Company: CRCL
Filing Date: 2025-02-13
Form Type: DRS/A
Source: 0000950123-25-001965
Chunk: 101

Company: Circle Internet Group, Inc.
Filing Date: 2025-02-13
Form: DRS/A
Chunk 101
---
 of the ePrivacy Regulation could lead to substantial costs, require significant systems changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel,
negatively impact our efforts to understand customers, adversely affect our margins, increase costs, and subject us to additional liabilities.

As these and other
laws and regulations continue to evolve and be enacted, or new interpretations of existing laws and regulations are applied, we may need to modify our data processing practices, agreements, and policies, which could incur substantial costs.
Restrictions on the collection, use, sharing, or disclosure of personal information or additional requirements and liability for security and data integrity could require us to modify our solutions and features, possibly in a material manner. Such
restrictions could also limit our ability to develop new services and features, and could subject us to increased compliance obligations and regulatory scrutiny. We use a variety of technical and organizational security measures and other measures
to protect the data we process, including personal data pertaining to our customers, employees, and business partners. Despite the measures we put in place, we may be unable to anticipate or prevent unauthorized access to such personal data.

63

CONFIDENTIAL TREATMENT REQUESTED BY CIRCLE INTERNET GROUP, INC. PURSUANT TO 17 C.F.R. § 200.83

Moreover, while we strive to publish and prominently display privacy policies that are
accurate, comprehensive, and compliant with applicable laws, rules, regulations, and industry standards, we cannot ensure that our privacy policies and other statements regarding our practices will be sufficient to protect us from claims,
proceedings, liability, or adverse publicity. Although we endeavor to comply with our privacy policies, we may at times fail to do so or be alleged to have failed to do so. If our public statements about our use, collection, disclosure, and other
processing of personal information—whether made through our privacy policies, information provided on our website, press statements, or otherwise—are alleged to be deceptive, unfair, or misrepresentative of our actual practices, we may be
subject to potential government investigations and enforcement actions, including by the FTC or relevant state attorneys general.

Despite our efforts to comply with
applicable laws, regulations, and other obligations relating to privacy, data protection, and information security, it is possible that our practices or technology could fail, or be alleged to fail to meet applicable requirements. For instance, the
overall regulatory framework governing the application of privacy laws to blockchain technology is still undeveloped and likely to evolve.