In combination with the Delaware Court of Chancery’s decision in In re Trulia, Inc. Stockholder Litigation, 129 A.3d 884 (Del. Ch. 2016), Judge Posner’s blistering opinion In re Walgreen Company Stockholder Litigation, 2016 WL 4207962 (7th Cir. Aug. 10, 2016), may well close the door on disclosure-only settlements in shareholder challenges to mergers.  That certainly feels just.  And it may well go a long way toward discouraging meritless merger litigation.  But, as I’ve cautioned, I am concerned that we will regret it.  Lost in the cheering over Trulia and Walgreen is a simple and practical reality: the availability of disclosure-only settlements is in the interests of merging companies as much as it is in the interests of shareholder plaintiffs’ lawyers, because disclosure-only settlements are often the most timely and efficient way to resolve shareholder challenges to mergers, even legitimate ones.

I am offended by meritless merger litigation, and have long advocated reforms to fix the system that not only allows it, but encourages and incentivizes it.  Certainly, strict scrutiny of disclosure-only settlements will reduce the number of merger claims—it already has.  Let’s say shareholder challenges mergers are permanently reduced from 90% to 60% of transactions.  That would be great.  But how do we then resolve the cases that remain?  Unfortunately, there aren’t efficient and generally agreeable alternatives to disclosure-only settlements to dispose of a merger lawsuit before the closing of the challenged transaction.  Of course, the parties can increase the merger price, though that is a difficult proposition.  The parties can also adjust other deal terms, but few merger partners want to alter the deal unless and until the alteration doesn’t actually matter, and settlements based on meaningless deal-structure changes won’t fare better with courts than meaningless disclosure-only settlements.

If the disclosure-only door to resolving merger cases is shut, then more cases will need to be litigated post-close.  That will make settlement more expensive.  Plaintiffs lawyers are not going to start to settle for less money, especially when they are forced to litigate for longer and invest more in their cases.   And in contrast to adjustments to the merger transaction or disclosures, in which 100% of the cash goes to lawyers for the “benefit” they provided, settlements based on the payment of cash to the class of plaintiffs require a much larger sum to yield the same amount of money to the plaintiffs’ lawyers.  For example, a $500,000 fee payment to plaintiffs’ under a disclosure-only settlement would require around $2 million in a settlement payment to the class to yield the same fee for the plaintiffs’ attorneys, assuming a 25% contingent-fee award.

The increase in the cash outlay required for companies and their insurers to deal with post-close merger litigation will actually be much higher than my example indicates.  Plaintiffs’ lawyers will spend more time on each case, and demand a higher settlement amount to yield a higher plaintiffs’ fee.  Defense costs will skyrocket.  And discovery in post-close cases will inevitably unearth problems that the disclosure-only settlement landscape camouflaged, significantly increasing the severity of many cases.  It is not hard to imagine that merger cases that could have settled for disclosures and a six-figure plaintiffs’ fee will often become an eight-figure mess.  And, beyond these unfortunate economic consequences, the inability to resolve merger litigation quickly and efficiently will increase the burden upon directors and officers by requiring continued service to companies they have sold, as they are forced to produce documents, sit for depositions, and consult with their defense lawyers, while the merger case careens toward trial.

Again, it’s hard to disagree with the logic and sentiment of these decisions, and the result may very well be more just.  But this justice will come with a high practical price tag.

One of my “5 Wishes for Securities Litigation Defense” (April 30, 2016 post) is greater involvement by boards of directors in decisions concerning D&O insurance and the defense of securities litigation, including defense-counsel selection. Far too often, directors cede these critical strategic decisions to management.

For most directors, securities litigation is a mysterious world ruled by sinister plaintiffs’ lawyers, powerful judges, and a unique legal framework that must be navigated by fancy defense lawyers who charge exorbitant fees. Directors react to this litigation with everything from unnecessary panic to an unjustified feeling of invincibility. The right approach is somewhere in the middle: “attentive concern.” Securities litigation can pose personal risk to directors as well as to their companies, but if directors educate themselves and pay attention, this risk is almost always manageable.

Of course, part of what makes the risk manageable is D&O insurance. But in the event of a claim, independent directors share their D&O insurance with the company and its management. Despite this competition for policy proceeds, directors typically leave management to handle D&O insurance decisions. Directors need to protect their own interests by having a greater role in deciding the features of their D&O insurance program and how the company uses the policy proceeds in the event of a claim.

Greater Involvement by Directors in Securities Litigation Defense

Why Should Directors Care?

Although much of the recent discussion about securities litigation has revolved around meritless merger litigation, securities class actions and associated shareholder derivative actions have always posed greater risk than merger actions. A securities class action alleges that a company and its representatives made false or misleading statements that artificially inflated the stock price. Directors are virtually always included in Section 11 cases, which challenge statements in registered offerings, and increasingly are also named in Section 10(b) actions, which can challenge any public corporate statement. Directors are often named in “tag-along” shareholder derivative actions as well, which allege that the directors failed to properly oversee the company’s public disclosures.

Often, it is difficult to know from the initial complaint whether a securities case will pose a personal risk to directors because it is merely a placeholder. Only after the court selects the lead plaintiff and lead counsel will the plaintiffs’ attorneys draft more substantial allegations and add defendants through an amended complaint. But regardless of any personal risk, directors have a duty to oversee the significant potential liability the company faces. For these reasons, directors should treat each one of these cases as if they are personally named.

The Economics of Securities Litigation Matter

One emerging risk to companies is that ever-increasing securities defense fees no longer match the economics of most cases, and are quickly outpacing D&O policy limits. In the past, securities class actions were initiated by an oligopoly of larger plaintiffs’ firms with significant resources and mostly institutional clients that tended to bring larger cases against larger companies. But recently, smaller plaintiffs’ firms with retail-investor clients have been initiating more cases, primarily against smaller companies. Indeed, in recent years, approximately half of all securities class actions were filed against companies with $750 million or less in market capitalization. As a result, securities class actions have shrunk in size to a level last seen in 1997.

Yet at the same time, the litigation costs of most defense firms have increased exponentially. This two-decade mismatch—between 1997 securities-litigation economics and 2016 law-firm economics—creates the danger that a company’s D&O policy will be insufficient to cover the fees for a vigorous defense and the price to resolve the case. Indeed, inadequate policy proceeds due to skyrocketing defense costs is directors’ biggest risk from securities litigation—by far.

Historically, most securities defense firms have marquee names with high billing rates. Especially in cases against small-cap companies—now the lion’s share—it is more difficult for these firms to vigorously defend an action without risking that there will be too little D&O insurance left for settlement. To avoid this result, firms either cut corners or settle early for bloated amounts that make the defendants look like they did something wrong.

Quite obviously, directors should not be subjected to these hazards—which are created not by the securities class action itself, but by law-firm economics. The vast majority of securities class actions—if handled in the right way by the right defense counsel—can be defended and either won or settled, within D&O insurance policy limits, leaving no residual liability for either the company or its directors. With just a little time and effort at the beginning of the litigation, directors can put these cases on the right track.

The Importance of Directors’ Involvement in Defense-Counsel Selection

First and foremost, directors must ensure their company selects the right counsel. Securities litigation is a specialty field, and it can be nearly impossible to differentiate between the claims of expertise and experience made by the herd of lawyers that descends upon a company after a suit is filed. And it is a serious error—especially for mid-size and smaller companies—to use a law firm brand name as a proxy for quality and fit. Fortunately, many pitfalls of counsel selection can be avoided if directors keep in mind a few key principles:

  • Select a securities litigation specialist, and not a multi-discipline commercial litigator, even one who is highly regarded and/or from a marquee firm.
  • Educate yourself about the strategic differences between firms.
  • Avoid defaulting to your regular corporate firm.
  • Conduct an interview process.

An interview process is essential, in all cases. Directors should use the interview process to insist on a better alternative than the rote decision by most companies to simply retain their regular outside counsel, or a firm with a marquee name. To state the obvious, the most effective securities defense lawyers do not all work at marquee firms. Directors should insist that management interview a range of firms, including those that emphasize a combination of superior quality and reasonable cost—in other words, firms that offer good value. And directors should insist that management push for price concessions from all defense firms that management interviews.

The key is for directors to pay attention and to use the leverage of a competitive hiring process to find counsel to help them through the litigation safely, strategically, and economically.

Directors’ Oversight of D&O Insurance

As a refresher, a D&O insurance policy has three categories of coverage.

  • Side A coverage reimburses directors and officers for losses not indemnified by the company.
  • Side B coverage reimburses the company for indemnification of its directors and officers.
  • Side C coverage insures the company for its own liability.

Directors’ exposure to securities litigation has changed. Due in part to the changes in the plaintiffs’ bar noted above, directors are now much more frequent targets in securities class actions and related shareholder derivative claims—and the trend is very likely to continue. Even as directors’ involvement in securities and derivative suits is increasing, their share of the D&O insurance is effectively decreasing, due to more competition for policy proceeds.

For example, companies frequently seek D&O insurance coverage for various types of investigations, which may help the company, but can significantly erode the policy limits. Companies also deplete limits by, among other things, requesting coverage for employees beyond directors and officers, and seeking ways to avoid triggering the fraud exclusion, which can result in large defense-costs payments to rogue officers. These types of decisions might make sense in certain circumstances, but they should be subject to director oversight.

Perhaps the biggest threat to the sufficiency of directors’ D&O insurance policy is from their own lawyers, due to skyrocketing defense costs. Some insurers have a pre-set list of lawyers from which defendants are encouraged or required to choose. This means that some of the counsel-selection process is done before a claim is filed—which is another reason directors should be involved in the D&O insurance purchasing decision.

Some companies try to eliminate the competition between the company and individuals for policy proceeds by purchasing separate Side A policies that cover only individuals, but these policies do not address erosion from other individuals or by attorneys’ fees, and they only apply if the company cannot indemnify the directors. There are Side A products available specifically for outside directors, but those are infrequently purchased, probably because directors are usually not involved in D&O insurance purchasing decisions.

Independent directors don’t need to take over the process of handling the company’s D&O insurance, or spend an inordinate amount of time on these issues, in order to adequately protect themselves. Rather, they need to become more involved and understand their D&O insurance options and the realities of the claim process. They can do this simply by asking for direct access to the D&O broker and insurer, and by spending some time on D&O insurance decisions at board meetings.

Conclusion

At the same time directors’ securities litigation risk is increasing, they share an increasing percentage of their D&O insurance with the company, officers, and even their own lawyers. Directors can mitigate the risks of these trends by simply becoming more involved in purchasing their D&O insurance and overseeing the defense of securities litigation, including defense-counsel selection. In doing so, they will not only protect their own interests, but will also better oversee and manage the company’s risks as well.

One of my “5 Wishes for Securities Litigation Defense” (April 30, 2016 post) is greater D&O insurer involvement in securities class action defense.

This simple step would have extensive benefits for public companies and their directors and officers. D&O insurers are repeat players in securities litigation, and they have the greatest economic interest in the outcome – both in particular cases, and overall.  They want the defendants – their insureds – to win.  They employ highly experienced claims professionals, many of whom have been involved in exponentially more securities class actions than even the most experienced defense lawyers.

Given insurers’ stake and expertise, defendants should involve them in key strategic decisions – working with them to help find the right defense counsel for the particular case, to help shape the overall defense strategy at the inception of the case, and to help make good decisions about the use of policy proceeds.  With such an approach, I have no doubt that directors and officers would make it through securities cases more successfully, efficiently, and comfortably.

Yet in most cases, insurers are shut out of meaningful involvement in the defense, with many defense lawyers treating them almost like adverse parties, and other defense lawyers merely humoring them as they would a rich relative.  Although this dysfunction is rooted in a complex set of factors, it could easily be fixed.

Why Are D&O Insurers Alienated?

When the general public thinks about insurance, they usually think of auto insurance or other duty-to-defend insurance, under which the insurer assumes the defense of the claim for the insureds.  In contrast to duty-to-defend insurance, public company D&O insurance is indemnity insurance, under which the insurer is obligated to reimburse the company and its directors and officers for reasonable and necessary defense costs and settlement payments, up to the policy’s limit of liability.

