Company: TEAM
Filing Date: 2025-05-02
Form Type: 10-Q
Source: 0001650372-25-000022
Chunk: 404

Company: Atlassian Corp
Filing Date: 2025-05-02
Form: 10-Q
Item: Part I, Item 2
Chunk 404
---
 laws that have recently passed and/or gone into effect 

56

in many other states similarly impose new obligations on us and many of our customers, potentially as both businesses and service providers. In the European Economic Area (“EEA”) and the UK, data privacy laws and regulations, such as the European Union General Data Protection Regulation (“EU GDPR”) and United Kingdom General Data Protection Regulation and Data Protection Act 2018 (collectively, the “UK GDPR,” and, together with the EU GDPR, the “GDPR”), impose comprehensive obligations directly on Atlassian as both a data controller and a data processor, as well as on many of our customers, in relation to our collection, processing, sharing, disclosure and other use of personal data. Data privacy laws and regulations around the globe continue to evolve, and as various jurisdictions introduce similar legislation or regulation, we and our customers could be exposed to additional regulatory burdens that could increase our costs, reduce usage of our products, and adversely affect our business and results of operations.

We are also subject to evolving privacy laws on cookies, tracking technologies and e-marketing. For example, the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 establishes certain requirements for commercial email messages and specifies penalties for the transmission of commercial email messages that are intended to deceive the recipient as to source or content. In addition, certain states and foreign jurisdictions, such as Australia, Canada and the European Union (“EU”), have enacted laws that regulate sending email, and some of these laws are more restrictive than U.S. laws. In the EU and UK, informed consent is required for the placement of certain cookies or similar tracking technologies on an individual’s device and for direct electronic marketing. Consent is tightly defined and includes a prohibition on pre-checked consents and a requirement to obtain separate consents for each type of cookie or similar technology. Recent European court and regulator decisions are driving increased attention to cookies and similar tracking technologies. 

In addition, various safe harbors have historically been provided to those who hosted content provided by others, such as safe harbors from monetary damages for copyright infringement arising from copyrighted content provided by customers and others, and for defamation and other torts arising from information provided by customers and others. There is an increasing demand for repealing or limiting these safe harbors by either judicial decision or legislation. Loss of these safe harbors may require altering or limiting some of our services or may require additional contractual terms to avoid liabilities for our customers’ misconduct.

We monitor the regulatory, judicial and legislative environment