The Nickel Report

On April 23, 2026, US EPA announced the release of a publicly accessible list of confidential business information (CBI) claims submitted by companies 10 years ago that are scheduled to expire under the Toxic Substances Control Act (TSCA). The list includes 293 CBI claims that will expire between June 22, 2026, and July 31, 2026. EPA will add to the list on a monthly basis as CBI claims continue to approach their expiration dates. In addition, EPA intends to directly notify the original submitter of each expiring CBI claim via the agency’s electronic document system, the Central Data Exchange (CDX). Companies that submitted TSCA CBI claims between the time when TSCA was amended on June 22, 2016, and July 31, 2026, should carefully review this list and monitor their CDX accounts, verify whether any of their CBI claims are included, and prepare to submit extension requests to maintain critical CBI protections. These extension requests must be made no later than 30 days prior to the expiration of the CBI claim. Companies who fail to renew expiring CBI claims risk losing protection from disclosure of their confidential information.

Guarding confidential or sensitive information is a longstanding tradition that transcends daily life. From the pinky-swearing days of childhood (to prevent your parents from finding out you rode your bike beyond their imposed boundary), to the fourth down play when your team is one point down with three seconds left on the clock, to the unique, complex chemical composition of a lifesaving drug, the concept of secrecy has roots in just about everything we do. In the business world, secrets are routinely kept to protect market share, privacy of customers, technology or for any number of other legitimate business-related concerns. Indeed, disclosure of confidential information can pose a real threat to a business’s vitality.

We are serious.  And don’t call us Shirley.

So EPA sent your company a dreaded Request for Information (“RFI”).  What do you do now?  If you’ve never been through this process before, you likely have a lot running through your head:

• Did our company do something wrong?  Is my company under investigation?
• Is this EPA’s way of asking for my help to improve its regulations?
• Do I have to answer this?
• How can I possibly compile all this information in 30 days?
• Do we need a lawyer to help us respond?
• What about confidential information?  EPA is asking for customer or supplier information.  Isn’t that private?