Indemnity insurance gives the defendants control over the litigation, including counsel selection and strategic approach, with the insurer retaining limited rights to participate in key decisions.  Although those rights give insurers a foot in the door, competitive pressures among primary D&O insurers work to minimize insurers’ involvement.  For example, an insurer faced with unreasonably high defense costs must decide whether to pay them in full to avoid conflict, or to pay only the “reasonable and necessary” amounts, as the policy specifies – an approach that  maximizes the policy proceeds for the insureds by not squandering policy limits on excessive legal fees.  But if the insurer pays only reasonable and necessary amounts, it may be criticized in the marketplace by the broker or other insurers as being stingy with claims handling – and the insureds may be left holding the bill for the unreasonable excess fees.

In general, insurers take a relatively hands-off approach to D&O claims because they assume that their customers want them to stay out of the defense of the claim.  But in my experience, this is a misconception.  The priority for most companies and their directors and officers is simply the greatest protection possible, including assurances that they will not be left to pay any uncovered legal fees or settlement payments.  In fact, not only do most insureds not want to be stuck paying their lawyers for short-pays, they don’t even want to write any checks at all after satisfying the deductible – instead preferring the insurer to take charge of the bills and pay the lawyers and vendors directly.

In other words, most public companies actually want their D&O insurance to respond more like duty-to-defend insurance.  And if given a choice between having the freedom to choose any defense counsel and having total control over the defense, and saving on their premium and giving the insurers greater rights to be involved, I’m confident most public companies would choose to save on the premium, as long as they are confident that they will still be well-defended.  This is especially so for smaller public companies, for whom the cost of D&O insurance can be a hardship, and against whom the plaintiffs’ bar is bringing more and more securities class actions.  And few companies, large or small, would knowingly spend more on their premiums just to subsidize skyrocketing biglaw partner compensation – the D&O insurance elephant in the corner of the room.

Why do insurers have this misconception?  To be sure, after a claim is filed, the insurer often gets an earful from the insureds’ lawyers and broker about the insureds’ indemnity-insurance freedoms.  But these aggressive positions are typically not the positions of the insureds themselves.  Instead, these positions are driven by defense counsel, usually for self-interested reasons: to get hired, to justify excessive billing, or to settle a case for a bloated amount because the defense is compromised by mounting defense costs or the defense lawyer’s inability to take the case to trial.

Frequently, defense lawyers will set the stage for their clients to have a strained relationship with their insurers by feeding them a number of stock lines:

  • This is a bet-the-company case that requires all-out effort by us to defend you, so we have to pull out all the stops and do whatever is necessary, no matter what the insurer has to say.
  • The insurer may ask you to interview several defense firms before choosing your lawyers. Don’t do that. They’ll just want to get some inferior, cut-rate firm that will save them money.  But you’ll get what you pay for – we’re expensive for a reason! (And don’t forget that we have stood by you, through thick and thin, since before your IPO, back when you were a partner here.  Plus, we gave you advice on your disclosures and stock sales, so we’re in this together.)
  • The business of any insurance company is to try to avoid paying on claims, so the insurer may try to curtail our level of effort, and may even refuse to pay for some of our work.  But trust us to do what we need to do for you.  You might need to make up the difference between our bills and what the insurer pays, but we can go after the insurer later to try to get them to pay you back for those amounts.
  • The insurer will ask us for information about the case.  They’ll say they want to help us, but they’re really just trying to find a way to deny coverage.
  • We’ll tell you when we think the time is right to settle the case, and for how much.  The insurer will try to avoid paying very much for settlement.  But if we say the settlement is reasonable, they won’t have a leg to stand on.
  • We’ll need you to support us in these insurance disputes.  You don’t need to get involved directly – we can work with the insurer and broker directly if you agree.  Agree?  Good.

In this way, defense lawyers set the insurer up as an adversary.  But these self-serving talking points get myriad things wrong.

First, and most importantly, D&O insurers are not the insured’s adversaries in the defense of a securities class action.  To the contrary, insurers’ economic interests are aligned with those of the insureds.  Insurers want to help minimize the risk of liability, through good strategic decisions.  Although keeping defense costs to a reasonable level certainly benefits the insurer, it also benefits the insureds by preserving policy proceeds for related or additional claims on the policy, so that the insureds will not need to pay any defense or settlement costs out-of-pocket, and will avoid a significant premium increase upon renewal.  And insurers want their insureds to have superior lawyers – inferior lawyers would increase their exposure.  Their interest in counsel selection is to help their insureds choose the defense counsel that is right for the particular case.  The key to defense-counsel selection in securities class actions, for insureds and insurers alike, is to find the right combination of expertise and economics for the particular case – in other words, to find good value.

A D&O insurer’s business is not to avoid paying claims.  D&O insurance is decidedly insured-friendly – which isn’t surprising given its importance to a company’s directors and officers.  D&O insurers pay billions of dollars in claims each year, and there is very little D&O insurance coverage litigation.  Although D&O insurance excludes coverage for fraud, the fraud exclusion requires a final adjudication – it does not even come into play when the claim is settled, and even if the case went to trial and there was a verdict for the plaintiffs, it would only be triggered under limited circumstances.  Indeed, if they are utilized correctly, D&O insurers can be highly valuable colleagues in securities class action defense.  Because they are repeat players in securities class actions, they are able to offer valuable insights in defense-counsel selection, motion-to-dismiss strategy, and overall defense strategy.  They have the most experience with securities class action mediators and plaintiffs’ counsel, and often have key strategic thoughts about how to approach settlement.  The top outside lawyers and senior claims professionals for the major insurers have collectively handled many thousands of securities class actions.  Although their role is different than that of defense counsel, these professionals are more sophisticated about securities litigation practice than the vast majority of defense lawyers.

I have achieved superior results for many clients by working collegially with insurers – from helping shape motion-to-dismiss arguments, to learning insights about particular plaintiffs’ lawyers and their latest tricks, to selecting the right mediator for a particular case, to achieving favorable settlements that don’t leave the impression of guilt.  Treating insurers as adversaries robs defendants of this type of valuable guidance.

How Can We Achieve Greater Insurer Involvement?

D&O insurers should set aside their preconceived notions about what the insureds really care about and want.  Insurers need to appreciate that their insureds often welcome their expertise and experience – especially at smaller public companies that have less familiarity with securities class actions, and a more pressing need to control their costs.  Not only is there an opportunity for greater involvement within the current D&O insurance product, but there is a market for new terms and products that allow greater insurer involvement, with corresponding premium or coverage advantages to the insureds.

Many insurers correctly address their claim-handling capabilities as part of the underwriting process.  As part of this discussion, insurers should set the expectation that the insureds will consult with the insurer about the defense-counsel selection process before the defendants select counsel.  Insurers have a unique perspective on the pros and cons of particular defense counsel, since they know the capabilities and economics of the relatively small bar of securities class action defense counsel very well.  They can help the insureds identify several defense firms that would be a good match for the substantive characteristics of the case.  For example, they might know that a particular firm has helpful experience in cases involving a particular industry or type of allegation, or has a good or bad track record with the assigned judge.  Insurers can also help match the economics of the litigation with particular firms.  They would know whether or not a particular firm is able to effectively defend a case within the limits of the D&O insurance, and conversely, they would know whether a firm has enough resources to effectively handle a large claim.

Although I am not an insurance lawyer, I believe this type of discussion is perfectly appropriate within the terms of existing insurance contracts.  But if there is any doubt, existing policy forms could be tweaked to explicitly include greater insurer involvement.  For example, the insurance contract could require the insureds to consult with the insurer about the defense-counsel process before engaging defense counsel, such as with a provision similar to the explicit requirement in D&O policies that insureds speak with the insurer before engaging in any settlement discussions.

Last, but certainly not least, I strongly believe that a public company duty-to-defend product for a “Securities Claim” would be highly attractive to many public companies, especially smaller companies.  Many companies would gladly pay somewhat less for their D&O insurance in exchange for giving insurers somewhat greater control, as long as they know that they will be defended well.  Such a policy would eliminate the risk that clients will have to make up for insurance short-pays, as they are often asked to do under indemnity insurance, while allowing the insurers to manage defense costs to help ensure that the policy proceeds will adequately cover the cost of defending and settling the litigation, and will not be needlessly expended.  As the cost of securities class action defense continues to skyrocket, even as the size of the typical securities case continues to decline, it is time for the D&O insurance industry to consider introducing a product that will provide excellent coverage at a fair price that is affordable to smaller companies.

One of my “5 Wishes for Securities Litigation Defense” (April 30, 2016 post) is to require an interview process for the selection of defense counsel in all cases.

When a public company purchases a significant good or service, it typically seeks competitive proposals.  From coffee machines to architects, companies invite multiple vendors to bid, evaluate their proposals, and choose one based on a combination of quality and cost.  Yet companies named in a securities class action frequently fail to engage in a competitive interview process for their defense counsel, and instead simply retain litigation lawyers at the firm they use for their corporate work.

To be sure, it is difficult for company management to tell their outside corporate lawyers that they are going to consider hiring another firm to defend a significant litigation matter.  The corporate lawyers are trusted advisors, often former colleagues of the in-house counsel, and have usually made sacrifices for the client that make the corporate lawyers expect to be repaid through engagement to defend whatever litigation might arise.  A big litigation matter is what makes all of the miscellaneous loss-leader work worth it.  “You owe me,” is the unspoken, and sometimes spoken, message.

Corporate lawyers also make the pitch that it will be more efficient for their litigation colleagues to defend the litigation since the corporate lawyers know the facts and can more efficiently work with the firm’s litigators.  Meanwhile, they tell the client that there is no conflict—even if their work on the company’s disclosures is at issue, they assure the company that they will all be on the same side in defending the disclosures, and if they have to be witnesses, the lawyer-as-witness rules will allow them to work around the issue.

All of these assertions are flawed.  It is always—without exception—in the interests of the defendants to take a day to interview several defense firms of different types and perspectives.  And it is never—without exception—in the interests of the defendants to simply hand the case off to the litigators of the company’s corporate firm.  Even if the defendants hire the company’s corporate firm at the end of the interview process, they will have gained highly valuable strategic insights from multiple perspectives; cost concessions that only a competitive interview process will yield; better relationships with their insurers, who will be more comfortable with more thoughtful counsel selection; greater comfort with the corporate firm’s litigators, whom the defendants sometimes have never even met; and better service from the corporate firm.

Problems with Using Corporate Counsel

A Section 10(b) claim involves litigation of whether the defendants:  (1) made a false statement, or failed to disclose a fact that made what they said misleading in context; and (2) made any such false or misleading statements with intent to defraud (i.e. scienter).

Corporate counsel is very often an important fact witness for the defendants on both of these issues.  For example, in a great many cases, corporate counsel has:

  • Drafted the disclosures that plaintiffs challenge, so that the answer to the question “why did you say that?” is “our lawyers wrote it for us.”
  • Advised that omitted information wasn’t required to be disclosed, so that the answer to the question “why didn’t you disclose that” is “our lawyers told us we didn’t have to.”
  • Reviewed disclosures without questioning anything, or not questioning the challenged portion.
  • Drafted the risk factors that are the potential basis of the protection of the Reform Act’s Safe Harbor for forward-looking statements.
  • Not revised the risk factors that are the potential basis of Safe Harbor protection.
  • Advised on the ability of directors and officers to enter into 10b5-1 plans and when to do so, and on the ability of directors and officers to sell stock at certain times, given the presence or absence of material nonpublic information.
  • Advised on individual stock purchases.

The fact that the lawyer has given such advice, or not given such advice, can win the case for the defendants.  For example, for any case turning on a statement of opinion, the lawyer’s advice that the opinion had a reasonable basis virtually guarantees that the defendants won’t be liable.  Likewise, a lawyer’s drafting, revising, or advising on disclosures virtually guarantees that the defendants didn’t make the misrepresentation with scienter, and a lawyer’s advice on the timing of entering into 10b5-1 plans or selling stock makes the sales benign for scienter purposes.

