Company: DJTWW
Filing Date: 2025-02-14
Form Type: 424B3
Source: 0001140361-25-004848
Chunk: 104

Company: Trump Media & Technology Group Corp.
Filing Date: 2025-02-14
Form: 424B3
Chunk 104
---
, in some circumstances, to controllers and processors in a jurisdiction outside the EEA including any business, regardless of its location, that provides goods or services to data subjects located in the EEA, or monitors the behavior of EEA data subjects. The GDPR imposes significant restrictions, obligations and penalties on data controllers and data processors, including stringent requirements for the processing of personal data. If TMTG fails to comply with the GDPR, it may lead to regulatory investigation with possible enforcement of monetary penalties ranging from 10 million to 20 million euros, or 2% to 4% of annual worldwide revenue (whichever is higher), private or class action lawsuits and/or reputational damage. Further, withdrawal of the United Kingdom (“UK”) from the European Union (“EU”) has led to legal uncertainty and divergent national laws and regulations. In particular, while the Data Protection Act of 2018, which supplements the GDPR, is now effective in the UK alongside the UK GDPR, it is still unclear whether transfer of data from the EEA to the UK will remain lawful under the GDPR without additional safeguards. In Canada, TMTG is subject to the laws of the individual provinces, as well as Canada’s Personal Information and Protection of Electronic Documents Act (“PIPEDA”). PIPEDA provides Canadian residents with privacy protections and sets out rules for how companies may collect, use and disclose personal information in the course of commercial activities. The costs of compliance with, and other burdens imposed by, these and other international data privacy and security laws may limit the use and adoption of TMTG’s solutions, products and services and could have a materially adverse impact on its business. Any failure or perceived failure by TMTG or third-party service providers to comply with international data privacy and security laws may lead to regulatory enforcement actions, fines, private lawsuits or reputational damage. 49 In addition, TMTG may be unable to transfer personal information from Europe and other jurisdictions to the U.S. or other countries due to data localization requirements or limitations on cross-border data flows. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. For example,. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. In particular, the EEA and UK have significantly restricted the transfer of personal information to the U.S. and other countries whose privacy laws they generally believe are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data