Company: WLTH
Filing Date: 2025-07-28
Form Type: DRS/A
Source: 0001628279-25-000486
Chunk: 192

Company: WEALTHFRONT CORP
Filing Date: 2025-07-28
Form: DRS/A
Chunk 192
---
 and recordkeeping, among other changes. Additionally, we are subject to the laws and regulations promulgated under the authority of the Federal Trade Commission, which regulates unfair or deceptive acts or practices, including with respect to privacy, data protection, and data security.

At the state level, numerous states have enacted, or are in the process of enacting, state-level financial privacy laws, as well as comprehensive consumer data privacy laws and regulations, governing the collection, use, and processing of state residents’ personal information. Many of these laws broadly exempt entities covered by the GLBA; other laws such as the California Consumer Privacy Act (as amended, the “CCPA”), exempt only personal information that is subject to the GLBA. The CCPA applies to the personal information of California residents collected in the employment, job applicant, and business-to-business settings. The CCPA requires covered businesses to, among other things, provide certain disclosures to individuals in California, and affords such individuals data privacy rights such as opting out of the sale or sharing of personal information, accessing personal information, deleting personal information, correcting personal information, limiting the use and disclosure of sensitive personal information, and receiving detailed information about how personal information is collected, used, sold, and shared. In the future, additional states could also adopt data privacy legislation, which may include more stringent data privacy requirements. In addition to these state level comprehensive consumer data privacy laws, all 50 states have enacted breach notification laws, which include obligations to provide notification of security breaches that impact certain personal information to affected individuals, state regulators, and others.

This existing and new legislation, as well as their amendments, interpretations, and applications, may add additional complexity, variation in requirements, restrictions, and potential legal risk, require additional investment of resources in our compliance programs, impact our strategies and the availability of previously useful data, and could result in increased compliance costs and changes in our business practices and policies. We may be required to modify our data processing practices and policies and incur substantial compliance-related costs and expenses in connection with these and any other future data privacy, protection or security related laws, rules, or regulations, and they may also increase our potential exposure to regulatory enforcement and litigation.

With respect to cybersecurity, we and our third-party service providers have implemented a variety of technical and organizational security measures and other procedures and protocols designed to protect our data and information, including personal information and other confidential or sensitive information pertaining to our clients, employees, and other users. Despite measures we put in place, we and our third