Company: TGNT
Filing Date: 2025-04-07
Form Type: 10-K
Source: 0001477932-25-002496
Chunk: 111

Company: Totaligent, Inc.
Filing Date: 2025-04-07
Form: 10-K
Item: Item 1A
Chunk 111
---
 markets, our business, results of operation and financial condition could be materially and adversely impacted in the future.

Failure to comply with data privacy and security laws and regulations could adversely affect our operating results and business.

In the ordinary course of our business, we might collect and store in our internal and external data centers, cloud services and networks sensitive data, including our proprietary business information and that of our customers, suppliers and business collaborators, as well as personal information of our customers and employees. The secure processing, maintenance and transmission of this information is critical to our operations and business strategy. The number and sophistication of attempted attacks and intrusions that companies have experienced from third parties has increased over the past few years. Despite our security measures, it is impossible for us to eliminate this risk.

A number of U.S. states have enacted data privacy and security laws and regulations that govern the collection, use, disclosure, transfer, storage, disposal, and protection of personal information, such as social security numbers, financial information and other sensitive personal information. For example, all 50 states and several U.S. territories now have data breach laws that require timely notification to affected individuals, and at times regulators, credit reporting agencies and other bodies, if a company has experienced the unauthorized access or acquisition of certain personal information. Other state laws, such as the California Consumer Privacy Act, as amended, or the CCPA, among other things, contain disclosure obligations for businesses that collect personal information about residents in their state and affords those individuals new rights relating to their personal information that may affect our ability to collect and/or use personal information. Effective January 1, 2023, we became subject to the California Privacy Rights Act, which expands upon the consumer data use restrictions, penalties and enforcement provisions under the California Consumer Privacy Act, and Virginia’s Consumer Data Protection Act, another comprehensive data privacy law. Effective July 1, 2023, we became subject to the Colorado Privacy Act and Connecticut’s An Act Concerning Personal Data Privacy and Online Monitoring, which are also comprehensive consumer privacy laws. 

 16Table of Contents

Effective December 31, 2024, we  also became subject to the Utah Consumer Privacy Act, regarding business handling of consumers’ personal data. Meanwhile, several other states and the federal government have considered or are considering privacy laws like the CCPA. We will continue to monitor and assess the impact of these laws, which may impose substantial penalties for violations, impose significant costs for investigations and compliance, allow private class-action litigation and