Company: DBRG
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0001679688-25-000017
Chunk: 87

Company: DigitalBridge Group, Inc.
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1A
Chunk 87
---
), management, operations, transactions with affiliated persons (as defined in the 1940 Act), portfolio composition, including restrictions with respect to diversification and industry concentration, and other matters.

Privacy and data protection regulations are complex and rapidly evolving areas. Any failure or alleged failure to comply with these laws could harm our business, reputation, financial condition, and operating results. 

Various federal, state, and foreign laws and regulations as well as industry standards and contractual obligations govern the collection, use, retention, protection, disclosure, cross-border transfer, localization, sharing, and security of the data we receive from and about our customers, employees, and other individuals. The regulatory environment for the collection and use of personal information for companies, including for those that own and manage data centers and other communications technologies, is evolving in the United States and internationally. The U.S. federal government, U.S. states, and foreign governments have enacted (or are considering) laws and regulations that may restrict our ability to collect, use, and disclose personal information and may increase or change our obligations with respect to storing or managing our own data, including our employees’ personal information, as well as our clients’ data, which may include individuals’ personal information. For example, the EU GDPR imposes detailed requirements related to the collection, storage, and use of personal information related to people located in the EU (or which is processed in the context of EU operations) and places data protection obligations and restrictions on organizations, and may require us to make further changes to our policies and procedures in the future beyond what we have already done. In addition, in the wake of the United Kingdom’s withdrawal from the EU, the United Kingdom has adopted a framework similar to the GDPR. The EU has confirmed that the UK data protection framework as being “adequate” to receive EU personal data. We are monitoring recent developments regarding amendments to the UK data protection framework and the impact this may have on our business. 

Privacy and consumer rights groups and government bodies (including the U.S. Federal Trade Commission (“FTC”)), state attorneys general, the European Commission, and data protection authorities in Europe, the UK, Singapore, and other jurisdictions, are increasingly scrutinizing privacy, and we expect such scrutiny to continue to increase. This could result in loss of competitive position, regulatory actions or increased regulatory scrutiny, litigation, breach of contract, reputational harm, damage to our stakeholder relationships, or legal liability. We cannot predict how future laws, regulations and standards, or future interpretations of current laws, regulations