Along with our own data and information collected in the normal course of our business, we collect, use, transfer and retain certain data that is subject to specific laws and regulations. The transfer and use of this data both domestically and across international borders is becoming increasingly complex. This data is subject to governmental regulation at international, federal, state and local levels in many areas of our business, including data privacy and security laws such as the European Union (“EU”) and United Kingdom (“UK”) versions of the General Data Protection Regulation (“GDPR”), and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). To date, comprehensive state privacy laws have been proposed or passed in more than twenty U.S. states. We also operate in other jurisdictions (such as Mexico, Peru and Singapore) that have issued, or are considering the issuance of, data privacy laws and regulations. Additionally, the U.S. Federal Trade Commission and multiple state attorneys general are interpreting federal and state consumer protection laws to impose standards for the online collection, use, dissemination and security of data as well as requiring disclosures regarding such practices. Existing and potential future data privacy laws pose increasingly complex compliance, monitoring and control obligations and could potentially elevate our costs and risk exposure. As the implementation, interpretation, and enforcement of such laws continue to progress and evolve, there may also be developments that amplify such costs and risk exposure. Any failure by us to comply with these laws and regulations, including as a result of a cybersecurity incident or privacy breach, could expose us to significant penalties and liabilities, including individual claims or consumer class actions, commercial litigation, administrative, and investigations or actions, regulatory intervention and sanctions or fines.