Company: PAX
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001628280-25-025640
Chunk: 33

Company: Patria Investments Ltd
Filing Date: 2025-05-15
Form: 20-F
Item: Item 3
Chunk 33
---
 before the Brazilian Patent and Trademark Office (Instituto Nacional da Propriedade Industrial) (“ INPI”) or authorities in other relevant jurisdictions. In addition, if we lose rights over registered trademarks, we would not be entitled to use such trademarks on an exclusive basis and, therefore, third parties would be able to use similar or identical trademarks to identify their products or services, as well as claim that our use of such marks infringes their intellectual property rights, which could adversely affect our business.

Rapidly developing and changing global privacy laws and regulations could increase compliance costs and subject us to enforcement risks and reputational damage.

We, the funds we manage, and their portfolio companies are subject to various risks and costs associated with the collection, processing, storage and transmission of personally identifiable information (“ PII”), and other sensitive and confidential information. This data is wide ranging and relates to our investors, employees, contractors and other counterparties and third parties. Our compliance obligations include those relating to the Cayman Islands Data Protection Act and Brazilian laws such as the LGPD, a comprehensive personal data protection law establishing general principles and obligations that applies across multiple economic sectors and contractual relationships and Brazilian bank secrecy laws, as well as obligations relating to data collection and privacy laws in jurisdictions in which we operate, including, for example, the GDPR in Europe, the Data Protection Act in the UK, the Hong Kong Personal Data (Privacy) Ordinance, and equivalent laws in other countries such as Dubai, Colombia, Uruguay, United States, Chile, among others.

For instance, in Brazil the LGPD applies to individuals or legal entities, private or government entities, who process or collect personal data in Brazil or, further, when the processing activities have the purpose of offering or supplying goods or services to data subjects located in Brazil. Based on the LGPD, all processing agents/legal entities are required to adapt their data processing activities to comply with this new environment. The penalties and fines for violations of the LGPD include: daily fines, up to a maximum amount of R$50.0 million per violation, and the required deletion or restriction of access to the personal data, and/or partial or complete prohibition of processing activities. Pursuant to the LGPD, security breaches that may result in significant risk or damage to personal data must be reported to the National Data Protection Authority (Autoridade Nacional de Proteção de Dados) (“ ANPD”), the data protection regulatory body, within a reasonable time period. Moreover, the ANPD could establish other obligations related to data protection that are