We collect, use, process, and store proprietary information and personal, sensitive, or confidential data relating to our business, customers, and employees. Privacy laws and similar regulations in many jurisdictions where we do business require that we take significant steps to safeguard that information, and these laws and regulations continue to evolve. New laws may add a broad array of requirements on how we handle or use information, increase our compliance obligations and impose new and greater monetary fines for privacy violations. For example, the European Union’s (“EU”) General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”) has stringent data protection requirements and provides for significant penalties. Non-compliance could lead to lower revenues, increased costs (including fines, which could be significant) and other material adverse effects on our results of operations. Countries such as the United Kingdom (the “UK”) have implemented the GDPR through their own legislation and other countries in which we operate have proposed or adopted their own data protection legislation. In addition, in the United States, a growing number of states have enacted different laws regarding personal information and privacy that impose significant new requirements on consumer personal information. Although we monitor and assess the impact of these laws and regulations, and regularly update our systems to protect our data and comply with these laws, their interpretation and enforcement are uncertain and subject to change, and may require substantial costs to monitor and implement. Failure to comply with data privacy and protection laws and regulations could also result in government enforcement actions (which could include substantial civil and/or criminal penalties) and private litigation, which could adversely affect our reputation and financial performance. These laws and regulations are broad in scope, complex, and subject to evolving interpretations and increasing enforcement, and we have incurred costs to monitor compliance and have altered our practices, and may have to do so again in the future. Moreover, certain new and existing data privacy laws and regulations diverge and conflict with each other in certain respects, which makes compliance increasingly difficult. Complying with new regulatory requirements has in the past required, and could in the future require, us to incur substantial expenses or require us to change our business practices, either of which could harm our business. As regulators have become increasingly focused on information security, data collection and use and privacy, we may be required to devote significant additional resources to modify and enhance our information security controls and to identify and remediate vulnerabilities, which could adversely impact our results of operations and profitability.