Company: KARO
Filing Date: 2025-06-09
Form Type: 20-F
Source: 0001213900-25-052372
Chunk: 29

Company: Karooooo Ltd.
Filing Date: 2025-06-09
Form: 20-F
Item: Item 3
Chunk 29
---
 rights and interests of others”
and are required to “not endanger the physical and mental health of others, and do not infringe upon others' portrait rights, reputation
rights, honor rights, privacy rights, and personal information rights”.

We have updated and will continue
to evaluate our Group data protection and security policies, charters, and procedures to assist in maintaining data privacy and data security
in line with international practices. If our privacy or data security measures fail to comply, or are perceived to fail to comply, with
current or future laws and regulations, we may be subject to litigation, regulatory investigations or other liabilities.

Moreover, if future laws and regulations
limit our customers’ ability to use and share this data or our ability to store, process and share data with our clients over the
Internet, demand for our solution could decrease, our costs could increase, and our results of operations and financial condition could
be harmed.

U. S. treatment of data protection
is accomplished by legislation at the federal level within sector-specific contexts and so definitions of what kinds of data are covered
will vary from one law to the next. In recent years, a proliferation of comprehensive state data privacy laws was enacted in several jurisdictions
in the US, in addition to those already in effect. Furthermore, as regulations continue to develop, enforcement actions may increase.
As such, businesses are required to allocate adequate resources to ensure compliance with data privacy laws.

In addition, AI has seen a significant
expansion in terms of technology, adoption, proposed regulation and enforcement. In 2022, the White House Office of Science and Technology
Policy (OSTP) released its “ Blueprint for an AI Bill of Rights.” This nonbinding framework delineates five principles to guide
the development of AI, including a section dedicated to data privacy, encouraging AI professionals to seek individuals’ consent
on data use. The expansion of AI policies and regulation, particularly at the U. S. state level, is possible.

On the U. S. federal level, despite
the American Data Privacy and Protection Act in 2022, there has not been significant advancement toward an omnibus privacy law.

We also run an insurance agency
and brokerage unit that sells short-term insurance policies and selected insurance-related value-add vehicle products to our customers.
This results in us receiving personally identifiable information with the customer’s consent. This information is increasingly subject
to legislation and regulation. This legislation and regulation are generally intended to protect individual privacy and the privacy and
security of personal information. We