Company: IPST
Filing Date: 2025-01-27
Form Type: S-1
Source: 0001213900-25-006695
Chunk: 70

Company: Heritage Distilling Holding Company, Inc.
Filing Date: 2025-01-27
Form: S-1
Chunk 70
---
 and state level, including new laws that may impact our operations. For example, the State of California has enacted the California Consumer Privacy Act of 2018 (“CCPA”), which generally requires companies that collect, use, share and otherwise process “personal information” (which is broadly defined) of California residents to make disclosures about their data collection, use, and sharing practices, allows consumers to opt-out of certain data sharing with third parties or the sale of personal information, allows consumers to exercise certain rights with respect to any personal information collected and provides a new cause of action for data breaches. In addition, a newprivacy law, the California Privacy Rights Act (“CPRA”), which significantly modifies the CCPA, was approved by ballot initiative during the November 3, 2020 general election. There remains significant uncertainty regarding the timing and implementation of the CPRA, which may require us to incur additional expenditures to ensure compliance. Additionally, the Federal Trade Commission, and many state attorneys general are interpreting federal and state consumer protection laws to impose standards for the online collection, use, dissemination, and security of data. The burdens imposed by the CCPA and other similar laws that have been or may be enacted at the federal and state level may require us to modify our data processing practices and policies and to incur additional expenditures to comply. 41 Compliance with these and any other applicable privacy and data protection laws and regulations is a rigorous and time-intensive process, and we may be required to put in place additional mechanisms ensuring compliance with the new privacy and data protection laws and regulations. Our actual or alleged failure to comply with any applicable privacy and data protection laws and regulations, industry standards or contractual obligations, or to protect such information and data that we processes, could result in litigation, regulatory investigations, and enforcement actions against us, including fines, orders, public censure, claims for damages by employees, customers and other affected individuals, public statements against us by consumer advocacy groups, damage to our reputation and competitive position and loss of goodwill (both in relation to existing customers and prospective customers) any of which could have a material adverse effect on our business, financial condition, results of operations, and cash flows. Additionally, if third parties that we work with, such as vendors or developers, violate applicable laws or our policies, such violations may also place personal information at risk and have an adverse effect on our business. Even the perception of privacy concerns, whether or not valid, may harm our reputation, subject us to regulatory scrutiny and investigations, and inhibit adoption of our spirits and other