Company: KITTW
Filing Date: 2025-04-15
Form Type: 10-K
Source: 0001849820-25-000108
Chunk: 52

Company: Nauticus Robotics, Inc.
Filing Date: 2025-04-15
Form: 10-K
Item: Item 1A
Chunk 52
---
 information, including that of our employees, customers and others. Most jurisdictions have enacted laws requiring companies to notify individuals, regulatory authorities and others of security breaches involving certain types of data. Such laws may be inconsistent or may change, and new laws may be adopted. In addition, our agreements with certain customers may require us to notify them in the event of a security breach. Mandatory disclosures relating to security breaches are costly, could lead to negative publicity, result in penalties, fines, or litigation, cause our customers to lose confidence in the effectiveness of our security measures and require us to expend significant capital and other resources to respond to and/or alleviate problems caused by the actual or perceived security breach.

Our privacy policy regarding our collection, processing, use and disclosure of personal information and/or other confidential information is published on our website. Although we endeavor to comply with our published policies, we may at times fail to do so or may be perceived to have failed to do so. Moreover, despite our efforts, we may not be successful in achieving compliance, including if our employees, contractors, service providers or vendors fail to comply with our policies and other requirements. Such failures can subject us to potential action by governmental or regulatory authorities if they are found to be deceptive, unfair, or misrepresentation of our actual practices. Any actual or perceived 

24

inability of the Company to adequately address privacy and security concerns or comply with applicable laws, rules and regulations relating to privacy, data protection or data security, or applicable privacy notices, could lead to investigations, claims, and proceedings by governmental entities and private parties, damages for contract breach, and other significant costs, penalties, and other liabilities. Any such claims or other proceedings could be expensive and time-consuming to defend and could result in adverse publicity. Any of the foregoing may have an adverse effect on our business, financial condition, results of operations, cash flows, reputation and prospects.

We are subject to cybersecurity risks to our operational systems, security systems, infrastructure, integrated software in our products and data processed by us or third-party vendors.

Our business and operations involve the collection, storage, processing, and transmission of personal data and certain other sensitive and proprietary data of collaborators, customers, and others. Additionally, we maintain sensitive and proprietary information relating to our business, such as our own proprietary information and personal data relating to our employees. An increasing number of organizations have disclosed breaches of their information security systems and other information security incidents, some of which have involved sophisticated and highly targeted attacks. We may be a target for attacks by state-sponsored