Company Information 

The Embedded Systems Problem 

Embedded Systems Archive 

Services & Solutions 

MOPAS 2000 

 Y2K links 

Partners & Distributors 

News & Events 

Contacting Us

Legal Issues And Risks Of The Year 2000 Problem

The Year 2000 problem is rightfully regarded as a technical one -- your first priority must be to fix the problem within your own company. This priority, however, is only the tip of the iceberg. There are many legal issues and risks requiring attention at the highest levels of executive management. These aspects shouldn't be overlooked as you manage the technical solutions.

The following are some thoughts on avoiding legal liability

Your Investors
By law, investors in your company -- shareholders, partners, long-term debtholders -- are entitled to know all "material" facts when they decide to invest. Companies subject to federal reporting duties are required by the SEC ("Securities & Exchange Commission") to disclose material future anticipated liabilities. Financial reporting rules of the accounting profession may also require disclosure. All companies -- even private ones -- are subject to investor fraud claims for material nondisclosures. Accordingly, evaluate your impact analysis, and engage legal assistance to determine what disclosures must be made. It's cheap insurance against investor claims.

Your Customers
Your failure to fix the Year 2000 problem may hurt your customers as well if your operations are affected. Identify critical contracts that put you at risk and protect yourself with carefully drafted force majeure (out-of-control developments), warranty disclaimer, and liability cap provisions. The law in this area is complex.

As appropriate, notify customers in writing of potential problems and work with them on back-up and parallel systems. Demonstrate your own diligence and suggest workarounds.

If you anticipate that your suppliers or subcontractors may not become Year 2000 compliant, alert them to the problem, work with them in solving it, and take the legal steps necessary to ensure that they do.

Other Third Parties
Anyone else who relies on the integrity of your system or data -- employees, subcontractors, etc. -- should be considered. What if your applications fail? Using your impact analysis, identify all areas involving legal risks of potential third-party damage that may result from your affected data. As appropriate, suggest back-up alternatives and discourage "blind" reliance on your vulnerable applications.

Insurers
A particularly effective way to shift your Year 2000 exposure might be through your general liability, errors and omissions or first-party business insurancecoverage. A careful review of your insurance assets may reveal coverage for accounts receivable or other important computerized data affected by Year 2000 failures. If you don't have the right coverage, get it. The law in this area is just evolving, so it is important that you stay on top of developments.

Software Vendors
Are your existing software vendors legally responsible for making their products Year 2000 compliant? The answer depends on the nature of your contracts with them. The typical vendor-written contract contains warranty disclaimers and liability caps. Under many circumstances, however, such disclaimers and caps are not ironclad, and require careful legal analysis. In addition, the law requires vendors in many circumstances to honor presale representations about their products (e.g., in letters, marketing pieces, demos, even oral statements), and to meet the user's reasonable expectations, without liability caps, regardless of what is in the written contract.

If you think that products you purchased or licensed risk failure, (1) conduct a legal analysis of your contracts and licenses, (2) inventory all representations made by the vendor outside the contract for express or implied statements that the product was compliant, and (3) place vendors on appropriate legalnotice of your expectations.

Going forward, confirm that each new software product you purchase or license is compliant and that future contracts with vendors contain as few escape clauses as possible.

Software Maintenance Providers
Are outside parties who maintain your software applications (typically original vendors, but not always) legally responsible to fix Year 2000 noncompliance problems? Again, this depends largely on the service contract. There is often a difference between modifications to fix bugs, for which the vendor pays, and customer-requested enhancements, for which the end user pays. The responsibility for major modification projects like Year 2000, which are outside the contemplated scope of the original deal, will likely be negotiated. The result will depend greatly on the strength of your legal position.

Non-Software Suppliers
If your operations rely on certain suppliers of ordinary goods and services, their Year 2000 problem may become your problem. This is even more true if your software applications interact. Talk to the suppliers about their compliance, run tests, and reach your own comfort level. Check your contracts, particularly the force majeure and liability limitation clauses, to see how their nonperformance might be legally excused or limited. If appropriate, place them on legal notice that their failure to fix will not excuse nonperformance. Are you bound to them by long-term exclusivity? Their inability to demonstrate compliance in advance might give you legal justification to use another supplier.

The Year 2000 problem is not just a hardware or software problem. It is a serious social problem, which, in this information-hungry society, could easily grow to the same scale as the savings & loan, environment and asbestos crises. To avoid potentially expensive and crippling Year 2000 problems, companies must ensure not only that their own ship is in order, but that every company on which they rely solves its own Year 2000 problems as well.

 

Year 2000 Information and Readiness Disclosure Act, 1998