Company: TGNT
Filing Date: 2025-04-09
Form Type: 10-K/A
Source: 0001477932-25-002538
Chunk: 23

Company: Totaligent, Inc.
Filing Date: 2025-04-09
Form: 10-K/A
Chunk 23
---
 that require timely notification to affected individuals, and at times regulators, credit reporting agencies and other bodies, if a company has experienced the unauthorized access or acquisition of certain personal information. Other state laws, such as the California Consumer Privacy Act, as amended, or the CCPA, among other things, contain disclosure obligations for businesses that collect personal information about residents in their state and affords those individuals new rights relating to their personal information that may affect our ability to collect and/or use personal information. Effective January 1, 2023, we became subject to the California Privacy Rights Act, which expands upon the consumer data use restrictions, penalties and enforcement provisions under the California Consumer Privacy Act, and Virginia’s Consumer Data Protection Act, another comprehensive data privacy law. Effective July 1, 2023, we became subject to the Colorado Privacy Act and Connecticut’s An Act Concerning Personal Data Privacy and Online Monitoring, which are also comprehensive consumer privacy laws.

| 16 |

Effective December 31, 2024, we also became subject to the Utah Consumer Privacy Act, regarding business handling of consumers’ personal data. Meanwhile, several other states and the federal government have considered or are considering privacy laws like the CCPA. We will continue to monitor and assess the impact of these laws, which may impose substantial penalties for violations, impose significant costs for investigations and compliance, allow private class-action litigation and carry significant potential liability for our business.

Outside of the U.S., data protection laws, including the EU General Data Protection Regulation, or the GDPR, also might apply to some of our operations or business collaborators. Legal requirements in these countries relating to the collection, storage, processing and transfer of personal data/information continue to evolve. The GDPR imposes, among other things, data protection requirements that include strict obligations and restrictions on the ability to collect, analyze and transfer EU personal data/information, a requirement for prompt notice of data breaches to data subjects and supervisory authorities in certain circumstances, and possible substantial fines for any violations (including possible fines for certain violations of up to the greater of 20 million Euros or 4% of total company revenue). Other governmental authorities around the world have enacted or are considering similar types of legislative and regulatory proposals concerning data protection.

Our business depends on our customers continued and unimpeded access to the Internet and the development and maintenance of Internet infrastructure. Internet access providers may be able to block, degrade or charge for access to certain of our services, which could lead to additional expenses and the loss of customers.

Our services depend on the