Silence is Not Always Golden: Recent Pharmaceutical Company Settlement with SEC Illustrates Various Risks Related to Disclosure Obligations of Reporting Companies: Part One

Baker Donelson

Baker Donelson


Publicly-traded companies that operate in highly regulated industries, such as in the health care sphere, often face difficult decisions about what information (if any) they should disclose to investors and others, when to disclose that information, and how to disclose it. "The life sciences industry encounters heightened securities fraud liability for several reasons – it is heavily regulated, highly profitable, and one in which a small fraction of new products will ultimately get approved for sale and marketing."1 In general, but subject to important exceptions, our securities laws in the United States do not require continuous disclosure of information. But when disclosures are made, they must be truthful and accurate. If disclosures have already been made, then companies face important related considerations – whether and when to provide corrective information about prior disclosures that, even though they were accurate when made, may have become inaccurate or misleading due to new developments.2 The so-called duty to update places "a proactive responsibility [on listed companies] to inform the marketplace when events evolve ... to render misleading some prior statement upon which the market is still relying."3 A corollary doctrine is the duty to correct a prior disclosure; it is only imposed if a prior disclosure was misleading or false when it was made.

Mylan's recent settlement with the Securities Exchange Commission (SEC or Commission) serves as a reminder about what constitute the best practices and other strategical considerations that listed companies need to consider when facing a disclosure decision. In the SEC's public release entitled "Mylan to Pay $30 Million for Disclosure and Accounting Failures Relating to EpiPen," Litig. Rel. No. 24621 (Sept. 27, 2019), the Commission summarized the terms and basis for its settlement with Mylan N.V., the world's second-largest generic and specialty pharmaceuticals company, to resolve the allegations made in its simultaneously filed complaint. See Securities and Exchange Commission v. Mylan N.V., No. 19-civ-2904 (D.D.C.). Critically, the SEC explained that the underlying basis for pursuing Mylan for securities violations involved its failure to timely disclose material information and related accounting system failures:

As alleged in the complaint, public companies facing possible material losses from a lawsuit or government investigation must (1) disclose the loss contingency if a loss is reasonably possible; and (2) record an accrual for the estimated loss if the loss is probable and reasonably estimable. Mylan, however, failed to disclose or accrue for the loss relating to the DOJ investigation before October 2016, when it announced a $465 million settlement with DOJ. As a result, Mylan's public filings were false and misleading.

Further, as alleged in the complaint, Mylan's 2014 and 2015 risk factor disclosures that a governmental authority may take a contrary position on Mylan's Medicaid submissions, when CMS had already informed Mylan that EpiPen was misclassified, were misleading.4

In Part One of this series of Client Alerts, we begin by examining some of the major disclosure duties imposed by the federal securities laws before offering suggestions about how not to get cross-wise with the Commission and others. It is worth noting that the Commission's enforcement action against Mylan was just one of the litigation risks that it faced, as Mylan was also a named defendant in three other major cases:

  1. a federal securities class action suit that generally alleged the company was involved in two categories of wrongdoing: Medicaid misclassification of its branded drug EpiPen Auto-Injector ("EpiPen") and antitrust violations. See Amended Class Action Complaint, Dkt. No. 39, filed in In Re Mylan N.V. Securities Litigation, No. 1:16-cv-07926-JPO (S.D.N.Y.);
  2. qui tam actions that generally alleged it had misclassified EpiPen as a "non-innovator multiple source" drug (rather than a "single source" drug) for purposes of Medicaid's Drug Rebate Program and, as a result, had underpaid rebates owed under the Program for EpiPen.5 See Press Release, U.S. Attorney's Office for the District of Massachusetts, "Mylan Agrees to Pay $465 Million to Resolve False Claims Act Liability" (Aug. 17, 2019) and the related Settlement Agreement;6 and
  3. a Consolidated Class Action Complaint that asserted federal and state antitrust claims, federal RICO Act violations, state consumer protection law violations, and unjust enrichment claims, and generally alleged that Mylan and others had monopolized the EpiPen market and obtained its profitable revenues by executing an illegal scheme that was carried out through several different avenues. See In re: EpiPen (Epinephrine Injection, USP) Marketing, MDL No: 2785 Sales Practices and Antitrust Litigation Case No. 17-md-2785-DDC-TJJ (D. Kan.).