To the defendants, it doesn’t matter if the lawyer was right or wrong.  As long as the advice wasn’t so obviously wrong that the client could not have followed it in good faith, the lawyer’s advice protects the defendants.  But to the lawyer, it matters a great deal for purposes of professional reputation and liability.  Deepening the conflict is the specter of the law firm defending its advice on the basis that the client didn’t tell them everything.  The interests of the lawyer and defendant client thus can diverge significantly.

That this information may be privileged doesn’t change this analysis.  Of course, the privilege belongs to the client, who can decide whether to use the information in his or her defense, or not.  But with corporate counsel’s litigation colleagues guiding the development of the facts, privileged information is rarely analyzed, much less discussed with the client.  The reality is that most privileged information isn’t truly sensitive to the client, but instead reflects a client seeking advice—and seeking the liability protection the lawyer’s advice provides.  But from the lawyer’s perspective, there can be much to protect.  Privileged communications may reflect poor legal advice, and internal files may contain candid discussions about the client and the client’s issues that would result in embarrassment to the firm, and possible termination, if produced.

Perhaps even more importantly, regular corporate counsel’s litigation colleagues may often fail to assess the case objectively, in part because it implicates the work of their corporate colleagues, and in part because of a desire not to ask hard questions that could strain the law firm’s relationship with the client.  Sometimes the problem arises from a deliberate attempt by the lawyers to protect a particular person who may have made an error leading to the litigation, such as the General Counsel (often is a former colleague), the CFO, or the CEO—all of whom are important to the client relationship.  Sometimes, though, the failure to thoughtfully analyze a case is due to a more generalized alliance with the people with whom the law firm works regularly.  It’s hard for a lawyer to scrutinize someone who will be in the firm’s luxury box at the baseball game that night, much less report a serious problem with him or her to the board.

Yet the defendants, including the board of the corporate client, need candid advice about the litigation to protect their interests.  For example, some problematic cases should be settled early, before the insurance limits are significantly eroded by defense costs and documents are produced that that will make the case even more difficult, and could even spawn other litigation or government investigations.  Defendants and corporate boards need to know this.

Corporate firms might counter that their litigation colleagues will give sound and independent advice, because they are a separate department and will face no economic or other pressure from the corporate department.  But that undermines one of the main reasons corporate lawyers urge that their litigation colleagues be hired: that it is more efficient to use the firm’s litigators since they work closely with the corporate lawyers, if not the company itself.  The corporate firm can’t have it both ways: either the litigators are close to the corporate lawyers and the company, and suffer from the problems outlined above, or they are independent, and their involvement yields little or no benefit in efficiency.  Indeed, it is most likely that the corporate firm’s litigators will be hindered by conflict, while nevertheless failing to create greater efficiency.  Just because lawyers are in a same firm doesn’t mean that they can read each other’s minds.  They still have to talk to one another, just as litigators from an outside firm would have to do.

So Why is Corporate Counsel Used So Often?

I doubt many directors or officers would disagree with the analysis above.  So why do so many companies turn to their corporate counsel without conducting an audition process?  Several practical factors impede the proper analysis of counsel selection in the initial days of a securities class action.

The single most important factor is probably that the corporate firm is first on the scene. Many companies reflexively hire their corporate firm immediately after the initial complaint is filed, or even after the stock drop, before a complaint is even filed.  By the time the defendants start to hear from other securities defense practices, they often have retained counsel.  And then it’s very difficult from a personal and practical perspective to walk the decision back.

This decision, moreover, is often made by the legal department, sometimes in consultation with the CEO and CFO.  The board is often not involved.  Instead, the board is merely presented with the decision, which can seem natural because the firm hired is familiar to them.  The directors often aren’t personally named in the initial complaint, so they might not pay as much attention as they would if they understood if they were likely to become defendants later – either in the main securities action, especially if the case involves a potential Section 11 claim, or in a tag-along shareholder derivative action.

Initial complaints can also mislead the company as to the real issues at stake.  Regular corporate counsel and the defendants may review the first complaint and incorrectly conclude that the allegations don’t implicate the lawyer’s work.  But these initial complaints are merely placeholders, because the Reform Act specifies that the lead plaintiff appointed by the court can later file an amended complaint.  Initial filers have little incentive to invest the time or effort into making detailed allegations in the initial complaint, because they may be beaten out for the lead plaintiff role.  The lead plaintiff’s amended complaint thus typically greatly expands the case to include new alleged false and misleading statements, more specific reasons why the challenged statements were false or misleading, and more detailed scienter allegations, including stock-sale and confidential-witness allegations that most initial complaints lack.  If a conflict becomes apparent at that point, however, it can be very difficult and even prejudicial to the defendants for corporate counsel to bow out.

Regular corporate counsel will often advise their clients that there is no issue with them defending the litigation, or even that doing so makes sense because they advised on the underlying disclosures.  But even if the corporate firm is trying to be candid and look out for its client’s interests, it may have blind spots in seeing its potential conflicts—especially when the corporate lawyers are facing pressure from their firm management to “hold the client.”

The pressures that lead a company to hire its corporate firm to defend the securities litigation are very real, and sometimes this decision is ultimately fine.  But I strongly believe that it is never in a client’s interest to take its corporate counsel’s advice on these issues without obtaining analysis from other securities practices as part of a competitive interview process.

The Benefits of a Competitive Process

In addition to obtaining important perspectives about potential problems with corporate counsel’s defense of the securities class action, an interview process involves myriad benefits – including tens of thousands of dollars of free legal advice.  The only cost to the company is a few hours to select the 3-5 firms that it wants to interview, and a day spent hearing presentations from those firms and discussing their analysis and approach with them.

An interview process gives defendants the opportunity to hear from several experienced securities litigators, who will offer a range of analyses and strategies on how best to defend the case.  It also allows defendants to evaluate professional credentials and personal compatibility, which are both important criteria.  It is difficult, if not impossible, for a company to evaluate how their corporate counsel’s litigators stack up against other litigators in this specialized and national practice area, without first hearing from some other firms.  Sometimes, a company will not even meet its corporate firm’s securities litigators in person before engaging them, which obviously makes it impossible for them to make judgments about personal compatibility and trust.

An interview process, if properly structured, is highly substantive.  The firms that fare best in a new-case interview typically prepare thorough discussions of the issues, and come prepared to analyze the case in great detail.  And the best ones look beyond the issues in the initial complaint to the issues that might emerge in the amended complaint, analyzing the full range of the company’s disclosures, to forecast future disclosure and scienter allegations, and evaluating the defenses that will remain even after allegations are added.

An interview process also helps the company to achieve a better deal on billing rates, staffing, and alternative fee arrangements.  Without an interview process, a law firm is much more likely to charge rack rates and do its work in the way it sees fit—which defendants are rarely in a position to challenge without having done some comparison shopping.  Even though securities class action defense costs are covered by D&O insurance, price matters in defense-counsel selection.  It is a mistake to treat D&O insurance proceeds as “free money.”  Without appropriate cost control, defendants run the risk of not having enough insurance proceeds to defend and resolve the case.  Appropriate cost control can help the litigation from resulting in a difficult or expensive D&O insurance renewal, and can allow the company to save money if the fees are less than the deductible.

An interview process also helps get the defendants off to a better start with its D&O insurers.  In addition to appreciating the cost control that an interview process yields, insurers also appreciate the defendants making a thoughtful decision on defense counsel, including vetting the potential problems with use of the company’s corporate firm.  D&O insurers and brokers are “repeat players” in securities litigation, and know the qualifications of defense counsel better than anyone else—a seasoned D&O insurance claims professional has overseen hundreds of securities class actions.  Asking insurers and brokers to help identify defense counsel to interview may therefore not only yield helpful suggestions, but may also make it easier to develop a relationship of strategic trust with the insurers—which will make it easier to obtain consent to settle early if appropriate, and if not, to defend the case through summary judgment or to trial.

Perhaps most importantly, an interview process results in a closer relationship between the defendants and their lawyers, whoever they end up being.  Most securities class action defendants are troubled by being sued, and need lawyers that they can trust to walk them through the process.  An interview process is the best way to find the lawyers who have the right combination of relevant characteristics—including skills, strategy, and bedside manner—that will best fit the needs of the defendants.

I am committed to helping shape a system for securities litigation defense that helps directors and officers get through securities litigation safely and efficiently, without losing their serenity or dignity, and without facing any real risk of paying any personal funds.

But we are actually moving in the opposite direction of this goal, and unless some changes are made, securities litigation will pose greater and greater risk to individual directors and officers.  It is time for the “repeat players” in securities litigation defense – D&O insurers and brokers, defense lawyers, and economists – to make some fundamental changes to how we do things.  Although most cases still seem to turn out fine for the individual defendants, resolved by a dismissal or a settlement that is fully funded by D&O insurance, the bigger picture is not pretty.  The law firms that have defended the lion’s share of cases since securities class actions gained footing through Basic v. Levinson – primarily “biglaw” firms based in the country’s several largest cities – are no longer suitable for many, or even most, securities class actions.  Fueled by high billing rates and profit-focused staffing, those firms’ skyrocketing defense costs threaten to exhaust most or all of the D&O insurance towers in cases that are not dismissed on a motion to dismiss.  Rarely can such firms defend cases vigorously through summary judgment and toward trial anymore.

Worse, these high prices too often do not yield strategic benefits.  A strong motion to dismiss focuses on the truth of what the defendants said, with support from the context of the statements, as directed by the U.S. Supreme Court in Tellabs and Omnicare.  Yet far too often, the motion-to-dismiss briefs that come out of these large firms are little more than cookie-cutter arguments based on the structure of the Reform Act.  And if a motion is lost, settlements are higher than necessary because the defendants often have no option but to settle in order to avoid an avalanche of defense costs that would exhaust their D&O insurance limits.  On the other hand, if settlement occurs later, it can be difficult to keep settlement within D&O insurance limits – and defense counsel’s analysis of a “reasonable” settlement can be influenced by a desire to justify the amount they have billed.

At the same time that defense costs are continuing to rise exponentially, securities class actions are becoming smaller and smaller, with two-thirds of cases brought against companies with market caps less than $2 billion, and almost half under $750 million.  Although catawampus securities litigation economics is a systemic problem, impacting cases of all sizes, the problem is especially acute in the smallest half of cases.  Some of those cases simply cannot be defended both well and economically by typical defense firms.  Either defense costs become ridiculously large for the size of the case and the amount of the D&O insurance limits, or firms try to reduce costs by cutting corners on staffing and projects – or both.  We see large law firms routinely chase smaller and smaller cases.  From a market perspective, it makes no sense at all.

So how do we achieve a better securities litigation system?  Five changes would have a profound impact:

  1. Require an interview process for the selection of defense counsel, to allow the defendants to understand their options; to evaluate conflicts of interest and the advantages and disadvantages of using their corporate firm to defend the litigation; and to achieve cost concessions that only a competitive interview process can yield.
  2. Increase the involvement of D&O insurers in defense-counsel selection and in other strategic defense decisions, to put those who have the greatest overall experience and economic stake in securities class action defense in a position to provide meaningful input.
  3. Make the Supreme Court’s Omnicare decision a primary tool in the defense of securities class actions.  Obviously, Omnicare should be used to defend against challenges to all forms of opinions, including statements regarded as “puffery” and forward-looking statements protected by the Reform Act’s Safe Harbor for forward-looking statements.  But defense counsel should also take advantage of the Supreme Court’s direction in Omnicare that courts evaluate challenged statements in their full factual context.  Omnicare supplements the Court’s previous direction in Tellabs that courts evaluate scienter by considering not just the complaint’s allegations, but also documents incorporated by reference and documents subject to judicial notice.  Together, Omnicare and Tellabs allow defense counsel to defend their clients’ honesty with a robust factual record at the motion to dismiss stage.
  4. Increase the involvement of boards of directors in decisions concerning D&O insurance and the defense of securities litigation, including counsel selection, to ensure their personal protection and good oversight of the defense of the company and themselves.
  5. Move damages expert reports and discovery ahead of fact discovery, to allow the defendants and their D&O insurers to understand the real economics of cases that survive a motion to dismiss, and to make more informed litigation and settlement decisions.

