Company: LPSN
Filing Date: 2025-03-14
Form Type: 10-K
Source: 0001102993-25-000018
Chunk: 63

Company: LIVEPERSON INC
Filing Date: 2025-03-14
Form: 10-K
Item: Item 1A
Chunk 63
---
. A range of other proposed or existing laws and new interpretations of existing laws could have an impact on our business. For example: 

Government agencies and regulators have reviewed, are reviewing and will continue to review, the personal data handling practices of companies doing business online, including privacy and security policies and practices. This review may result in new laws or the promulgation of new regulations or guidelines that may apply to our products and services. For example, the State of California and other states have passed laws relating to disclosure of companies’ practices with regard to global opt-out signals from internet browsers, the ability to delete information of minors, age appropriate design obligations for companies that offer online services, products or features “likely to be accessed” by children, and new data breach notification requirements. Washington State recently enacted the “My Health, My Data Act,” which broadly protects the privacy of certain personal health information and generally requires consent for the collection, use, or sharing of any such information. Similarly, outside the E.U. and the U.S., a number of countries have adopted or are considering privacy laws and regulations that may result in significant greater compliance burdens. Existing and proposed laws and regulations regarding cybersecurity and monitoring of online behavioral data, such as proposed “Do Not Track” regulations, regulations aimed at restricting certain targeted advertising 

27

practices and collection and use of data from mobile devices, new and existing tools that allow consumers to block online advertising and other content, and other proposed online privacy legislation could potentially apply to some of our current or planned products and services. Existing and proposed laws and regulations related to email and other categories of electronic spam could impact the delivery of commercial email and other electronic communications by us or on behalf of customers using our services.

The FTC in particular has aggressively investigated and brought enforcement actions against companies that fail to comply with their privacy or data security commitments to consumers, or fail to comply with regulations or statutes such as the Children’s Online Privacy Protection Act. Any investigation or review of our practices may require us to make changes to our products and policies, which could harm our business. Currently there are many proposals by lawmakers and industry groups in this area, both in the United States and overseas, which address the collection, maintenance and use of personal information, web browsing and geolocation data, and establish data security and breach notification requirements. Further, regulators and industry groups have also released self-regulatory principles and guidelines for various data privacy and security practices. Given that this is an evolving and unsettled area of regulation, the imposition of any new significant