As Senior Legal Counsel, I have reviewed the Limitation of Liability clause provided. In the context of New York jurisdiction, this clause is aggressively one-sided and contains several "red flag" provisions that may not only be commercially unacceptable but legally unenforceable. Under **NY General Obligations Law (GOL)** and established case law (e.g., *Sommer v. Federal Signal Corp.*), parties cannot insulate themselves from liability for **gross negligence** or **willful misconduct**. Furthermore, a nominal cap ($1,000) in a high-value commercial contract can be deemed **unconscionable** or viewed as an **illusory promise** if it effectively denies the non-breaching party any meaningful remedy. ### 1. Risk Analysis Table | Clause Reference | Risk Level | Conflict/Violation Description | Legal Implication | | --- | --- | --- | --- | | **"In no event shall the Supplier be liable..."** | **High** | Fails to provide carve-outs for gross negligence, willful misconduct, or fraud. | Under NY law, exculpatory clauses that attempt to shield a party from "grossly negligent" or intentional acts are void as a matter of public policy. | | **"$1,000 Aggregate Cap"** | **High** | The cap is nominal and likely disproportionate to the contract value/risk. | May be struck down as **unconscionable** under UCC § 2-719 or NY common law. If the cap is too low, it may be found to "fail of its essential purpose." | | **"Loss of data" exclusion** | **Medium** | Absolute exclusion of data loss liability without consideration of "cost of restoration." | Leaves the buyer with zero recourse for data breaches or catastrophic server failures caused by Supplier negligence. | | **"Punitive Damages"** | **Low** | Standard exclusion, but usually unnecessary in contract actions. | NY courts rarely award punitive damages in contract disputes anyway, but the language is standard. | --- ### 2. Modification Recommendations **Original Clause:** > "In no event shall the Supplier be liable for any indirect, incidental, consequential, special or punitive damages, including but not limited to loss of profits, data, or use, whether in an action in contract or tort, even if the other party has been advised of the possibility of such damages. The Supplier's total aggregate liability under this Agreement shall not exceed $1,000." **Proposed Redline:** > "Except for **(i) Supplier’s gross negligence, willful misconduct, or fraud; (ii) Supplier’s indemnification obligations hereunder; or (iii) breaches of confidentiality/data security**, in no event shall either party be liable for any indirect, incidental, consequential, or special damages, including loss of profits. Supplier’s total aggregate liability under this Agreement shall not exceed **the greater of: (a) the total amounts paid or payable by Customer to Supplier in the twelve (12) month period preceding the claim; or (b) $100,000.**" **Rationale:** 1. **Carve-outs:** The addition of "gross negligence, willful misconduct, or fraud" aligns the contract with **NY Public Policy**, ensuring the clause isn't thrown out entirely by a judge. 2. **Mutual Protection:** While you asked to focus on counterparty-favored clauses, making the exclusion of consequential damages mutual is a standard "middle ground" that makes the limitation more defensible. 3. **The Cap:** Replacing the arbitrary $1,000 with a "Fees Paid in 12 Months" formula is the **NY market standard**. It ensures the liability is proportional to the commercial value of the deal. The "greater of" floor ($100,000) is a placeholder; this should be scaled to match your specific insurance coverage or the potential "worst-case" damage scenario. 4. **Specific Exclusions:** Indemnification and Confidentiality are carved out from the cap because these risks (third-party IP claims or data breaches) often far exceed the value of the service fees. Would you like me to draft a specific "Data Breach Liability" sub-cap to further isolate and manage the risk of data loss?