Company: IOT
Filing Date: 2025-03-25
Form Type: 10-K
Source: 0001642896-25-000022
Chunk: 75

Company: Samsara Inc.
Filing Date: 2025-03-25
Form: 10-K
Item: Item 1A
Chunk 75
---
 proposed legislation, known as the Regulation of Privacy and Electronic Communications (“ePrivacy Regulation”), would replace the current ePrivacy Directive. Originally planned to be adopted and implemented at the same time as the GDPR, the ePrivacy Regulation is still being negotiated.

44

Table of Contents

Various United States privacy laws are potentially relevant to our business, including the Federal Trade Commission Act, Controlling the Assault of Non-Solicited Pornography and Marketing Act, and the Telephone Consumer Protection Act. Any actual or perceived failure to comply with these United States privacy laws could result in a costly investigation or other proceedings by regulatory authorities or litigation by governmental authorities or private parties, each of which may result in potentially significant liability, loss of trust by our customers, and a material and adverse impact on our reputation and business.

Additionally, in June 2018, California passed the California Consumer Privacy Act (“CCPA”), which provides new data privacy rights for California consumers and new operational requirements for covered companies. Specifically, the CCPA requires that covered companies must provide new disclosures to California consumers and afford such consumers new data privacy rights that include the right to request a copy from a covered company of the personal information collected about them, the right to request deletion of such personal information, and the right to request to opt-out of certain sales of such personal information. The CCPA became operative on January 1, 2020. The California Attorney General can enforce the CCPA, including seeking an injunction and civil penalties for violations. The CCPA also provides a private right of action for certain data breaches that is expected to increase data breach litigation. The CPRA, which amended the CCPA, was approved by California voters in the November 3, 2020 election and went into effect on January 1, 2023. The CPRA significantly modified the CCPA, resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. A number of other states have implemented, or are considering implementing, their own versions of privacy legislation. The U.S. federal government also is contemplating federal privacy legislation. These laws and other evolving legislation may require us to modify our data practices and policies and to incur substantial costs and expenses in an effort to comply. Numerous differing state privacy and cybersecurity requirements could increase our potential liability and cause us to incur substantial costs and expenses in an effort to comply and otherwise adversely affect our business. Some of those laws, including Illinois’ Biometric Information Privacy Act, also provide consumers with a private right of action for certain violations and large potential statutory