Company: ACTG
Filing Date: 2025-03-17
Form Type: 10-K
Source: 0000934549-25-000004
Chunk: 87

Company: ACACIA RESEARCH CORP
Filing Date: 2025-03-17
Form: 10-K
Item: Item 1A
Chunk 87
---
 physical, technical and contractual safeguards that we and they employ to provide security around the collection, storage, use, access and delivery of information we and they possess. We and they have implemented various measures to manage the risks related to system and network security and disruptions, but an actual or perceived security breach, a failure to make adequate disclosures to the public or relevant agencies following any such event or a significant and extended disruption in the functioning of information technology systems could damage our or one of our operating businesses’ reputation and cause us to lose opportunities or them to lose clients, adversely impact our operations, sales or results of operations and require us or them to incur significant expense to address and remediate or otherwise resolve such issues.

Although neither we nor our business have incurred material losses or liabilities to date as a result of any breaches, unauthorized disclosure, loss or corruption of our or their data or the inability of their clients to access their systems, such events could result in proprietary, confidential or otherwise protected information being lost or stolen, including client, employee or business data, disrupt their operations, subject us or them to substantial regulatory and legal proceedings and potential liability and fines, result in a material loss of business and/or significantly harm our or their reputation. If we are unable to efficiently manage the vulnerability of our systems and effectively maintain and upgrade system safeguards, we and they may incur unexpected costs and certain of our or their systems may become more vulnerable to unauthorized access. 

Due to concerns regarding data privacy and security, a growing number of legislative and regulatory bodies have adopted breach notification and other requirements in the event that information subject to such laws is accessed by unauthorized persons and additional regulations regarding the use, access, accuracy and security of such data are possible. Complying 

23

with such numerous and complex regulations can be expensive and difficult, and failure to comply with these regulations could subject us to regulatory scrutiny and liability. In many jurisdictions, including North America and the European Union, certain of our operating companies are or may in the future be subject to laws and regulations relating to the collection, use, retention, security and transfer of this information including the European Union and United Kingdom General Data Protection Regulation regimes. California also enacted legislation, the California Consumer Privacy Act of 2018 (“CCPA”) and the related California Privacy Rights Act (“CPRA”) that afford California residents expanded privacy protections and a private right of action for security breaches affecting their personal information. Since then, many other U.S. states have passed comprehensive data privacy laws and this number will likely continue to grow. These and