Company: CXAI
Filing Date: 2025-04-07
Form Type: 10-K
Source: 0001829126-25-002438
Chunk: 201

Company: CXApp Inc.
Filing Date: 2025-04-07
Form: 10-K
Item: Item 1A
Chunk 201
---
 us. In addition, data protection laws, such as the GDPR, foreign court judgments or regulatory actions could affect our ability to transfer, process and/or receive transnational data that is critical to our operations, including data relating to users, customers, or partners outside the United States. For instance, the GDPR restricts transfers of personal data outside of the European Economic Area, including to the United States, subject to certain requirements. Such data protection laws, judgments or actions could affect the manner in which we provide our services or adversely affect our financial results if foreign customers and partners are not able to lawfully transfer data to us.

This area of the law is currently under intense government scrutiny and many governments, including the U.S. government, are considering a variety of proposed regulations that would restrict or impact the conditions under which data obtained from individuals could be collected, processed, stored, transferred, sold or shared with third parties. In addition, regulators such as the Federal Trade Commission and the California Attorney General are continually proposing new regulations and interpreting and applying existing regulations in new ways. For example, in June 2018, California passed the California Consumer Privacy Act (the “CCPA”), which provides new data privacy rights for consumers and new informational, disclosure and operational requirements for companies, effective January 2020. Fines for noncompliance may be up to $7,500 per violation. The burdens imposed by the GDPR and CCPA, and changes to existing laws or new laws regulating the solicitation, collection, processing, or sharing of personal and consumer information, and consumer protection could affect our customers’ utilization of our services and technology and could potentially reduce demand or impose restrictions that make it more difficult or expensive for us to provide our services.

In addition, ongoing legal challenges in Europe to the mechanisms allowing companies to transfer personal data from the European Economic Area to the United States could result in further limitations on the ability to transfer data across borders, particularly if governments are unable or unwilling to reach new or maintain existing agreements that support cross-border data transfers, such as the EU-U.S. and Swiss-U.S. Privacy Shield frameworks and the European Commission’s Model Contractual Clauses, each of which are currently under particular scrutiny. Additionally, certain countries have passed or are considering passing laws requiring local data residency. The costs of compliance with, and other burdens imposed by, privacy laws, regulations and standards may limit the use and adoption of our services, reduce overall demand for our services, make it more difficult to meet expectations from or commitments to customers, lead to significant