Company: ATLCL
Filing Date: 2025-05-08
Form Type: 10-Q
Source: 0001437749-25-015559
Chunk: 104

Company: Atlanticus Holdings Corp
Filing Date: 2025-05-08
Form: 10-Q
Item: Item 8
Chunk 104
---
 issuing banks for their cost of issuing new cards and related expenses. In addition, if we fail to follow credit card industry security standards, even if there is no compromise of customer information, we could incur significant fines. Security breaches also could harm our reputation, which could potentially cause decreased revenues, the loss of existing merchant credit partners, or difficulty in adding new merchant credit partners.

Internet and data security breaches also could impede our bank partners from originating loans over the Internet, cause us to lose consumers or otherwise damage our reputation or business. Consumers generally are concerned with security and privacy, particularly on the Internet. As part of our growth strategy, we have enabled lenders to originate loans over the Internet. The secure transmission of confidential information over the Internet is essential to maintaining customer confidence in such products and services offered online.

Advances in computer capabilities, new discoveries or other developments could result in a compromise or breach of the technology used by us to protect our client or consumer application and transaction data transmitted over the Internet. In addition to the potential for litigation and civil penalties described above, security breaches could damage our reputation and cause consumers to become unwilling to do business with our clients or us, particularly over the Internet. Any publicized security problems could inhibit the growth of the Internet as a means of conducting commercial transactions. Our ability to service our clients’ needs over the Internet would be severely impeded if consumers become unwilling to transmit confidential information online.

Also, a party that is able to circumvent our security measures could misappropriate proprietary information, cause interruption in our operations, damage our computers or those of our users, or otherwise damage our reputation and business.

       51

Regulation in the areas of privacy and data security could increase our costs. We are subject to various regulations related to privacy and data security/breach, and we could be negatively impacted by these regulations. For example, we are subject to the Safeguards guidelines under the Gramm-Leach-Bliley Act. The Safeguards guidelines require that each financial institution develop, implement and maintain a written, comprehensive information security program containing safeguards that are appropriate to the financial institution’s size and complexity, the nature and scope of the financial institution’s activities and the sensitivity of any customer information at issue. Broad-ranging data security laws that affect our business also have been adopted by several states.

The California Consumer Privacy Act (the "CCPA") became effective on January 1, 2020. The CCPA requires, among other things, covered companies to provide new disclosures to California consumers and afford such consumers