Company: ARAI
Filing Date: 2025-06-17
Form Type: S-1
Source: 0001641172-25-015428
Chunk: 56

Company: Arrive AI Inc.
Filing Date: 2025-06-17
Form: S-1
Chunk 56
---
: provide certain disclosures to California residents regarding
the business’s collection, use and disclosure of personal information; receive and respond to requests from California residents
to access, delete and correct their personal information, or to opt-out of certain disclosures of their personal information; and enter
into specific contractual provisions with service providers that process California resident personal information on the business’s
behalf. The enactment of the CCPA has prompted a wave of similar laws in other states in the United States, and there also remains interest
in greater regulation regarding the processing of personal information at the federal level as well, which creates a patchwork of overlapping
but different state laws. As we have expanded, and may continue to expand, our international presence, we are and may become subject
to additional laws relating to the processing of information in countries in which we operate and have customers, including Australia,
Brazil, Canada, the European Union, Singapore, South Africa and the United Kingdom. Personal information is increasingly subject to regulation
in these and other jurisdictions in which we operate, and the requirements can be more restrictive and rigorous than those in the United
States. In particular, we are subject to data protection laws in Europe including the General Data Protection Regulation 2016/679 and
the United Kingdom General Data Protection Regulation and Data Protection Act of 2018 (collectively, the “GDPR”), which impose
stringent data protection obligations for processors and controllers of personal data with the risk of enforcement action, civil claims
(including class actions), significant penalties or requirements for us to cease or change how we process personal data and conduct our
business. Amongst other things, the GDPR regulates cross-border transfers of personal information out of the European Economic Area and
the United Kingdom. European case law and guidance have imposed additional onerous requirements in relation to data transfers, and we
expect the existing legal complexity and uncertainty regarding international personal data transfers to continue. In particular, we expect
international transfers from the European Union and the United Kingdom to continue to be subject to enhanced scrutiny by regulators.
As regulatory guidance and the enforcement landscape develops, we could suffer additional costs, complaints and/or regulatory investigations
or fines, or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could
affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations,
and could adversely affect our business, financial condition and results of operations. Applicable requirements regarding data privacy
and the processing