March 28, 2012
******************
New York's highest Court decided that ADT's contract was not sufficient to get it out of a lawsuit and sent the case back to the trial court for further proceedings. Diebold, also a defendant in the lawsuit, was able to get out based on its contract protection. The case will be posted on my web site under Leading Cases under New York, and because it's an important case with clear issues, you should read the case. You can get to the case by clicking here. https://www.kirschenbaumesq.com/newyork30.htm I have previously pointed out the deficiency in ADT's contract, but since this case dates back to 2004 I ADT may have learned its lesson [though it hasn't purchased any of my contracts far as I know].
Facts are pretty simple. Burglars got into a bank where they used blow torches and stayed in the vault for several hours. Both ADT and Diebold had vault alarms, neither of which reported the break in. The bank's money and customer safety deposit boxes were robbed. Bank sued. Bank alleged that both ADT and Diebold knew that their respective systems were compromised and not functioning properly for months before the break in, yet neither informed the bank. The Court found that this could be found to be gross negligence if proved. Therefore the exculpatory and limitation of liability clauses would not protect the alarm companies from the gross negligence claims, though the Court did hold that only the breach of contract claim for the bank's damages, not the customer safety boxes damages, could survive the motion for summary judgment.
So why did Diebold get out and not ADT? Diebold's contract had an insurance procurement clause and a waiver of subrogation provision. ADT had neither. Go figure. ADT could have gotten those provisions for $200 by buying the Standard Commerical Lease.
The decision below is well written, and well reasoned, and you should read it when you have time.
***************
Questions on Red Flag law
**************
I want to know what we need to do with the information we store.
I work out of a home office (office in my house as opposed to a nationwide chain's home office). My house has an alarm, but, what else must be done to secure information?
Our bookkeeper, not an employee, (1099 issued) works from her home office (she has a full time job and does bookkeeping for us and a few other clients), what should she have to protect our employee and customer/subscriber information?
Thank you,
Jeff
*************
Ken
Not sure this would apply to Texas would it?
JB
******************
Answer
*****************
The Red Flag policy basically sets forth what and how you're going to safe guard personal data you collect and retain regarding your subscribers. The personal data needs to be maintained in a safe place with access to only those in your employ who need the information. The data should not leave your office and if it does then you should redact personal information that is not necessary to be shared. For example, you have social security numbers on your contracts. If you have to share the contracts, lets say with your central station, there is no reason you can't redact the social security number.
Texas? Did we give that place back to Mexico yet? The Red Flag law is Federal. Applies everywhere.
****************
Illinois Fire District comment
***********
Ken,
Steve gave a detailed post on the monitoring setup being provided by an Illinois fire district. He almost got to one of my original questions about the tie between the furnishing of equipment, a company and a possible arrangement, by not quite. He states that an alarm company funded the purchase of the alarm equipment. He than stated that all service was done by a reputable alarm company. My question is, would that reputable alarm company and the company providing the funding for the equipment be one in the same? By eliminating all competition, this stinks of collusion.
If there is a tie, the fire district would have been far better off purchasing the equipment themselves like any other business would of had to do. Sometimes people have the best of intentions but don't look beyond the surface. They now may be looking at challenges from directions they didn't anticipate.
Bob Worthy CPP
President
****************** here is the ADT case in its entirety
Abacus Federal Savings Bank, Appellant,
v ADT Security Services, Inc., et al., Respondents, Holmes Protection of New York, Inc., et al., Defendants.
Decided on March 22, 2012
CIPARICK, J.:
Plaintiff Abacus Federal Savings Bank (Abacus) commenced this action against defendants ADT Security Services, Inc. (ADT) and Diebold, Incorporated (Diebold) to recover damages under tort and contract theories for losses incurred during a burglary of the bank. We affirm the dismissal of the complaint with one exception. We conclude that Abacus has adequately stated a cause of action for breach of contract as against ADT for its alleged losses [*2]other than losses allegedly sustained by its safe deposit box customers.
Abacus is a federally chartered savings and loan association with a branch located in lower Manhattan (the Branch). It provides a variety of deposit services, including the leasing of safe deposit boxes to its customers. Following the close of business on Saturday, March 20, 2004, burglars forced their way into the Branch through a back entrance door and a second interior door. According to security camera images taken during the course of the incident, the burglars located the vault inside and, during a several hour period, used large acetylene gas tanks as blow torches to break down one of the vault's concrete and metal walls. Once in the vault, the burglars gained access to a safe storing the Branch's overnight cash and over 20 safe deposit boxes belonging to Abacus' customers. The amended complaint alleges that the burglars stole $589,749.55 in cash from the safe and property valued at $926,512 from the safe deposit boxes. The police were not notified during the course of the burglary. Rather, an Abacus employee discovered what had occurred when the Branch opened for business on Monday morning, March 22, 2004.