These five changes are among the top wishes I have to improve securities litigation defense, and to preserve the protections of directors and officers who face securities litigation.  Over the next several months, I will post about each one.  Here are links to the posts in the series so far:

Wish #1:  5 Wishes for Securities Litigation Defense: A Defense-Counsel Interview Process in All Cases

Wish #2:  5 Wishes for Securities Litigation Defense: Greater Insurer Involvement in Defense-Counsel Selection and Strategy

Wish #3:  5 Wishes for Securities Litigation Defense: Effective Use of the Supreme Court’s Omnicare Decision

Wish #4:  5 Wishes for Securities Litigation Defense: Greater Director Involvement in Securities Litigation Defense and D&O Insurance

Wish #5:  5 Wishes for Securities Litigation Defense: Early Damages Analysis and Discovery

Following is an article we wrote for Law360, which gave us permission to republish it here:

The coming year promises to be a pivotal one in the world of securities and corporate governance litigation.  In particular, there are five developing issues we are watching that have the greatest potential to significantly increase or decrease the exposure of public companies and their directors, officers, and insurers.

1.  How Will Lower Courts Apply the Supreme Court’s Decision in Omnicare, Inc. v. Laborers Dist. Council Const. Industry Pension Fund?

If it is correctly understood and applied by defendants and the courts, we believe Omnicare will stand alongside Tellabs, Inc. v. Makor Issues & Rights, Ltd., 551 U.S. 308 (2007), as one of the two most important securities litigation decisions since the Private Securities Litigation Reform Act of 1995.

In Omnicare, 135 S. Ct. 1318 (2015), the Supreme Court held that a statement of opinion is only false if the speaker does not genuinely believe it, and that it is only misleading if – as with any other statement – it omits facts that make it misleading when viewed in its full context.  The Court’s ruling on what is necessary for an opinion to be false establishes a uniform standard that resolves two decades of confusing and conflicting case law, which often resulted in meritless securities cases surviving dismissal motions.  And the Court’s ruling regarding how an opinion may be misleading emphasizes that courts must evaluate the fairness of challenged statements (both opinions and other statements) within a broad factual context, eliminating the short-shrift that many courts have given the misleading-statement analysis.

These are tremendous improvements in the law, and should help defendants win more cases involving statements of opinion, not only under Section 11, the statute at issue in Omnicare, but also under Section 10(b), since Omnicare’s holding applies to the “false or misleading statement” element common to both statutes.  The standards the Court set should also add to the Reform Act’s Safe Harbor, and expand the tools that defendants have to defend against challenges to earnings forecasts and other forward-looking statements, which are quintessential opinions.

Indeed, if used correctly, Omnicare should also help defendants gain dismissal of claims brought based on challenged statements of fact, because of its emphasis on the importance of considering the entire context of a statement when determining whether it was misleading.   For example, the Court emphasized that whether a statement is misleading “always depends on context,” so a statement must be understood in its “broader frame,” including “in light of all its surrounding text, including hedges, disclaimers, and apparently conflicting information,” and the “customs and practices of the relevant industry.”

A good motion to dismiss has always analyzed a challenged statement (of fact or opinion) in its broader factual context to explain why it was not misleading.  But many defense lawyers unfortunately choose to leave out this broader context, and as a result of this narrow record, courts sometimes take a narrower view.  With Omnicare, this superior method of analysis is now explicitly required.  This will be a powerful tool, especially when combined with Tellabs’s directive that courts must weigh scienter inferences based not only on the complaint’s allegations, but also on documents on which the complaint relies or that are subject to judicial notice.

Omnicare bolsters the array of weapons available to defendants to effectively defend allegations of falsity, and to set up and support the Safe Harbor defense and arguments against scienter.  Because of its importance, we plan to write a piece critiquing the cases applying Omnicare after its one-year anniversary in March.

2.  Will Courts Continue to Curtail the Use of 10b5-1 Plans as a Way to Undermine Scienter Allegations?

All successful securities fraud complaints must persuade the court that the difference between the challenged statements and the “corrective” disclosure was the result of fraud, and not due to a business reversal or some other non-fraudulent cause.  Because few securities class action complaints contain direct evidence of fraud, such as specific information that a speaker knew his statements were false, most successful complaints include allegations that the defendants somehow profited from the alleged fraud, such as through unusual and suspicious stock sales.

Thus, stock-sale allegations are a key battleground in most securities actions.  An important defensive tactic has been to point out that the challenged stock sales were made under stock-sale plans under SEC Rule 10b5-1, which provides an affirmative defense to insider-trading claims, if the plan was established in good faith at a time when they were unaware of material non-public information.  Although Rule 10b5-1 is designed to be an affirmative defense in insider-trading cases, securities class action defendants also use it to undermine stock-sale allegations, if the plan has been publicly disclosed and thus subject to judicial notice, since it shows that the defendant did not have control over the allegedly unusual and suspicious stock sales.

Plaintiffs’ argument in response to a 10b5-1 plan defense has always been that any plan adopted during the class period is just a large insider sale designed to take advantage of the artificial inflation in the stock price.  Plaintiffs claim that by definition, the class period is a time during which the defendants had material nonpublic information – although they often manipulate the class period in order to encompass stock sales and the establishment of 10b5-1 plans.

There have been surprisingly few key court decisions on this pivotal issue, but on July 24, 2015, the Second Circuit held that “[w]hen executives enter into a trading plan during the Class Period and the Complaint sufficiently alleges that the purpose of the plan was to take advantage of an inflated stock price, the plan provides no defense to scienter allegations.” Employees’ Ret. Sys. of Gov’t of the Virgin Island v. Blanford, 794 F.3d 297, 309 (2d Cir. 2015).

Plaintiffs’ ability to plead scienter will take a huge step forward if Blanford, decided by an important appellate court, starts a wave of similar holdings in other circuits.

3.  Will Delaware’s Endorsement of Forum Selection Bylaws and Rejection of Disclosure-Only Settlements Reduce Shareholder Challenges to Mergers?

For the past several years, there has been great focus on amending corporate bylaws to try to corral and curtail shareholder corporate-governance claims, principally shareholder challenges to mergers.  Meritless merger litigation is indeed a big problem.  It is a slap in the face to careful directors who have worked hard to understand and approve a merger, and to CEOs who have worked long hours to find and negotiate a transaction that is in the shareholders’ best interests.  It is cold comfort to know that nearly all mergers draw shareholder litigation, and that nearly all of those cases will settle before the transaction closes without any payment by the directors or officers personally.  It is proof that the system is broken when it routinely allows meritless suits to result in significant recoveries for plaintiffs’ lawyers, with virtually nothing gained by companies or their shareholders.

In 2015, the Delaware legislature and courts took significant steps to curb meritless merger litigation.

First, the legislature added new Section 115 to the Delaware General Corporation Law (“DGCL”), which provides:

The certificate of incorporation or the bylaws may require, consistent with applicable jurisdictional requirements, that any or all internal corporate claims shall be brought solely and exclusively in any or all of the courts in this State.

This provision essentially codified the holding in Boilermakers Local 154 Ret. Fund v. Chevron Corp., 73 A.3d 934 (Del. Ch. 2013), in which the Delaware Court of Chancery upheld the validity of bylaws requiring that corporate governance litigation be brought only in Delaware state and federal courts.  The Delaware legislature also amended the DGCL to ban bylaws that purport to shift fees.  In new subsection (f) to Section 102, the certificate of incorporation “may not contain any provision that would impose liability on a stockholder for the attorneys’ fees or expenses of the corporation or any other party in connection with an internal corporate claim.” See also DGCL Section 109(b) (similar).

Second, in a series of decisions in 2015, the Delaware Court of Chancery rejected or criticized so-called disclosure-only settlements, under which the target company supplements its proxy-statement disclosures in exchange for a payment to the plaintiffs’ lawyers.  See Acevedo v. Aeroflex Holding Corp., et al., C.A. No. 7930-VCL (Del. Ch. July 8, 2015) (TRANSCRIPT) (rejecting disclosure-only settlement); In re Aruba Networks S’holder Litig., C.A. No. 10765-VCL (Del. Ch. Oct. 9, 2015) (TRANSCRIPT) (same); In re Riverbed Tech., Inc., S’holder Litig., 2015 WL 5458041, C.A. No. 10484-VCG (Del. Ch. Sept. 17, 2015) (approving disclosure-only settlement with broad release, but suggesting that approval of such settlements “will be diminished or eliminated going forward”); In re Intermune, Inc., S’holder Litig., C.A. No. 10086–VCN (Del. Ch. July 8, 2015) (TRANSCRIPT) (noting concern regarding global release in disclosure-only settlement).

We will be closely watching the impact of these developments, with the hope that they will deter plaintiffs from reflexively filing meritless merger cases.  Delaware exclusive-forum bylaws will force plaintiffs to face the scrutiny of Delaware courts, and the Court of Chancery has indicated that it may no longer allow an easy exit from these cases through a disclosure-only settlement.  And with cases in a single forum, defendants will now be able to coordinate them for early motions to dismiss.  Thus, the number of mergers subject to a shareholder lawsuit should decline – and the early returns suggest that this may already be happening.

Yet defendants should brace for negative consequences.  Plaintiffs’ lawyers will doubtless bring more cases outside of Delaware against non-Delaware corporations, or against companies that haven’t adopted a Delaware exclusive-forum bylaw.  And within Delaware, plaintiffs’ lawyers will tend to bring more meritorious cases that present greater risk, exposure, and stigma – and while Delaware is a defendant-friendly forum for good transactions, it is a decidedly unfriendly one for bad ones.  If disclosure-only settlements are no longer allowed, defendants will no longer have the option of escaping these cases easily and cheaply.  This means that those cases that are filed will doubtless require more expensive litigation, and result in more significant settlements and judgments.  Thus, although the current system is undoubtedly badly flawed, many companies may well look back on the days of this broken system with nostalgia, and conclude that they were better off before it was “fixed.”

4.  Will Item 303 Claims Make a Difference in Securities Class Actions?

The key liability provisions of the federal securities laws, Section 10(b) of the Securities Exchange Act of 1934 and Section 11 of the Securities Act of 1933, both require that plaintiffs establish a false statement, or a statement that is rendered misleading by the omission of facts.  Over the last several years, plaintiffs’ lawyers have increasingly tried to bypass this element by asserting claims for pure omissions, detached from any challenged statement.

Plaintiffs base these claims on Item 303 of SEC Regulation S-K, which requires companies to provide a “management’s discussion and analysis” (MD&A) of the company’s “financial condition, changes in financial condition and results of operations.”  Item 303(a)(3)(ii) indicates that the MD&A must include a description of “any known trends or uncertainties that have had or that the [company] reasonably expects will have a material … unfavorable impact on net sales or revenues or income from continuing operations.”

Both Section 10(b) and Section 11 prohibit a false statement or omission of a fact that causes a statement to be misleading, while Section 11 also allows a claim based on an issuer’s failure to disclose “a material fact required to be stated” in a registration statement. 15 U.S.C. § 77k(a) (emphasis added).  Item 303 is one regulation that lists such “material fact(s) required to be stated.”  Panther Partners Inc. v. Ikanos Communications, Inc., 681 F.3d 114, 120 (2d Cir. 2012).  Based on this unique statutory language, Section 11 claims thus appropriately can include claims based on Item 303.

Last year, in Stratte-McClure v. Morgan Stanley, 776 F.3d 94 (2d Cir. 2015), the Second Circuit held that Item 303 also imposes a duty to disclose for purposes of Section 10(b), meaning that the omission of information required by Item 303 can provide the basis for a Section 10(b) claim.  This ruling is at odds with the Ninth Circuit’s opinion in In re NVIDIA Corp. Securities Litigation, 768 F.3d 1046 (9th Cir. 2014), in which the court held that Item 303 does not establish such a duty.  The U.S. Supreme Court declined a cert petition in NVIDIA.

