Company: WLTH
Filing Date: 2025-09-29
Form Type: S-1
Source: 0001628280-25-043113
Chunk: 229

Company: WEALTHFRONT CORP
Filing Date: 2025-09-29
Form: S-1
Chunk 229
---
. In the future, additional states could also adopt data privacy legislation, which may include more stringent data privacy requirements. In addition to these state level comprehensive consumer data privacy laws, all 50 states have enacted breach notification laws, which include obligations to provide notification of security breaches that impact certain personal information to affected individuals, state regulators, and others.

This existing and new legislation, as well as their amendments, interpretations, and applications, may add additional complexity, variation in requirements, restrictions, and potential legal risk, require additional investment of resources in our compliance programs, impact our strategies and the availability of previously useful data, and could result in increased compliance costs and changes in our business practices and policies. We may be required to modify our data processing practices and policies and incur substantial compliance-related costs and expenses in connection with these and any other future data privacy, protection or security related laws, rules, or regulations, and they may also increase our potential exposure to regulatory enforcement and litigation.

With respect to cybersecurity, we and our third-party service providers have implemented a variety of technical and organizational security measures and other procedures and protocols designed to protect our data and information, including personal information and other confidential or sensitive information pertaining to our clients, employees, and other users. Despite measures we put in place, we and our third-party service providers may be unable to anticipate or prevent unauthorized access to such information, including personal information. If our privacy, data protection, or data security measures or

<div align='center'>175</div>

those of our third-party service providers are inadequate or are breached, or otherwise compromised, and as a result, there is improper use, disclosure, or other processing of, or someone obtains unauthorized access to, personal, confidential, or sensitive information on our systems or our third-party service providers’ systems, or if we or our third-party service providers suffer a ransomware or other advanced persistent threat attack, or if any of the foregoing is reported or perceived to have occurred, our brand and business may be harmed, we may incur significant financial losses, costs, and liability associated with remediation and the implementation of additional security measures, and be subject to negative publicity, litigation, regulatory scrutiny, governmental investigations, and other actions.

See the section titled “Risk Factors—Risks Related to Cybersecurity and Data Privacy” for additional information.

### Consumer Financial Protection
The CFPB and other federal, local, state and foreign regulatory agencies regulate financial products and services, including credit, deposit, and payments services, and other similar services. These agencies have