Company: GLRE
Filing Date: 2025-03-10
Form Type: 10-K
Source: 0001385613-25-000007
Chunk: 634

Company: GREENLIGHT CAPITAL RE, LTD.
Filing Date: 2025-03-10
Form: 10-K
Item: Item 1A
Chunk 634
---
 and application systems have been an important part of our underwriting process and our ability to compete successfully. We have also licensed certain systems and data from third parties. We cannot be certain that we will have access to these service providers or that our information technology or application systems will continue to operate as intended.  In addition, we cannot be certain that we would be able to replace these systems without slowing our underwriting response time. Like all companies, we have information technology and application systems that are vulnerable to data breaches, interruptions or failures due to events that may be beyond our control, including, but not limited to, natural disasters, theft, terrorist attacks, malicious ransomware cyber-attacks, computer viruses, hackers and general technology failures. In addition, artificial intelligence technologies are evolving at a fast pace and being adopted, which may increase potential cybersecurity risks.

A major defect or failure in our internal controls or information technology and application systems could result in management distraction, a violation of applicable privacy or other laws, harm our reputation, a loss of customers, or monetary fines or penalties or otherwise increased expenses. We believe appropriate controls and mitigation procedures are in place to prevent significant data breaches, interruptions, or failures in, information technology and application systems. However, internal controls provide only a reasonable, not absolute, assurance as to the absence of errors or irregularities, and the ineffectiveness of such controls and procedures could have a material adverse effect on our business.

The cybersecurity regulatory environment is evolving, and we expect the costs of complying with new or developing regulatory requirements to increase. These laws and regulations vary country to country and state to state, but they generally require the establishment of programs to detect and prevent unauthorized access to personal data and to mitigate theft of personal data.  For example, the General Data Protection Regulation (“GDPR”), which establishes uniform data privacy laws across the European Union (“EU”) is effective for all EU member states. The GDPR anticipates the processing of data for reinsurance and other purposes and applies standards and rules that covered entities must establish and monitor with respect to such processing and use. As our operations expand to other jurisdictions, we will be required to comply with cybersecurity laws in those jurisdictions, which will further increase our cost of compliance.  See “Part 1, Item 1. Business - Regulations” and “Part 1C. Cybersecurity.”

Our property and casualty reinsurance operations make us vulnerable to losses from catastrophes and may cause our results of operations to vary significantly from period to period.

Certain of our reinsurance operations expose