Company: IBTA
Filing Date: 2025-05-15
Form Type: 10-Q
Source: 0001628280-25-025593
Chunk: 55

Company: Ibotta, Inc.
Filing Date: 2025-05-15
Form: 10-Q
Item: Item 4
Chunk 55
---
 Obligations. For example, we may fail, or be alleged to fail, to comply with Data Protection Obligations if our employees, clients, publishers, or service providers do not comply with applicable Data Protection Obligations. Our service providers, clients’, or publishers’ failure to adhere to restrictions on data use or other Data Protection Obligations also may result in an Adverse Data Protection Impact.

We expect that there will continue to be new proposed laws, regulations, and industry standards concerning privacy, data protection, and information security in the United States and we cannot yet determine the impact such future laws, regulations, and standards may have on our business. There is a risk that the requirements of these laws, regulations, and standards, or of contractual or other actual or asserted obligations relating to privacy, data protection, or information security, are interpreted or applied in manners that are, or are alleged to be, inconsistent with our policies, practices, or solutions. For instance, with the increased focus on the use of data for advertising, the anticipation and expectation of future laws, regulations, standards, and other obligations could impact us and our existing and potential clients or publishers and delay certain partnerships or deals until there is greater certainty. In addition, as we expand our data analytics and other data-related solutions, there may be increased scrutiny on our Processing of data, and we may be subject to new and unexpected laws, regulations, standards, or other obligations. Future laws, regulations, standards, and other obligations, or changes in their interpretation or enforcement, could, for example, impair our ability to Process information that we use to provide targeted digital promotions and media to consumers on behalf of CPG brands and retailers, thereby impairing our ability to maintain and grow our total consumers and increase revenues. Future restrictions on the Processing of data, or additional requirements associated with data Processing could require us to modify our solutions, possibly in a material manner, which we may be unable to complete in a commercially reasonable manner or at all, could prohibit new or potential solutions and features, could limit our ability to store and Process data or to develop new solutions and features, and could increase our compliance costs or other costs of doing business.

Changes to federal and state laws, including changing interpretations by relevant authorities, regarding money services businesses and money transmitters could impact our rewards programs and other offerings.

Various federal laws, such as the Bank Secrecy Act, as amended, impose registration and certain other obligations on companies that are financial institutions, which are broadly defined to include money 

78