To Speak, or Not to Speak, is the Question

"Our securities laws regulate publicly-traded entities by imposing disclosure duties and placing restrictions on fraud, manipulation, and insider trading."7 Violations can lead to parallel administrative, civil, and criminal proceedings (along with significant fines, penalties, and restitution orders). In § 21(a) of The Securities Exchange Act of 1934 (Exchange Act), Congress gave considerable discretion to the Commission to investigate federal securities law violations.8 "The SEC's primary enforcement actions include injunctive actions, actions for civil penalties, cease-and-desist orders, stop order proceedings, administrative proceedings against securities professionals, administrative proceedings pursuant to Section 15(c)(4) of the . . . Exchange Act, and administrative proceedings against professionals pursuant to Rule 102(e) of the SEC's Rules of Practice."9 This part of the alert focuses on two major statutes that the Commission enforces which are relevant to disclosure considerations – The Securities Act of 1933 (Securities Act) and The Exchange Act. The Commission has promulgated numerous implementing regulations under these laws that are designed to protect the investing public and make financial markets more transparent. A brief discussion of these key laws is included for reference below.

The Securities Act

The Securities Act regulates the domestic securities markets in an ex ante fashion. "The Securities Act, [o]ften referred to as the 'truth in securities' law, has two basic objectives, to 'require that investors receive financial and other significant information concerning securities being offered for public sale' and to 'prohibit deceit, misrepresentations, and other fraud in the sale of securities.'"10 "A primary means of accomplishing these goals is the disclosure of important financial information through the registration of securities. This information enables investors, not the government, to make informed judgments about whether to purchase a company's securities."11 The Securities Act regulates initial public offerings of securities and requires most listed companies to follow proscribed registration procedures that require, among other things, specified information be included in a prospectus.12

The Exchange Act

Under Exchange Act §§13(a) and 15(d), issuers of registered securities must provide specific information in the format required by SEC rules or regulations, in periodic reports, including annual and quarterly reports. The Seventh Circuit summarized the major disclosure obligations of issuers under federal securities law in Gallagher v. Abbott Laboratories, 269 F.3d 806 (7th Cir. 2001), as follows:

We do not have a system of continuous disclosure. Instead firms are entitled to keep silent ... unless positive law creates a duty to disclose.... The 1933 Act requires firms to reveal information only when they issue securities, and the duty is owed only to persons who buy from the issuer or an underwriter distributing on its behalf; every other transaction is exempt under §4, 15 U.S.C. §77d. ... Section 13 of the ... Exchange Act ... adds that the SEC may require issuers to file annual and other periodic reports – with the emphasis on periodic rather than continuous. . . (emphasis added).13

As initially noted, this general rule allowing a listed company to remain silent until required to disclose information is subject to various exceptions. Most securities fraud actions are based on alleged violations of Section 10(b) of the Exchange Act and its implementing rule, 10b-5, which have a much broader reach than their counterparts under the Securities Act (that must involve fraudulent conduct related to a public offering).14

What Constitutes "Material Information" for Disclosure Purposes?

