Company: EVLVW
Filing Date: 2025-04-28
Form Type: 10-Q
Source: 0001628280-25-020353
Chunk: 351

Company: Evolv Technologies Holdings, Inc.
Filing Date: 2025-04-28
Form: 10-Q
Item: Part I, Item 8
Chunk 351
---
 privacy legislation restricts the cross-border transfer of personal data and some countries introduced data localization into their laws. Specifically, the GDPR, the UK GDPR and other European and UK data protection laws generally prohibit the transfer of personal data from Europe, including the European Economic Area, United Kingdom and Switzerland, to third countries, unless the transfer is to a country deemed to provide adequate protection or the parties to the transfer have implemented specific safeguards to protect the transferred personal data. European case law and guidance have imposed additional onerous requirements in relation to data transfers, and we expect the existing legal complexity and uncertainty regarding international personal data transfers to continue in Europe and globally. If we do not implement the relevant transfer mechanism to transfer personal data, we may violate or infringe data privacy legislation requirements, and we may be exposed to regulatory proceedings or litigation and increased exposure to fines, penalties, or commercial liabilities, as well as reputational damages.

We strive to comply with all applicable laws, policies, legal obligations relating to privacy and data protection to the extent possible. Because the interpretation and application of privacy and data protection laws are still uncertain, it is possible that these laws may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another, and which makes our compliance requirements and the enforcement of those requirements ambiguous, uncertain, and potentially inconsistent. Any significant change to applicable laws, regulations or industry practices, or how each is interpreted, regarding the use or disclosure of personal data, or regarding the manner in which the express or implied consent of customers for the use and disclosure of personal data is obtained, could require us to modify our products and features, possibly in a material manner and subject to increased compliance costs, which may limit our ability to develop new products and features that make use of the personal data that our customers voluntarily share. Any failure or perceived failure by us to comply with our privacy policies, privacy-related obligations to customers or other third parties, or our privacy-related legal obligations, or any compromise of security that results in the unauthorized access to or unintended release or access of personal data or other customer data, may result in governmental enforcement actions, litigation, or public statements against us by consumer advocacy groups or others. Any of these events could cause us to incur significant costs in investigating and defending such claims and, if found liable, pay significant fines or damages. Further, these proceedings and any subsequent adverse outcomes may cause our customers to lose trust in us, which could have an adverse effect on our reputation and business.

We may also be subject to claims of liability or responsibility for