that we ensure that all data transfers to us from the EEA and Uk are legitimized. We may find it necessary to establish systems to maintain EU/Uk-origin data in the EEA or Uk, which may involve substantial expense and distraction from other aspects of our business.
We publicly post our privacy policies and practices concerning our processing, use and disclosure of PII. Our publication of our privacy policy and other public statements that provide promises and assurances about privacy and security can subject us to potential governmental action if they are found to be deceptive or misrepresentative of our practices. Further, the costs of compliance with, and other burdens imposed by, such laws, regulations and policies that are applicable to us may limit the use and adoption of our products and solutions and could have a material adverse impact on our results of operations.
隱私問題和法律、雲計算和其他國內外監管的不斷變化可能限制我們解決方案的使用和採用，並對我們的業務產生不利影響。
Further to the above, regulation related to the provision of services on the Internet is increasing, as federal, state and foreign governments continue to adopt new laws and regulations addressing data privacy and the collection, processing, storage and use of personal information. Further, laws are increasingly aimed at the use of personal information for marketing purposes, such as the EU’s e-Privacy Directive (which is set to be replaced by a new EU e-Privacy Regulation which will have a 「direct effect」 in each EU Member State), and the country-specific regulations that implement that directive. These and other requirements could reduce demand for our solutions or restrict our ability to store and process data or, in some cases, impact our ability to offer our services and solutions in certain locations. Although we have implemented contracts, diligence programs, policies and procedures designed to address compliance with applicable laws and regulations, there can be no assurance that our employees, contractors, partners, suppliers, data providers or agents will not violate such laws and regulations or our contracts, policies and procedures. Additionally, public perception and standards related to the privacy of personal information can shift rapidly, in ways that may affect our reputation or influence regulators to enact regulations and laws that may limit our ability to provide certain products and services. For example, numerous jurisdictions, including the EU, are considering laws and regulations that would impose additional data privacy and other compliance requirements on the use of AI and could require us to adjust or limit our product offerings in such jurisdictions.
在美國，加州於2018年6月28日頒佈了《加州消費者隱私法案》（CCPA），並於2020年1月1日生效。CCPA賦予加州居民擴展的權利，可以訪問和刪除他們的個人信息，選擇不共享某些個人信息，並獲得詳細信息了解他們的個人信息如何使用。CCPA對違規行爲實施民事處罰，併爲數據泄露提供了私人訴訟的權利，預計會增加數據泄露訴訟的數量。 2020年11月3日，加州通過了《加州隱私權法》（CPRA），於2023年1月1日生效，並修訂和擴大了CCPA，包括引入敏感個人信息作爲加州新的受監管數據集，受到新的披露和目的限制要求的約束。此外，到2024年7月，其他州還頒佈了多項綜合性的州級數據隱私法律，要求企業對每項法律進行獨立評估以符合特定的合規要求和消費者權益，包括以下內容：
| ● | 《弗吉尼亞州消費者數據保護法》（VCDPA）於2023年1月1日生效； |
| ● | 《科羅拉多隱私法》和《康涅狄格數據隱私法》將於2023年7月1日生效； |
| ● | 猶他州消費者隱私法於2023年12月31日生效; |
| ● | 佛羅里達州數字權利法案、俄勒岡州消費者隱私法和德克薩斯州數據隱私和安全法於2024年7月1日生效; |
| ● | 蒙大拿州消費者數據隱私法將於2024年10月1日生效; |
| ● | 特拉華州個人數據隱私法、愛荷華州消費者數據保護法、內布拉斯加州在線數據隱私法和新罕布什爾州隱私法將於2025年1月1日生效; |
| ● | 田納西州的信息保護法將於2025年7月1日生效； |
| ● | 明尼蘇達州的消費者隱私法將於2025年7月31日生效； |
| ● | 馬里蘭州的在線數據隱私法將於2025年10月1日生效；和 |
| ● | 印第安納州消費者數據保護法和肯塔基州消費者數據保護法將於2026年1月1日生效。 |
