Company: SWAGW
Filing Date: 2025-04-14
Form Type: 10-K
Source: 0001213900-25-031596
Chunk: 37

Company: Stran & Company, Inc.
Filing Date: 2025-04-14
Form: 10-K
Item: Item 1
Chunk 37
---
ICPA, effective January 1, 2025);
Delaware (DPDPA, effective January 1, 2025); Nebraska (NEDPA, effective January 1, 2025); New Hampshire (NHDPA, effective January 1, 2025);
New Jersey (NJDPA, effective January 15, 2025); Minnesota (MCDPA, effective July 1, 2025); Tennessee (TIPA, effective July 1, 2025); Maryland
(MODPA, effective October 1, 2025); Indiana (ICDPA, effective January 1, 2026); Kentucky (KCDPA, effective January 1, 2026); and Rhode
Island (RIDTPPA, effective January 1, 2026). Further, there are several legislative proposals in the United States, at both the federal
and state level, that could impose new privacy and security obligations. We cannot yet determine the impact that these laws and regulations
may have on our business.

Outside of the U.S., data protection laws, including
the GDPR, also might apply to some of our operations or business collaborators. Legal requirements in the European Union and United Kingdom
relating to the collection, storage, processing and transfer of personal data/information continue to evolve. The GDPR imposes, among
other things, data protection requirements that include strict obligations and restrictions on the ability to collect, analyze and transfer
EU personal data/information, a requirement for prompt notice of data breaches to data subjects and supervisory authorities in certain
circumstances, and possible substantial fines for any violations (including possible fines for certain violations of up to the greater
of 20 million Euros or 4% of total company revenue). Other governmental authorities around the world have enacted or are considering similar
types of legislative and regulatory proposals concerning data protection.

The interpretation and enforcement of the laws
and regulations described above are uncertain and subject to change, and may require substantial costs to monitor and implement and maintain
adequate compliance programs. Failure to comply with U.S. and international data protection laws and regulations could result in government
enforcement actions (which could include substantial civil and/or criminal penalties), private litigation and/or adverse publicity and
could negatively affect our operating results and business.

The Consumer Product Safety Improvement
Act and other existing or future government regulation could harm our business or may cause us to incur additional costs associated with
compliance.

We are subject to various federal, state