Claims based on Item 303 seem innocuous enough, and even against plaintiffs’ interest. Plaintiffs face a high hurdle in showing that information was wrongfully excluded under Item 303, since they must show that a company actually knew:  (1) the facts underlying the trend or uncertainty, (2) those known facts yield a trend or uncertainty, and (3) the trend or uncertainty will have a negative and material impact.  In virtually all cases, these sorts of omitted facts would also render one or more of defendants’ affirmative statements misleading, and thus be subject to challenge regardless.  Moreover, in Section 11 cases, Item 303 injects knowledge and causation requirements in a statute that normally doesn’t require scienter and only includes causation as an affirmative defense.

Why, then, have plaintiffs’ counsel pushed Item 303 claims so hard?  We believe they’ve done so to combat the cardinal rule that silence, absent a duty to disclose, is not misleading.  Companies omit thousands of facts every time they speak, and it is relatively easy for a plaintiff to identify omitted facts – but much more difficult to explain how those omissions rendered an affirmative statement misleading.  Plaintiffs likely initially saw these claims as a way to maintain class actions in the event the Supreme Court overruled Basic v. Levinson as a result of attacks in the Amgen and Halliburton cases.  And even though the Supreme Court declined to overrule Basic in Halliburton II, the Court’s price-impact rule presents problems for plaintiffs in some cases.  As a result, plaintiffs may believe it is in their strategic interests to assert Item 303 claims, which plaintiffs have contended fall under the Affiliated Ute presumption of reliance, rather than under Basic.

But whatever plaintiffs’ rationale, Item 303 is largely a red herring.  Although it shouldn’t matter to securities litigation, it will matter, as long as plaintiffs continue to bring such claims.  And they probably will continue to bring them, given the current strategic considerations, and the legal footing they have been given by key appellate rulings in Panther Partners and Stratte-McClure.  Defense attorneys will have to pay close attention to these trends and mount sophisticated defenses to these claims, to ensure that Item 303 claims do not take on a life of their own.

5.  Cyber Security Securities and Derivative Litigation: Will There Be a Wave or Trickle?

One of the foremost uncertainties in securities and corporate governance litigation is the extent to which cyber security will become a significant D&O liability issue.  Although many practitioners have been bracing for a wave of cyber security D&O matters, to date there has been only a trickle.

We remain convinced that a wave is coming, perhaps a tidal wave, and that it will include not just derivative litigation, but securities class actions and SEC enforcement matters as well.  To date, plaintiffs generally haven’t filed cyber security securities class actions because stock prices have not significantly dropped when companies have disclosed breaches.  That is bound to change as the market begins to distinguish companies on the basis of cyber security.  There have been a number of shareholder derivative actions asserting that boards failed to properly oversee their companies’ cyber security.  Those actions will continue, and likely increase, whether or not plaintiffs file cyber security securities class actions, but they will increase exponentially if securities class action filings pick up.

While the frequency of cyber security shareholder litigation will inevitably increase, we are more worried about its severity, because of the notorious statistics concerning a lack of attention by companies and boards to cyber security oversight and disclosure.  Indeed, the shareholder litigation may well be ugly:  The more directors and officers are on notice about the severity of cyber security problems, and the less action they take while on notice, the easier it will be for plaintiffs to prove their claims.

We also worry about SEC enforcement actions concerning cyber security.  The SEC has been struggling to refine its guidance to companies on cyber security disclosure, trying to balance the concern of disclosing too much and thus providing hackers with a roadmap, with the need to disclose enough to allow investors to evaluate companies’ cyber security risk.  But directors and officers should not assume that the SEC will announce new guidance or issue new rules before it begins new enforcement activity in this area.  All it takes to trigger an investigation of a particular company is some information that the company’s disclosures were rendered false or misleading by inadequate cyber security.  And all it takes to trigger broader enforcement activity is a perception that companies are not taking cyber security disclosure seriously.  As in all areas of legal compliance, companies need to be concerned about whistleblowers, including overworked and underpaid IT personnel, lured by the SEC’s whistleblower bounty program, and about auditors, who will soon be asking more frequent and difficult questions about cyber security.

Conclusion

Of course, there are a number of other important issues that deserve to be on watch lists.  But given the line we’ve drawn – issues that will cause the most volatility in securities litigation liability exposure – we regard the issues we’ve discussed as the top five.

And the top one – whether lower courts will properly apply Omnicare – is a rare game-changer.  If defense counsel understands and uses Omnicare correctly, and if lower courts apply it as the Supreme Court intended, securities litigation decisions will be based on reality, and therefore far fairer and more just.  But if either defense counsel or lower courts get it wrong, companies and their directors and officers will suffer outcomes that are less predictable, more arbitrary, and often wrong.

Over the past three years, I’ve been outspoken about the need for better board oversight of cyber security, as well as the need for better cyber security disclosure.  The severity of the cyber threat is so significant to companies, as well as to the nation’s economy and security, that boards have no choice but to pay attention.  Indeed, I can easily envision a world where, as a practical matter, directors face a heightened risk of personal liability for cyber-security problems.  And over the past several years, there has developed an army of talented IT, legal, and insurance professionals ready to help boards manage this threat, and there are some very proactive, outspoken, and conscientious directors who are trying to lead the way.

Yet surveys still say that, on the whole, directors aren’t sufficiently engaged, and companies aren’t providing directors with sufficient information and support.

How in the world could that be so?

Below, I examine two of the underlying problems, and provide solutions: (1) a suite of problems that I call “cyber freak-out,” and (2) an odd lack of concern about director liability.

Cyber Freak-Out

The average corporate director was 47 years old when Amazon became a public company.  Although that was also almost 20 years ago, and most people who serve on boards have grown comfortable with computers and the basics of technology, there is nevertheless a fundamental sense of discomfort with discussion around the IT aspects of cyber security.

This discomfort yields a suite of problems that I diagnose collectively as “cyber freak-out.”  Cyber freak-out includes one or more of the following stated or unstated excuses for not tackling cyber security issues:

  • Excuse: The audit committee handles risks, so that’s the right group to handle cyber security.
    • Reality: Cyber security is an enterprise risk that the full board needs to understand and decide how to manage – even if it is ultimately given to a committee.  And the audit committee has too much work already.
  • Excuse: Being hacked is inevitable, so we can’t do much about it.
    • Reality: The reality is cyber security oversight isn’t just about preventing attacks – it’s also about deciding what assets to protect and how to respond to a breach, among other issues.
  • Excuse: Cyber security is an IT issue, and the IT folks have told us for years that we’re safe.
    • Reality: The world of cyber security poses higher risks now, and it’s incumbent upon the board to ask hard questions of the IT department.  There are outside consultants galore who can give the board an independent evaluation. And cyber security is not just an IT issue.  Most cyber attacks can be prevented through employee education – which presents issues of employee training and corporate culture, which even a Luddite director can help shape.
  • And there are several more things few people say out loud, but I fear that too many think:
    • Excuse: We should have been on top of this earlier, so engaging in a full-scale program of cyber security readiness will make us look bad.
    • Excuse: I don’t want to ask a dumb question, and don’t think I can ask a smart one.
    • Excuse: If I wait long enough, one of my fellow directors will get up to speed and lead us through what we need to do.

Reality: The absurdity of these excuses speaks for itself.

Another common mistake is to assume that cyber attacks are limited to companies with personal information, like credit card numbers or health information.  That is wrong:  Any company with valuable assets – including trade secrets – is and will be a target.  The reason that companies with personal information grab the headlines is that their breaches have become public because of breach-notification laws.  Companies that aren’t subject to breach-notification laws rarely disclose cyber breaches.  One of the country’s leading cyber-security lawyers to public companies said at the SEC’s Cybersecurity Roundtable in March 2014 – in the presence of SEC Chair White and Commissioners Aguilar (who gave an important speech in June 2014 on board oversight of cyber security), Gallagher, Piwowar, and Stein:

I would say that I really can’t think of a case – and we’ve worked a lot –  where the disclosure thinking or analysis was driven by the securities law issues, frankly.

Basically there are other state laws, other situations that are going to create a disclosure obligation, and that’s what drives it. And I think just to be someone speaking from the trenches in terms of the reality of what really happens, there is a tremendous disincentive to disclose a breach.

I believe that the well-known cyber breaches are the very tip of the iceberg, and the much larger cyber security problem is, and will be, beneath the surface until companies start disclosing cyber security issues because of their yet-unenforced federal securities law obligations.  A company whose IP has been stolen, or whose business has been interrupted, faces various disclosure issues.   The issue isn’t just whether a breach is material.  It’s much broader: a cyber security breach could make any number of statements misleading, including financial statements, earnings guidance, statements about internal controls, and statements about the status and prospects of the business operations.  Yet most directors seem to believe that cyber security is just a problem for banks, retailers, and health-care providers and insurers.  That’s just not so.

The problem with cyber freak-out is that it undercuts directors’ main defenses to shareholder claims of breach of fiduciary duty.  There are two main claims for breach of fiduciary duty in this area:

The first type of claim is for a failure to act, or a failure to engage in appropriate oversight, under a standard articulated in a leading case called Caremark.  The court in Caremark called the claim it branded “possibly the most difficult theory in corporation law upon which a plaintiff might hope to win a judgment.”  To be liable for a failure of oversight – a type of breach of the duty of loyalty – a director must fail to establish any system for detecting problems, or if a system exists, must deliberately fail to monitor it or follow up on red flags.  Thus, the only way a director can be liable for a failure of oversight is to not even try – or in the cyber security context, to be paralyzed by cyber freak-out.

In contrast to a claim for inaction, the second type of claim is based on director action.  Such claims are governed by the business judgment rule, which protects from second-guessing a decision made by informed and disinterested directors.  A shareholder can overcome the presumption, however, if the challenged decision was not informed.  Cyber freak-out can result in challenged cyber-security decisions being insufficiently informed, and thus outside the protection of the business judgment rule.

Thus, directors will not be liable if they in fact oversee cyber security, and make decisions about cyber security based on adequate information. Boards need to just pay attention and start somewhere – there’s no secret sauce, and perfection isn’t required.  There’s no cyber-security intelligence test.  An inquisitive director can do a good job overseeing cyber security without even being a computer user.

Director Liability

On the one hand, diligent directors don’t face real risk of liability for cyber security oversight.  On the other hand, I believe the fear of director and officer liability needs to increase before directors and officers and their companies sufficiently tune up their cyber security oversight and disclosures.

Although I don’t wish a lawsuit on anyone, much less actual liability, I think some jarring liability event is necessary: Just as Bill Lerach, Mel Weiss, and other prominent securities class action plaintiffs’ lawyers have greatly improved the quality of corporate disclosure, and corporate-law decisions like Smith v. Van Gorkom have improved board decision-making processes, so too would a cyber-security liability jolt improve cyber-security oversight and disclosure.  But at the moment, directors and officers observe that stocks generally haven’t dropped enough to trigger securities class actions, and the handful of shareholder derivative cases haven’t been virulent.  And the shareholder derivative litigation dismissal in Wyndham, while great for Wyndham’s directors, probably set cyber security oversight back.  The Wyndham decision, resting on the board’s post-breach process in deciding to reject a shareholder demand on the board, was virtually meaningless in its impact on the law governing board oversight of cyber security.

But securities and corporate governance litigation involving cyber security problems is indeed coming.  And it may be ugly.  The more directors and officers are on notice about the severity of cyber security problems, and the less action they take while on notice, the easier it will be for plaintiffs to prove their claims.  We not only could see a sharp uptick in the number of claims, but they could be quite difficult for directors and officers to defend, until cyber security oversight and disclosure improve.  I worry about this dynamic a lot.

