Company: AIP
Filing Date: 2025-11-04
Form Type: 10-Q
Source: 0001628280-25-048977
Chunk: 318

Company: Arteris, Inc.
Filing Date: 2025-11-04
Form: 10-Q
Item: Part I, Item 8
Chunk 318
---
 of our systems could adversely affect our business operations and/or result in the loss of critical or sensitive confidential information or intellectual property, and could result in financial, legal, business and reputational harm to us. 

57

Data security breaches could also expose us to liability under various laws and regulations across jurisdictions and increase the risk of litigation and governmental or regulatory investigation. For example, the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act, collectively the CCPA, includes a private right of action for security breaches that could lead to some form of remedy, as well as, regulatory scrutiny, fines, private right of action settlements, and other consequences. Where a security incident involves a breach of security leading to the accidental or unlawful destruction, loss, alternation, unauthorized disclosure of, or access to, personal data in respect of which we are a controller or processor under the GDPR or U.K. GDPR (as defined below), this could result in fines of up to €20.0 million or 4% of annual global turnover under the GDPR or £17.5 million and 4% of total annual revenue in the case of the U.K. GDPR. Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies have adopted breach notification and other requirements in the event that information subject to such laws is accessed by unauthorized persons and additional regulations regarding security of such data are possible. We may be required to notify such breaches to regulators and/or individuals which may result in us incurring additional costs. Moreover, any such compromise of our information security or that of our third parties could result in the misappropriation or unauthorized publication or other exploitation of our confidential business or proprietary information or personal information or that of other parties with which we do business, an interruption in our operations, the unauthorized transfer of cash or other assets, the unauthorized release of customer or employee data or a violation of privacy or other laws. In addition, computer programmers and hackers also may be able to develop and deploy viruses, worms and other malicious software programs that attack our products, or that otherwise exploit any security vulnerabilities, and any such attack, could expose us to liability to customer claims. Any of the foregoing could irreparably damage our reputation and business, could have a material adverse effect on our results of operations, and cause us to incur significant costs, including legal expenses and remediation costs. 

We maintain cyber liability and business interruption insurance renewed annually; however, this insurance may not be sufficient to cover the financial, legal, business or