Company: VLDXW
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0000950170-25-047760
Chunk: 159

Company: Velo3D, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 159
---
 We may be identified as a potentially responsible party under such laws. The amount of any costs, including fines or damages payments that we might incur under such circumstances could substantially exceed any insurance we have to cover such losses. Any of these events, alone or in combination, could have a material adverse effect on our business, financial condition and results of operations and could adversely affect our reputation.

The export of our products internationally from our production facilities subjects us to environmental laws and regulations concerning the import and export of chemicals and hazardous substances such as the United States Toxic Substances Control Act and the Registration, Evaluation, Authorization and Restriction of Chemical Substances. These laws and regulations require the testing and 

 38

registration of some chemicals that we ship along with, or that form a part of, our systems and other products. If we fail to comply with these or similar laws and regulations, we may be required to make significant expenditures to reformulate the chemicals that we use in our products and materials or incur costs to register such chemicals to gain and/or regain compliance. Additionally, we could be subject to significant fines or other civil and criminal penalties should we not achieve such compliance.

The cost of complying with current and future environmental, health and safety laws applicable to our operations, or the liabilities arising from past releases of, or exposure to, hazardous substances, may result in future expenditures. Any of these developments, alone or in combination, could have an adverse effect on our business, financial condition and results of operations.

Aspects of our business are subject to privacy, data use and data security regulations, which could increase our costs.

We collect personally identifiable information from our employees, prospects, and our customers. Privacy and security laws and regulations may limit the use and disclosure of certain information and require us to adopt certain cybersecurity and data handling practices that may affect our ability to effectively market our services to current, past or prospective customers. We must comply with privacy laws in the United States, Europe and elsewhere, including the General Data Protection Regulations (“GDPR”) in the European Union (“EU”), which became effective May 25, 2018, and the California Privacy Rights Act, which became effective on January 1, 2023. Further, in connection with its withdrawal from the EU, the United Kingdom has implemented the GDPR as of January 1, 2021 (as it existed on December 31, 2020 but subject to certain UK-specific amendments). These laws create new individual privacy rights and impose increased obligations, including disclosure obligations, on companies handling personal data