I also worry about SEC enforcement concerning cyber security. The SEC has been struggling to refine its guidance to companies on cyber security disclosure, trying to balance the concern of disclosing too much and thus providing hackers with a roadmap, with the need to disclose enough to allow investors to evaluate companies’ cyber security risk.  But directors and officers shouldn’t think the SEC is going to announce new guidance or make new rules before it begins enforcement activity around cyber security disclosures.  All it takes to trigger an investigation of a particular company is some information that the company’s disclosures are rendered false or misleading by inadequate cyber security.  And all it takes to trigger broader enforcement activity by the staff is a perception that companies aren’t taking cyber security disclosure seriously.  That may or may not be preceded by further cyber security disclosure guidance.  And companies need to be concerned about whistleblowers, including over-worked and under-paid IT personnel, lured by the SEC’s whistleblower bounty program, and about auditors, who will soon be asking more frequent and difficult questions about cyber security.

Conclusion

Greater cyber security oversight, and better corporate disclosure, are inevitable.  I hope that they happen naturally, as the result of good counseling by the advisors who are ready and able to help, rather than only developing after we are hit by the inevitable wave of shareholder litigation and SEC investigations and enforcement actions.

When a public company purchases a significant good or service, it typically seeks competitive proposals.  From coffee machines to architects, companies invite multiple vendors to bid, evaluate their proposals, and choose one based on a combination of quality and cost.  Yet companies named in a securities class action frequently fail to engage in a competitive interview process for their defense counsel, and instead simply retain litigation lawyers at the firm they use for their corporate work.

To be sure, it is difficult for company management to tell their outside corporate lawyers that they are going to consider hiring another firm to defend a significant litigation matter.  The corporate lawyers are trusted advisors, often former colleagues of the in-house counsel, and have usually made sacrifices for the client that make the corporate lawyers expect to be repaid through engagement to defend whatever litigation might arise.  A big litigation matter is what makes all of the miscellaneous loss-leader work worth it.  “You owe me,” is the unspoken, and sometimes spoken, message.

Corporate lawyers also make the pitch that it will be more efficient for their litigation colleagues to defend the litigation since the corporate lawyers know the facts and can more efficiently work with the firm’s litigators.  Meanwhile, they tell the client that there is no conflict – even if their work on the company’s disclosures is at issue, they assure the company that they will all be on the same side in defending the disclosures, and if they have to be witnesses, the lawyer-as-witness rules will allow them to work around the issue.

All of these assertions are flawed.  It is always – without exception – in the interests of the defendants to take a day to interview several defense firms of different types and perspectives.  And it is never – without exception – in the interests of the defendants to simply hand the case off to the litigators of the company’s corporate firm.  Even if the defendants hire the company’s corporate firm at the end of the interview process, they will have gained highly valuable strategic insights from multiple perspectives; cost concessions that only a competitive interview process will yield; better relationships with their insurers, who will be more comfortable with more thoughtful counsel selection; greater comfort with the corporate firm’s litigators, whom the defendants sometimes have never even met; and better service from the corporate firm.

Problems with Using Corporate Counsel

A Section 10(b) claim involves litigation of whether the defendants:  (1) made a false statement, or failed to disclose a fact that made what they said misleading in context; and (2) made any such false or misleading statements with intent to defraud (i.e. scienter).

Corporate counsel is very often an important fact witness for the defendants on both of these issues.  For example, in a great many cases, corporate counsel has:

  • Drafted the disclosures that plaintiffs challenge, so that the answer to the question “why did you say that?” is “our lawyers wrote it for us.”
  • Advised that omitted information wasn’t required to be disclosed, so that the answer to the question “why didn’t you disclose that” is “our lawyers told us we didn’t have to.”
  • Reviewed disclosures without questioning anything, or not questioning the challenged portion.
  • Drafted the risk factors that are the potential basis of the protection of the Reform Act’s Safe Harbor for forward-looking statements.
  • Not revised the risk factors that are the potential basis of Safe Harbor protection.
  • Advised on the ability of directors and officers to enter into 10b5-1 plans and when to do so, and on the ability of directors and officers to sell stock at certain times, given the presence or absence of material nonpublic information.
  • Advised on individual stock purchases.

The fact that the lawyer has given such advice, or not given such advice, can win the case for the defendants.  For example, for any case turning on a statement of opinion, the lawyer’s advice that the opinion had a reasonable basis virtually guarantees that the defendants won’t be liable.  Likewise, a lawyer’s drafting, revising, or advising on disclosures virtually guarantees that the defendants didn’t make the misrepresentation with scienter, and a lawyer’s advice on the timing of entering into 10b5-1 plans or selling stock makes the sales benign for scienter purposes.

To the defendants, it doesn’t matter if the lawyer was right or wrong.  As long as the advice wasn’t so obviously wrong that the client could not have followed it in good faith, the lawyer’s advice protects the defendants.  But to the lawyer, it matters a great deal for purposes of professional reputation and liability.  Deepening the conflict is the specter of the law firm defending its advice on the basis that the client didn’t tell them everything.  The interests of the lawyer and defendant client thus can diverge significantly.

That this information may be privileged doesn’t change this analysis.  Of course, the privilege belongs to the client, who can decide whether to use the information in his or her defense, or not.  But with corporate counsel’s litigation colleagues guiding the development of the facts, privileged information is rarely analyzed, much less discussed with the client.  The reality is that most privileged information isn’t truly sensitive to the client, but instead reflects a client seeking advice – and seeking the liability protection the lawyer’s advice provides.  But from the lawyer’s perspective, there can be much to protect.  Privileged communications may reflect poor legal advice, and internal files may contain candid discussions about the client and the client’s issues that would result in embarrassment to the firm, and possible termination, if produced.

Perhaps even more importantly, regular corporate counsel’s litigation colleagues may often fail to assess the case objectively, in part because it implicates the work of their corporate colleagues, and in part because of a desire not to ask hard questions that could strain the law firm’s relationship with the client.  Sometimes the problem arises from a deliberate attempt by the lawyers to protect a particular person who may have made an error leading to the litigation, such as the General Counsel (often is a former colleague), the CFO, or the CEO – all of whom are important to the client relationship.  Sometimes, though, the failure to thoughtfully analyze a case is due to a more generalized alliance with the people with whom the law firm works regularly.  It’s hard for a lawyer to scrutinize someone who will be in the firm’s luxury box at the baseball game that night, much less report a serious problem with him or her to the board.

Yet the defendants, including the board of the corporate client, need candid advice about the litigation to protect their interests.  For example, some problematic cases should be settled early, before the insurance limits are significantly eroded by defense costs and documents are produced that that will make the case even more difficult, and could even spawn other litigation or government investigations.  Defendants and corporate boards need to know this.

Corporate firms might counter that their litigation colleagues will give sound and independent advice, because they are a separate department and will face no economic or other pressure from the corporate department.  But that undermines one of the main reasons corporate lawyers urge that their litigation colleagues be hired: that it is more efficient to use the firm’s litigators since they work closely with the corporate lawyers, if not the company itself.  The corporate firm can’t have it both ways: either the litigators are close to the corporate lawyers and the company, and suffer from the problems outlined above, or they are independent, and their involvement yields little or no benefit in efficiency.  Indeed, it is most likely that the corporate firm’s litigators will be hindered by conflict, while nevertheless failing to create greater efficiency.  Just because lawyers are in a same firm doesn’t mean that they can read each other’s minds.  They still have to talk to one another, just as litigators from an outside firm would have to do.

So Why is Corporate Counsel Used So Often?

I doubt many directors or officers would disagree with the analysis above.  So why do so many companies turn to their corporate counsel without conducting an audition process?  Several practical factors impede the proper analysis of counsel selection in the initial days of a securities class action.

The single most important factor is probably that the corporate firm is first on the scene. Many companies reflexively hire their corporate firm immediately after the initial complaint is filed, or even after the stock drop, before a complaint is even filed.  By the time the defendants start to hear from other securities defense practices, they often have retained counsel.  And then it’s very difficult from a personal and practical perspective to walk the decision back.

This decision, moreover, is often made by the legal department, sometimes in consultation with the CEO and CFO.  The board is often not involved.  Instead, the board is merely presented with the decision, which can seem natural because the firm hired is familiar to them.  The directors often aren’t personally named in the initial complaint, so they might not pay as much attention as they would if they understood if they were likely to become defendants later – either in the main securities action, especially if the case involves a potential Section 11 claim, or in a tag-along shareholder derivative action.

Initial complaints can also mislead the company as to the real issues at stake.  Regular corporate counsel and the defendants may review the first complaint and incorrectly conclude that the allegations don’t implicate the lawyer’s work.  But these initial complaints are merely placeholders, because the Reform Act specifies that the lead plaintiff appointed by the court can later file an amended complaint.  Initial filers have little incentive to invest the time or effort into making detailed allegations in the initial complaint, because they may be beaten out for the lead plaintiff role.  The lead plaintiff’s amended complaint thus typically greatly expands the case to include new alleged false and misleading statements, more specific reasons why the challenged statements were false or misleading, and more detailed scienter allegations, including stock-sale and confidential-witness allegations that most initial complaints lack.  If a conflict becomes apparent at that point, however, it can be very difficult and even prejudicial to the defendants for corporate counsel to bow out.

Regular corporate counsel will often advise their clients that there is no issue with them defending the litigation, or even that doing so makes sense because they advised on the underlying disclosures.  But even if the corporate firm is trying to be candid and look out for its client’s interests, it may have blind spots in seeing its potential conflicts – especially when the corporate lawyers are facing pressure from their firm management to “hold the client.”

The pressures that lead a company to hire its corporate firm to defend the securities litigation are very real, and sometimes this decision is ultimately fine.  But I strongly believe that it is never in a client’s interest to take its corporate counsel’s advice on these issues without obtaining analysis from other securities practices as part of a competitive interview process.

The Benefits of a Competitive Process

In addition to obtaining important perspectives about potential problems with corporate counsel’s defense of the securities class action, an interview process involves myriad benefits – including tens of thousands of dollars of free legal advice.  The only cost to the company is a few hours to select the 3-5 firms that it wants to interview, and a day spent hearing presentations from those firms and discussing their analysis and approach with them.

An interview process gives defendants the opportunity to hear from several experienced securities litigators, who will offer a range of analyses and strategies on how best to defend the case.  It also allows defendants to evaluate professional credentials and personal compatibility, which are both important criteria.  It is difficult, if not impossible, for a company to evaluate how their corporate counsel’s litigators stack up against other litigators in this specialized and national practice area, without first hearing from some other firms.  Sometimes, a company will not even meet its corporate firm’s securities litigators in person before engaging them, which obviously makes it impossible for them to make judgments about personal compatibility and trust.

An interview process, if properly structured, is highly substantive.  The firms that fare best in a new-case interview typically prepare thorough discussions of the issues, and come prepared to analyze the case in great detail.  And the best ones look beyond the issues in the initial complaint to the issues that might emerge in the amended complaint, analyzing the full range of the company’s disclosures, to forecast future disclosure and scienter allegations, and evaluating the defenses that will remain even after allegations are added.

An interview process also helps the company to achieve a better deal on billing rates, staffing, and alternative fee arrangements.  Without an interview process, a law firm is much more likely to charge rack rates and do its work in the way it sees fit – which defendants are rarely in a position to challenge without having done some comparison shopping.  Even though securities class action defense costs are covered by D&O insurance, price matters in defense-counsel selection.  It is a mistake to treat D&O insurance proceeds as “free money.”  Without appropriate cost control, defendants run the risk of not having enough insurance proceeds to defend and resolve the case.  Appropriate cost control can help the litigation from resulting in a difficult or expensive D&O insurance renewal, and can allow the company to save money if the fees are less than the deductible.

An interview process also helps get the defendants off to a better start with its D&O insurers.  In addition to appreciating the cost control that an interview process yields, insurers also appreciate the defendants making a thoughtful decision on defense counsel, including vetting the potential problems with use of the company’s corporate firm.  D&O insurers and brokers are “repeat players” in securities litigation, and know the qualifications of defense counsel better than anyone else – a seasoned D&O insurance claims professional has overseen hundreds of securities class actions.  Asking insurers and brokers to help identify defense counsel to interview may therefore not only yield helpful suggestions, but may also make it easier to develop a relationship of strategic trust with the insurers – which will make it easier to obtain consent to settle early if appropriate, and if not, to defend the case through summary judgment or to trial.

