We use de-identified and aggregated data to create analytic models designed to predict, and potentially improve, outcomes and patient care. The collection, maintenance, protection, use, transmission, disclosure and disposal of sensitive personal information is regulated at the federal, state, international and industry levels and requirements are also imposed on us and vendors through contracts with clients. We are also subject to various other consumer protection laws that regulate our communications with customers. Certain of our businesses are also subject to the Payment Card Industry Data Security Standard, which is designed to protect credit card account data as mandated by payment card industry entities. In addition, more jurisdictions are regulating the collection, use and transfer of data across borders. These laws, rules, regulations and contractual requirements are subject to change, and the regulatory environment surrounding data protection and privacy is generally becoming more onerous. Compliance with existing or new privacy, security or data protection laws, regulations and requirements may result in increased enforcement, costs, and may constrain or require us to alter our business model or operations.
Further, if the data we rely upon to run our businesses is found to be inaccurate or unreliable or if we fail to maintain or protect our information systems and data integrity effectively, we could experience failures in our technology products; lose existing customers; have difficulty attracting new customers; experience problems in determining medical cost estimates and establishing appropriate pricing; have difficulty preventing, detecting and controlling fraud; have disputes with customers, physicians and other healthcare professionals; become subject to regulatory sanctions, penalties, investigations or audits; incur increases in operating expenses; or suffer other adverse consequences.