Company: LPSN
Filing Date: 2025-03-14
Form Type: 10-K
Source: 0001102993-25-000018
Chunk: 54

Company: LIVEPERSON INC
Filing Date: 2025-03-14
Form: 10-K
Item: Item 1A
Chunk 54
---
 internet or mobile users through the use of cookies or similar technologies, the effectiveness of our services could be impaired by restricting us from collecting or using information that may be valuable to our customers and/or exposing us to lawsuits or regulatory investigations. The foregoing could have a material adverse effect on our business, results of operations, and financial condition.

U.S. and international privacy laws and regulations are evolving and changing, subject to differing interpretations, may be costly to comply with, and may be inconsistent among countries and jurisdictions or conflict with other rules. To the extent we expand our operations in other countries, our liability exposure and the complexity and cost of compliance with data and privacy requirements will likely increase. Any failure by us to comply with our posted privacy policies, applicable federal, state or international laws and regulations relating to data privacy, data protection and AI, or the privacy commitments contained in our contracts, could result in proceedings against us by governmental entities, customers, consumers, watchdog groups or others, which could have a material adverse effect on our business, financial condition and results of operations. In addition, the increased attention focused upon liability as a result of lawsuits and legislative proposals and enactments could harm our reputation or otherwise impact our business, results of operations and financial condition.

23

Laws and practices regarding handling and use of personal and other information by companies have come under increased public scrutiny, and governmental entities, consumer agencies and consumer advocacy groups have called for, and in many instances, enacted increased regulation and changes in industry practices. For example, we are subject to the European Union (“E.U.”) General Data Protection Regulation (“GDPR”), which imposes significantly greater compliance burdens on companies that control or process personal data of users primarily located in the E.U. and, for noncompliance, provides for considerable fines up to the higher of 20 million Euros or 4% of global annual revenue. Additionally, following the United Kingdom’s withdrawal from the E.U., we also are subject to the U.K. General Data Protection Regulation (“U.K. GDPR”), a version of the GDPR as implemented into the laws of the U.K. While the GDPR and U.K. GDPR remain substantially similar for the time being, the U.K. government has announced that it would seek to chart its own path on data protection and reform its relevant laws, including in ways that may differ from the GDPR in some respects. While these developments increase uncertainty with regard to data protection regulation in the U.K., even in their current, substantially similar form, the GDPR and U.K. GDPR can expose