Company: FRFXF
Filing Date: 2025-03-26
Form Type: 424B3
Source: 0001104659-25-028272
Chunk: 71

Company: FAIRFAX FINANCIAL HOLDINGS LTD/ CAN
Filing Date: 2025-03-26
Form: 424B3
Chunk 71
---
 a hazardous financial
condition as provided under applicable state insurance law, insolvency proceedings, up to and including rehabilitation, conservation
and liquidation, would be initiated by the insurance regulator of the state in which the subsidiary is domiciled, which would serve as
the domestic receiver of its properties, assets and business. Insurance regulators located in other states in which we conduct business
may have jurisdiction over assets or properties located in such states under certain circumstances. In an insolvency proceeding, policyholders’
claims would have priority over investors’ claims.

Privacy Regulation

We are subject to a number
of U.S. federal and state laws and regulations that require financial institutions and other businesses to protect the confidentiality
of individuals’ personal information. The Gramm-Leach-Bliley Act and regulations promulgated thereunder govern the privacy of consumer
financial information. The regulations set standards for the protection of, and limit disclosure by, financial institutions of “nonpublic
personal information” about individuals who obtain financial products or services for personal, family or household purposes. A
variety of state privacy statutes and regulations also govern the privacy of information about consumers and require notification to
state authorities and individuals if certain personally identifiable information is subject to unauthorized access or disclosure. States,
like New York State under its Stop Hacks and Improve Electronic Data Security Act of 2019, as amended (the “SHIELD Act”),
have also begun to expand upon the definition of personal information that requires protection and notification in cases of a breach,
to include biometric information, genetic information and email addresses with their corresponding passwords or security questions and
answers. In June 2018, the State of California enacted the California Consumer Privacy Act of 2018 (“CCPA”),
which went into effect on January 1, 2020 and (subject to certain exemptions) requires companies that process information that can
be tied to identifiable California residents to make new disclosures to California residents about their data collection, use and sharing
practices, and provides certain new rights, including allowing individuals to opt out of certain data sharing with third parties. The
statute also created a new cause of action where an individual’s personal information is subject to a data breach due to a business’s
failure to implement and maintain reasonable security practices. Additionally, California voters approved the California Privacy Rights
Act of 2020 (“CPRA”) as part of the November 2020 ballot. The CPRA substantially amends the CCPA, and it
became fully effective on January