Georgia Tech Case Shows DOJ Focus on Higher Ed Cybersecurity

Beth Waller and Justin Lugar look at a recent case involving Georgia Tech where the U.S. Department of Justice intervened and ultimately provided a playbook for whistleblowers and prosecutors to bring cases under Title IV of the Higher Education Act. While the university is pushing for dismissal of the False Claims Act (FCA) case filed against it, the situation demonstrates how many higher education institutions may be unknowingly exposed to cybersecurity requirements that, if not followed, could lead to FCA liability.

The authors underscore the issue: “Add in the increased scrutiny from the DOJ's Civil Cyber-Fraud Initiative, or CCFI, which aims to combat cyber threats to the security of sensitive information and critical systems under the FCA, and higher education institutions have a potential ticking time bomb on their hands when it comes to cybersecurity standards.”

Read Beth and Justin's guidance in the copy here (PDF) or on Law360 here.