Hewlett-Packard agreed to pay $14.5 million to settle a civil case brought against it by the California Attorney GeneralÃ¢â‚¬â„¢s office related to the companyÃ¢â‚¬â„¢s internal investigations of its board members. The lionÃ¢â‚¬â„¢s share of the settlement will be used to establish a Privacy and Piracy Fund that will help state prosecutors fight consumer privacy and piracy violations. Felony criminal charges are still pending against five people involved in the scandal, in which company investigators were accused of impersonating board members, employees, and journalists in order to obtain personal phone records.
Also as part of the settlement, HP will make several changes to its corporate governance structure: A new independent director will be the boardÃ¢â‚¬â„¢s watchdog with regard to ethical and legal requirements. Both the chief ethics and compliance officer and chief privacy officer will receive greatly expanded duties. The company will also establish a new Compliance Council that reports to the CEO, the board, and the audit committee.
Ã¢â‚¬Å“The Hewlett-Packard incident has helped shine a national spotlight on a major privacy protection problem,Ã¢â‚¬Â said Attorney General Bill Lockyer. Ã¢â‚¬Å“With its governance reforms, this settlement should help guide companies across the country as they seek to protect confidential business information without violating corporate ethics or privacy rights. And the new fund will help ensure that when businesses cross the legal line they will be held accountable.
Ã¢â‚¬Å“Fortunately, Hewlett-Packard is not Enron. I commend the firm for cooperating instead of stonewalling, for taking instead of shirking responsibility, and for working with my office to expeditiously craft a creative resolution.Ã¢â‚¬Â
The civil complaint filed by the AGÃ¢â‚¬â„¢s office alleged that HP used Ã¢â‚¬Å“false and fraudulent pretensesÃ¢â‚¬Â to obtain confidential information. The victims included HP employees, board members and their families, and reporters and their families. It also accused HP of willfully and knowingly accessing, and without permission using, computerized telephone account data belonging to the victims. HP was also accused of violating CaliforniaÃ¢â‚¬â„¢s identity theft statute by willfully obtaining personal identifying information about the victims, then using that information for illegal purposes.