Company: CXDO
Filing Date: 2025-03-04
Form Type: 10-K
Source: 0001654954-25-002287
Chunk: 35

Company: Crexendo, Inc.
Filing Date: 2025-03-04
Form: 10-K
Item: Item 1
Chunk 35
---
 could potentially subject us to jurisdiction. Also, websites we host may be available in these locations. As we conduct business or become deemed to conduct business in those foreign jurisdictions, we may become subject to those laws.

We are also subject to the privacy and data protection-related obligations in our contracts with our customers and other third parties. Any failure, or perceived failure, to comply with federal, state, or international laws, or to comply with our contractual obligations related to privacy, could result in proceedings or actions against us which could result in significant liability to us as well as harm to our reputation. Additionally, third parties with whom we contract may violate or appear to violate laws or regulations which could subject us to the same risks. Any new laws, regulations, other legal obligations or industry standards, or any changed interpretation of existing laws, regulations or other standards may require us to incur additional costs and restrict our business operations.

 19Table of Contents

Our collection, processing, storage, use, and transmission of personal data could give rise to liabilities as a result of governmental regulation, conflicting legal requirements, differing views on data privacy, or security breaches.

We collect, process, store, use, and transmit personal data on a daily basis. Personal data is increasingly subject to legal and regulatory protections around the world, which vary widely in approach and which possibly conflict with one another. In recent years, for example, U.S. legislators and regulatory agencies, such as the Federal Trade Commission, as well as U.S. states have increased their focus on protecting personal data by law and regulation and have increased enforcement actions for violations of privacy and data protection requirements. California recently enacted legislation, the California Consumer Privacy Act (“CCPA”) that will, among other things, require covered companies to provide new disclosures to California consumers, and afford such consumers new abilities to opt-out of certain sales of personal information, which became effective January 1, 2020. While we believe that we are not a covered entity under the law, the effects of the CCPA potentially are significant, however, and may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. We may also from time to time be subject to, or face assertions that we are subject to, additional obligations relating to personal data by contract or due to assertions that self-regulatory obligations or industry standards apply to our practices. Washington and Massachusetts have also introduced significant privacy bills and Congress is debating federal privacy legislation, which if passed, may restrict our business operations and require us