Company: BKR
Filing Date: 2025-02-04
Form Type: 10-K
Source: 0001701605-25-000035
Chunk: 110

Company: Baker Hughes Co
Filing Date: 2025-02-04
Form: 10-K
Item: Item 1A
Chunk 110
---
 or perceived failure by us to comply with such laws or regulations, or contractual or other obligations relating to data privacy or security, may adversely affect our business and operating results.

We have access to sensitive, confidential, proprietary or personal data or information in certain of our businesses that is or may become subject to various data privacy and security laws, regulations, standards, contractual obligations or customer-imposed controls in the jurisdictions in which we operate. The legal and regulatory environment related to data privacy and security is increasingly rigorous, with new and constantly changing requirements applicable to our business, and enforcement practices are likely to remain uncertain for the foreseeable future. These laws and regulations are and may be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible that they will be interpreted and applied in ways that may adversely affect our business and operating results.

In the U.S., various federal and state regulators, including governmental agencies like the Federal Trade Commission, have adopted, or are considering adopting, laws, regulations and standards concerning personal information, privacy and data security. Certain state laws may be more stringent or broader in scope, or offer greater 

Baker Hughes Company 2024 Form 10-K | 23

individual rights, with respect to personal information than federal, international or other state laws, and such laws may differ from each other, all of which may complicate compliance efforts. Internationally, laws, regulations and standards in many jurisdictions apply broadly to the collection, use, retention, security, disclosure, transfer and other processing of personal information or other data. For example, the collection, use, storage, disclosure, transfer, or other processing of personal data regarding individuals located in the European Economic Area and the U.K. is subject to strict regulations, and compliance may require adhering to stringent legal and operational obligations and the dedication of substantial time and financial resources.

The various and evolving federal, state and international laws, regulations and standards can differ significantly from one another and, given our global footprint, this may significantly complicate our compliance efforts and impose considerable costs, such as costs related to organizational changes and implementing additional protection technologies, which are likely to increase over time. In addition, compliance with applicable requirements may require us to modify our data processing practices and policies, distract management or divert resources from other initiatives and projects, all of which could adversely affect our business and operating results. Any failure or perceived failure by us to comply with any applicable federal, state or international laws, regulations, standards, or contractual or other obligations, relating to data privacy and security could