Company: GIFLF
Filing Date: 2025-04-11
Form Type: 20-F
Source: 0001104659-25-034245
Chunk: 50

Company: Grifols SA
Filing Date: 2025-04-11
Form: 20-F
Item: Item 3
Chunk 50
---
 use, water use and greenhouse gas emissions, beyond what we expect to invest in our existing plans. Item 4 of this Part I, “Information on the Company—B. Business Overview—Climate Change.” In addition, legislation could include carbon pricing, climate risk disclosure mandates, and changes in zoning or building codes to increase climate resilience. The combined impact of these transition risks could increase our direct operating costs and result in the same impact across our supply chain.
Changes, enactment, and/or enforcement of biometric information privacy laws of different jurisdictions, including federal and state laws in the United States, could expose us to potential liability.
Regulatory authorities and governments around the world have implemented and are considering further legislative and regulatory proposals regarding biometric information privacy. New laws and regulations governing biometric information privacy and data protection imposing more stringent requirements may be introduced in various jurisdictions, including the United States, the European Union and the United Kingdom. Complying with laws and regulations for an increasing number of jurisdictions could require significant resources and costs, including those associated with adapting our facilities, products or processes.
In the United States, there are various laws and regulations concerning biometric data privacy and data protection, and certain U.S. state laws may be more stringent or broader in scope, or offer greater individual rights, with respect to personal information than federal, international or other state laws, and such laws may differ from each other, all of which may complicate compliance efforts. U.S. federal and state regulators, including the Federal Trade Commission (the “FTC”), have engaged in enforcement actions focused on biometric information. For example, the Biometric Information Privacy Act in Illinois (the “BIPA”), the Capture or Use of Biometric Identifier Act in Texas (the “CUBI”) and the My Health My Data Act in Washington (the “MHMD”) restrict the collection and use of biometric identifiers and biometric information. Several class action lawsuits have been brought under BIPA’s private right of action, and BIPA has generally been broadly interpreted by the courts. We were named party in, and have since settled, a class action that alleged that we failed to comply with the BIPA’s requirements when collecting fingerprint data of plasma donors. See Item 8 of this Part I, “A. Consolidated Statements and Other Financial Information—Legal Proceedings—Illinois Biometric Information Privacy Act Claim.”
Any future similar legal proceedings and any government enforcement actions we may become subject to under applicable privacy and data protection laws may cause us significant losses in addition to legal