Company: SERV
Filing Date: 2025-03-06
Form Type: 10-K
Source: 0001832483-25-000010
Chunk: 80

Company: Serve Robotics Inc. /DE/
Filing Date: 2025-03-06
Form: 10-K
Item: Item 1A
Chunk 80
---
-attacks or other security threats or computer systems disruptions typically would not be fully insured or indemnified by others. As a result, the occurrence of any of the events described above could result in the loss of competitive advantages derived from our intellectual property. Moreover, these events may result in the diversion of the attention of management and critical information technology and other resources, or otherwise adversely affect our internal operations and reputation or degrade our financial results and stock price.

We may be subject to theft, loss, or misuse of personal data by or about our employees, customers, or other third parties, which could increase our expenses, damage our reputation, or result in legal or regulatory proceedings.

In the ordinary course of our business, we have access to sensitive, confidential, or personal data or information regarding our employees and others that is subject to privacy and security laws and regulations. Therefore, the theft, loss, or misuse of personal data collected, used, stored, or transferred by us to run our business, or by our third-party service providers, including business process software applications providers and other vendors that have access to sensitive data, could result in damage to our reputation, disruption of our business activities, significantly increased business and security costs or costs related to defending legal claims. For example, in July 2023, third-party actors attempted to steal one of our robots. We are not aware that any data was obtained during any incident of vandalism or attempted theft. We are also aware of certain media reports relating to the use of our robots as elements in law enforcement surveillance efforts. As a general policy, we do not share data with law enforcement, except in certain narrow circumstances where (1) we are required to share data when served with a warrant or subpoena, or (2) there are insurance claims, active incident investigations, or acts of armed violence or theft attempts involving the Company’s personnel or property.

Global privacy legislation, enforcement, and policy activity in this area are rapidly expanding and creating a complex regulatory compliance environment. For example, the European Union has adopted the General Data Protection Regulation (“GDPR”), which requires companies to comply with rules regarding the handling of personal data, including its use, protection, and the ability of persons whose data is stored to correct or delete such data about themselves. Failure to meet GDPR requirements could result in penalties of up to 4% of worldwide revenue. In addition, the interpretation and application of consumer and data protection laws in the U.S., Europe, and elsewhere are often uncertain and fluid and may be interpreted and applied in a manner that is