UPDATE: Senate Bill Agreement

Early Wednesday morning, Senate Majority Leader Mitch McConnell announced that Senate Democrats and Republicans reached an agreement on the $2 trillion relief bill known as the Coronavirus Aid, Relief, and Economic Security (CARES) Act (“Act”). Late last night, the U.S. Senate approved the historic rescue plan which calls for $250 billion for direct payments to individuals and families, $350 billion in small business loans, $250 billion in unemployment insurance benefits and $500 billion in loans to distressed businesses. The House is scheduled to vote on the legislation Friday. President Trump urged Congress to act “without delay” and said he would sign the legislation immediately. The CARES Act includes the following provisions:

Direct Payments to Individuals – If passed, the Act would include payments to lower- and middle-income individuals of $1,200 for each adult (up to $2,400 for a married couple) and $500 for each child. Individuals who earn $75,000 or less and married couples earning $150,000 or less in adjusted gross income are entitled to the full payment. The payment would be reduced if income exceeds these amounts, phasing out entirely at $99,000 for singles, and $198,000 for couples without children. The income thresholds would be based on 2019 income tax returns, or 2018 if a 2019 return has not yet been filed.

Expansion of Unemployment Insurance – The Act would also extend coverage for unemployment insurance to four months, and increase the eligibility and amount provided by an extra $600 per week.

Limits and Oversight – There would be additional oversight on how companies use government loan funds, protecting workers and preventing companies from providing executive bonuses.

Paycheck Protection Program – The Act would increase the government guarantee of loans made for the Payment Protection Program under section 7(a) of the Small Business Act to 100 percent through December 31, 2020. It would increase the maximum 7(a) loan amount to $10 million through December 31, 2020, and provide a formula by which the loan amount is tied to payroll costs incurred by the business to determine the size of the loan. The Act specifies allowable uses of the loan include payroll support, such as employee salaries, paid sick or medical leave, insurance premiums, and mortgage, rent, and utility payments. Any loan amounts not forgiven at the end of one year (as discussed below) would be carried forward as an ongoing loan with a maximum term of 10 years, and a maximum interest rate of four percent (4%). The 100 percent loan guarantee would remain intact.

Loan Forgiveness – The Act would establish that the borrower will be eligible for loan forgiveness equal to the amount spent by the borrower during an 8-week period after the origination date of the loan on payroll costs, interest payment on any mortgage incurred prior to February 15, 2020, payment of rent on any lease in force prior to February 15, 2020, and payment on any utility for which service began before February 15, 2020. The amount of eligible loan forgiveness would be reduced proportionally by any reduction in employees retained compared to the prior-year and reduced by the reduction in pay of any employee beyond 25 percent of their prior-year compensation. To encourage employers to rehire any employees who have already been laid off due to the COVID-19 crisis, the Act provides that borrowers that re-hire workers previously laid off will not be penalized for having a reduced payroll at the beginning of the period.

Employee Retention Credit – This provision would provide a refundable payroll tax credit for 50 percent of wages paid by employers to employees during the COVID-19 crisis. The credit would be available to employers whose (1) operations were fully or partially suspended, due to a COVID-19 related shut-down order, or (2) gross receipts declined by more than 50 percent when compared to the same quarter in the prior year.

The credit would be based on qualified wages paid to the employee. For employers with greater than 100 full-time employees, qualified wages are wages paid to employees when they are not providing services due to the COVID-19-related circumstances described above.

For eligible employers with 100 or fewer full-time employees, all employee wages qualify for the credit, whether the employer is open for business or subject to a shut-down order. The credit would be provided for the first $10,000 of compensation, including health benefits, paid to an eligible employee. The credit would be provided for wages paid or incurred from March 13, 2020 through December 31, 2020.

Delay of Payment of Employer Payroll Taxes – This provision would allow employers and self-employed individuals to defer payment of the employer‘s share of the Social Security tax than they would otherwise be responsible for paying to the federal government with respect to their employees. Employers are generally responsible for paying a 6.2 percent Social Security tax on employee wages. The deferred employment tax would be paid over the following two years, with half of the amount required to be paid by December 31, 2021 and the other half by December 31, 2022.

Additional Business Tax Provisions – The following would be changes to the tax code aimed to assist businesses with cash flow:

  • Increase to the net operating loss (NOL) carryback period to five years for NOLs arising in 2018, 2019, or 2020
  • Modification to the limitation on losses for taxpayers other than corporations
  • Make corporate alternative minimum tax credits immediately refundable
  • Increase the limitation on business interest expense from 30 percent to 50 percent
  • Technical correction to allow for the immediate write off of qualified improvement property
  • Temporary exception from the alcohol excise tax for alcohol used in hand sanitizer
  • Increase to the corporate income limitation on charitable contributions to 25 percent

Additional Individual Tax Provisions – the following would be changes to the tax code aimed to assist individual taxpayers and families:

  • Waiver of the 10 percent early withdrawal penalty for distributions up to $100,000 from qualified retirement accounts, income would be subject to tax over three years, and the taxpayer may recontribute the funds to an eligible retirement plan within three years without regard to contribution limitations
  • Waiver of the required minimum distributions rules for 2020
  • Allowance of a $300 above-the-line deduction for charitable contributions
  • Elimination of the income limitation for charitable contributions

Since this is a developing story, we will continue to provide additional information as it becomes available. If this Act is signed into law, we will be providing a more comprehensive overview of these provisions and what they may mean for our clients. If you have any questions, or would like to discuss any of these provisions, please contact your Urish Popeck advisor.

