Company: PACB
Filing Date: 2025-03-17
Form Type: 10-K
Source: 0001299130-25-000061
Chunk: 626

Company: PACIFIC BIOSCIENCES OF CALIFORNIA, INC.
Filing Date: 2025-03-17
Form: 10-K
Item: Item 1A
Chunk 626
---
 Ensuring compliance with such laws could also impair our efforts to maintain and expand our future customer base, and thereby decrease our revenue.

In the ordinary course of our business, we currently, and in the future will, collect, store, transfer, use or process sensitive data, including personal information of employees, and intellectual property and proprietary business information owned or controlled by ourselves and other parties. The secure processing, storage, maintenance, and transmission of this critical information are vital to our operations and business strategy. We are, and may increasingly become, subject to various laws and regulations, as well as contractual obligations, relating to data privacy and security in the jurisdictions in which we operate. The regulatory environment related to data privacy and security is increasingly rigorous, with new and constantly changing requirements applicable to our business, and enforcement practices are likely to remain uncertain for the foreseeable future. These laws and regulations may be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible that they will be interpreted and applied in ways that may have a material adverse effect on our business, financial condition, results of operations and prospects.

Fiscal 2024 Form 10-K54

In the United States, various federal and state regulators, including governmental agencies like the Consumer Financial Protection Bureau and the Federal Trade Commission, have adopted, or are considering adopting, laws and regulations concerning personal information and data security. Certain state laws may be more stringent or broader in scope, or offer greater individual rights, with respect to personal information than federal, international or other state laws, and such laws may differ from each other, all of which may complicate compliance efforts. For example, the California Consumer Privacy Act (“CCPA”), which increases privacy rights for California residents and imposes obligations on companies that process their personal information, came into effect on January 1, 2020. Among other things, the CCPA requires covered companies to provide new disclosures to California consumers and provide such consumers new data protection and privacy rights, including the ability to opt-out of certain sales of personal information. The CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal information. This private right of action may increase the likelihood of, and risks associated with, data breach litigation. In November 2020, California also passed the California Privacy Rights Act, or (“CPRA”), which significantly expanded the CCPA as of January 1, 2023, including by introducing additional obligations such as data minimization and storage limitations and