Company: CRCL
Filing Date: 2025-05-27
Form Type: S-1/A
Source: 0001193125-25-126208
Chunk: 108

Company: Circle Internet Group, Inc.
Filing Date: 2025-05-27
Form: S-1/A
Chunk 108
---
subject us to additional liabilities.

As these and other laws and regulations continue to evolve and be enacted, or new interpretations of existing laws and
regulations are applied, we may need to modify our data processing practices, agreements, and policies, which could incur substantial costs. Restrictions on the collection, use, sharing, or disclosure of personal information or additional
requirements and liability for security and data integrity could require us to modify our solutions and features, possibly in a material manner. Such restrictions could also limit our ability to develop new services and features, and could subject
us to increased compliance obligations and regulatory scrutiny. We use a variety of technical and organizational security measures and other measures to protect the data we process, including personal data pertaining to our customers, employees, and
business partners. Despite the measures we put in place, we may be unable to anticipate or prevent unauthorized access to such personal data.

Moreover, while we
strive to publish and prominently display privacy policies that are accurate, comprehensive, and compliant with applicable laws, rules, regulations, and industry standards, we cannot ensure that our privacy policies and other statements regarding
our practices will be sufficient to protect us from claims, proceedings, liability, or adverse publicity. Although we endeavor to comply with our privacy policies, we may at times fail to do so or be alleged to have failed to do so. If our public
statements about our use, collection, disclosure, and other processing of personal information—whether made through our privacy policies, information provided on our website, press statements, or otherwise—are alleged to be deceptive,
unfair, or misrepresentative of our actual practices, we may be subject to potential government investigations and enforcement actions, including by the FTC or relevant state attorneys general.

Despite our efforts to comply with applicable laws, regulations, and other obligations relating to privacy, data protection, and information security, it is possible
that our practices or technology could fail, or be alleged to fail to meet applicable requirements. For instance, the overall regulatory framework governing the application of privacy laws to blockchain technology is still undeveloped and likely to
evolve. Data protection authorities may adopt different views than we do with respect to the classification and protection of data associated with blockchain technology under applicable privacy laws. Despite our efforts to choose vendors that
meet applicable laws, regulations, and other obligations relating to privacy, data protection, and information security and that maintain robust security controls, it is possible that a vendor could fail to comply or experience a data breach
impacting our data and our business.