"Congress did not define the [key] term 'materiality' in either the Securities Act or the Exchange Act."15 This has resulted in scholarly commentary and regulatory interpretation about what constitutes material information to be disclosed – i.e., should it be analyzed using a quantitative approach; a qualitative one, or a hybrid?16 There has also been debate about what information a publicly-traded company must disclose (and when and how to make such disclosures). The Commission rejects using a quantitative or qualitative approach in favor of what it calls "robust" principles-based disclosures. As an SEC official recently explained:

[O]ur disclosure requirements are intended to provide investors with the material information they need about companies and their securities offerings to make informed investment and voting decisions. Robust disclosure decreases information asymmetries and is the foundation of reliable price discovery. When investors have confidence that they are receiving full and transparent disclosure, markets operate more efficiently and the cost of capital is reduced. …

"Our disclosure regime emphasizes materiality. Information is material if there is a substantial likelihood that a reasonable investor would consider it important in deciding how to vote or make an investment decision. Principles-based disclosure requirements articulate an objective and look to management to exercise judgment in satisfying that objective by providing appropriate disclosure when necessary."17

In general, the amount of information required by the Commission to be disclosed has increased even as the timeframe to do so has decreased.18 We believe it is ordinarily a best practice to err in favor of more liberal disclosures when considering the risks involved (which is always a facts-and-circumstances decision). Some key SEC Staff Accounting Bulletins to consider reviewing when making this determination are SAB No. 99 – Materiality; SAB No. 100 – Restructuring and Impairment Charges; and SAB No. 101 – Revenue Recognition.

The judicial standard for determining materiality is that "[w]hether a fact is material 'depends on the significance the reasonable investor would place on the withheld or misrepresented information.'"19 A lot of information simply is not material for disclosure purposes. For example, courts do not protect "soft" information upon which no reasonable investor could rely (such as when companies use "puffing" to market their products),20 and since the securities laws do not protect foolish investments, courts will examine the total mix of information in the marketplace to determine if a company's failure to disclose is actionable.21 "In analyzing Rule 10b-5 causation issues, courts often state that investors may not simply close their eyes to obvious risks, but must exercise due diligence in protecting themselves."22

In the next related Client Alert, we examine the key regulations that mandate periodic and episodic disclosures, the events that led to the SEC's enforcement action against Mylan on the heels of the company's settlement of qui tam suits with the DOJ, and then offer some practical advice for reporting companies about how to assess and respond to the various risks presented under different scenarios.

1 Michael E. Clark, Securities Law Issues and Disclosure Considerations for Life Sciences Companies, at 12-3, Pharmaceutical And Medical Device Law: Regulation Of Research, Development, And Marketing, (Bloomberg BNA/ABA Health Law Section, 2d Ed. 2015) (Michael E. Clark, Ed.). A substantial part of this discussion is derived in whole or part from this chapter of the treatise. More detailed analysis about these and related issues are set out in this lengthy chapter of the treatise.

2 See Clark, Securities Law Issues and Disclosure Considerations for Life Science Companies, at 12-9.

3 Donald C. Langevoort, Organized Illusions: A Behavioral Theory of Why Corporations Mislead Stock Market Investors (and Cause Other Social Harms), 146 U. Pa. L. Rev. 101, 163 (1997) (internal notes omitted).

4 "Mylan to Pay $30 Million for Disclosure and Accounting Failures Relating to EpiPen," Litig. Rel. No. 24621.

5 On July 29, 2016, Sanofi-Aventis US LLC filed a qui tam action in the District of Massachusetts captioned United States, et al. ex rel. Sanofi-Aventis US LLC v. Mylan Inc., et al., No. 16cvl 1572-ADB, under the False Claims Act, 31 U.S.C. § 3730(b), and an amended qui tam complaint on August 4, 2016. On December 8, 2016, Ven-A-Care of the Florida Keys, Inc. filed a qui tam action in the Southern District of New York captioned United States, et al. ex rel. Ven-A-Care of the Florida Keys, Inc. v. Mylan Inc., et al., No. 16-CV-9484 (JGK), and an amended qui tam complaint on January 3, 2017. On January 19, 2017, Ven-A-Care's qui tam action was transferred to the District of Massachusetts and assigned Case No. 17-10140-ADB.

