Company: YEXT
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001614178-25-000030
Chunk: 64

Company: Yext, Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1A
Chunk 64
---
 in compliance with these interpretations, and if we were found to have violated consumer protection laws, we may face enforcement actions which could adversely affect our business. We also may be subject to laws and rules implemented and enforced by the FTC, the Federal Communications Commission, or FCC, and potentially other federal agencies, as well as state, local or international laws and regulations related to marketing, advertising, commercial electronic mail and other messages. Compliance with these requirements may limit our ability to engage in certain marketing and advertising activities. If we were found to have violated such requirements, we may face enforcement actions and/or face civil penalties, either of which could adversely affect our business.

 Several foreign countries and governmental bodies, including the European Union, Switzerland and the United Kingdom, have laws and regulations dealing with the processing of personal data obtained about their residents, which in certain cases are more restrictive than those in the United States. We expect that additional jurisdictions may enact similar requirements. Laws and regulations in these jurisdictions can apply broadly to the collection, use, storage, disclosure, and security of various types of data, including personal data, such as names, email addresses and in some jurisdictions, unique online identifiers like Internet Protocol, or IP, addresses.

   30

In particular, in the European Union, the GDPR became effective in May 2018. The GDPR includes stringent operational requirements for processors and controllers of personal data and imposes significant penalties for non-compliance. The United Kingdom has implemented data protection laws that substantially align with requirements under the GDPR and provide for similar penalties. The United Kingdom’s decision to adopt a separate data protection regime after its exit from the European Union, known as Brexit, has created uncertainty and the potential for differing regulations as compared to the European Union, which in turn may delay or deter transactions with customers that transfer personal data to and from the United Kingdom.

In addition, there remains uncertainty regarding transfers of certain personal data from the European Economic Area, Switzerland, and the United Kingdom following Brexit as well as the invalidation of both the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield. While alternative transfer mechanisms, such as Standard Contractual Clauses, are available to Yext and its customers for such transfers, the use of these transfer mechanisms, in addition to related developments and uncertainty, could require us to implement additional contractual and technical safeguards for personal data transferred out of the European Economic Area, Switzerland, and the United Kingdom, which may increase compliance and related costs and risks, lead to increased regulatory scrutiny or liability, necessitate additional contractual negotiations, and