Company: IBTA
Filing Date: 2025-11-13
Form Type: 10-Q
Source: 0001628280-25-051720
Chunk: 311

Company: Ibotta, Inc.
Filing Date: 2025-11-13
Form: 10-Q
Item: Item 1A
Chunk 311
---
, and preventing us from maintaining or growing our revenues as anticipated.

Compliance with these laws and regulations is a rigorous and time-intensive process, and we may be required to put in place additional mechanisms to ensure compliance with them. We believe our policies 

83

and practices comply in material respects. However, if our belief is incorrect, or if these guidelines, laws, or regulations or their interpretation change or new legislation or regulations are enacted, we may face significant fines, penalties, injunctive restrictions, class actions, and damages that could materially adversely affect our business, financial condition, results of operations, and prospects. Further, we could be compelled to provide additional disclosures to our consumers, obtain additional consents from our consumers before collecting, using, or disclosing their information, delete information collected, or implement new safeguards or business processes to help individuals manage our use of their information, among other changes.

Failure to comply with federal and state privacy, data protection, marketing, and consumer protection laws, regulations, and industry standards, or the expansion of current or the enactment or adoption of new privacy, data protection, marketing, and consumer protection laws, regulations, or industry standards, could materially adversely affect our business, financial condition, results of operations, and prospects.

We Process data about consumers, including personal information or personal data, as well as other confidential or proprietary information, for numerous purposes, including legal, marketing, and other business-related purposes. The legal and regulatory framework for privacy and security issues is rapidly evolving, and is expected to increase our compliance costs and exposure to liability. We and our service providers, clients, and publishers are subject to a variety of federal and state laws, regulations, and industry standards regarding privacy, data protection, data security, marketing, and consumer protection, which address Processing of data relating to individuals, as well as the tracking of consumer behavior and other consumer data (Data Protection Laws). We are also subject to laws, regulations, and industry standards relating to endorsements and influencer marketing. Many of these laws, regulations, and industry standards are changing, may be subject to differing interpretations, may be inconsistent among countries or conflict with other rules, and may be costly to comply with or inconsistent among jurisdictions.

In the United States, Data Protection Laws include rules and regulations promulgated under the authority of the Federal Trade Commission, the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the California Consumer Privacy Act of 2018 (CCPA), the California Privacy Rights Act of 2020 (CPRA), the Colorado Privacy