6 As noted in this press release issued by the U.S. Attorney's Office for the District of Massachusetts, Mylan Inc. and Mylan Specialty L.R, both wholly owned subsidiaries of Mylan N.V., agreed to pay $465 million to resolve allegations that they violated the False Claims Act by knowingly misclassifying EpiPen, a branded epinephrine auto-injector drug, as a generic drug to avoid paying larger rebates owed to Medicaid.

7 Michael E. Clark, The Growing Importance of Securities Regulation for Publicly Traded Entities in the Post-Sarbanes-Oxley Marketplace, 2006 Health Law and Compliance Update §5.01 (internal notes omitted).

8 "Section 21(a) further authorizes the Commission to investigate any facts, conditions, practices, or matters which it may deem necessary or proper to aid in the enforcement of such provisions, in the prescribing of rules and regulations under the . . . Exchange Act, or in securing information to serve as a basis for recommending further legislation." Ralph C. Ferrara & Philip S. Khinda, Overview of an SEC Proceeding, 30th Annual Institute on Securities Regulation, 1085 PLI/Corp. 597, 610 (1998) (emphasis added). Sections 8(e) and 20(a) of the Securities Act are companion provisions to Section 21(a) of the Exchange Act. Id.

9 Ferrara & Khinda, 1085 PLI/Corp. at 636.

10 Clark, Securities Law Issues and Disclosure Considerations for Life Science Companies, at 12-19 n.83 (citing The Investor's Advocate: How the SEC Protects Investors, Maintains Market Integrity, and Facilitates Capital Formation;) available at

11 Id. (at 12-9 n.84).

12 Clark, Securities Law Issues and Disclosure Considerations for Life Science Companies, at 12-20.

13 Gallagher, 269 F.3d at 808–10 (internal citations omitted). The Gallagher court's opinion also addressed the plaintiffs' arguments: "[P]laintiffs insist that Abbott had a "duty to correct" the 10-K report. Yet a statement may be "corrected" only if it was incorrect when made. . . [.] In order to maintain the difference between periodic-disclosure and continuous-disclosure systems, it is essential to draw a sharp line between duties to correct and duties to update. . . ."). Id.

14 Section 10(b) of the Exchange Act, codified as amended at 15 U.S.C. §78j(b), provides in relevant part:

It shall be unlawful for any person, directly or indirectly, by the use of any means or instrumentality of interstate commerce or of the mails, or of any facility of any national securities exchange – . . . [t]o use or employ, in connection with the purchase or sale of any security registered on a national securities exchange or any security not so registered, or any securities-based swap agreement . . . any manipulative or deceptive device or contrivance in contravention of such rules and regulations as the Commission may prescribe as necessary or appropriate in the public interest or for the protection of investors.

In turn, Rule 10b-5, codified as amended at 17 C.F.R. §240.10b-5, provides:

It shall be unlawful for any person, directly or indirectly, by the use of any means or instrumentality of interstate commerce, or of the mails or of any facility of any national securities exchange,

(a)           To employ any device, scheme, or artifice to defraud,

(b)           To make any untrue statement of a material fact or to omit to state a material fact necessary … to make the statements made, in the light of the circumstances under which they were made, not misleading, or

(c)           To engage in any act, practice, or course of business which operates or would operate as a fraud or deceit upon any person, in connection with the purchase or sale of any security.

(Emphasis added)

15 Clark, Securities Law Issues and Disclosure Considerations for Life Science Companies, at 12-25.

16 See id.

17 Speech by William Hinman, Director, Division of Corporation Finance, SEC, "Applying a Principles-Based Approach to Disclosing Complex, Uncertain and Evolving Risks: Remarks at the 18th Annual Institute on Securities Regulation in Europe," London, England (March 15, 2019) (internal notes omitted); available at

18 See generally, Seth Aronson et al., Understanding the Securities Laws 2003: Liability for Exchange Act Violations, Understanding the Securities Laws, 1385 PLI/Corp. 834, 836 (2003) ("With the Sarbanes-Oxley Act of 2002, companies . . . [must] make certain real-time disclosures. . . . Issuers . . . [must] 'disclose . . . on a rapid and current basis such additional information concerning material changes in the financial condition or operations of the issuer, in plain English . . . as the Commission determines, by rule. . . .' 15 U.S.C. §78m(l). . . . [A] failure to do so can give rise to civil liability. . . . These disclosures include: (1) A change in control . . . ; (2) The company's acquisition or disposition of a significant amount of assets; (3) The company's bankruptcy or receivership; (4) A change in the company's certifying accountant; (5) The resignation of a company director; and (6) A change in the company's fiscal year. 15 U.S.C. §78m(l).").