Perhaps most importantly, an interview process results in a closer relationship between the defendants and their lawyers, whoever they end up being.  Most securities class action defendants are troubled by being sued, and need lawyers that they can trust to walk them through the process.  An interview process is the best way to find the lawyers who have the right combination of relevant characteristics – including skills, strategy, and bedside manner – that will best fit the needs of the defendants.

One of the foremost uncertainties in securities and corporate governance litigation is the extent to which cybersecurity will become a significant D&O liability issue. Although many D&O practitioners have been bracing for a wave of cybersecurity D&O matters, to date there has been only a trickle. Some have come to believe that at most, there will be a surge of derivative litigation, due to the lack of significant and sustained stock drops on the announcement of even large cybersecurity breaches.

Yet I remain convinced that a wave is coming, perhaps a tidal wave, and it will include not just derivative litigation, but securities class actions and SEC enforcement matters as well. In this post, I will focus on securities class actions, since that is where most of the uncertainty lies, including the question I begged in my previous post on cybersecurity securities class actions: what will trigger securities class actions when, to date, even the largest breaches haven’t caused significant and sustained stock-price drops?   Unlike shareholder derivative actions, which do not require a significant stock drop, securities class actions require misrepresentations to cause loss to stock purchasers – loss that materializes upon the disclosure of bad news that causes the stock to drop. Thus, the advent of cybersecurity securities class actions will not occur unless stock prices begin to drop.

So why do I think stock prices will drop? It’s easiest to start to answer that question by thinking about why stock prices generally haven’t dropped to date. I’m not an economist, of course, but I’ve discussed this issue with some and have read and thought about it a lot. I believe that stock prices generally haven’t dropped significantly because the market believes that all companies are susceptible to a cyber-attack, and it’s basically random and unlucky when a company suffers one – it’s Company A this week and Company B next week, and so on. So a breach isn’t fundamental to the company’s business and doesn’t portend future negative financial consequences. That means that the market assesses the cost of the breach as the cost of remedying it through consumer notices, litigation defense and the like – which involves great but manageable and predictable cost, and does not view the breach as a fundamental or long-term problem.

That dynamic is bound to change, for several reasons. First, many companies have improved their cybersecurity and cybersecurity oversight significantly over the past few years. Those that are leaders will begin to tout their leadership, and criticize competitors who have had or may have problems. Cybersecurity thus will become a competitive issue, and the market will begin to pick winners and losers instead of regard as simply unlucky a company that suffered a breach.

Second, as companies begin to tout their cybersecurity for competitive reasons, they will do so through statements that will be susceptible to challenge as false or misleading if they suffer a breach. The most difficult statements to defend in securities class actions often are those based on business braggadocio, and I think cybersecurity statements ultimately will be no different. In terms of stock price impact, such statements will bake strong cybersecurity into companies’ stock prices, leading to disappointment and thus stock drops when a seemingly strong cybersecurity company suffers a breach.

Third, the number of companies that disclose breaches will increase, leading to a larger universe of companies who might suffer stock drops. To date, virtually the only type of companies to disclose breaches are consumer-oriented companies, driven by breach-notification privacy laws. There have been few disclosures of significant breaches by non-consumer companies, whose disclosure decisions are based not on consumer breach-notification laws, but on SEC disclosure requirements.

That will change. The SEC is focused on cybersecurity disclosure, and inevitably will start to more aggressively police disclosure by companies that aren’t compelled to disclose breaches under privacy laws. (Of course, SEC enforcement over cybersecurity disclosures will not require a stock drop.) Also, I predict that whistleblowers from IT departments will start to surface, drawn by increasingly large whistleblower bounties. And auditors will begin to prompt disclosure as they too increase their focus on the financial impact of cybersecurity breaches.

I don’t know if this all means that cybersecurity securities class actions will become the most prominent type of securities class action. I doubt it. But I do think that the risk is high enough that all companies need to pay more attention to their cybersecurity disclosures, and insurers, brokers and risk managers need to be mindful of the inevitable increase of securities class action risk in this area.

This year will be remembered as the year of the Super Bowl of securities litigation, Halliburton Co. v. Erica P. John Fund, Inc. (“Halliburton II”), 134 S. Ct. 2398 (2014), the case that finally gave the Supreme Court the opportunity to overrule the fraud-on-the-market presumption of reliance, established in 1988 in Basic v. Levinson.

Yet, for all the pomp and circumstance surrounding the case, Halliburton II may well have the lowest impact-to-fanfare ratio of any Supreme Court securities decision, ever.  Indeed, it does not even make my list of the Top 5 most influential developments in 2014 – developments that foretell the types of securities and corporate-governance claims plaintiffs will bring in the future, how defendants will defend them, and the exposure they present.

Topping my Top 5 list is a forthcoming Supreme Court decision in a different, less-heralded case – Omnicare, Inc. v. Laborers District Council Construction Industry Pension Fund.  Despite the lack of fanfare, Omnicare likely will have the greatest practical impact of any Supreme Court securities decision since the Court’s 2007 decision in Tellabs, Inc. v. Makor Issues & Rights, Ltd., 551 U.S. 308  (2007).  After discussing my Top 5, I explain why Halliburton II does not make the list.

5.         City of Providence v. First Citizens BancShares:  A Further Step Toward Greater Scrutiny of Meritless Merger Litigation

In City of Providence v. First Citizens BancShares, 99 A.3d 229 (Del. Ch. 2014), Chancellor Bouchard upheld the validity of a board-adopted bylaw that specified North Carolina as the exclusive forum for intra-corporate disputes of a Delaware corporation.  The ruling extended former Chancellor Strine’s ruling last year in Boilermakers Local 154 Retirement Fund v. Chevron, 73 A.3d 934 (Del Ch. 2013), which validated a Delaware exclusive-forum bylaw.  These types of bylaws largely are an attempt to bring some order to litigation of shareholder challenges to corporate mergers and other transactions.

Meritless merger litigation is a big problem.  Indiscriminate merger litigation is a slap in the face to careful directors who have worked hard to understand and approve a merger, or to CEOs who have spent many months or years working long hours to locate and negotiate a transaction in the shareholders’ best interest.  It is cold comfort to know that nearly all mergers draw shareholder litigation, and that nearly all of those cases will settle before the transaction closes without any payment by the directors or officers personally.  And we know the system is broken when it routinely allows meritless suits to result in significant recoveries for plaintiffs’ lawyers, with virtually nothing gained by companies or their shareholders.

Two years ago, I advocated for procedures requiring shareholder lawsuits to be brought in the company’s state of incorporation.  Exclusive state-of-incorporation litigation would attack the root cause of the merger-litigation problem: the inability to consolidate cases and subject them to a motion to dismiss early enough to obtain a ruling before negotiations to achieve settlement before the transaction closes must begin.  Although the problem is virtually always framed in terms of the oppressive cost and hassle of multi-forum litigation, good defense counsel can usually manage the cost and logistics.  Instead, the bigger problem, and the problem that causes meritless merger litigation to exist, is the inability to obtain dismissals.  This is primarily so because actions filed in multiple forums can’t all be subjected to a timely motion to dismiss, and a dismissal in one forum that can’t timely be used in another forum is a hollow victory.  If there were a plenary and meaningful motion-to-dismiss process, less-meritorious cases would be weeded out early, and plaintiffs’ lawyers would bring fewer meritless cases.  The solution is that simple.

Exclusive litigation in Delaware for Delaware corporations is preferable, because of Delaware’s greater experience with merger litigation and likely willingness to weed out meritless cases at a higher rate.  But the key to eradicating meritless merger litigation is consolidation in some single forum, and not every Delaware corporation wishes to litigate in Delaware.  So I regard First Citizens’ extension of Chevron to a non-Delaware exclusive forum as a key development.

4.         SEC v. Citigroup:  The Forgotten Important Case

On June 4, 2014, in SEC v. Citigroup, 752 F.3d 285 (2d Cir. 2014), the Second Circuit held that Judge Rakoff abused his discretion in refusing to approve a proposed settlement between the SEC and Citigroup that did not require Citigroup to admit the truth of the SEC’s allegations.  Judge Rakoff’s decision set off a series of events that culminated in the ruling on the appeal, about which people seemed to have forgotten because of the passage of time and intervening events.

Once upon a time, way back in 2012, the SEC and Citigroup settled the SEC’s investigation of Citigroup’s marketing of collateralized debt obligations.  In connection with the settlement, the SEC filed a complaint alleging non-scienter violations of the Securities Act.  The same day, the SEC also filed a proposed consent judgment, enjoining violations of the law, ordering business reforms, and requiring the company to pay $285 million. As part of the consent judgment, Citigroup did not admit or deny the complaint’s allegations.  Judge Rakoff held a hearing to determine “whether the proposed judgment is fair, reasonable, adequate, and in the public interest.”  In advance, the court posed nine questions, which the parties answered in detail.  Judge Rakoff rejected the consent judgment.

The rejection order rested, in part, on the court’s determination that any consent judgment that is not supported by “proven or acknowledged facts” would not serve the public interest because:

  • the public would not know the “truth in a matter of obvious public importance”, and
  • private litigants would not be able to use the consent judgment to pursue claims because it would have “no evidentiary value and      no collateral estoppel effect”.

The SEC and Citigroup appealed.  While the matter was on appeal, the SEC changed its policy to require admissions in settlements “in certain cases,” and other federal judges followed Judge Rakoff’s lead and required admissions in SEC settlements.  Because of the SEC’s change in policy, many people deemed the appeal unimportant.  I was not among them; the Second Circuit’s decision remained of critical importance, because the extent to which the SEC insists on admissions will depend on the amount of deference it receives from reviewing courts – which was the issue before the Second Circuit.  It stands to reason that the SEC would have insisted on more admissions if courts were at liberty to second-guess the SEC’s judgment to settle without them.  Greater use of admissions would have had extreme and far-reaching consequences for companies, their directors and officers, and their D&O insurers.

So it was quite important that the Second Circuit held that the SEC has the “exclusive right” to decide on the charges, and that the SEC’s decision about whether the settlement is in the public interest “merits significant deference.”

3.         Wal-Mart Stores, Inc. v. Indiana Elec. Workers Pension Trust Fund IBEW:  Delaware Supreme Court’s Adoption of the Garner v. Wolfinbarger “Fiduciary” Exception to the Attorney-Client Privilege Further Encourages Use of Section 220 Inspection Demands

On July 23, 2014, the Delaware Supreme Court adopted the fiduciary exception to the attorney-client privilege, which originated in Garner v. Wolfinbarger, 430 F.2d 1093 (5th Cir. 1970), and held that stockholders who make a showing of good cause can inspect certain privileged documents.  Although this is the first time the Delaware Supreme Court has expressly adopted Garner, it had previously tacitly adopted it, and the Court of Chancery had expressly adopted it in Grimes v. DSC Communications Corp., 724 A.2d 561 (Del. Ch. 1998).

In my view, the importance of Wal-Mart is not so much in its adoption of Garner – given its previous tacit adoption – but instead is in the further encouragement it gives stockholders to use Section 220.  Delaware courts for decades have encouraged stockholders to use Section 220 to obtain facts before filing a derivative action.  Yet the Delaware Supreme Court, in the Allergan derivative action, Pyott v. Louisiana Municipal Police Employees’ Retirement System  (“Allergan”), 74 A.3d 612 (Del. 2013), passed up the opportunity to effectively require pre-litigation use of Section 220.  In Allergan, the court did not adopt Vice Chancellor Laster’s ruling that the plaintiffs in the previously dismissed litigation, filed in California, provided “inadequate representation” to the corporation because, unlike the plaintiffs in the Delaware action, they did not utilize Section 220 to attempt to determine whether their claims were well-founded.  Upholding the Court of Chancery’s presumption against fast-filers would have strongly encouraged, if not effectively required, shareholders to make a Section 220 demand before filing a derivative action.

