Company: CRCL
Filing Date: 2025-02-13
Form Type: DRS/A
Source: 0000950123-25-001965
Chunk: 96

Company: Circle Internet Group, Inc.
Filing Date: 2025-02-13
Form: DRS/A
Chunk 96
---
 with us. We may also collect customer data, including usage and
technical data, through the use of automated technologies such as logging and cookies. Furthermore, we may receive customer data from various third parties or publicly available sources, including

60

CONFIDENTIAL TREATMENT REQUESTED BY CIRCLE INTERNET GROUP, INC. PURSUANT TO 17 C.F.R. § 200.83

providers of technical or payment services. Consequently, we are subject to complex and
evolving U.S., UK, European, and other jurisdictions’ laws, rules, regulations, orders, and directives (referred to as “privacy laws”) relating to the collection, use, retention, security, transfer, and other processing of personal
information (referred to as “personal data”) in the countries where we operate. Much of the personal data that we process, especially financial information, is regulated by multiple privacy laws and, in some cases, the privacy laws of
multiple jurisdictions, such as the EU’s General Data Protection Regulation (“GDPR”) and the UK General Data Protection Regulation (the “UK GDPR”). In many cases, these laws apply not only to third-party transactions, but
also to transfers of information between or among us and our subsidiaries. Data protection, privacy, and information security have become the subject of increasing public, media, and legislative concern. If our customers were to reduce their use of
our products and services as a result of these concerns, our business could be materially harmed. Any failure, or perceived failure, by us or our partners and others who use our services to comply with our privacy policies or with any applicable
privacy laws in one or more jurisdictions could result in proceedings or actions against us by governmental entities or private parties. Those proceedings or actions could involve significant fines, penalties, judgments, and reputational damage to
us. They may also require us to change our business practices and otherwise increase the costs and complexity of compliance.

From time to time, we may utilize AI,
machine learning, data analytics (including generative AI), and similar tools that collect, aggregate, and analyze data (collectively, “Data Tools”) in connection with our business. Uncertainty around new and emerging Data Tools may
require additional investment in the development of proprietary datasets, machine learning, large language models, and systems to test for accuracy, bias, and other variables, and computing capabilities. Moreover, market acceptance of Data Tools is
uncertain. Utilizing Data Tools may have uncertain risks, particularly if those tools leverage