Company: PACB
Filing Date: 2025-11-06
Form Type: 10-Q
Source: 0001299130-25-000168
Chunk: 542

Company: PACIFIC BIOSCIENCES OF CALIFORNIA, INC.
Filing Date: 2025-11-06
Form: 10-Q
Item: Part II, Item 1
Chunk 542
---
 obligations, relating to data privacy and security in the jurisdictions in which we operate. The regulatory environment related to data privacy and security is increasingly rigorous, with new and constantly changing requirements applicable to our business, and enforcement practices are likely to remain uncertain for the foreseeable future. These laws and regulations may be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible that they will be interpreted and applied in ways that may have a material adverse effect on our business, financial condition, results of operations and prospects.

Q3 Fiscal 2025 Form 10-Q80

In the United States, various federal and state regulators, including governmental agencies like the Consumer Financial Protection Bureau, the Department of Justice, and the Federal Trade Commission, have adopted, or are considering adopting, laws and regulations concerning personal information and data security. For example, the Department of Justice issued a final rule which took effect in April 2025 that places limitations, and in some cases prohibitions, on certain transfers of sensitive personal data to business partners located in China and other designated countries, or with other specified links to China and other designated countries. These rules also may broadly require us to extract promises from other third-party service providers that they will not transfer data we share with them onward to parties linked to countries of concern. Certain state laws may be more stringent or broader in scope, or offer greater individual rights, with respect to personal information than federal, international or other state laws, and such laws may differ from each other, all of which may complicate compliance efforts. For example, the California Consumer Privacy Act (“CCPA”), which increases privacy rights for California residents and imposes obligations on companies that process their personal information, came into effect on January 1, 2020. Among other things, the CCPA requires covered companies to provide new disclosures to California consumers and provide such consumers new data protection and privacy rights, including the ability to opt-out of certain sales of personal information. The CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal information. This private right of action may increase the likelihood of, and risks associated with, data breach litigation. In November 2020, California also passed the California Privacy Rights Act (“CPRA”), which significantly expanded the CCPA as of January 1, 2023, including by introducing additional obligations such as data minimization and storage limitations and granting additional rights to consumers, among others. The enactment of the CCPA has prompted similar legislative