Company: LPSN
Filing Date: 2025-03-14
Form Type: 10-K
Source: 0001102993-25-000018
Chunk: 57

Company: LIVEPERSON INC
Filing Date: 2025-03-14
Form: 10-K
Item: Item 1A
Chunk 57
---
 the alleged noncompliant activity.

In addition to the changing regulatory landscape in the E.U. and the U.K., we are subject to U.S. laws and regulations, including at the state level, such as the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (“CPRA”), which took effect on January 1, 2023 (the “CCPA”). Among other things, the CCPA gives California residents expanded data privacy rights, allowing consumers to opt out of certain data sharing with third parties, provides a private cause of action for data breaches, imposes additional obligations such as data minimization and storage limitations; on covered businesses; and forms a dedicated privacy regulator in California, the California Privacy Protection Agency, to implement and enforce the law. The CCPA marked the beginning of a trend toward more stringent state data privacy legislation in the United States, which may result in significant costs to our business, damage our reputation, and require us to amend our business practices, and could adversely affect our business, especially to the extent the specific requirements vary from those and other existing laws. For example, comprehensive privacy laws in multiple U.S. states have gone, or will go, into effect between 2024 and 2026, and a number of other states are considering similar laws related to the protection of consumer personal information. Moreover, laws in all 50 U.S. states require businesses to provide notice under certain circumstances to consumers whose personal information has been disclosed as a result of a data breach. Many similar laws have been proposed at the federal and state level; accordingly, we also may be subject to additional compliance obligations as such legislation is considered and adopted, which may require us to modify our data processing practices and policies and incur substantial costs and expenses to comply. 

In addition to government activity, privacy advocacy and other industry groups have established and may continue to establish new self-regulatory standards that may place additional burdens on us. If our privacy practices are deemed unacceptable by watchdog groups or privacy advocates, such groups may take measures that harm our business by, for example, disparaging our reputation and our business, which may have a material adverse effect on our results of operations, and financial condition. In addition, privacy concerns may cause consumers to avoid online sites that collect various forms of data or to resist providing the data necessary to allow our customers to use our services effectively. Even the perception of data security and data privacy concerns, whether or not valid, could inhibit sales and market acceptance of our products and services.

Our business is