See also SEC Release Nos. 33-8400; 34-49424; File No. S7-22-02, Final Rule: Additional Form 8-K Disclosure Requirements and Acceleration of Filing Date (Aug. 23, 2004), explaining why and how the Commission changed Form 8-K's reporting requirements:

Under the previous Form 8-K regime, companies were required to report very few significant corporate events. The limited number of Form 8-K disclosure items permitted a public company to delay disclosure of many significant events until the due date for its next periodic report . . . . The revisions that we adopt today will benefit markets by increasing the number of unquestionably or presumptively material events that must be disclosed currently. They will also provide investors with better and more timely disclosure of important corporate events.

On July 29, 2002, Congress enacted the Sarbanes-Oxley Act of 2002. Section 409 of this Act requires public companies to disclose "on a rapid and current basis" material information regarding changes in a company's financial condition or operations as we, by rule, determine to be necessary or useful for the protection of investors and in the public interest . . . .

19 Alan J. Berkeley, Materiality, Informal Disclosure, Soft Information, and Forward-Looking Statements Under Securities Laws 247, 249 (ALI-ABA SH001, 2002), citing Basic Inc. v. Levinson, 485 U.S. 224, 240 (1988).

20 See, e.g., Indiana State District Council of Laborers & Hod Carriers Pension & Welfare Fund v. Omnicare, Inc., 583 F.3d 935 (6 Cir. 2009), where the court largely affirmed the dismissal of a class action complaint. As the Omnicare court explained, disclosure was not required since the information was soft; moreover, the company had no duty to disclose illegal activities (even though it had claimed to be in legal compliance). Id. at 945.

21 See C. Edward Fletcher, Sophisticated Investors under the Federal Securities Laws, 1988 Duke L.J. 1081, 1090 (1988).

22 Fletcher, Sophisticated Investors under the Federal Securities Laws, 1988 Duke L.J. at 1087-88 (internal notes omitted).

Written by:

Baker Donelson

Baker Donelson on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide

JD Supra Privacy Policy

Updated: May 25, 2018:

JD Supra is a legal publishing service that connects experts and their content with broader audiences of professionals, journalists and associations.

This Privacy Policy describes how JD Supra, LLC ("JD Supra" or "we," "us," or "our") collects, uses and shares personal data collected from visitors to our website (located at (our "Website") who view only publicly-available content as well as subscribers to our services (such as our email digests or author tools)(our "Services"). By using our Website and registering for one of our Services, you are agreeing to the terms of this Privacy Policy.

Please note that if you subscribe to one of our Services, you can make choices about how we collect, use and share your information through our Privacy Center under the "My Account" dashboard (available if you are logged into your JD Supra account).

Collection of Information

Registration Information. When you register with JD Supra for our Website and Services, either as an author or as a subscriber, you will be asked to provide identifying information to create your JD Supra account ("Registration Data"), such as your:

  • Email
  • First Name
  • Last Name
  • Company Name
  • Company Industry
  • Title
  • Country

Other Information: We also collect other information you may voluntarily provide. This may include content you provide for publication. We may also receive your communications with others through our Website and Services (such as contacting an author through our Website) or communications directly with us (such as through email, feedback or other forms or social media). If you are a subscribed user, we will also collect your user preferences, such as the types of articles you would like to read.

