high match confidence
Sentence-level differences:
- Reworded sentence: "Failure to 18 18 18 comply with data privacy laws can result in substantial fines or penalties, legal liability and / or reputational damage and litigation."
- Reworded sentence: "Furthermore, state-level momentum continues to increase as numerous other U.S."
Current (2025):
Data privacy laws and the regulatory activity associated therewith, continue to evolve across most jurisdictions in which we operate. Given the complexity of these laws, uncertainty regarding their interpretation, application, and enforcement and the often-onerous requirements…
Read full text
Data privacy laws and the regulatory activity associated therewith, continue to evolve across most jurisdictions in which we operate. Given the complexity of these laws, uncertainty regarding their interpretation, application, and enforcement and the often-onerous requirements they place on businesses regarding the collection, storage, handling, use, disclosure, transfer, and security of personal data, it is important for us to understand their impact and respond accordingly. Failure to 18 18 18 comply with data privacy laws can result in substantial fines or penalties, legal liability and / or reputational damage and litigation. In the UK and Europe, the General Data Protection Regulation (the GDPR) places stringent requirements on companies when handling personal data and local regulatory guidance continues to evolve. For instance, in the UK, the adoption of the Data Use and Access Act may require more localized data storage facilities and could impact how we segregate personal data between markets. There also continues to be a growing trend of other countries adopting similar laws which we will have to assess and understand in order to implement required changes. Additionally, both the GDPR and the California Consumer Privacy Act of 2018 (the CCPA) are continuously evolving and developing and may be interpreted and applied differently from jurisdiction to jurisdiction and may create inconsistent or conflicting requirements. For example, the California Privacy Rights Act (the CPRA) modifies the CCPA significantly, further enhancing and extending an individual’s rights over their personal data and the obligations placed on companies that handle this data. The resulting new regulations became effective on January 1, 2023. Most notably, employee and business data were brought into scope, which raises the compliance requirements for us significantly, in terms of internal controls, processes and governance requirements. Furthermore, state-level momentum continues to increase as numerous other U.S. states have enacted, or are considering more stringent privacy laws, which may impose varying standards and requirements on our data collection, use and processing activities. Continued state by state introduction of privacy laws can be expected to lead to significantly greater complexity in our compliance requirements globally, which could result in complaints from data subjects and/or action from regulators and potential litigation claims. If we do not provide sufficient resources to ensure we are able to respond, adapt and implement the necessary requirements to respond, or we do not respond sufficiently to the various forthcoming changes, which could include federal data privacy requirements in the US, while continuing to maintain our compliance with global data privacy laws, this could adversely impact our reputation and we could face exposure to fines levied by regulators and class action and similar litigation risks, which could have a significant financial impact on our business.
View prior text (2024)
Data privacy laws and the regulatory activity associated therewith, continue to evolve across most jurisdictions in which we operate. Given the complexity of these laws, uncertainty regarding their interpretation, application, and enforcement and the often-onerous requirements they place on businesses regarding the collection, storage, handling, use, disclosure, transfer, and security of personal data, it is important for us to understand their impact and respond accordingly. Failure to comply with data privacy laws can result in substantial fines or penalties, legal liability and / or reputational damage and litigation. In the UK and Europe, the General Data Protection Regulation (the GDPR), which came into effect in 2018, places stringent requirements on companies when handling personal data. There continues to be a growing trend of other countries adopting similar laws. 17 17 17 Additionally, there continues to be significant uncertainty with respect to the California Consumer Privacy Act of 2018 (the CCPA), which went into effect on January 1, 2020, and imposes additional obligations on companies regarding the handling of personal information and provides certain individual privacy rights to persons whose information is collected. Both the GDPR and the CCPA are continuously evolving and developing and may be interpreted and applied differently from jurisdiction to jurisdiction and may create inconsistent or conflicting requirements. For example, the California Privacy Rights Act (the CPRA), which was approved by California voters as a ballot initiative in November 2020, modifies the CCPA significantly, further enhancing and extending an individual’s rights over their personal data and the obligations placed on companies that handle this data. The resulting new regulations became effective on January 1, 2023. Most notably, employee and business data were brought into scope, which raises the compliance requirements for us significantly, in terms of internal controls, processes and governance requirements. Furthermore, since 2020, numerous other U.S. states have enacted, or are considering more stringent privacy laws, which may impose varying standards and requirements on our data collection, use and processing activities. Continued state by state introduction of privacy laws can be expected to lead to significantly greater complexity in our compliance requirements globally, which could result in complaints from data subjects and/or action from regulators and potential litigation claims. If we do not provide sufficient resources to ensure we are able to respond, adapt and implement the necessary requirements to respond, or we do not respond sufficiently to the various forthcoming changes, which could include federal data privacy requirements in the US, while continuing to maintain our compliance with global data privacy laws, this could adversely impact our reputation and we could face exposure to fines levied by regulators and class action and similar litigation risks, which could have a significant financial impact on our business.