Company: PCRX
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001396814-25-000041
Chunk: 236

Company: Pacira BioSciences, Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 236
---
, including significantly expanded compliance burdens, costs and enforcement risks.

If we do not maintain the privacy and security of personal and business information, we could damage our reputation with customers and employees, incur substantial additional costs and become subject to litigation.

We receive, retain and transmit personal information about our customers and employees as well as confidential or proprietary information of ours and our customers, vendors and other business partners, and entrust that information to third-party suppliers, including cloud service-providers, software-as-a-service (“SaaS”) solutions, platform-as-a-service (“PaaS”) solutions, data hosting and processing facilities, artificial intelligence, tools and other hardware, software (including open-source software) technical applications and platforms and managed services, including some that are managed, hosted, provided and/or used by third-party vendors, to operate our business that perform activities for us. Our business depends upon the secure transmission of encrypted confidential information over public networks, including information permitting payments. A compromise of our security systems or defects within our hardware or software, or those of our suppliers, that results in our customers’ or our employees’ information being obtained by unauthorized persons, could adversely affect our reputation with our customers and others, as well as our operations, results of operations, financial condition and liquidity, and could result in litigation, government actions, or the imposition of penalties. In addition, a breach could disrupt our operations and require that we expend significant additional resources related to the security of our information systems.

The use of data by our business is regulated at the national and state or local level in all of our operating countries. Privacy and information-security laws and regulations change, and compliance with them may result in cost increases due to, among other things, systems changes and the development of new processes. If we or those with whom we share information fail to comply with these laws and regulations, our reputation could be damaged, possibly resulting in lost future business, and we could be subjected to additional legal risk as a result of non-compliance.

We have security measures and controls to protect personal and business information and continue to make investments to secure access to our information technology network. These measures may be undermined, however, due to the actions of outside parties, employee error, internal or external malfeasance, or otherwise, and, as a result, an unauthorized party may obtain access to our data systems and misappropriate business and personal information. Because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and may not immediately produce signs of intrusion, we may be unable