Company: PERI
Filing Date: 2025-03-25
Form Type: 20-F
Source: 0001178913-25-001021
Chunk: 44

Company: Perion Network Ltd.
Filing Date: 2025-03-25
Form: 20-F
Item: Item 3
Chunk 44
---
 be no assurance that we will detect, prevent, mitigate, or remediate the risk of any weakness, compromise, or failure in the systems, networks, and information owned or controlled by such third parties. Due to applicable laws and regulations or contractual obligations, we may be held responsible for business interruptions, data breaches, cyber-attacks or other similar incidents attributed to such third parties as they relate to the information we share with them. In addition, if we suffer a highly publicized business interruption, data breach, cyber-attack or other similar incident, even if our platforms and solutions perform effectively, such an incident could have an adverse effect and cause us to suffer reputational harm, lose existing commercial relationships and customers or deter existing customers from purchasing additional solutions and prevent new customers from purchasing our solutions.
 
We cannot ensure that any indemnification or limitation of liability provisions in our agreements with customers, service providers, suppliers, vendors and other third parties with which we do business would be enforceable or adequate or would otherwise protect us from any liabilities or damages with respect to any particular claim in connection with a business interruption, data breach, cyber-attack or other similar incident. Additionally, we cannot be certain that our insurance coverage will be adequate for cybersecurity liabilities actually incurred, that insurance will continue to be available to us on economically reasonable terms, or at all, or that our insurer will not deny coverage as to any future claim.
 
We have contractual, legal and regulatory obligations to notify relevant stakeholders of certain data breaches, cyber-attacks or similar incidents, as defined in the relevant laws, regulations or respective contracts. Most jurisdictions have enacted laws and regulations requiring companies to notify individuals, regulatory authorities and others of data breaches, cyber-attacks or similar incidents involving certain types of data. In addition, our agreements with certain customers and third-party partners may require us to notify them in the event of a data breach, cyber-attack or similar incident. Such mandatory disclosures are costly, could lead to negative publicity and may cause our customers to lose confidence in the effectiveness of our security measures. If we fail to make such notification within the mandatory time frames, we may be subject to penalties and legal actions.
 
Although we have implemented administrative, technical and organizational safeguards to comply with applicable data protection, data privacy and cybersecurity laws and regulations in connection with the collection, use, retention, disclosure and other processing of personal information, if a significant failure of such safeguards were to occur, our business and reputation could be materially adversely affected. A business interruption, data breach, cyber-attack or