Company: EVLVW
Filing Date: 2025-11-13
Form Type: 10-Q
Source: 0001805385-25-000017
Chunk: 41

Company: Evolv Technologies Holdings, Inc.
Filing Date: 2025-11-13
Form: 10-Q
Item: Part I, Item 3
Chunk 41
---
, and product marketing and our actual or perceived failure to comply with such obligations could harm our business.

We, our reseller partners, and our customers are subject to a number of domestic and international laws and regulations that apply to the processing of certain types of information as well as cloud services and the internet generally. These laws, rules, and regulations address a range of issues including data privacy and cyber security, breach notification and restrictions or technological requirements regarding the processing of personal data. The regulatory framework for online services, data privacy and cybersecurity issues worldwide can vary substantially from jurisdiction to jurisdiction, is rapidly evolving and is likely to remain uncertain for the foreseeable future. New laws and regulations that apply to our business are being introduced at every level of government in the United States, as well as internationally. As we seek to expand our business, we are, and may increasingly become subject to various laws, regulations, and standards in the jurisdictions in which we operate, and may be subject to contractual obligations relating to data privacy and security in the jurisdictions in which we operate.  

For example, in the United States, there are numerous data privacy and security laws, rules, and regulations governing the collection, use, disclosure, retention, security, transfer, storage, and other processing of personal data (as defined in such laws), including state data privacy laws, state data breach notification laws, and federal and state consumer 

45

protection laws. The FTC and many state attorneys general are interpreting federal and state consumer protection laws to impose standards for the online collection, use, dissemination, and security of data. Such standards require us to publish statements that describe how we handle personal data and choices individuals may have about the way we handle their personal data. If such information that we publish is considered untrue or inaccurate, we may be subject to claims of unfair or deceptive trade practices, which could lead to significant liabilities and consequences. Moreover, according to the FTC, violating consumers’ privacy rights or failing to take appropriate steps to keep consumers’ personal data secure may constitute unfair or deceptive acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act. State consumer protection laws provide similar causes of action for unfair or deceptive practices.

Our failure, or perceived failure, to comply fully with developing interpretations of AI laws and regulations or meet evolving and varied stakeholder expectations and industry standards, could harm our business, reputation, financial condition and results of operation.

Further, some laws may require us to notify governmental authorities and/or affected individuals of data breaches involving certain personal data