Company: CXAI
Filing Date: 2025-05-09
Form Type: S-1
Source: 0001829126-25-003532
Chunk: 45

Company: CXApp Inc.
Filing Date: 2025-05-09
Form: S-1
Chunk 45
---
 guidance as to how these laws will be applied to current and emerging indoor positioning analytics technologies, creates a risk that regulators, lawmakers or other third parties, such as potential plaintiffs, may assert claims, pursue investigations or audits, or engage in civil or criminal enforcement. These actions could limit the market for our services and technologies or impose burdensome requirements on our services and/or customers’ use of our services, thereby rendering our business unprofitable.

Some features of our services may trigger the data protection requirements of certain foreign jurisdictions, such as the EU General Data Protection Regulation (the “GDPR”), and the EU ePrivacy Directive. In addition, our services may be subject to regulation under current or future laws or regulations. For instance, the EU ePrivacy Directive is soon to be replaced in its entirety by the ePrivacy Regulation, which will bring with it an updated set of rules relevant to many aspects of our business. If our treatment of data, privacy practices or data security measures fail to comply with these current or future laws and regulations in any of the jurisdictions in which we collect and/or process information, we may be subject to litigation, regulatory investigations, civil or criminal enforcement, financial penalties, audits or other liabilities in such jurisdictions, or our customers may terminate their relationships with us. In addition, data protection laws, such as the GDPR, foreign court judgments or regulatory actions could affect our ability to transfer, process and/or receive transnational data that is critical to our operations, including data relating to users, customers, or partners outside the United States. For instance, the GDPR restricts transfers of personal data outside of the European Economic Area, including to the United States, subject to certain requirements. Such data protection laws, judgments or actions could affect the manner in which we provide our services or adversely affect our financial results if foreign customers and partners are not able to lawfully transfer data to us.

<div align='center'>29</div>

This area of the law is currently under intense government scrutiny and many governments, including the U.S. government, are considering a variety of proposed regulations that would restrict or impact the conditions under which data obtained from individuals could be collected, processed, stored, transferred, sold or shared with third parties. In addition, regulators such as the Federal Trade Commission and the California Attorney General are continually proposing new regulations and interpreting and applying existing regulations in new ways. For example, in June 2018, California passed the California Consumer Privacy Act (the “CCPA”), which provides new data privacy rights for consumers and new informational, disclosure