Company: AIP
Filing Date: 2025-08-05
Form Type: 10-Q
Source: 0001667011-25-000029
Chunk: 407

Company: Arteris, Inc.
Filing Date: 2025-08-05
Form: 10-Q
Item: Part I, Item 2
Chunk 407
---
 no assurance that our efforts will prevent or quickly identify service interruptions or security breaches. The techniques used by cybercriminals to obtain unauthorized access to systems or sabotage systems, or to disable or degrade services, change frequently, and may not be recognized when launched against a target and can originate from a wide variety of sources, including outside groups such as organized crime affiliates, terrorist organizations or hostile foreign governments or agencies. We cannot assure that our data protection efforts and our investment in information technology will prevent significant breakdowns, data leakages or breaches in our systems or those of our third-party services providers or partners. Any such interruption or breach of our systems could adversely affect our business operations and/or result in the loss of critical or sensitive confidential information or intellectual property, and could result in financial, legal, business and reputational harm to us. 

58

Data security breaches could also expose us to liability under various laws and regulations across jurisdictions and increase the risk of litigation and governmental or regulatory investigation. For example, the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act, collectively the CCPA, includes a private right of action for security breaches that could lead to some form of remedy, as well as, regulatory scrutiny, fines, private right of action settlements, and other consequences. Where a security incident involves a breach of security leading to the accidental or unlawful destruction, loss, alternation, unauthorized disclosure of, or access to, personal data in respect of which we are a controller or processor under the GDPR or U.K. GDPR (as defined below), this could result in fines of up to €20.0 million or 4% of annual global turnover under the GDPR or £17.5 million and 4% of total annual revenue in the case of the U.K. GDPR. Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies have adopted breach notification and other requirements in the event that information subject to such laws is accessed by unauthorized persons and additional regulations regarding security of such data are possible. We may be required to notify such breaches to regulators and/or individuals which may result in us incurring additional costs. Moreover, any such compromise of our information security or that of our third parties could result in the misappropriation or unauthorized publication or other exploitation of our confidential business or proprietary information or personal information or that of other parties with which we do business, an interruption in our operations, the unauthorized transfer of cash or other assets, the unauthorized release of customer or employee data or a violation of privacy