Company: PLSAY
Filing Date: 2025-05-09
Form Type: 20-F
Source: 0001884082-25-000012
Chunk: 49

Company: Polestar Automotive Holding UK PLC
Filing Date: 2025-05-09
Form: 20-F
Item: Item 3
Chunk 49
---
 could be introduced as a result by the use of artificial intelligence technologies by us or third parties.

Significant capital and other resources may be required to protect against information security breaches or to alleviate problems caused by such breaches or to comply with our privacy policies or privacy-related legal obligations. The resources required may increase over time as the methods used by hackers and others engaged in online criminal activities are increasingly sophisticated and constantly evolving. Any failure or perceived failure by us to prevent information security breaches or to comply with privacy policies or privacy-related legal obligations, or any compromise of security that results in the unauthorized release or transfer of personally identifiable information or other customer data, could cause our customers to lose trust in us and could expose us to legal claims. Any perception by the public that online transactions or the privacy of user information are becoming increasingly unsafe or vulnerable to attacks could inhibit the growth of online retail and other online services generally, which may reduce the number of orders Polestar receives.

Polestar is subject to evolving laws, regulations, standards, policies and contractual obligations related to data privacy, security and consumer protection, and any actual or perceived failure to comply with such obligations could harm Polestar’s reputation and brand, subject Polestar to significant fines and liability, or otherwise adversely affect its business.

Due to Polestar’s data collection practices, products, services and technologies, Polestar is subject to or affected by a number of federal, state, local and international laws and regulations, as well as contractual obligations and industry standards, that impose certain obligations and restrictions with respect to data privacy and security and govern its collection, storage, retention, protection, use, processing, transmission, sharing and disclosure of personal information including that of Polestar’s employees, customers and other third parties with whom Polestar conducts business. These laws, regulations and standards may be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible that they will be interpreted and applied in ways that may have a material and adverse impact on Polestar’s business, financial condition and results of operations.

The global data protection landscape is rapidly evolving, and implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future. The increasing use of artificial intelligence may lead to additional rules and regulations in the jurisdictions in which we operate. Polestar may not be able to monitor and react to all developments in a timely manner. The European Union adopted the General Data Protection Regulation (“ GDPR”), which became effective on May 25, 2018, and as a result of the withdrawal of the United Kingdom from the