Company: PCRX
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001396814-25-000041
Chunk: 237

Company: Pacira BioSciences, Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 237
---
 to anticipate these techniques, timely discover or counter them, or implement adequate preventative measures. Any such breach or unauthorized access could result in significant legal and financial exposure, damage to our reputation, and potentially have an adverse effect on our business and results of operations.

Changes in data privacy and protection laws and regulations, particularly in Europe and the State of California, or any failure to comply with such laws and regulations, could adversely affect our business and financial results.

We are subject to a variety of continuously evolving and developing laws and regulations globally regarding privacy, data protection and data security, including those related to the collection, storage, handling, use, disclosure, transfer and security of personal data. Significant uncertainty exists as privacy and data protection laws may be interpreted and applied differently from 

Pacira BioSciences, Inc.  |  2024 Annual Report on Form 10-K  |  Page 66

country to country and may create inconsistent or conflicting requirements. These laws apply to transfers of information among our affiliates, as well as to transactions we enter into with third-party vendors.

For example, the E.U. adopted a comprehensive General Data Privacy Regulation, or GDPR, in May 2016 that replaced the then-current E.U. Data Protection Directive and related country-specific legislation in May 2018. GDPR requires companies to satisfy new requirements regarding the handling of personal and sensitive data, including its use, protection and the ability of persons whose data is stored to correct or delete such data about themselves. Failure to comply with GDPR requirements could result in penalties of up to 4% of total worldwide revenue.

Additionally, the California Consumer Privacy Act, or CCPA, became effective in January 2020 and imposed new responsibilities on us for the handling, disclosure and deletion of personal information for our employees and consumers who reside in California. The CCPA permits California to assess potentially significant fines for violating CCPA and creates a right for individuals to bring class action suits seeking damages for violations. We have also implemented more stringent privacy regulations related to the California Privacy Rights Act, which was an amendment to the CCPA.

Furthermore, legislators and regulators in the U.S. are proposing new and more robust cybersecurity rules in light of the recent broad-based cyberattacks at a number of companies. Our efforts to comply with GDPR, the CCPA and other privacy and data protection laws may impose significant costs and challenges that are likely to increase over time and may require us to revise certain of our business practices. These and similar initiatives around the world could increase the cost of developing, implementing