Company: PAX
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001628280-25-025640
Chunk: 31

Company: Patria Investments Ltd
Filing Date: 2025-05-15
Form: 20-F
Item: Item 3
Chunk 31
---
 regulators around the world. Many jurisdictions in which we operate have laws and regulations relating to data privacy, cybersecurity and protection of personal information, including, as examples the General Data Protection Regulation (“ GDPR”), in the European Union that went into effect in May 2018 and the Brazilian Data Protection Act (Lei Geral de Proteção de Dados) (“ LGPD”), that went into effect in September 2020. See “ - Rapidly developing and changing global privacy laws and regulations could increase compliance costs and subject us to enforcement risks and reputational damage.” Some jurisdictions have also enacted laws requiring companies to notify individuals and government agencies of data security breaches involving certain types of personal data.

Breaches in security, whether malicious in nature or through inadvertent transmittal or other loss of data, could potentially jeopardize our employees’ or our fund investors’ or counterparties’ confidential, proprietary and other information processed and stored in, and transmitted through, our computer systems and networks, or otherwise cause interruptions or malfunctions in our employees’, our fund investors’, our counterparties’ or third-parties’ business and operations, which could result in significant financial losses, increased costs, liability to our fund investors and other counterparties, regulatory intervention and reputational damage. Furthermore, if we fail to comply with the relevant laws and regulations or fail to provide the appropriate regulatory or other notifications of breach in a timely matter, it could result in regulatory investigations and penalties, which could lead to negative publicity and reputational harm and may cause our fund investors and clients to lose confidence in the effectiveness of our security measures.

Our portfolio companies also rely on data processing systems and the secure processing, storage and transmission of information, including payment and health information. A disruption or compromise of these systems could have a material adverse effect on the value of these businesses. Our funds may invest in strategic assets having a national or regional profile or in infrastructure, the nature of which could expose them to a greater risk of being subject to a terrorist attack or security breach than other assets or businesses, or to restrictions to the circulation of products or services arising from epidemics. Such an event may have material adverse consequences on our investment or assets of the same type or may require portfolio companies to increase preventative security measures or expand insurance coverage.

Finally, our technology, data and intellectual property and the technology, data and intellectual property of our portfolio companies are also subject to a heightened risk of theft or compromise given that we and our portfolio companies engage in operations in Latin America, in particular in jurisdictions that do not have comparable