiary incentive program. Notice must be provided in writing at or prior to the beneficiary’s first primary care service visit of each performance year. To alleviate any associated administrative burden, CMS will be developing template beneficiary notices for ACOs and ACO providers/suppliers to use.

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Robinson+Cole Health Law Diagnosis | Attorney Advertising

Written by:

Robinson+Cole Health Law Diagnosis

Robinson+Cole Health Law Diagnosis on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide

JD Supra Privacy Policy

Updated: May 25, 2018:

JD Supra is a legal publishing service that connects experts and their content with broader audiences of professionals, journalists and associations.

This Privacy Policy describes how JD Supra, LLC ("JD Supra" or "we," "us," or "our") collects, uses and shares personal data collected from visitors to our website (located at (our "Website") who view only publicly-available content as well as subscribers to our services (such as our email digests or author tools)(our "Services"). By using our Website and registering for one of our Services, you are agreeing to the terms of this Privacy Policy.

Please note that if you subscribe to one of our Services, you can make choices about how we collect, use and share your information through our Privacy Center under the "My Account" dashboard (available if you are logged into your JD Supra account).

Collection of Information

Registration Information. When you register with JD Supra for our Website and Services, either as an author or as a subscriber, you will be asked to provide identifying information to create your JD Supra account ("Registration Data"), such as your:

  • Email
  • First Name
  • Last Name
  • Company Name
  • Company Industry
  • Title
  • Country

Other Information: We also collect other information you may voluntarily provide. This may include content you provide for publication. We may also receive your communications with others through our Website and Services (such as contacting an author through our Website) or communications directly with us (such as through email, feedback or other forms or social media). If you are a subscribed user, we will also collect your user preferences, such as the types of articles you would like to read.

Information from third parties (such as, from your employer or LinkedIn): We may also receive information about you from third party sources. For example, your employer may provide your information to us, such as in connection with an article submitted by your employer for publication. If you choose to use LinkedIn to subscribe to our Website and Services, we also collect information related to your LinkedIn account and profile.

Your interactions with our Website and Services: As is true of most websites, we gather certain information automatically. This information includes IP addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp and clickstream data. We use this information to analyze trends, to administer the Website and our Services, to improve the content and performance of our Website and Services, and to track users' movements around the site. We may also link this automatically-collected data to personal information, for example, to inform authors about who has read their articles. Some of this data is collected through information sent by your web browser. We also use cookies and other tracking technologies to collect this information. To learn more about cookies and other tracking technologies that JD Supra may use on our Website and Services please see our "Cookies Guide" page.

How do we use this information?

We use the information and data we collect principally in order to provide our Website and Services. More specifically, we may use your personal information to:

  • Operate our Website and Services and publish content;
  • Distribute content to you in accordance with your preferences as well as to provide other notifications to you (for example, updates about our policies and terms);
  • Measure readership and usage of the Website and Services;
  • Communicate with you regarding your questions and requests;
  • Authenticate users and to provide for the safety and security of our Website and Services;
  • Conduct research and similar activities to improve our Website and Services; and
  • Comply with our legal and regulatory responsibilities and to enforce our rights.

How is your information shared?

  • Content and other public information (such as an author profile) is shared on our Website and Services, including via email digests and social media feeds, and is accessible to the general public.
  • If you choose to use our Website and Services to communicate directly with a company or individual, such communication may be shared accordingly.
  • Readership information is provided to publishing law firms and authors of content to give them insight into their readership and to help them to improve their content.
  • Our Website may offer you the opportunity to share information through our Website, such as through Facebook's "Like" or Twitter's "Tweet" button. We offer this functionality to help generate interest in our Website and content and to permit you to recommend content to your contacts. You should be aware that sharing through such functionality may result in information being collected by the applicable social media network and possibly being made publicly available (for example, through a search engine). Any such information collection would be subject to such third party social media network's privacy policy.
  • Your information may also be shared to parties who support our business, such as professional advisors as well as web-hosting providers, analytics providers and other information technology providers.
  • Any court, governmental authority, law enforcement agency or other third party where we believe disclosure is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights, the rights of any third party or individuals' personal safety, or to detect, prevent, or otherwise address fraud, security or safety issues.
  • To our affiliated entities and in connection with the sale, assignment or other transfer of our company or our business.

