regulation by various government agencies. The U.S. federal government and various state governments have adopted or proposed limitations on the collection, distribution, use and storage of personally identifiable information of individuals. We also may find it necessary or desirable to join industry or other self-regulatory bodies or other information security or data protection-related organizations that require compliance with their rules pertaining to information security and data protection. We also may be bound by additional, more stringent contractual obligations relating to our collection, use and disclosure of personal, financial and other data.
The data protection landscape is rapidly evolving, and we expect that there will continue to be new proposed laws, regulations and industry standards concerning privacy, data protection, information security and telecommunications services, and we cannot yet determine the impact such future laws, regulations and standards may have on our business. For example, on June 28, 2018, California enacted the California Consumer Privacy Act (the “CCPA”), which takes effect on January 1, 2020. The CCPA gives California residents expanded rights to access and delete their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information is used. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. The CCPA may increase our compliance costs and potential liability. Some observers have noted that the CCPA could mark the beginning of a trend toward more stringent privacy legislation in the U.S., which could increase our potential liability and adversely affect our business.
Evolving and changing definitions of personal data and personal information, especially relating to the classification of IP addresses, machine identification, location data and other information, may limit or inhibit our ability to operate or expand our business, including limiting the sharing of data. Even the perception of privacy concerns, whether or not valid, may harm our reputation, inhibit adoption of our products by current and future customers, or adversely impact our ability to attract and retain workforce talent. In addition, changes in laws or regulations that adversely affect the use of the Internet, including laws impacting net neutrality, could impact our business. We expect that existing laws, regulations and standards may be interpreted in new manners in the future. Future laws, regulations, standards and other obligations, and changes in the interpretation of existing laws, regulations, standards and other obligations could require us to modify our solutions, restrict our business operations, increase our costs and impair our ability to maintain and grow our adviser base and increase our revenue.
Although we work to comply with applicable laws and regulations, industry standards, contractual obligations and other legal obligations, such laws, regulations, standards and obligations are evolving and may be modified, interpreted and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another. In addition, they may conflict with other requirements or legal obligations that apply to our business or the features and services that our adviser clients and their investor clients expect from our products and services. As such, we cannot assure ongoing compliance with all such laws, regulations, standards and obligations. Any failure by us to comply with applicable laws and regulations, or to comply fully with employee, client and other data privacy and data security requirements pursuant to contract and our stated privacy notice(s), could result in enforcement actions against us, including fines, imprisonment of company officials and public censure, claims for damages by customers and other affected individuals, damage to our reputation and loss of goodwill (in relation to both existing and prospective clients), any of which could have a material adverse effect on our operations, financial performance and business. Any inability to adequately address privacy and security concerns, even if unfounded, or comply with applicable laws, regulations, standards and obligations, could result in additional cost and liability to us, damage
34