In Wal-Mart, however, the Delaware Supreme Court provided the push toward Section 220 that it passed up in Allergan.  Certainly, expressly adopting Garner will encourage plaintiffs to make more Section 220 demands.  That should cause plaintiffs to conduct more pre-filing investigations, which will decrease filings to some extent.  But increased use of 220 also means that the cases that are filed will be more virulent, because they are selected with more care, and are more fact-intensive – and thus tend to be more difficult to dispose of on a motion to dismiss.

2.         City of Livonia Employees’ Retirement System v. The Boeing Company:  Will Defendants Win the Battle but Lose the War?

On August 21, 2014, Judge Ruben Castillo of the Northern District of Illinois ordered plaintiffs’ firm Robbins Geller Rudman & Dowd to pay defendants’ costs of defending a securities class action, as Rule 11 sanctions for “reckless and unjustified” conduct related to reliance on a confidential witness (“CW”) whose testimony formed the basis for plaintiffs’ claims.  2014 U.S. Dist. LEXIS 118028 (N.D. Ill. Aug. 21, 2014).

I imagine that some readers may believe that, as a defense lawyer, I’m including this development because one of my adversaries suffered a black eye.  That’s not the case at all.  Although I’m not in a position to opine on the merits of the Boeing CW matter, I can say that I genuinely respect Robbins Geller and other top plaintiffs’ firms.  And beware those who delight in the firm’s difficulties: few lawyers who practice high-stakes litigation at a truly high level will escape similar scrutiny at some point in a long career.

But beyond that sentiment, I have worried about the Boeing CW problem, as well as similar problems in the SunTrust and Lockheed cases, because of their potential to cause unwarranted scrutiny of the protections of the Private Securities Litigation Reform Act.  I believe the greatest risk to the Reform Act’s protections has always been legislative backlash over a perception that the Reform Act is unfair to investors. The Reform Act’s heavy pleading burdens have caused plaintiffs’ counsel to seek out former employees and others to provide internal information.  The investigative process is often difficult and is ethically tricky, and the information it generates can be lousy.  This is so even if plaintiffs’ counsel and their investigators act in good faith – information can be misunderstood, misinterpreted, and/or misconstrued by the time it is conveyed from one person to the next to the next to the next.  And, to further complicate matters, CWs sometimes recant, or even deny, that they made the statements on which plaintiffs rely.  The result can be an unseemly game of he-said/she-said between CWs and plaintiffs’ counsel, in which the referee is ultimately an Article III judge.  At some point, Congress will step in to reform this process.

Judge Rakoff seemed to call for such reform in his post-dismissal order in the Lockheed matter:

The sole purpose of this memorandum … is to focus attention on the way in which the PSLRA and decisions like Tellabs have led plaintiffs’ counsel to rely heavily on private inquiries of confidential witnesses, and the problems this approach tends to generate for both plaintiffs and defendants.  It seems highly unlikely that Congress or the Supreme Court, in demanding a fair amount of evidentiary detail in securities class action complaints, intended to turn plaintiffs’ counsel into corporate ‘private eyes’ who would entice naïve or disgruntled employees into gossip sessions that might help support a federal lawsuit. Nor did they likely intend to place such employees in the unenviable position of having to account to their employers for such indiscretions, whether or not their statements were accurate. But as it is, the combined effect of the PSLRA and cases like Tellabs are likely to make such problems endemic.

Rather than tempt Congress to revisit the Reform Act’s protections (which defendants should want to avoid) and/or allow further unseemly showdowns (which plaintiffs and courts should want to avoid), plaintiffs, defendants, and courts can begin to reform the CW process through some basic measures, including requiring declarations from CWs, requiring them to read and verify the complaint’s allegations citing them, and requiring plaintiffs to plead certain information about their CWs.  As I’ve previously written, these reforms would have prevented the problems at issue in the Boeing, SunTrust, and Lockheed matters, and would result in more just outcomes in all cases.

1.         Omnicare:  In My Opinion, the Most Important Supreme Court Case Since Tellabs

Omnicare concerns what makes a statement of opinion false.  Opinions are ubiquitous in corporate communications.  Corporations and their officers routinely share subjective judgments on issues as diverse as asset valuations, strength of current performance, risk assessments, product quality, loss reserves, and progress toward corporate goals.  Many of these opinions are crucial to investors, providing them with unique information and insight.  If corporate actors fear liability for sharing their genuinely held beliefs, they will be reluctant to voice their opinions, and shareholders would be deprived of this vital information.

The standard that the federal securities laws use to determine whether an opinion is “false” is therefore of widespread importance. Although this case only involves Section 11, it poses a fundamental question: What causes an opinion or belief to be a “false statement of material fact”?  The Court’s answer will affect the standards of pleading and proof for statements of opinion under other liability provisions of the federal securities laws, including Section 10(b), which likewise prohibit “untrue” or “false” statements of “material fact.”

In the Sixth Circuit decision under review, the court held that a showing of so-called “objective falsity” alone was sufficient to demonstrate falsity in a claim filed under Section 11 of the Securities Act – in other words, that an opinion could be false even if was genuinely believed, if it was later concluded that the opinion was somehow “incorrect.”  On appeal, Omnicare contends, as did we in our amicus brief on behalf of the Washington Legal Foundation (“WLF”), that this ruling was contrary to the U.S. Supreme Court’s decision in Virginia Bankshares, Inc. v. Sandberg, 501 U.S. 1083, 1095 (1991).  Virginia Bankshares held that a statement of opinion is a factual statement as to what the speaker believes – meaning a statement of opinion is “true” as long as the speaker honestly believes the opinion expressed, i.e., if it is “subjectively” true.

Other than a passing and unenthusiastic nod made by plaintiffs’ counsel in defense of the Sixth Circuit’s reasoning, the discussion at the oral argument assumed that some showing other than so-called “objective falsity” would be required to establish the falsity of an opinion. Most of the argument by Omnicare, the plaintiffs, and the Solicitor General revolved around what this additional showing should be, as did the extensive and pointed questions from Justices Breyer, Kagan, and Alito.

It thus seems unlikely from the tone of the argument that the Court will affirm the Sixth Circuit’s holding that an opinion is false if it is “objectively” untrue.  If the pointed opening question from Chief Justice Roberts is any indication, the Court also may not fully accept Omnicare’s position, which is that an opinion can only be false or misleading if it was not actually believed by the speaker.  It seems more probable that the Supreme Court will take one of two middle paths – one that was advocated by the Solicitor General at oral argument, essentially a “reasonable basis” standard, or one that was advanced in our brief for the WLF, under which a statement of opinion is subjected to the same sort of inquiry about whether it was misleading as for any other statement.  Under WLF’s proposed standard, plaintiffs would be required to demonstrate either that an opinion was false because it was not actually believed, or that omitted facts caused the opinion – when considered in the full context of the company’s other disclosures – to be misleading because it “affirmatively create[d] an impression of a state of affairs that differs in a material way from the one that actually exists.” Brody v. Transitional Hosps. Corp., 280 F.3d 997, 1006 (9th Cir. 2002).

Such a standard would be faithful to the text of the most frequently litigated provisions of the federal securities laws – Section 11, at issue in Omnicare, and Section 10(b) – which allow liability for statements that are either false or that omit material facts “required to be stated therein or necessary to make the statements therein not misleading . . . .”  At the same time, this standard would preserve the commonsense holding of Virginia Bankshares – that an opinion is “true” if it is genuinely believed – and prevent speakers from being held liable for truthfully expressed opinions simply because someone else later disagrees with them.

Why Halliburton II is Not a Top-5 Development

After refusing to overrule Basic, the Halliburton II decision focused on defendants’ fallback argument that plaintiffs must show that the alleged misrepresentations had an impact on the market price of the stock, as a prerequisite for the presumption of reliance.  The Court refused to place on plaintiffs the burden of proving price impact, but agreed that a defendant may rebut the presumption of reliance, at the class certification stage, with evidence of lack of price impact.

Halliburton II has a narrow reach.  The ruling only affects securities class actions that have survived a motion to dismiss – class certification is premature before then.  It wouldn’t be economical to adjudicate class certification while parties moved to dismiss under Rule 12(b)(6) and the Reform Act, and adjudicating class certification before rulings on motions to dismiss could result in defendants waiving their right to a discovery stay under the Reform Act.  Moreover, most securities class actions challenge many statements during the class period.  Although there could be strategic defense benefit to obtaining a ruling that a subset of the challenged statements did not impact the stock price – for example, shortening the class period or dismissing especially awkward statements – a finding that some statements had an impact would support certification of some class, and thus would allow the case to proceed.

Defendants face legal and economic hurdles as well.  For example, in McIntire v. China MediaExpress Holdings, Inc., 2014 U.S. Dist. LEXIS 113446, *40 (S.D.N.Y. Aug. 15, 2014), the court held that a “material misstatement can impact a stock’s value either by improperly causing the value to increase or by improperly maintaining the existing stock price.”  Under this type of analysis, even if a challenged statement does not cause the stock price to increase, it may have kept the stock price at the same artificially inflated level, and thus impacted the price.  Plaintiff-friendly results were predictable from experience in the Second and Third Circuits before the Supreme Court’s rulings in Amgen Inc. v. Connecticut Retirement Plans and Trust Funds, 133 S. Ct. 1184 (2013), and Halliburton II.  Despite standards for class certification that allowed defendants to contest materiality and price impact, defendants seldom defeated class certification.

Halliburton II may also be unnecessary; it is debatable whether the decision even gives defendants a better tool with which to weed out cases that suffer from a price-impact problem.  For example, cases that suffer from a price-impact problem typically also suffer from some other fatal flaw, such as the absence of loss causation or materiality.  Indeed, the price-impact issue in Halliburton was based on evidence about the absence of loss causation.

Yet defendants no doubt will frequently oppose class certification under Halliburton II.  But they will do so at a cost beyond the economic cost of the legal and expert witness work:  they will lose the ability to make no-price-impact arguments in settlement discussions in the absence of a ruling about them.  Now, defendants will make and obtain rulings on class certification arguments that they previously could have asserted would be resolved in their favor at summary judgment or trial, if necessary. Plaintiffs will press harder for higher settlements in cases with certified classes.

***

In addition to Halliburton II, there were many other important 2014 developments in or touching on the world of securities and corporate governance litigation, including: rare reversals of securities class action dismissals in the Fifth Circuit, Spitzberg v. Houston American Energy Corp., 758 F.3d 676 (5th Cir. 2014), and Public Employees’ Retirement System of Mississippi v. Amedisys, Inc., 769 F.3d 313 (5th Cir. 2014); the filing of cybersecurity shareholder derivative cases against Target (pending) and Wyndham (dismissed); a trial verdict against the former CFO of a Chinese company, Longtop Financial Technologies; the Second Circuit’s significant insider trading decision, United States v. Newman, — F.3d —, 2014 U.S. App. LEXIS 23190 (2d Cir. Dec. 10, 2014); increasingly large whistleblower bounties, including a $30 million award; the Supreme Court’s SLUSA decision in Chadbourne & Parke LLP v. Troice, 134 S. Ct. 1058 (2014); the Delaware Supreme Court’s ruling on a fee-shifting bylaw in ATP Tour, Inc. v. Deutscher Tennis Bund, 91 A.3d 554 (Del. 2014), and the resulting legislative debate in Delaware and elsewhere; the Supreme Court’s ERISA decision in Fifth Third Bancorp v. Dudenhoeffer, 134 S. Ct. 2459 (2014); the Ninth Circuit’s holding that the announcement of an internal investigation, standing alone, is insufficient to establish loss causation, Loos v. Immersion Corp., 762 F.3d 880 (9th Cir. 2014); the Ninth Circuit’s rejection of Item 303 of Regulation S-K as the basis of a duty to disclose for purposes of a claim under Section 10(b), In re NVIDIA Corp. Sec. Litig., 768 F.3d 1046 (9th Cir. 2014); and the Ninth Circuit’s holding that Rule 9(b) applies to loss-causation allegations, Oregon Public Employees Retirement Fund v. Apollo Group Inc., — F.3d —, 2014 U.S. App. LEXIS 23677 (9th Cir. Dec. 16, 2014).