Risks Related to Regulatory, Legal and Cybersecurity
Changes in government regulations could have an adverse effect on our business strategy, financial condition and results of operations.
We are subject to numerous federal, state and local laws and regulations that govern numerous aspects of our business. In recent years, a number of new laws and regulations have been adopted, there has been expanded enforcement of certain existing laws and regulations by federal, state and local agencies, and the interpretation of certain laws and regulations has become increasingly complex. These laws and regulations, and related interpretations and enforcement activity, may change as a result of a variety of factors, including political, economic or social events. Changes in, expanded enforcement of, or adoption of new federal, state or local laws and regulations governing areas such as minimum wage or living wage requirements, workplace-regulation and other labor or employment benefits laws, supply chain, taxes, including changes to corporate tax rates, privacy and information security, or environmental regulation such as carbon emission standards and environmental, social and governance (ESG) programs, transparency and reporting, could increase our costs of doing business or impact our sales, operations or profitability.
In addition to increased regulatory compliance requirements, changes in laws could make ordinary conduct of our business more expensive or require us to change the way we do business. For example, changes in federal and state minimum wage laws could raise the wage requirements for certain of our employees, which would likely cause us to reexamine our entire wage structure for stores. Other laws related to employee benefits and treatment of employees, including laws related to limitations on employee hours, work scheduling, supervisory status, leaves of absence, mandated health benefits or overtime pay, could also negatively impact us, such as by increasing compensation and benefits costs for overtime and medical expenses.
Continued or increased scrutiny and changing expectations surrounding sustainability matters from investors, customers, government regulators and other stakeholders may impose additional reporting requirements, additional costs and compliance risks.
Public companies from across all industries are facing increasing scrutiny from investors, customers, government regulators and other stakeholders concerning sustainability matters. In the U.S., there are various proposals for new or enhanced disclosure requirements regarding climate emissions, sustainability, workforce diversity and other human capital resources metrics, among other topics. Complying with these complex reporting obligations or expectations may increase our costs associated with compliance, disclosure and reporting. Furthermore, evolving sustainability laws, regulations and stakeholder expectations may result in uncertain and potentially burdensome reporting requirements as stakeholders, agencies and government authorities adjust their expectations or change laws and regulations, such as proposals currently under consideration regarding climate emissions reporting and auditing requirements. Failure to comply with all of the currently proposed regulatory requirements in a timely manner may adversely affect our reputation, business and financial performance.
Any failure of our management information systems or the inability of third parties to continue to upgrade and maintain our systems could have an adverse effect on our business strategy, financial condition and results of operations.
We depend on the accuracy, reliability and proper functioning of our management information systems, including the systems used to track our sales and facilitate inventory management. We also rely on our management information systems for point-of-sale, merchandise planning and allocation, replenishment and markdowns, as well as other key business functions. These functions enhance our ability to process and optimize sales while limiting markdowns and reducing inventory risk through properly marking down slow-selling styles, reordering existing styles and effectively distributing new inventory to our stores. We do not currently have redundant systems for all functions performed by our management information systems. Any interruption in these systems could impair our ability to manage our inventory effectively, which could have an adverse effect on our business strategy, financial condition or results of operations.
Our computer systems and the third-party systems we rely on are also subject to damage or interruption from a number of causes, including power outages; computer and telecommunications failures; computer viruses, malware, ransomware, phishing or distributed denial-of-service attacks; security breaches; cyber-attacks; catastrophic events such as fires, floods, earthquakes, tornadoes, hurricanes; acts of war or terrorism and design or usage errors by our employees or contractors. Compromises, interruptions or shutdowns of our systems, including those managed by third parties, whether intentional or inadvertent, could lead to delays in our business operations and, if significant or extreme, affect our financial condition or results of operations.
For example, as previously disclosed in our Form 8-K filed with the SEC on February 23, 2023, we experienced a disruption of our back office and distribution center IT systems in January 2023 due to what is known as Hive ransomware. The incident did not result in a material disruption to our business strategy, financial condition or results of operations, material costs net of insurance coverage or other adverse material consequences; however, there can be no assurance of a similar result in the future.