Company: CRCL
Filing Date: 2025-08-12
Form Type: S-1
Source: 0001193125-25-178989
Chunk: 96

Company: Circle Internet Group, Inc.
Filing Date: 2025-08-12
Form: S-1
Chunk 96
---
 be expensive and time-consuming. It may require us to modify our data handling policies and procedures, update and implement revised standard contractual clauses and other relevant documentation and measures for intragroup, customer, and vendor arrangements requiring transfers of personal information, and may ultimately prevent or restrict us from transferring personal data outside Europe or the United Kingdom, which could cause significant business disruption and affect the manner in which we provide our services and the geographical location or segregation of our relevant systems and operations.

<div align='center'>56</div>

We are also subject to evolving EU privacy laws on cookies and e-marketing. In the EU, regulators are increasingly focusing on compliance with requirements in the online behavioral advertising ecosystem, and EU national laws that implement the ePrivacy Directive (Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector) may be replaced by an EU regulation known as the ePrivacy Regulation, which may alter rules on tracking technologies, impose burdensome requirements surrounding obtaining consent, and significantly increase fines for noncompliance. In the EU, informed consent—including a prohibition on pre-checked consents and a requirement to ensure separate consents for each cookie—is required for the placement of a cookie or similar technologies on a user’s device and for direct electronic marketing (and under the GDPR and the UK GDPR). Valid consent is tightly defined, including a prohibition on pre-checked consents for each type of cookie or similar technology. While the text of the ePrivacy Regulation is still under development, enforcement of the ePrivacy Regulation could lead to substantial costs, require significant systems changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, negatively impact our efforts to understand customers, adversely affect our margins, increase costs, and subject us to additional liabilities.

As these and other laws and regulations continue to evolve and be enacted, or new interpretations of existing laws and regulations are applied, we may need to modify our data processing practices, agreements, and policies, which could incur substantial costs. Restrictions on the collection, use, sharing, or disclosure of personal information or additional requirements and liability for security and data integrity could require us to modify our solutions and features, possibly in a material manner. Such restrictions could also limit our ability to develop new services and features, and could subject us to increased compliance obligations and regulatory scrutiny. We use a variety of technical and organizational security measures and other measures to protect the data we process, including personal data pertaining to our customers, employees, and business partners. Despite the measures we