The Importance of SAFETY Act Protections for the Electric Power Industry

Sponsored by

by Brian Finch and Larry Eisenstat, Dickstein Shapiro

Recent press reports have significantly raised public awareness of the vulnerability to cyberattacks of our nation's energy infrastructure. These reports quickly captured the attention of legislators and regulators in Washington, D.C., and throughout the nation. Many have since proposed through draft legislation increased security requirements for numerous energy companies, particularly those that own or operate electric transmission lines.

If a cyberattack on the nation's energy infrastructure were to occur, its owners and operators could face staggering losses and possibly even greater liability now that the potentially catastrophic consequences of such an attack are better understood. The liability threat arising from a terrorist attack is too real: airplane manufacturers, security companies and even companies whose own buildings were destroyed already have had to pay millions of dollars in damages.

Companies in the electric power sector, in particular, must understand that although the North American Energy Reliability Corp. (NERC) has established new cybersecurity reliability standards, compliance with those standards will not automatically immunize them from liability were a cyberattack to occur. By applying for certain protections available under a little-known federal law—the Support Anti-terrorism by Fostering Effective Technologies Act of 2002, or SAFETY Act—their exposure could be significantly reduced if not completely eliminated.

The SAFETY Act was enacted after the Sept. 11, 2001, terrorist attacks to assure eligible companies that, should another terrorist attack occur, they would not be exposed to uncapped legal liability. The SAFETY Act provides companies with an opportunity to apply to the Department of Homeland Security (DHS) for certain tort liability protections in connection with the manufacture or furnishing of products or services that can be used to detect, defend against or respond to acts of terrorism.

Two tiers of protection are available under the act. If a product or service receives SAFETY Act certification, then the owner, seller and/or provider of such product or service presumptively would be entitled to immunity from all tort claims for damages arising out of an act of terrorism and associated with such product or service. If, however, the product or service only were to receive SAFETY Act designation, the applicant's potential tort liability would be limited to the amount of insurance that DHS determines the applicant should maintain in connection with such losses. In either case, tort claims cases may be brought only in federal court.

Companies also can take advantage of the SAFETY Act by purchasing SAFETY Act-approved products and services. Under the act, only sellers of SAFETY Act-approved products or services potentially could be liable for damages in connection with such products or services. By contrast, mere purchasers of SAFETY Act-approved products or services face no liability. A range of products and services have received SAFETY Act protections, and DHS is actively encouraging the submission of cybersecurity-related applications.

SAFETY Act protection should be sought, or at least evaluated on its costs and benefits, for any measure undertaken by a company to detect, defend against or respond to cyberattacks and other terrorist acts resulting in damage to the electrical system that would occur, for example, if multiple plants were to trip off line as a result of a terrorist-planted computer bug and the lights were to go off for many hours. Because certain terrorist attacks were determined to have been reasonably foreseeable, it is more critical that those energy companies at greatest risk of terrorist attacks implement appropriate measures to prevent such attacks and apply to have such measures certified or designated under by the SAFETY Act to limit their potential liability as best they can.

Finally, imagine that a company with a reasonable exposure to a terrorist act fails to consider whether it should spend whatever money is necessary for it to receive SAFETY Act protections; and then a terrorist act occurs. This would lead to a bad outcome. Why subject one's management to a hefty derivative action for breach of fiduciary duty as well?

Author

Brian Finch is head of Dickstein Shapiro LLP's Homeland Security Practice. For more information on how to take advantage of the SAFETY Act, e-mail him at finchb@dicksteinshapiro.com or call 202-420-4823.

Larry Eisenstat is head of Dickstein Shapiro's Energy Practice. E-mail him at eisenstatl@dicksteinshapiro.com or call 202-420-2224 to learn more about the SAFETY Act.

Sponsored by

CURRENT ARTICLES

SunEdison brings 14 MW of solar power to Long Island

05/29/2015 SunEdison signed agreements with five municipal entities on Long Island to build seven solar power plants totaling 14 MW D...

Solar power project gets OK from Minnesota regulators

05/29/2015

The utility's project would increase Minnesota's solar output sevenfold 

Met-Ed helicopters inspect 1,300 miles of transmission lines

05/29/2015 The inspections are designed to look for damaged wire, broken cross arms, failed insulators and other hardware problems no...

U.S. electric cooperatives prepare for hurricane season

05/29/2015

This year the NOAA predicts a 70 percent likelihood of 6 to 11 named storms  

GE installs solar power at New York factory

05/29/2015 The facility will become the first industrial scale solar project in Orange County and is fully qualified under NYSERDA’s ...

Penelec wraps up summer transmission and distribution inspections

05/29/2015 Cost-effective helicopter patrols have completed inspections on about 2,500 miles of transmission lines located in the Pen...
Who is paying the most for electric power in the U.S.?

Who is paying the most for electric power in the U.S.?

FEATURED ENERGY JOBS
View more Job Listings >>

INDUSTRY STOCKS

ON DEMAND WEBCASTS

Solar + Storage: Capturing Opportunities and Overcoming Challenges

The convergence of solar and energy storage applications is under way. The combined application o...

Storage Enters the Global Stage: What’s the value proposition for your region?

For electricity storage, the events of the last two years have shown that the skepticism around t...

How to deploy mobile forms + devices to speed up field service processes & reporting

Overcoming the pain points associated with any process is much simpler and more cost effective th...

Beyond Integration: Three Dynamics Reshaping Renewables and the Grid

In a unique industry research initiative, DNV GL gathered views from over 1,600 energy sector par...

Engaging the Small and Mid-sized Business (SMB) Marketplace

This session will outline how Duke Energy leveraged Voice of Customer insights, previous experien...

EL&P BUYER'S GUIDE PRODUCTS

Decontamination & Decommissioning

Decommissioning strategy development, cost estimates, plant modifications; system and building decontamination; RV segmentation; large component re...

Cavitation Peening

AREVA developed its innovative solution for asset management, significantly extending the life of reactor components. Cavitation Peening is a perma...

Nuclear Horizontal Modular Storage (NUHOMS®)

AREVA TN’s NRC-licensed NUHOMS® system ensures the highest safety and lowest dose performance. With no tipping, tripping and sliding, you have the...

ATRIUM™ 11 for BWR Fuel

ATRIUM™ 11 design fuel – in operation since 2012 – provides significantly lower fuel rod power levels for power uprate margins, operational flexib...

POWERGRID PRODUCT LISTINGS

EtherMate® Industrial Ethernet - IO Modules

LioN-M ProfiNet device with 16 digital I/O channels, channels can be used universally as inputs or outputs, M12 socket, ro...

OFL280 FlexTester - Handheld OTDR

AFL's OFL280 FlexTester offers an unmatched combination of fiber test functions, ease-of-use, portability, and value.

ADSS Mini-Span® Fiber Optic Cable

AFL Mini-Span® All-Dielectric Self-Supporting (ADSS) cable is designed for outside plant aerial and duct applications in l...

TRM® 2.0 - Test Results Manager PC Analysis and Reporting

Test Results Manager 2.0 (TRM® 2.0) is an all-in-one analysis, viewer and reporting tool designed for use with NOYES fiber...

POWERGRID International

May 2015
Volume 20, Issue 5
1505pg_C1

ELECTRIC LIGHT & POWER

April 2015
Volume 93, Issue 2
1503ELP_C1