Information from third parties (such as, from your employer or LinkedIn): We may also receive information about you from third party sources. For example, your employer may provide your information to us, such as in connection with an article submitted by your employer for publication. If you choose to use LinkedIn to subscribe to our Website and Services, we also collect information related to your LinkedIn account and profile.

Your interactions with our Website and Services: As is true of most websites, we gather certain information automatically. This information includes IP addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp and clickstream data. We use this information to analyze trends, to administer the Website and our Services, to improve the content and performance of our Website and Services, and to track users' movements around the site. We may also link this automatically-collected data to personal information, for example, to inform authors about who has read their articles. Some of this data is collected through information sent by your web browser. We also use cookies and other tracking technologies to collect this information. To learn more about cookies and other tracking technologies that JD Supra may use on our Website and Services please see our "Cookies Guide" page.

How do we use this information?

We use the information and data we collect principally in order to provide our Website and Services. More specifically, we may use your personal information to:

  • Operate our Website and Services and publish content;
  • Distribute content to you in accordance with your preferences as well as to provide other notifications to you (for example, updates about our policies and terms);
  • Measure readership and usage of the Website and Services;
  • Communicate with you regarding your questions and requests;
  • Authenticate users and to provide for the safety and security of our Website and Services;
  • Conduct research and similar activities to improve our Website and Services; and
  • Comply with our legal and regulatory responsibilities and to enforce our rights.

How is your information shared?

  • Content and other public information (such as an author profile) is shared on our Website and Services, including via email digests and social media feeds, and is accessible to the general public.
  • If you choose to use our Website and Services to communicate directly with a company or individual, such communication may be shared accordingly.
  • Readership information is provided to publishing law firms and authors of content to give them insight into their readership and to help them to improve their content.
  • Our Website may offer you the opportunity to share information through our Website, such as through Facebook's "Like" or Twitter's "Tweet" button. We offer this functionality to help generate interest in our Website and content and to permit you to recommend content to your contacts. You should be aware that sharing through such functionality may result in information being collected by the applicable social media network and possibly being made publicly available (for example, through a search engine). Any such information collection would be subject to such third party social media network's privacy policy.
  • Your information may also be shared to parties who support our business, such as professional advisors as well as web-hosting providers, analytics providers and other information technology providers.
  • Any court, governmental authority, law enforcement agency or other third party where we believe disclosure is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights, the rights of any third party or individuals' personal safety, or to detect, prevent, or otherwise address fraud, security or safety issues.
  • To our affiliated entities and in connection with the sale, assignment or other transfer of our company or our business.

How We Protect Your Information

JD Supra takes reasonable and appropriate precautions to insure that user information is protected from loss, misuse and unauthorized access, disclosure, alteration and destruction. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. You should keep in mind that no Internet transmission is ever 100% secure or error-free. Where you use log-in credentials (usernames, passwords) on our Website, please remember that it is your responsibility to safeguard them. If you believe that your log-in credentials have been compromised, please contact us at

Children's Information

Our Website and Services are not directed at children under the age of 16 and we do not knowingly collect personal information from children under the age of 16 through our Website and/or Services. If you have reason to believe that a child under the age of 16 has provided personal information to us, please contact us, and we will endeavor to delete that information from our databases.

Links to Other Websites

Our Website and Services may contain links to other websites. The operators of such other websites may collect information about you, including through cookies or other technologies. If you are using our Website or Services and click a link to another site, you will leave our Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We are not responsible for the data collection and use practices of such other sites. This Policy applies solely to the information collected in connection with your use of our Website and Services and does not apply to any practices conducted offline or in connection with any other websites.

Information for EU and Swiss Residents

JD Supra's principal place of business is in the United States. By subscribing to our website, you expressly consent to your information being processed in the United States.

