Company: CXDO
Filing Date: 2025-03-04
Form Type: 10-K
Source: 0001654954-25-002287
Chunk: 268

Company: Crexendo, Inc.
Filing Date: 2025-03-04
Form: 10-K
Item: Item 1A
Chunk 268
---
 addition, several foreign countries and governmental bodies, including the E.U., Brazil and Canada, have laws and regulations concerning the collection and use of personally identifiable information obtained from their residents, including payment card information, which are often more restrictive than those in the U.S. Laws and regulations in these jurisdictions apply broadly to the collection, use, storage, disclosure and security of personally identifiable information, including payment card information identifying, or which may be used to identify, an individual, such as names, email addresses and, in some jurisdictions, Internet Protocol (IP) addresses, device identifiers and other data. Our phones may be moved to locations which could potentially subject us to jurisdiction. Also, websites we host may be available in these locations. As we conduct business or become deemed to conduct business in those foreign jurisdictions, we may become subject to those laws.

We are also subject to the privacy and data protection-related obligations in our contracts with our customers and other third parties. Any failure, or perceived failure, to comply with federal, state, or international laws, or to comply with our contractual obligations related to privacy, could result in proceedings or actions against us which could result in significant liability to us as well as harm to our reputation. Additionally, third parties with whom we contract may violate or appear to violate laws or regulations which could subject us to the same risks. Any new laws, regulations, other legal obligations or industry standards, or any changed interpretation of existing laws, regulations or other standards may require us to incur additional costs and restrict our business operations.

 19Table of Contents

Our collection, processing, storage, use, and transmission of personal data could give rise to liabilities as a result of governmental regulation, conflicting legal requirements, differing views on data privacy, or security breaches.

We collect, process, store, use, and transmit personal data on a daily basis. Personal data is increasingly subject to legal and regulatory protections around the world, which vary widely in approach and which possibly conflict with one another. In recent years, for example, U.S. legislators and regulatory agencies, such as the Federal Trade Commission, as well as U.S. states have increased their focus on protecting personal data by law and regulation and have increased enforcement actions for violations of privacy and data protection requirements. California recently enacted legislation, the California Consumer Privacy Act (“CCPA”) that will, among other things, require covered companies to provide new disclosures to California consumers, and afford such consumers new abilities to opt-out of certain sales of personal information, which became effective January 1, 202