Company: PERI
Filing Date: 2025-03-25
Form Type: 20-F
Source: 0001178913-25-001021
Chunk: 45

Company: Perion Network Ltd.
Filing Date: 2025-03-25
Form: 20-F
Item: Item 3
Chunk 45
---
 other similar incident could lead to claims by our customers, data subjects or other relevant parties that we have failed to comply with applicable laws, regulations or contractual obligations to implement specified security measures. As a result, we could be subject to legal action or our customers, data providers or other relevant parties could end their relationships with us.
 

Data protection, data privacy and cybersecurity laws and regulations in certain jurisdictions may require us to notify individuals and government or regulatory authorities of data breaches, cyber-attacks or other similar incidents involving certain types of personal data. Pursuant to certain data protection, data privacy and cybersecurity laws and regulations, including the California Consumer Privacy Act (as amended by the California Privacy Rights Act, the “CCPA”), if we experience a data breach, cyber-attack or other similar incident, affected individuals could, under certain circumstances relating to such incidents, bring a private action claiming the breach was the result of our violation of the duty to implement and maintain reasonable security procedures and practices and recover civil damages, which could be costly, impact the operation of our business and cause reputational harm. Similarly, there is a risk of class actions in the United Kingdom (the “U.K.”) and Europe. In Canada, there has been an increase in tort claims and related civil litigation. Data breaches, cyber-attacks or other similar incidents could also result in enforcement actions, including significant penalties and fines, by government or regulatory authorities alleging that we have violated applicable laws or regulations that require us to maintain reasonable security measures and comply with mandatory disclosure requirements. In the coming years, we expect further regulation regarding data protection, data privacy and cybersecurity in the U.S./Canada and abroad that will likely apply to our business. These laws, regulations and other obligations may create additional regulatory, liability, and reputational risks and may increase financial costs to mitigate such risks. For more information, see the Risk Factor titled – “Our business depends on our ability to collect, use, maintain and otherwise process data, including personal data, to help our clients deliver advertisements, and to disclose data relating to the performance of advertisements. Any limitation imposed on our collection, use, maintenance or other processing of this data could significantly diminish the value of our solution and cause us to lose sellers, buyers, and revenue. Regulations, legislation or self-regulation relating to data protection, data privacy, cybersecurity, e-commerce and internet advertising and uncertainties regarding the application or interpretation of existing or newly adopted laws and regulations threaten our ability to collect, use, maintain and otherwise process this data, could harm our business