Company: GROVW
Filing Date: 2025-03-19
Form Type: 10-K
Source: 0001628280-25-013839
Chunk: 23

Company: Grove Collaborative Holdings, Inc.
Filing Date: 2025-03-19
Form: 10-K
Item: Item 1
Chunk 23
---
 

If our advertising claims or claims made by our social media influencers or by other endorsers with whom we have a material connection do not comply with the Endorsement Guides or any requirement of the FTC Act or similar state requirements, the FTC and state consumer protection authorities could subject us to investigations and enforcement actions, impose penalties, require us to pay monetary consumer redress, require us to revise our marketing materials and require us to accept burdensome injunctions, all of which could harm our business, reputation, financial condition and results of operations. 

We are also subject to a number of U.S. federal and state laws and regulations that affect companies conducting business on the Internet, including consumer protection regulations that regulate retailers and govern the promotion and sale of merchandise. Many of these laws and regulations are still evolving and being tested in courts, and could be interpreted in ways that could harm our business. These may involve user privacy, data protection, content, intellectual property, distribution, electronic contracts and other communications, competition, protection of minors, consumer protection, telecommunications, product liability, taxation, economic or other trade prohibitions or sanctions and online payment services. In particular, we are subject to federal, state, and local laws regarding privacy and protection of people’s data. Foreign data protection, privacy and other laws and regulations can be more restrictive than those in the U.S. Federal and state laws in the U.S. and foreign laws and regulations are constantly evolving and can be subject to significant change. In addition, the application, interpretation and enforcement of these laws and regulations are often uncertain and may be interpreted and applied inconsistently from country to country and inconsistently with our current policies and practices. The California Consumer Privacy Act (“CCPA”) requires companies that process information on California residents to make new disclosures to consumers about their data collection, use and sharing practices, allows consumers to opt out of the sale of personal information with third parties and prohibits covered businesses from discriminating against California residents (for example, charging more for services) for exercising any of their rights under the CCPA. The law also provides a private right of action and statutory damages for certain data breaches that result in the loss of personal information. The CCPA was recently amended by the California Privacy Rights Act of 2020 (“CPRA”), and several states have also enacted or approved policy legislation imposing additional data protection obligations on companies doing business in those states, resulting in further complexity. These laws, among other things, give state residents the ability to limit the use of their sensitive information, introduce increased consent and