Company: HCTI
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001213900-25-026218
Chunk: 32

Company: Healthcare Triangle, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 32
---
 employees, and our platforms involve
the storage and transmission of customers’ personal information on equipment, networks, and corporate systems run by us or managed
by third parties including Amazon, Apple, Facebook, Google, and Microsoft. We are subject to a number of laws, rules, and regulations
requiring us to provide notification to players, investors, regulators, and other affected parties in the event of a security breach of
certain personal data or requiring the adoption of minimum information security standards that are often vaguely defined and difficult
to practically implement. The costs of compliance with these laws, including the European Union’s General Data Protection Regulation
(“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”), have increased and may increase in the future.
Our corporate systems, third-party systems, and security measures may be breached due to the actions of outside parties, employee error,
malfeasance, a combination of these, or otherwise, and, as a result, an unauthorized party may obtain access to, or compromise the integrity
of, our data, our employees’ data, our customers’ data or any third-party data we may possess. Any such security breach could
require us to comply with various breach notification laws, may affect our ability to operate, and may expose us to litigation, remediation
and investigation costs, increased costs for security measures, loss of revenue, damage to our reputation, and potential liability, each
of which could be material.

22

Various government and consumer agencies have
called for new regulation and changes in industry practices and are continuing to review the need for greater regulation for the collection
of information concerning consumer behavior on the Internet, including regulation aimed at restricting certain targeted advertising practices.
For example, the State of California’s passage of the CCPA, which went into effect on January 1, 2020, and created new privacy rights
for consumers residing in the state. There is also increased attention being given to the collection of data from minors. For instance,
the Children’s Online Privacy Protection Act (“COPPA”) requires companies to obtain parental consent before collecting
personal information from children under the age of 13. Compliance with GDPR, CCPA, COPPA, and similar legal requirements has required
us to devote significant operational resources and incur significant expenses.

We strive to comply with all applicable laws,
policies, legal obligations, and certain industry codes of conduct relating to privacy and data protection, to the extent reasonably attainable.
However, it is possible that these obligations may