Because the interpretation and application of privacy and data protection laws, regulations and standards are uncertain, it is possible that these laws, regulations and standards may be interpreted and applied in manners that are inconsistent between countries and jurisdictions or conflict with other laws, regulations or other obligations to which we are or may become subject. Such laws and regulations, or interpretation of law and regulations also may be, or may be asserted to be inconsistent with our data management practices or the technological features of our solutions. If so, in addition to the possibility of fines, investigations, lawsuits and other claims and proceedings, it may be necessary or desirable for us to fundamentally change our business activities and practices or modify our products and services, which could have an adverse effect on our business. We may be unable to make such changes or modifications in a commercially reasonable manner or at all. Any inability to adequately address privacy, data protection, or data security concerns, even if unfounded, or any actual or perceived failure to comply with applicable laws, regulations, standards or policies relating to privacy, data protection, or data security, could result in additional cost and liability to us, damage our reputation, decrease the availability of and increase costs for information, inhibit sales and harm our business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, standards and policies that are applicable to the businesses of our customers may limit the use and adoption of, and reduce the overall demand for, our platform. Privacy concerns, whether valid or not valid, may inhibit market adoption of our platform particularly in certain industries and foreign countries.
If government regulations or laws relating to the internet, video, advertising, or other areas of our business change, we may need to alter the manner in which we conduct our business, or our business could be harmed.
We are subject to general business regulations and laws, as well as regulations and laws specific to the internet and online services, which may include laws and regulations related to data privacy, data protection and data security, consumer protection, data localization, law enforcement access to data, encryption, telecommunications, social media, payment processing, taxation, intellectual property, competition, electronic contracts, internet access, net neutrality, advertising, calling and texting, content restrictions, protection of children and accessibility, among others. We cannot guarantee that we have been or will be fully compliant in every jurisdiction. Litigation and regulatory proceedings are inherently uncertain, and the laws and regulations governing issues such as data privacy, data protection and data security, payment processing, taxation, net neutrality, video, telecommunications, e-commerce tariffs and consumer protection related to the internet continue to develop. For example, laws relating to the liability of providers of online services for activities of their users and other third parties have been tested by a number of claims, including actions based on invasion of privacy and other torts, unfair competition, copyright and trademark infringement and other theories based on the nature and content of the materials searched, the advertisements posted, actions taken or not taken by providers in response to user activity or the content provided by users. The U.S. Congress has also enacted legislation related to liability of providers of online services and may continue to legislate in this area. The CCPA and Nevada Privacy Law (the Nevada SPI Law) also apply to entities that do business in California and Nevada, respectively, and impose a number of requirements on internet and online services. Moreover, as internet commerce and advertising continue to evolve, increasing regulation by federal, state and foreign regulatory authorities becomes more likely.
Laws relating to data privacy, data protection and data security, data localization, law enforcement access to data, encryption and similar activities continue to proliferate, often with little harmonization between jurisdictions and limited guidance. A number of existing bills are pending in the U.S. Congress and other government bodies that contain provisions that would regulate, for example, how companies can use cookies and other tracking technologies to collect, use and share user information. The CCPA also imposes requirements on certain tracking activity. The ePrivacy Directive in the EU, which is due for update in 2021, and other EU member state legislation require marketers or companies like ours to, for example, obtain unambiguous, affirmative consent from users for the placement of cookies or other tracking technologies and the delivery of relevant advertisements. If we or the third parties that we work with, such as contract payment processing services, content publishers, vendors or developers violate or are alleged to violate applicable privacy-, data protection- or security-related laws, industry standards, contractual obligations, or our policies, such violations and alleged violations may also put our users’ information at risk and could in turn harm our business and
34