Company: INGN
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0000950170-25-029993
Chunk: 188

Company: Inogen Inc
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 188
---
 compensate for all potential liability.

Any new laws, regulations, other legal obligations or industry standards, or any changed interpretation of existing laws, regulations or other standards may require us to incur additional costs and restrict our business operations. For example, many jurisdictions have enacted laws requiring companies to notify individuals of data security breaches involving certain types of personal data. These mandatory disclosures regarding a security breach could result in negative publicity to us, which may cause our customers to lose confidence in the effectiveness of our data security measures which could adversely affect our business, financial condition and results of operations.

Increasing data privacy and data protection regulations could impact our business and expose us to increased liability.

We must comply with increasingly complex and rigorous regulatory standards enacted to protect business and personal data in the U.S., Europe and elsewhere. Complying with these numerous and complex regulations is expensive and difficult, and failure to comply could result in regulatory scrutiny, fines, civil liability or damage to our reputation. For example, the European Union adopted the GDPR which imposes obligations on companies regarding the processing of personal data and provides certain individual privacy rights to natural persons whose data is stored. Compliance with existing, proposed and recently enacted laws and regulations can be costly and any failure to comply with these regulatory standards could subject us to legal and reputational risks. Misuse of or failure to secure or properly process personal information could also result in violation of data privacy laws and regulations, and any such event, or the perception it has occurred, may result in claims and litigation by private parties, investigations and other proceedings against us by governmental entities or others, damage to our reputation and credibility and could have a negative impact on revenues and profits. As the regulatory environment related to information security, data collection and use, and privacy and data protection becomes increasingly rigorous, with new and constantly changing requirements applicable to our business, compliance with those requirements could continue to result in significant costs.

 39

Following the GDPR, a number of states in the U.S. have introduced, and in certain cases enacted, privacy legislation imposing operational requirements on U.S. companies similar to the requirements reflected in the GDPR. For example, California has passed the California Consumer Privacy Act, or CCPA, which went into effect on January 1, 2020, and among other things, requires new disclosures to California consumers and affords such consumers new abilities to opt out of certain sales of personal information. The CCPA provides civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. In addition,