Company: WW
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0000950170-25-029511
Chunk: 109

Company: WW INTERNATIONAL, INC.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 109
---
 be rendered unreliable or be perceived as unreliable by customers, which could result in harm to our reputation and brands. Any failure of our technology or systems could result in an adverse impact on our business.

Our reputation and the appeal of our services and products may be harmed by data security breaches and other malicious acts or privacy concerns.

Breaches of data security, website defacements and other malicious acts, which are negatively impacting companies, could result in unauthorized access to proprietary or customer information or data, including credit card transaction data personal data, protected health information, and consumer health information, or cause interruptions to our services and products. Such unauthorized access or interruptions could harm our reputation and brands and expose us to liability and regulatory claims, and may result in the loss of existing or potential customers. We rely upon sophisticated information technology systems to operate our business. In the ordinary course of business, we provide proprietary content and we collect, store and use confidential information (including, but not limited to, personal customer information and data) in connection with providing our products and engaging our employees and contractors, and it is critical that we do so in a secure manner to protect the confidentiality and integrity of such confidential information and maintain the trust and confidence of our members, business partners, employees, contractors and shareholders, as well as comply with applicable regulatory requirements and contractual obligations.

26

We also have outsourced significant elements of our information technology infrastructure and, as a result, we are managing many independent vendor relationships with third parties who may or could have access to our confidential information and website content. The size and complexity of our information technology and information security systems, and those of our third-party vendors with whom we contract, make such systems potentially vulnerable to security breaches. While we have invested, including by maintaining cybersecurity insurance coverage, and developed systems and processes designed to protect proprietary content and confidential information, these measures are costly, and there can be no assurance that our efforts will prevent service interruptions or security breaches and other malicious acts.

Existing, proposed or new data privacy legislation and regulations, including interpretations thereof, could also significantly affect our business. For example, the European General Data Protection Regulation (“GDPR”) includes increased privacy and security requirements for companies that receive or process personal data of residents of Europe. As a result, we have implemented measures to comply with these requirements, including, among other things, documenting our data processing activities and informing users about how we use their personal data. We also obtain consent and/or offer new controls to existing and new users in Europe before processing data for certain aspects of our services