How We Protect Your Information

JD Supra takes reasonable and appropriate precautions to insure that user information is protected from loss, misuse and unauthorized access, disclosure, alteration and destruction. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. You should keep in mind that no Internet transmission is ever 100% secure or error-free. Where you use log-in credentials (usernames, passwords) on our Website, please remember that it is your responsibility to safeguard them. If you believe that your log-in credentials have been compromised, please contact us at

Children's Information

Our Website and Services are not directed at children under the age of 16 and we do not knowingly collect personal information from children under the age of 16 through our Website and/or Services. If you have reason to believe that a child under the age of 16 has provided personal information to us, please contact us, and we will endeavor to delete that information from our databases.

Links to Other Websites

Our Website and Services may contain links to other websites. The operators of such other websites may collect information about you, including through cookies or other technologies. If you are using our Website or Services and click a link to another site, you will leave our Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We are not responsible for the data collection and use practices of such other sites. This Policy applies solely to the information collected in connection with your use of our Website and Services and does not apply to any practices conducted offline or in connection with any other websites.

Information for EU and Swiss Residents

JD Supra's principal place of business is in the United States. By subscribing to our website, you expressly consent to your information being processed in the United States.

  • Our Legal Basis for Processing: Generally, we rely on our legitimate interests in order to process your personal information. For example, we rely on this legal ground if we use your personal information to manage your Registration Data and administer our relationship with you; to deliver our Website and Services; understand and improve our Website and Services; report reader analytics to our authors; to personalize your experience on our Website and Services; and where necessary to protect or defend our or another's rights or property, or to detect, prevent, or otherwise address fraud, security, safety or privacy issues. Please see Article 6(1)(f) of the E.U. General Data Protection Regulation ("GDPR") In addition, there may be other situations where other grounds for processing may exist, such as where processing is a result of legal requirements (GDPR Article 6(1)(c)) or for reasons of public interest (GDPR Article 6(1)(e)). Please see the "Your Rights" section of this Privacy Policy immediately below for more information about how you may request that we limit or refrain from processing your personal information.
  • Your Rights
    • Right of Access/Portability: You can ask to review details about the information we hold about you and how that information has been used and disclosed. Note that we may request to verify your identification before fulfilling your request. You can also request that your personal information is provided to you in a commonly used electronic format so that you can share it with other organizations.
    • Right to Correct Information: You may ask that we make corrections to any information we hold, if you believe such correction to be necessary.
    • Right to Restrict Our Processing or Erasure of Information: You also have the right in certain circumstances to ask us to restrict processing of your personal information or to erase your personal information. Where you have consented to our use of your personal information, you can withdraw your consent at any time.

You can make a request to exercise any of these rights by emailing us at or by writing to us at:

Privacy Officer
JD Supra, LLC
10 Liberty Ship Way, Suite 300
Sausalito, California 94965

You can also manage your profile and subscriptions through our Privacy Center under the "My Account" dashboard.

We will make all practical efforts to respect your wishes. There may be times, however, where we are not able to fulfill your request, for example, if applicable law prohibits our compliance. Please note that JD Supra does not use "automatic decision making" or "profiling" as those terms are defined in the GDPR.

  • Timeframe for retaining your personal information: We will retain your personal information in a form that identifies you only for as long as it serves the purpose(s) for which it was initially collected as stated in this Privacy Policy, or subsequently authorized. We may continue processing your personal information for longer periods, but only for the time and to the extent such processing reasonably serves the purposes of archiving in the public interest, journalism, literature and art, scientific or historical research and statistical analysis, and subject to the protection of this Privacy Policy. For example, if you are an author, your personal information may continue to be published in connection with your article indefinitely. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
  • Onward Transfer to Third Parties: As noted in the "How We Share Your Data" Section above, JD Supra may share your information with third parties. When JD Supra discloses your personal information to third parties, we have ensured that such third parties have either certified under the EU-U.S. or Swiss Privacy Shield Framework and will process all personal data received from EU member states/Switzerland in reliance on the applicable Privacy Shield Framework or that they have been subjected to strict contractual provisions in their contract with us to guarantee an adequate level of data protection for your data.

California Privacy Rights

Pursuant to Section 1798.83 of the California Civil Code, our customers who are California residents have the right to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

You can make a request for this information by emailing us at or by writing to us at:

Privacy Officer
JD Supra, LLC
10 Liberty Ship Way, Suite 300
Sausalito, California 94965

Some browsers have incorporated a Do Not Track (DNT) feature. These features, when turned on, send a signal that you prefer that the website you are visiting not collect and use data regarding your online searching and browsing activities. As there is not yet a common understanding on how to interpret the DNT signal, we currently do not respond to DNT signals on our site.

