Company: DJTWW
Filing Date: 2025-02-14
Form Type: 10-K
Source: 0001140361-25-004822
Chunk: 89

Company: Trump Media & Technology Group Corp.
Filing Date: 2025-02-14
Form: 10-K
Item: Item 1
Chunk 89
---
 and regulations. In particular, while the Data Protection Act of 2018, which supplements the GDPR, is now effective in the UK alongside the UK GDPR, it is still
              unclear whether transfer of data from the EEA to the UK will remain lawful under the GDPR without additional safeguards.

            In Canada, TMTG is subject to the laws of the individual provinces, as well as Canada’s Personal Information and Protection of Electronic Documents Act
              (“PIPEDA”). PIPEDA provides Canadian residents with privacy protections and sets out rules for how companies may collect, use and disclose personal information in the course of commercial activities. The costs of compliance with, and other
              burdens imposed by, these and other international data privacy and security laws may limit the use and adoption of TMTG’s solutions, products and services and could have a materially adverse impact on its business. Any failure or perceived
              failure by TMTG or third-party service providers to comply with international data privacy and security laws may lead to regulatory enforcement actions, fines, private lawsuits or reputational damage.

              49

            In addition, TMTG may be unable to transfer personal information from Europe and other jurisdictions to the U.S. or other countries due to
              data localization requirements or limitations on cross-border data flows. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. For example,.
              Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. In particular, the EEA and UK have significantly restricted the transfer of personal
              information to the U.S. and other countries whose privacy laws they generally believe are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although
              there are currently various mechanisms that may be used to transfer personal information from the EEA and UK to the U.S.  in compliance with law, such as the EEA’s standard contractual clause, and the EU-U.S. Data Privacy Framework and the UK
              extension thereto (which allow for transfers to relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms can be subject to legal challenges, and there is no assurance that TMTG can
              satisfy or rely on these measures to lawfully transfer personal information to the U.S.

            If there is no lawful manner for TMTG to transfer personal information from the EEA, the UK,