conduct cyberattacks, as well as the sources and targets of the attacks, change frequently. While we invest time, effort and capital resources to secure our key systems and networks, we cannot provide assurance that we will be successful in preventing or responding to all such attacks.
A successful cyberattack may target us directly, or may be the result of a third-party vendor’s inadequate care. In either scenario, we may suffer damage to our key systems and/or data that could interrupt our operations, adversely impact our reputation and brand and expose us to increased risks of governmental investigation, litigation and other liability, any of which could adversely affect our business. Furthermore, responding to such an attack and mitigating the risk of future attacks could result in additional operating and capital costs in systems technology, personnel, monitoring and other investments.
Even if we are fully compliant with legal and/or industry standards and any relevant contractual requirements, we still may not be able to prevent security breaches involving sensitive data and/or critical systems. Any breach, theft, loss, or fraudulent use of guest, employee, third-party or company data, could adversely impact our reputation and brand and our ability to retain or attract new customers, and expose us to risks of data loss, business disruption, governmental investigation, litigation and other liability, any of which could adversely affect our business. Significant capital investments and other expenditures could be required to remedy the problem and prevent future breaches, including costs associated with additional security technologies, personnel, experts and credit monitoring services for those whose data has been breached. Further, if we or our vendors experience significant data security breaches or fail to detect and appropriately respond to significant data security breaches, we could be exposed to government enforcement actions and private litigation.
Changes in Privacy Law Could Adversely Affect Our Ability to Market Our Services Effectively
Our ability to market our services effectively is an important component of our business. We rely on a variety of direct marketing techniques, including telemarketing, email marketing, and direct mail. Any further restrictions under laws such as the Telemarketing Sales Rule, the CAN-SPAM Act of 2003, the GDPR, and various United States state laws or new federal laws regarding marketing and solicitation, or international data protection laws that govern these activities, could adversely affect the continuing effectiveness of telemarketing, email, and postal mailing techniques and could force further changes in our marketing strategy. If this were to occur, we may be unable to develop adequate alternative marketing strategies, which could impact our ability to effectively market and sell our services.
We may need additional capital in the future, but there is no assurance that funds will be available on acceptable terms.
We may need additional capital in the future for various reasons, including to achieve growth or fund other business initiatives, but there is no assurance that capital will be available in sufficient amounts or on terms acceptable to us and may be dilutive to existing shareholders. Additionally, any securities issued to raise capital may have rights, preferences, or privileges senior to those of existing shareholders. If adequate capital is not available or is not available on acceptable terms, our and our ability to expand, develop or enhance services or products, or respond to competitive pressures, will be limited.
Our access to capital markets and sourcing for additional funding to expand or operate our business is subject to market conditions. Credit concerns regarding the cruise industry as a whole also may impede our access to capital markets. If we are unable to obtain needed capital on terms acceptable to us, we may have to limit strategic initiatives or take other actions that materially adversely affect our business, financial condition, results of operations, and cash flows.
In addition, our cash balance is substantially less than the principal amount of our outstanding debt, and we will be required to generate cash from operations and raise additional working capital through future financings or sales of assets to enable us to repay this indebtedness as it becomes due. There can be no assurance that we
S-35