high match confidence
Sentence-level differences:
- Reworded sentence: "•Various comprehensive U.S."
- Reworded sentence: "These include the Children’s Online Privacy Protection Act of 1998, and the United Kingdom Age-Appropriate Design Code, all of which address the use and disclosure of the personal data of children and minors and impose obligations on online services or products directed to or likely to be accessed by children."
- Reworded sentence: "•The EU’s Digital Markets Act, which will require in-scope companies to obtain user consent for combining data across certain products and require search engines to share anonymized data with rival companies, among other changes."
- Reworded sentence: "Table of ContentsAlphabet Inc."
Current (2024):
Authorities around the world have adopted and are considering a number of legislative and regulatory proposals concerning data protection, data usage, and encryption of user data. Adverse legal rulings, legislation, or regulation have resulted in, and may continue to result in,…
Read full text
Authorities around the world have adopted and are considering a number of legislative and regulatory proposals concerning data protection, data usage, and encryption of user data. Adverse legal rulings, legislation, or regulation have resulted in, and may continue to result in, fines and orders requiring that we change our practices, which have had and could continue to have an adverse effect on how we provide services, harming our business, reputation, financial condition, and operating results. These laws and regulations are evolving and subject to interpretation, and compliance obligations could cause us to incur substantial costs or harm the quality and operations of our products and services in ways that harm our business. Examples of these laws include: •The General Data Protection Regulation and the United Kingdom General Data Protection Regulations, which apply to all of our activities conducted from an establishment in the EU or the United Kingdom, respectively, or related to products and services that we offer to EU or the United Kingdom users or customers, respectively, or the monitoring of their behavior in the EU or the UK, respectively. •Various comprehensive U.S. state and foreign privacy laws, which give new data privacy rights to their respective residents (including, in California, a private right of action in the event of a data breach resulting from our failure to implement and maintain reasonable security procedures and practices) and impose significant obligations on controllers and processors of consumer data. •State laws governing the processing of biometric information, such as the Illinois Biometric Information Privacy Act and the Texas Capture or Use of Biometric Identifier Act, which impose obligations on businesses that collect or disclose consumer biometric information. •Various federal, state, and foreign laws governing how companies provide age appropriate experiences to children and minors, including the collection and processing of children and minor’s data. These include the Children’s Online Privacy Protection Act of 1998, and the United Kingdom Age-Appropriate Design Code, all of which address the use and disclosure of the personal data of children and minors and impose obligations on online services or products directed to or likely to be accessed by children. •The California Internet of Things Security Law, which regulates the security of data used in connection with internet-connected devices. •The EU’s Digital Markets Act, which will require in-scope companies to obtain user consent for combining data across certain products and require search engines to share anonymized data with rival companies, among other changes. 20. 20. 20. Table of ContentsAlphabet Inc. Table of ContentsAlphabet Inc. Table of Contents Further, we are subject to evolving laws and regulations that dictate whether, how, and under what circumstances we can transfer, process and/or receive personal data, as well as ongoing enforcement actions from supervisory authorities related to cross-border transfers of personal data. The validity of various data transfer mechanisms we currently rely upon remains subject to legal, regulatory, and political developments in both Europe and the U.S., which may require us to adapt our existing arrangements.
View prior text (2023)
Authorities around the world have adopted and are considering a number of legislative and regulatory proposals concerning data protection, data usage, and encryption of user data. Adverse legal rulings, legislation, or regulation have resulted in, and may continue to result in, fines and orders requiring that we change our practices, which have had and could continue to have an adverse effect on how we provide services, harming our business, reputation, financial condition, and operating results. These laws and regulations are evolving and subject to interpretation, and compliance obligations could cause us to incur substantial costs or harm the quality and operations of our products and services in ways that harm our business. Examples of these laws include: •The General Data Protection Regulation and the United Kingdom General Data Protection Regulations, which apply to all of our activities conducted from an establishment in the EU or the United Kingdom, respectively, or related to products and services that we offer to EU or the United Kingdom users or customers, respectively, or the monitoring of their behavior in the EU or the UK, respectively. •Various state and foreign privacy laws and regulations, such as the California Consumer Privacy Act of 2018, the California Privacy Rights Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and the Utah Consumer Privacy Act, all of which give new data privacy rights to their respective residents (including, in California, a private right of action in the event of a data breach resulting from our failure to implement and maintain reasonable security procedures and practices) and impose significant obligations on controllers and processors of consumer data. •State laws governing the processing of biometric information, such as the Illinois Biometric Information Privacy Act and the Texas Capture or Use of Biometric Identifier Act, which impose obligations on businesses that collect or disclose consumer biometric information. •Various federal, state, and foreign laws governing how companies provide age appropriate experiences to children and minors, including the collection and processing of children and minor’s data. These include the Children’s Online Privacy Protection Act of 1998, the United Kingdom Age-Appropriate Design Code, and the California Age Appropriate Design Code, all of which address the use and disclosure of the personal data of children and minors and impose obligations on online services or products directed to or likely to be accessed by children. •The California Internet of Things Security Law, which regulates the security of data used in connection with internet-connected devices. 18 18 18 Table of ContentsAlphabet Inc. Table of ContentsAlphabet Inc. Table of Contents •The EU’s Digital Markets Act, which will require in-scope companies to obtain user consent for combining data across certain products and require search engines to share anonymized data with rival companies, among other changes. Further, we are subject to evolving laws and regulations that dictate whether, how, and under what circumstances we can transfer, process and/or receive personal data. Previously available transfer mechanisms, such as the EU-U.S. and the Swiss-U.S. Privacy Shield frameworks, were invalidated in 2020, and other bases for data transfer and storage, such as Standard Contractual Clauses, remain subject to ongoing review in ways that may require us to adapt our existing contractual arrangements. The validity of various data transfer mechanisms remains subject to legal, regulatory, and political developments in both Europe and the U.S., including the potential adoption of the U.S.-EU Data Privacy Framework. Until the U.S.-EU Data Privacy Framework is adopted by the EU, the legal uncertainty and ongoing enforcement action from supervisory authorities related to cross-border transfers of personal data, could harm our ability to process and transfer personal data outside of the European Economic Area and could in turn harm our ability to provide, and our customers’ ability to use, some of our products and services.