Company: BLNE
Filing Date: 2025-04-15
Form Type: 10-K
Source: 0001641172-25-004793
Chunk: 46

Company: Beeline Holdings, Inc.
Filing Date: 2025-04-15
Form: 10-K
Item: Item 1
Chunk 46
---
 the loan transaction process. The storage, sharing, use, disclosure,
processing and protection of this information are governed by the privacy and data security policies maintained by the Company. Moreover,
there are federal and state laws regarding privacy and the storage, sharing, use, disclosure, processing and protection of PI, personally
identifiable information, and user data. Specifically, PI and nonpublic personal information (“NPI”) are increasingly subject
to legislation and regulations in numerous jurisdictions. For example, federal law, including the GLBA, the GLBA Safeguards Rule, and
the FCRA, among other laws, set forth privacy and data security requirements for NPI and consumer report information. At the state level,
state privacy laws, such as the California Consumer Protection Act (the “CCPA”), provide new data privacy rights for consumers
and new operational requirements for the Company. The CCPA also includes a statutory damages framework for violations of the CCPA and
a private right of action against businesses that fail to implement and maintain reasonable security procedures and practices appropriate
to the nature of the information to prevent data breaches.

The Company could be materially
and adversely affected if legislation or regulations are expanded to require changes in business practices or privacy policies (particularly
to the extent such changes would affect the manner in which it stores, shares, uses, discloses, processes and protects such data), or
if governing jurisdictions interpret or implement their legislation or regulations in ways that negatively affect its business, financial
condition, results of operations, and prospects. In addition, even if legislation or regulation does not expand in a manner that affects
the Company’s business directly, changing consumer attitudes or the perception of the use of personal information also could materially
and adversely affect its business, financial condition, and results of operations.

Any penetration of network security
or other misappropriation or misuse of PI or personal consumer information, including through ransomware attacks, could cause interruptions
in the Company’s business operations and subject it to increased costs, litigation, and other liabilities. Claims could also be
made against the Company for other misuse of PI, such as the use of personal information for unauthorized purposes or identity theft,
which could result in litigation and financial liabilities, and information security incidents also could involve investigations and enforcement
from governmental authorities. Such events could also occur as a result of the use of AI and other technologies by us and others with
whom we do business or on whom our operations and systems depend, and any defects or vulnerabilities which may exist or arise in such