Company: IBTA
Filing Date: 2025-05-15
Form Type: 10-Q
Source: 0001628280-25-025593
Chunk: 54

Company: Ibotta, Inc.
Filing Date: 2025-05-15
Form: 10-Q
Item: Item 4
Chunk 54
---
 certain other Data Protection Laws have increased our compliance costs and potential liability. 

Various industry standards on privacy, data protection, and data security also have been developed and are expected to continue to develop and may be adopted by industry participants at any time. We endeavor to comply with industry standards relating to targeted advertising. Any actual or alleged mistakes by us in the implementation of these principles, any expansion by self-regulatory bodies of these guidelines, any different or various guidelines regarding internet-based advertising issued by government authorities, any actual or alleged failure of opt out mechanisms to work as designed, or any misunderstanding by internet users of our technology or our commitments with respect to these principles may subject us to negative publicity, government investigation, government or private litigation, or other proceedings. Any such investigations, proceedings, or other actions against or involving us, even if meritless, could be costly and time-consuming, necessitate that we change our business practices, cause 

77

us to divert management’s attention and our resources, and be damaging to our brand, reputation, and business. 

In addition to Data Protection Laws, we are subject to the terms of our external and internal privacy and security policies, and certain representations and contractual obligations to third parties related to privacy, data protection, and information security and Processing, including contractual obligations relating to industry standards and obligations to indemnify and hold harmless third parties from the costs or consequences of non-compliance with Data Protection Laws or other obligations (collectively, including Data Protection Laws, Data Protection Obligations). 

Compliance with Data Protection Obligations is, and is likely to remain, uncertain for the foreseeable future, and our actual or perceived failure to address or comply with them could increase our compliance and operational costs; limit our ability to market our solutions and attract new and retain current publishers, clients, retailers, and consumers; limit or eliminate our ability to Process data; require us to modify our platform or our solutions; require us to delete data; expose us to regulatory scrutiny, actions, investigations, fines, and penalties; result in reputational harm; lead to a loss of business; result in claims, litigation, and liability, including class action litigation; cause us to incur significant costs, expenses, and fees (including attorney fees); cause a material adverse impact to business, financial condition, results of operations, or prospects; and otherwise result in other material harm to our reputation and business (each, an Adverse Data Protection Impact).

Moreover, despite our efforts, we may not be successful in achieving or maintaining compliance with Data Protection