Access/Correct/Update/Delete Personal Information

For non-EU/Swiss residents, if you would like to know what personal information we have about you, you can send an e-mail to We will be in contact with you (by mail or otherwise) to verify your identity and provide you the information you request. We will respond within 30 days to your request for access to your personal information. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why. If you would like to correct or update your personal information, you can manage your profile and subscriptions through our Privacy Center under the "My Account" dashboard. If you would like to delete your account or remove your information from our Website and Services, send an e-mail to

Changes in Our Privacy Policy

We reserve the right to change this Privacy Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our Privacy Policy will become effective upon posting of the revised policy on the Website. By continuing to use our Website and Services following such changes, you will be deemed to have agreed to such changes.

Contacting JD Supra

If you have any questions about this Privacy Policy, the practices of this site, your dealings with our Website or Services, or if you would like to change any of the information you have provided to us, please contact us at:

JD Supra Cookie Guide

As with many websites, JD Supra's website (located at (our "Website") and our services (such as our email article digests)(our "Services") use a standard technology called a "cookie" and other similar technologies (such as, pixels and web beacons), which are small data files that are transferred to your computer when you use our Website and Services. These technologies automatically identify your browser whenever you interact with our Website and Services.

How We Use Cookies and Other Tracking Technologies

We use cookies and other tracking technologies to:

  1. Improve the user experience on our Website and Services;
  2. Store the authorization token that users receive when they login to the private areas of our Website. This token is specific to a user's login session and requires a valid username and password to obtain. It is required to access the user's profile information, subscriptions, and analytics;
  3. Track anonymous site usage; and
  4. Permit connectivity with social media networks to permit content sharing.

There are different types of cookies and other technologies used our Website, notably:

  • "Session cookies" - These cookies only last as long as your online session, and disappear from your computer or device when you close your browser (like Internet Explorer, Google Chrome or Safari).
  • "Persistent cookies" - These cookies stay on your computer or device after your browser has been closed and last for a time specified in the cookie. We use persistent cookies when we need to know who you are for more than one browsing session. For example, we use them to remember your preferences for the next time you visit.
  • "Web Beacons/Pixels" - Some of our web pages and emails may also contain small electronic images known as web beacons, clear GIFs or single-pixel GIFs. These images are placed on a web page or email and typically work in conjunction with cookies to collect data. We use these images to identify our users and user behavior, such as counting the number of users who have visited a web page or acted upon one of our email digests.

JD Supra Cookies. We place our own cookies on your computer to track certain information about you while you are using our Website and Services. For example, we place a session cookie on your computer each time you visit our Website. We use these cookies to allow you to log-in to your subscriber account. In addition, through these cookies we are able to collect information about how you use the Website, including what browser you may be using, your IP address, and the URL address you came from upon visiting our Website and the URL you next visit (even if those URLs are not on our Website). We also utilize email web beacons to monitor whether our emails are being delivered and read. We also use these tools to help deliver reader analytics to our authors to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

Analytics/Performance Cookies. JD Supra also uses the following analytic tools to help us analyze the performance of our Website and Services as well as how visitors use our Website and Services:

  • HubSpot - For more information about HubSpot cookies, please visit
  • New Relic - For more information on New Relic cookies, please visit
  • Google Analytics - For more information on Google Analytics cookies, visit To opt-out of being tracked by Google Analytics across all websites visit This will allow you to download and install a Google Analytics cookie-free web browser.

Facebook, Twitter and other Social Network Cookies. Our content pages allow you to share content appearing on our Website and Services to your social media accounts through the "Like," "Tweet," or similar buttons displayed on such pages. To accomplish this Service, we embed code that such third party social networks provide and that we do not control. These buttons know that you are logged in to your social network account and therefore such social networks could also know that you are viewing the JD Supra Website.

Controlling and Deleting Cookies

If you would like to change how a browser uses cookies, including blocking or deleting cookies from the JD Supra Website and Services you can do so by changing the settings in your web browser. To control cookies, most browsers allow you to either accept or reject all cookies, only accept certain types of cookies, or prompt you every time a site wishes to save a cookie. It's also easy to delete cookies that are already saved on your device by a browser.

The processes for controlling and deleting cookies vary depending on which browser you use. To find out how to do so with a particular browser, you can use your browser's "Help" function or alternatively, you can visit which explains, step-by-step, how to control and delete cookies in most browsers.

Updates to This Policy

We may update this cookie policy and our Privacy Policy from time-to-time, particularly as technology changes. You can always check this page for the latest version. We may also notify you of changes to our privacy policy by email.

Contacting JD Supra

If you have any questions about how we use cookies and other tracking technologies, please contact us at:

- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.