COVID-19 Data Security Insights

In just a short amount of time, COVID-19 has had an immense impact on the global economy, as well as business operations around the world.  How companies stay resilient and can adapt in the face of COVID-19’s impact, will be a topic of discussion for many business leaders as new information continues to surface. Along with COVID-19’s impact, the changes business leaders implement to respond to the ongoing crisis may introduce unintentional security and privacy risks.
 
Our daily routines are being impacted, along with the activities we perform. This creates opportunities for hackers, and others with malintent, who thrive in this type of environment, to take advantage of uncertainties and changes to routines. What has not changed, however, is an organization’s responsibility to protect data and secure systems to reduce the risk of a breach or unauthorized access to information.  The regulatory requirements, and other state and industry standards for protecting information, are as critical as the day they were implemented, if not more so. GDPR, CCPA, NYDFS, PCI DSS, CFIUS, HIPAA, HITRUST, SOX, and so on – still need to be adhered to. 
 
The risk to an organization could increase if processes, implemented to help secure systems, protect data and information, and maintain daily operations, are not followed.  Personnel, who have the assigned roles and responsibilities for managing systems and the corresponding data environment, need continued support and assistance to meet their job assignments.
 
To add to the complexity of daily operations, organizations have been forced to consider remote work options and telecommuting to slow the spread of the virus.  There are certain technical considerations for remote workers, the first being the devices that they will use to conduct business.  For organizations that provide laptops, this is generally a non-issue, however, if your workforce is typically in the office, working remotely can present some additional challenges from an equipment standpoint. 
 

How will businesses secure remote access to company systems and data?

Businesses across the globe have been instituting remote work requirements to decrease the likelihood of spread and impact to business operations. Due to the increase of remote workers, businesses should secure access to company systems and data to ensure secure transmission of personal information. The actions below can help secure remote access to the organizations’ systems:

  • Require secure connections to remotely access company systems. A VPN solution should be leveraged to ensure transmission of data is secured over public networks. A common practice for many organizations is to use multi-factor authentication in conjunction with VPN to ensure authorized access.
  • Ensure session timeouts for connections into company systems. Allowing remote connections to stay open indefinitely increases the window of availability for unauthorized access.
  • Ensure workstations timeouts for remote workstations. With the increase of remote workers and remote workstations, businesses will be unable to physically secure these areas. By implementing workstation timeouts, businesses can reduce the availability of unauthorized access if a workstation were to be left unattended remotely.
  • Require email using the organization’s distributed solutions. Organizations are so dependent on email communications and in most instances corporate email is available remotely.  Employees should be reminded not to conduct corporate business over personal email accounts, text messages or third-party apps that are not managed by the organization.  This is a great opportunity to pick up the phone and speak with people in lieu of other typical communication channels.

How will businesses secure mobile assets?

Businesses should consider how mobile workstations will be secured. Due to remote working capabilities, an increase of mobile workstations provided to employees will need to be secured. Data at rest should be encrypted. Hard drives on workstations are commonly encrypted to ensure confidentiality of data. Just to start.
 
We are all adjusting to the changes as a result of COVID-19.  By supporting and reinforcing your organization’s processes, procedures and solutions, which were implemented to protect your data, the risk can be better managed. 

SEC Provides Conditional Relief and Assistance For Companies Affected By COVID-19

Filing Relief for Registrants Impacted by the Coronavirus

The SEC issued an exemptive order (the Order) on March 4, 2020 providing conditional relief for registrants that are impacted by the coronavirus (COVID-19) and are unable to file on a timely basis.  The Order provides companies with an extension of the due date of 45 days to file certain SEC disclosure reports that would have been due between March 1 and April 30, 2020. If a registrant intends to take advantage of this relief, the filing must disclose why it was unable to file on a timely basis. 

Additional steps must be taken to take advantage of the extension, including a requirement to furnish Form 8-K1 by the later of March 16, 2020 or the original reporting deadline, which includes the following information:

  1. A statement that the registrant is relying on the Order;
  2. A brief description of the reasons why the registrant cannot file on a timely basis;
  3. The estimated date the registrant expects to file;
  4. If appropriate, a risk factor explaining the impact of the coronavirus on the registrant’s business (if material); and
  5. If the reason the registrant is unable to file relates to a person other than the registrant, the Form 8-K must include an exhibit signed by that person containing the specific reasons why that person in unable to provide its opinion, report, certification, etc.

The due date for annual or quarterly reports for companies that receive an extension pursuant to the Order will be 45 days after the filing deadline for the report.  Those companies will be permitted to rely on the grace period in Exchange Act Rule 12b-25 to receive additional time to file the report (fifteen calendar days for an annual report and five calendar days for a quarterly report). Companies that take advantage of the extension permitted by the Order or the grace period permitted by Rule 12b-25 will still be considered current and timely Exchange Act filers for purposes of Form S-3 and Form S-8 eligibility.  

The Order also provides relief from the proxy and information statement delivery requirements for those delivering materials to the affected areas.

Further information can be found in the press release and exemptive order.  Registrants are encouraged to contact the SEC staff within the Division of Corporation Finance2 for any additional relief, assistance or other guidance. 

Disclosure Reminders for Registrants Impacted by the Coronavirus

The SEC’s press release announcing the Order also reminded all companies of their disclosure obligations under the federal securities laws:

  • If a company has become aware of a coronavirus related risk that would be material to its investors, it should refrain from engaging in securities transactions with the public.  Additionally, companies should take steps to prevent directors, officers, or other insiders from initiating such transactions until investors have been appropriately informed about the risk.
  • Companies should disseminate material information related to the impact of the coronavirus broadly and on a timely basis.  Previous disclosures may need to be revisited or updated. 
  • Companies providing forward-looking information or known trends and uncertainties regarding the coronavirus in an effort to keep investors informed can avail themselves of the safe harbor in Section 21E of the Exchange Act.