Company: TEAM
Filing Date: 2025-01-31
Form Type: 10-Q
Source: 0001650372-25-000009
Chunk: 397

Company: Atlassian Corp
Filing Date: 2025-01-31
Form: 10-Q
Item: Part I, Item 2
Chunk 397
---
 Trade Commission and state regulators enforce a variety of data privacy issues, such as promises made in privacy policies or failures to appropriately protect information about individuals, as unfair or deceptive acts or practices in or affecting commerce in violation of the Federal Trade Commission Act or similar state laws. In addition, U.S. state data privacy laws, such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CPRA”), and laws that have recently passed and/or gone into effect in many other states similarly impose new obligations on us and many of our customers, potentially as both businesses and service providers. In the European Economic Area (“EEA”) and the UK, data privacy laws and regulations, such as the European Union General Data Protection Regulation (“EU GDPR”) and United Kingdom General Data Protection Regulation and Data Protection Act 2018 (collectively, the “UK GDPR,” and, together with the EU GDPR, the “GDPR”), impose comprehensive obligations directly on Atlassian as both a data controller and a data processor, as well as on many of our customers, in relation to our collection, processing, sharing, disclosure and other use of personal data. Data privacy laws and regulations around the globe continue to evolve, and as various jurisdictions introduce similar legislation or regulation, we and our customers could be exposed to additional regulatory burdens that could increase our costs, reduce usage of our products, and adversely affect our business and results of operations.

We are also subject to evolving privacy laws on cookies, tracking technologies and e-marketing. For example, the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 establishes certain requirements for commercial email messages and specifies penalties for the transmission of commercial email messages that are intended to deceive the recipient as to source or content. In addition, certain states and foreign jurisdictions, such as Australia, Canada and the European Union (“EU”), have enacted laws that regulate sending email, and some of these laws are more restrictive than U.S. laws. In the EU and UK, informed consent is required for the placement of certain cookies or similar tracking technologies on an individual’s device and for direct electronic marketing. Consent is tightly defined and includes a prohibition on pre-checked consents and a requirement to obtain separate consents for each type of cookie or similar technology. Recent European court and regulator decisions are driving increased attention to cookies and similar tracking technologies. 

In addition, various safe harbors have historically been provided to those who hosted content provided by others, such as safe harbors from monetary damages for copyright infringement arising from copyrighted content