We are required to comply with increasingly complex and changing legal and regulatory requirements that govern the collection, use, storage, security, transfer, disclosure, and other processing of personal data in the United States and in other countries, which may include, but are not limited to, the Health Insurance Portability and Accountability Act (“HIPPA”), as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, the General Data Protection Regulation ("GDPR") adopted by the EU and the California Privacy Rights Act ("CRPA") and the California Consumer Privacy Act, as amended by the CRPA (the “CCPA”). The GDPR imposes stringent EU data protection requirements and provides for significant penalties for noncompliance. HIPAA also imposes stringent data privacy and security requirements and the regulatory authority has imposed significant fines and penalties on organizations found to be out of compliance. The CCPA and the CRPA provides consumers with a private right of action against companies that have a security breach due to lack of appropriate security measures. These laws affect how we collect and use data of our employees, customers, and other parties, including patients treated with our products, and they may further restrict our transfer and use of such data, and can expose us to investigations and enforcement actions by regulatory authorities and claims from individuals potentially resulting in penalties and significant legal liability, if our efforts to protect such confidential personal information are inadequate. These laws, as well as similar laws being enacted by other states and countries, impose substantial requirements that involve the expenditure of significant resources and the investment of significant time and effort to comply. We also rely on third parties to host or otherwise process some of this data, who are subject to similar risks, and any failure by such third parties to comply with data privacy and security laws or protect such confidential information, could harm our reputation and have a material adverse effect on our business.