Prior to the burglary, each defendant had separately contracted with Abacus to supply security services for the Branch. Specifically, ADT's contract with Abacus obligated ADT to install and maintain a 24-hour industry-certified central station security system to protect the Branch premises and the vault. Within the vault, ADT purported to utilize certain detectors that would identify intruder movement and the presence of smoke. ADT's security system was supposedly designed to transmit any alarm signals triggered in the vault to ADT's central monitoring system. Diebold's contract with Abacus required Diebold to provide a back-up alarm system that included additional central station monitoring, another form of telephone line security and "signal monitoring," which would activate an alarm if ADT's alarm system failed to operate properly.
The gravamen of Abacus' amended complaint is that defendants violated their contractual obligations by installing woefully inadequate security systems, which they failed to inspect. Abacus further alleges that defendants knew for weeks, if not months, that the security systems in place were not working in that they were generating a series of flaws, malfunctions and false alarms. For example, in the three months preceding the burglary there were, according to an expert's affidavit Abacus submitted in opposition to defendants' motions, 17 phone line failures and a number of other occurrences that were "consistent with an intruder cutting the phone line" and "should have triggered an alarm event." Abacus asserts that not only did defendants fail to investigate these malfunctions, but they failed to notify anyone at the Branch of the problem.
Both contracts contained clauses that exculpated defendants from liability for their own negligence and limited their liability, under all circumstances, to $250. Diebold's contract contained a clause entitled "Property Insurance and Waiver of Subrogation" where Abacus [*3]agreed to obtain insurance coverage to cover its losses in the event of a theft. The agreement between Diebold and Abacus provided that Abacus "shall look solely to its insurer for recovery of its loss and hereby waives any and all claims for such loss against Diebold" and that Abacus' insurance policy would contain a clause providing that such waiver would not invalidate the coverage. There was no similar waiver-of-subrogation clause in the contract between Abacus and ADT. Instead, their contract merely provided "that insurance, if any, covering personal injury or property loss damage" was Abacus' responsibility to obtain.
In addition to the losses incurred during the weekend of the burglary, Abacus seeks money damages for not less than $5 million for lost business as a result of the burglary, not less than $5 million for a loss of reputation in the community and not less than $1 million in punitive damages. Abacus also seeks $85,436 in costs to repair the vault and $30,000 in added security costs it absorbed. Defendants moved to dismiss the complaint, 10 causes of action in all, in its entirety. Supreme Court denied defendants' motion to dismiss the breach of contract cause of action and the gross negligence cause of action, but dismissed the remainder of the amended complaint.
Addressing the breach of contract claim, Supreme Court observed that while New York courts regularly enforce contractual provisions absolving a party from acts of its own ordinary negligence, public policy prohibits waivers of liability for gross negligence. The court concluded that since the pleadings adequately alleged that defendants were grossly negligent in their failure to respond to the burglary, Abacus could proceed to discovery on the breach of contract cause of action. Supreme Court likewise denied the motion to dismiss the tort cause of action. It further opined that Abacus has standing to assert claims based upon losses suffered by its safe deposit box customers. Defendants appealed [FN1].
The Appellate Division reversed the order of Supreme Court and granted defendants' motions to dismiss the amended complaint in its entirety (see Abacus Fed. Sav. Bank v ADT Sec. Servs., Inc., 77 AD3d 431, 432 [1st Dept 2010]). In dismissing the breach of contract cause of action, the court held that the allegations in the amended complaint "amount to nothing more than claims of ordinary negligence as opposed to gross negligence" (id. at 433). The court similarly found no basis for tort liability in the complaint (see id.). Furthermore, the court concluded that, in any event, the waiver-of-subrogation provision contained in the contract between Abacus and Diebold serves as "a defense to all of plaintiff's claims" against Diebold (id. at 434). We granted Abacus leave to appeal (16 NY3d 712 [2011]) and now modify.
As a general rule, parties are free to enter into contracts that absolve a party from [*4]its own negligence (see Melodee Lane Lingerie Co. v American Dist. Tel. Co., 18 NY2d 57, 69 [1966]) or that limit liability to a nominal sum (see Florence v Merchants Cent. Alarm Co., 51 NY2d 793, 795 [1980]). However, it is New York's public policy that a party cannot "insulate itself from damages caused by grossly negligent conduct" (Sommer v Federal Signal Corp., 79 NY2d 540, 554 [1992]). Therefore, exculpatory clauses and liquidated damages clauses in contracts are not enforceable against allegations of gross negligence (see id.). We have observed that "[g]ross negligence, when invoked to pierce an agreed-upon limitation of liability in a commercial contract must 'smack[] of intentional wrongdoing'" (id., quotingKalisch-Jarcho, Inc. v City of New York, 58 NY2d 377, 385 [1983]). "It is conduct that evinces a reckless indifference to the rights of others" (id.).