  • Our Legal Basis for Processing: Generally, we rely on our legitimate interests in order to process your personal information. For example, we rely on this legal ground if we use your personal information to manage your Registration Data and administer our relationship with you; to deliver our Website and Services; understand and improve our Website and Services; report reader analytics to our authors; to personalize your experience on our Website and Services; and where necessary to protect or defend our or another's rights or property, or to detect, prevent, or otherwise address fraud, security, safety or privacy issues. Please see Article 6(1)(f) of the E.U. General Data Protection Regulation ("GDPR") In addition, there may be other situations where other grounds for processing may exist, such as where processing is a result of legal requirements (GDPR Article 6(1)(c)) or for reasons of public interest (GDPR Article 6(1)(e)). Please see the "Your Rights" section of this Privacy Policy immediately below for more information about how you may request that we limit or refrain from processing your personal information.
  • Your Rights
    • Right of Access/Portability: You can ask to review details about the information we hold about you and how that information has been used and disclosed. Note that we may request to verify your identification before fulfilling your request. You can also request that your personal information is provided to you in a commonly used electronic format so that you can share it with other organizations.
    • Right to Correct Information: You may ask that we make corrections to any information we hold, if you believe such correction to be necessary.
    • Right to Restrict Our Processing or Erasure of Information: You also have the right in certain circumstances to ask us to restrict processing of your personal information or to erase your personal information. Where you have consented to our use of your personal information, you can withdraw your consent at any time.

You can make a request to exercise any of these rights by emailing us at or by writing to us at:

Privacy Officer
JD Supra, LLC
10 Liberty Ship Way, Suite 300
Sausalito, California 94965

You can also manage your profile and subscriptions through our Privacy Center under the "My Account" dashboard.

We will make all practical efforts to respect your wishes. There may be times, however, where we are not able to fulfill your request, for example, if applicable law prohibits our compliance. Please note that JD Supra does not use "automatic decision making" or "profiling" as those terms are defined in the GDPR.

  • Timeframe for retaining your personal information: We will retain your personal information in a form that identifies you only for as long as it serves the purpose(s) for which it was initially collected as stated in this Privacy Policy, or subsequently authorized. We may continue processing your personal information for longer periods, but only for the time and to the extent such processing reasonably serves the purposes of archiving in the public interest, journalism, literature and art, scientific or historical research and statistical analysis, and subject to the protection of this Privacy Policy. For example, if you are an author, your personal information may continue to be published in connection with your article indefinitely. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
  • Onward Transfer to Third Parties: As noted in the "How We Share Your Data" Section above, JD Supra may share your information with third parties. When JD Supra discloses your personal information to third parties, we have ensured that such third parties have either certified under the EU-U.S. or Swiss Privacy Shield Framework and will process all personal data received from EU member states/Switzerland in reliance on the applicable Privacy Shield Framework or that they have been subjected to strict contractual provisions in their contract with us to guarantee an adequate level of data protection for your data.

California Privacy Rights

Pursuant to Section 1798.83 of the California Civil Code, our customers who are California residents have the right to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

You can make a request for this information by emailing us at or by writing to us at:

Privacy Officer
JD Supra, LLC
10 Liberty Ship Way, Suite 300
Sausalito, California 94965

Some browsers have incorporated a Do Not Track (DNT) feature. These features, when turned on, send a signal that you prefer that the website you are visiting not collect and use data regarding your online searching and browsing activities. As there is not yet a common understanding on how to interpret the DNT signal, we currently do not respond to DNT signals on our site.

Access/Correct/Update/Delete Personal Information

For non-EU/Swiss residents, if you would like to know what personal information we have about you, you can send an e-mail to We will be in contact with you (by mail or otherwise) to verify your identity and provide you the information you request. We will respond within 30 days to your request for access to your personal information. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why. If you would like to correct or update your personal information, you can manage your profile and subscriptions through our Privacy Center under the "My Account" dashboard. If you would like to delete your account or remove your information from our Website and Services, send an e-mail to

Changes in Our Privacy Policy

We reserve the right to change this Privacy Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our Privacy Policy will become effective upon posting of the revised policy on the Website. By continuing to use our Website and Services following such changes, you will be deemed to have agreed to such changes.

