Company: INVH
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001687229-25-000008
Chunk: 103

Company: Invitation Homes Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 103
---
 to our operations and the services we provide to customers, including our residents, or damage our reputation, any of which could adversely affect our results of operations, reputation, and competitive position. We maintain cyber liability insurance; however, this insurance may not be sufficient to cover the financial, legal, business, or reputational losses that may result from an interruption or breach of our systems. In connection with our flexible work arrangements, a significant number of our associates work remotely on a recurring basis. An extended period of remote work arrangements could strain our business continuity plans, introduce operational risk, including, but not limited to cybersecurity risks, and impair our ability to manage our business.

United States regulators have also increased their focus on cyber security vulnerabilities and risks. Compliance with laws and regulations concerning cyber security, such as the recently enacted SEC rules requiring disclosure of material cybersecurity incidents, data governance, and data protection could result in significant expense, and any failure to comply could result in proceedings against us by regulatory authorities or other third parties. See “— Our business is subject to laws and regulations regarding privacy, data protection, consumer protection, and other matters. Many of these laws and regulations are subject to change and uncertain interpretation, and could result in claims, changes to our business practices, monetary penalties, or otherwise harm our business.”

37

Our business is subject to laws and regulations regarding privacy, data protection, consumer protection, and other matters. Many of these laws and regulations are subject to change and uncertain interpretation, and could result in claims, changes to our business practices, monetary penalties, or otherwise harm our business.

We are subject to a variety of laws and regulations that involve matters such as: privacy; data protection; personal information; rights of publicity; content; marketing; distribution; data security; data retention and deletion; electronic contracts and other communications; consumer protection; and online payment services. These laws and regulations are constantly evolving and can be subject to significant change. As a result, the application, interpretation, and enforcement of these laws and regulations are often uncertain and may be interpreted and applied inconsistently. Additionally, as we depend on third parties for key services (see “Risks Related to Our Business and Operations — Our dependence upon third parties for key services may have an adverse effect on our operating results or reputation if the third parties fail to perform”), we rely on such third-party service providers’ compliance with laws and regulations regarding privacy, data protection, consumer protection, and other matters relating to our customers. 

There are a number of legislative proposals at both the federal and