Company: MYSZ
Filing Date: 2025-03-27
Form Type: 10-K
Source: 0001641172-25-000990
Chunk: 1301

Company: My Size, Inc.
Filing Date: 2025-03-27
Form: 10-K
Item: Item 1A
Chunk 1301
---
 regulations would harm our business, results of operations and financial condition.

We
and our customers that use our products may be subject to privacy- and data protection-related laws and regulations that impose obligations
in connection with the collection, processing and use of personal data, financial data, health or other similar data. The U.S. federal
and various state and foreign governments have adopted or proposed limitations on, or requirements regarding, the collection, distribution,
use, security and storage of personally identifiable information of individuals. The U.S. Federal Trade Commission and numerous state
attorneys general are applying federal and state consumer protection laws to impose standards on the online collection, use and dissemination
of data, and to the security measures applied to such data.

Similarly,
many foreign countries and governmental bodies, including the EU member states, have laws and regulations concerning the collection and
use of personally identifiable information obtained from individuals located in the EU or by businesses operating within their jurisdiction,
which are often more restrictive than those in the United States. Laws and regulations in these jurisdictions apply broadly to the collection,
use, storage, disclosure and security of personally identifiable information that identifies or may be used to identify an individual,
such as names, telephone numbers, email addresses and, in some jurisdictions, IP addresses and other online identifiers.

For
example, the GDPR, which took full effect on May 25, 2018. The GDPR enhances data protection obligations for businesses and requires
service providers (data processors) processing personal data on behalf of customers to cooperate with European data protection authorities,
implement security measures and keep records of personal data processing activities. Noncompliance with the GDPR can trigger fines equal
to or greater of €20 million or 4% of global annual revenues. In addition, the CCPA, effective as of January 1, 2020, gives California
residents expanded rights to access and require deletion of their personal information, opt out of certain personal information sharing,
and receive detailed information about how their personal information is used. The CCPA provides for civil penalties for violations,
as well as a private right of action for data breaches, that is expected to increase data breach litigation. Further, failure to comply
with the Israeli Privacy Protection Law of 1981, and its regulations, as well as the guidelines of the Israeli Privacy Protection Authority,
may expose us to administrative fines, civil claims (including class actions) and in certain cases criminal liability. Current pending
legislation may result in a change of the current enforcement measures and sanctions. There are also