Contacting JD Supra

If you have any questions about this Privacy Policy, the practices of this site, your dealings with our Website or Services, or if you would like to change any of the information you have provided to us, please contact us at:

JD Supra Cookie Guide

As with many websites, JD Supra's website (located at (our "Website") and our services (such as our email article digests)(our "Services") use a standard technology called a "cookie" and other similar technologies (such as, pixels and web beacons), which are small data files that are transferred to your computer when you use our Website and Services. These technologies automatically identify your browser whenever you interact with our Website and Services.

How We Use Cookies and Other Tracking Technologies

We use cookies and other tracking technologies to:

  1. Improve the user experience on our Website and Services;
  2. Store the authorization token that users receive when they login to the private areas of our Website. This token is specific to a user's login session and requires a valid username and password to obtain. It is required to access the user's profile information, subscriptions, and analytics;
  3. Track anonymous site usage; and
  4. Permit connectivity with social media networks to permit content sharing.

There are different types of cookies and other technologies used our Website, notably:

  • "Session cookies" - These cookies only last as long as your online session, and disappear from your computer or device when you close your browser (like Internet Explorer, Google Chrome or Safari).
  • "Persistent cookies" - These cookies stay on your computer or device after your browser has been closed and last for a time specified in the cookie. We use persistent cookies when we need to know who you are for more than one browsing session. For example, we use them to remember your preferences for the next time you visit.
  • "Web Beacons/Pixels" - Some of our web pages and emails may also contain small electronic images known as web beacons, clear GIFs or single-pixel GIFs. These images are placed on a web page or email and typically work in conjunction with cookies to collect data. We use these images to identify our users and user behavior, such as counting the number of users who have visited a web page or acted upon one of our email digests.

JD Supra Cookies. We place our own cookies on your computer to track certain information about you while you are using our Website and Services. For example, we place a session cookie on your computer each time you visit our Website. We use these cookies to allow you to log-in to your subscriber account. In addition, through these cookies we are able to collect information about how you use the Website, including what browser you may be using, your IP address, and the URL address you came from upon visiting our Website and the URL you next visit (even if those URLs are not on our Website). We also utilize email web beacons to monitor whether our emails are being delivered and read. We also use these tools to help deliver reader analytics to our authors to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

Analytics/Performance Cookies. JD Supra also uses the following analytic tools to help us analyze the performance of our Website and Services as well as how visitors use our Website and Services:

  • HubSpot - For more information about HubSpot cookies, please visit
  • New Relic - For more information on New Relic cookies, please visit
  • Google Analytics - For more information on Google Analytics cookies, visit To opt-out of being tracked by Google Analytics across all websites visit This will allow you to download and install a Google Analytics cookie-free web browser.

Facebook, Twitter and other Social Network Cookies. Our content pages allow you to share content appearing on our Website and Services to your social media accounts through the "Like," "Tweet," or similar buttons displayed on such pages. To accomplish this Service, we embed code that such third party social networks provide and that we do not control. These buttons know that you are logged in to your social network account and therefore such social networks could also know that you are viewing the JD Supra Website.

Controlling and Deleting Cookies

If you would like to change how a browser uses cookies, including blocking or deleting cookies from the JD Supra Website and Services you can do so by changing the settings in your web browser. To control cookies, most browsers allow you to either accept or reject all cookies, only accept certain types of cookies, or prompt you every time a site wishes to save a cookie. It's also easy to delete cookies that are already saved on your device by a browser.

The processes for controlling and deleting cookies vary depending on which browser you use. To find out how to do so with a particular browser, you can use your browser's "Help" function or alternatively, you can visit which explains, step-by-step, how to control and delete cookies in most browsers.

Updates to This Policy

We may update this cookie policy and our Privacy Policy from time-to-time, particularly as technology changes. You can always check this page for the latest version. We may also notify you of changes to our privacy policy by email.

Contacting JD Supra

If you have any questions about how we use cookies and other tracking technologies, please contact us at:

- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.