Company: AXS-PE
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001214816-25-000056
Chunk: 250

Company: AXIS CAPITAL HOLDINGS LTD
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 250
---
 adverse publicity relating to data protection, privacy or cybersecurity. Although we endeavor to comply with our privacy policies, we may at times fail to do so or be alleged to have failed to do so. The publication of our privacy policies and other documentation that provide promises and assurances about data protection, privacy and cybersecurity can subject us to potential government or legal action if they are found to be deceptive, unfair, or misrepresentative of our actual practices. Any concerns about our data protection, privacy and cybersecurity practices, even if unfounded, could damage our reputation and adversely affect our business.

Compliance with obligations imposed by data protection, privacy, and cybersecurity legislation, including Bermuda’s Personal Information Protection Act and Quebec’s Law 25, requires investment in appropriate technical or organizational measures designed to safeguard the rights and freedoms of data subjects. Such investment may result in significant costs to our business and may require us to modify certain of our business practices. In addition, enforcement actions, investigations and the imposition of substantial fines and penalties by regulatory authorities as a result of data security incidents and privacy violations have increased dramatically over the past several years. The enactment of more restrictive laws, rules, regulations or future enforcement actions or investigations could impact us through increased costs or restrictions on our business, and noncompliance could result in regulatory penalties and significant legal liability.

Any failure or perceived failure by us to comply with applicable data protection, privacy and cybersecurity laws, regulations, rules, industry standards and other obligations, or compromise of security that results in unauthorized access to, or unauthorized loss, destruction, use, modification, acquisition, disclosure, release or transfer of personal, sensitive, confidential or other client or Company information, could subject us to increased costs or restrictions on our business, future enforcement actions or investigations, regulatory penalties, claims, fines, criminal prosecution, judgments, awards, sanctions, monetary damages, costly litigation (including class actions) and significant legal liability. Such events could also result in negative publicity and damage to our reputation, distract our management and technical personnel, adversely affect the demand for our products and services and cause us to lose business, which could therefore have a material adverse effect on our results of operations or financial condition.

44

Our insurance and reinsurance subsidiaries are subject to supervision and regulation. Changes to existing regulation and supervisory standards, or failure to comply with them, could have an adverse effect on our business, results of operations and financial condition, or result in negative publicity, reputational damage or harm to our relationships.

Our insurance and reinsurance subsidiaries conduct business globally and are subject to