Company: ARRY
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001820721-25-000023
Chunk: 51

Company: Array Technologies, Inc.
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 51
---
 from the costs and consequences of non-compliance with any laws, regulations or other legal obligations relating to privacy or consumer protection or any inadvertent or unauthorized use or disclosure of data that we store or handle as part of operating our business.

Federal, state and foreign governmental authorities continue to evaluate the privacy implications inherent in the use of third-party cookies, pixels, and other methods of online tracking for behavioral advertising and other purposes. The regulation of the use of these cookies and other current online tracking and advertising practices or a loss in our ability to make effective use of services that employ such technologies could increase our costs of operations and limit our ability to acquire new customers on cost-effective terms and, consequently, materially and adversely affect our business, financial condition and results of operations.

We are subject to a variety of laws and regulations in the U.S., the United Kingdom and the European Economic Area that involve matters central to our business, including privacy and data protection. California, and more than a dozen other states, have passed comprehensive privacy laws similar to the EU GDPR. The SEC has similarly enacted detailed cybersecurity rules that require the public disclosure of material cybersecurity incidents within four business days after we determine that an incident is material. Existing and proposed laws and regulations can be costly to comply with and can delay or impede the development of new products and services, significantly increase our operating costs, require significant time and attention of management and technical personnel and subject us to inquiries or investigations, claims or other remedies, including fines or demands that we modify or cease existing business practices. For example, administrative fines of up to the greater of €20 million and 4% of our global turnover can be imposed for breaches of the EU General Date Protection Regulation (2016/679) (“EU GDPR”).

Each of these privacy, security and data protection laws and regulations, and any other such changes or new laws or regulations, could impose significant limitations, require changes to our business, or restrict our use or storage of certain data, which may increase our compliance expenses and make our business more costly or less efficient to conduct. In addition, any such changes could compromise our ability to develop an adequate marketing strategy and pursue our growth strategy effectively.

Any failure to comply with applicable laws or other obligations or any security incident or breach, whether by us, one of our third-party service providers or vendors or another third party, could have adverse effects. We cannot assure you that our vendors or other third-party service providers with access to our or our customers’ or employees’ personally identifiable and other sensitive or confidential information will