Company: IOT
Filing Date: 2025-03-25
Form Type: 10-K
Source: 0001642896-25-000022
Chunk: 72

Company: Samsara Inc.
Filing Date: 2025-03-25
Form: 10-K
Item: Item 1A
Chunk 72
---
 addressing deceptive and unfair practices involving the collection and use of biometric information. We have legal and contractual obligations regarding the protection of confidentiality and appropriate use of certain data, including biometric information and other personal information. We are subject to numerous federal, state, local, foreign, and international laws, directives, and regulations regarding privacy, data protection, and cybersecurity and the collection, storing, sharing, use, processing, transfer, disclosure, retention, and protection of personal information and other data, the scope of which are changing, subject to differing interpretations, and may be inconsistent across jurisdictions or conflict with other legal and regulatory requirements. We are also subject to certain contractual obligations to third parties related to privacy, data protection, and cybersecurity. We strive to comply with our applicable policies and applicable laws, regulations, contractual obligations, and other legal obligations relating to privacy, data protection, and cybersecurity to the extent possible. However, the regulatory framework for privacy, data protection, and cybersecurity worldwide is, and is likely to remain for the foreseeable future, uncertain and complex, and it is possible that these or other actual or alleged obligations may be interpreted and applied in a manner that we do not anticipate or that is inconsistent from one jurisdiction to another and may conflict with other legal obligations or our practices. Further, any significant change to applicable laws, regulations or industry practices regarding the collection, use, retention, security or disclosure of data, or their interpretation, or any changes regarding the manner in which the approval, authorization, agreement, and/or consent of users or other data subjects for the collection, use, retention, or disclosure of such data must be obtained or complied with, could increase our costs and require us to modify our Applications, possibly in a material manner, which we may be unable to complete, and may limit our ability to store and process user data or develop new Applications and features.

43

Table of Contents

We also expect that there will continue to be new laws, regulations, executive orders, directives, and industry standards concerning privacy, data protection, and information security proposed and enacted in various jurisdictions. For example, the data protection landscape in Europe is currently evolving, resulting in possible significant operational costs for internal compliance and risks to our business. The EU adopted the General Data Protection Regulation (“GDPR”), which became effective in May 2018, and contains numerous requirements and changes from previously existing EU laws, including more robust obligations on data processors and heavier documentation requirements for data protection compliance programs by companies. Among other requirements, the GDPR regulates the transfer of personal data subject