Company: FWRG
Filing Date: 2025-04-08
Form Type: ARS
Source: 0001789940-25-000033
Chunk: 37

Company: First Watch Restaurant Group, Inc.
Filing Date: 2025-04-08
Form: ARS
Chunk 37
---
 stringent or broader in scope, or offer greater individual rights, with respect to personal information than current federal, international or other state laws, and such laws may differ from each other, all of which may complicate compliance efforts. The California Consumer Privacy Act (“CCPA”), for example, requires, among other things, covered companies to provide new disclosures to California consumers and allows such consumers new abilities to opt-out of certain sales of personal data. The CCPA also provides for civil penalties for violations as well as a private right of action for data breaches that may increase data breach litigation. Further, the California Privacy Rights Act, which became fully effective in January 2023, significantly modifies the CCPA. Colorado, Connecticut, Colorado, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah and Virginia have enacted similar data privacy legislation and Indiana, Kentucky, Maryland, Minnesota, Rhode Island and Tennessee have enacted similar data privacy legislation that will take effect at various points in 2025 and beyond. Several other states and countries are considering expanding or passing privacy laws in the near term. These laws and regulations have required and will require us to incur additional costs and expenses in our effort to comply. Our failure to adhere to or successfully implement appropriate processes to adhere to the requirements of evolving laws and regulations in this area could expose us and our franchisees to financial penalties and legal liability. Our and our franchisees’ systems may not be able to satisfy these changing requirements and customer and employee expectations, or may require significant additional investments or time in order to do so. Any failure, or perceived failure, by us to comply with our posted privacy policies or with any federal or state privacy or consumer protection-related laws, regulations, industry self-regulatory principles, industry standards or codes of conduct, regulatory guidance, orders to which we may be subject or other legal obligations relating to privacy or consumer protection could adversely affect our reputation, brand and business, and may result in claims, proceedings or actions against us by governmental entities, customers, suppliers or others or other liabilities or may require us to change our operations and/or cease using certain data sets. We may also be contractually required to indemnify and hold harmless third parties from the costs or consequences of non-compliance with any laws, regulations or other legal obligations relating to Failure to comply with federal and state laws and regulations relating to privacy, data protection, advertising and consumer protection, or the expansion of current or the enactment of new laws or regulations relating to privacy, data protection, advertising and consumer protection