We applied this standard in David Gutter Furs v Jewelers Protection Servs. (79 NY2d 1027 [1992]). In that case, the "plaintiff, a fur dealer, contracted with [the] defendant to design, install and monitor a burglar alarm system" (id. at 1028). Several weeks later, the plaintiff commenced an action against the defendant for breach of contract and further claimed that the exculpatory and limitation of liability clauses in their contract were unenforceable because the defendant was grossly negligent (see id. at 1028-1029). We concluded that the plaintiff's allegations — "that there should have been two motion detectors, instead of one, on each level; a shock sensor should have been installed; defendant should have ascertained how the inventory would be arranged; and a post-occupancy inspection should have been undertaken" — only amounted to ordinary negligence as there was no issue of fact that the "defendant performed its duties with reckless indifference to [the] plaintiff's rights" (id. at 1029).
Here, in contrast, we conclude that the allegations in the amended complaint sufficiently allege conduct on the part of the defendants that, if true, constitutes gross negligence. Indeed, unlike the plaintiff in David Gutter Furs, Abacus has alleged much more than mere failure to install a proper working alarm system and inspect it. Abacus alleges that both defendants had knowledge — for weeks, if not months — that the equipment had been malfunctioning. Moreover, Abacus asserts that defendants not only failed to investigate the source of their equipment malfunction, but they failed to put anyone at the Branch on notice of the potential security breach. Of course, these allegations may not be proved, or may be shown by defendants' evidence to be less significant than they seem; but on this record, plaintiffs have alleged the type of conduct that smacks of intentional wrongdoing and evinces a reckless indifference to the rights of others (see Federal Ins. Co. v Automatic Burglar Alarm Corp., 208 AD2d 495, 496 [2d Dept 1994]).
Nevertheless, Diebold argues that the waiver-of-subrogation clause in its contract with Abacus acts as a total defense to the claims asserted by Abacus in its complaint. We agree. In Board of Educ., Union Free School Dist. No. 3, Town of Brookhaven v Valden Assoc., 46 NY2d 653 [1979]), we upheld a similar waiver-of-subrogation clause. There, we observed that [*5]the contract between the plaintiffs and the defendants required the plaintiffs to obtain insurance to cover 100% of any losses incurred on the plaintiff's property (see id. at 656). Further, the plaintiffs expressly "waive[d] all rights" to seek damages as against the defendants covered by such insurance (id.). In upholding the validity of this contract, we recognized that "[a] distinction must be drawn between contractual provisions which seek to exempt a party from liability . . . and contractual provisions . . . which in effect simply require one of the parties to the contract to provide insurance for all of the parties" (id. at 657; see also Austro v Niagara Mohawk Power Corp., 66 NY2d 674, 676 [1985]; Great Am. Ins. Co. of N.Y. v Simplexgrinnell LP, 60 AD3d 456, 456-457 [1st Dept 2009]). We discern no basis to depart from this rule here. Thus, we affirm the dismissal of the complaint as against Diebold.
ADT's contract with Abacus does not contain a similar waiver-of-subrogation clause that would act as a total defense to Abacus' claim. We note that the contract between Abacus and ADT did not require Abacus to obtain insurance to cover losses stemming from ADT's gross negligence. The decision to obtain insurance, "if any," was discretionary as to Abacus. Moreover, the contract did not contain an express waiver by Abacus to waive all rights for damages covered by insurance it may have obtained as against ADT. Thus, we reinstate the breach of contract cause of action as against ADT. In so doing, we note that the complaint only adequately states a basis upon which Abacus can recover for its own losses. As pleaded, Abacus fails to allege sufficient facts to confer standing to pursue the losses allegedly sustained by its safe deposit box customers.
Finally, we conclude that the complaint did not allege conduct that would give rise to separate liability in tort. Here, the allegations that a breach of contract occurred as a result of gross negligence does not give rise to a duty independent of the contractual relationship (see Clark-Fitzpatrick, Inc. v Long Is. R.R. Co., 70 NY2d 382, 389 [1987]; cf. Sommer, 79 NY2d at 551-552 [the plaintiff's breach of contract claim against the defendant fire alarm company may also sound in tort where the defendant's alleged failure to act with due care affected a significant public interest independent of its contractual obligations]).
Accordingly, the order of the Appellate Division should be modified, without costs, by reinstating so much of plaintiff's cause of action for breach of contract as against ADT Security Services, Inc. that does not assert claims on behalf of plaintiff's safe deposit box customers and, as so modified, affirmed.
* * * * * * * * * * * * * * * * *
Order modified, without costs, by reinstating so much of plaintiff's cause of action for breach of contract as against ADT Security Services, Inc. that does not assert claims on behalf of plaintiff's safe deposit box customers and, as so modified, affirmed. Opinion by Judge Ciparick. Chief Judge Lippman and Judges Graffeo, Read, Smith, Pigott and Jones concur. [*6]
Decided March 22, 2012