Company: MYND
Filing Date: 2025-03-26
Form Type: 20-F
Source: 0001628280-25-014832
Chunk: 18

Company: Mynd.ai, Inc.
Filing Date: 2025-03-26
Form: 20-F
Item: Item 3
Chunk 18
---
plying with these evolving laws could result in substantial costs and harm the quality of our products and services, negatively affecting our business, and may be particularly challenging during certain times, such as a natural disaster or pandemic. Amongst others, we are and expect to continue to be subject to the following laws and regulations:

Tab l e of contents

• The General Data Protection Regulation ("GDPR"), which applies to all of our personal data processing activities involving a person within the EU including the personal data we process within the products and services that we offer to EU users or customers.. Ensuring compliance with the range of obligations created by the GDPR is an ongoing commitment that involves substantial costs. If any of our personal data processing activities within the EU are found to violate GDPR requirements, we may incur substantial fines, have to change our business practices, and face reputational harm, any of which could have an adverse effect on our business. Serious breaches of the GDPR can result in administrative fines of up to 4% of annual worldwide revenues. Fines of up to 2% of annual worldwide revenues can be levied for other specified violations;

• The UK General Data Protection Regulation is substantially similar to the EU’s GDPR and, similar to the EU’s GDPR, the UK’s GDPR, in the event our any of our personal data processing activities within the UK are found to violate the UK’s GDPR requirements, we may incur substantial fines, have to change our business practices, and face reputational harm, any of which could have an adverse effect on our business;

• Multiple U. S. states have enacted state privacy laws including, for example, the California Consumer Privacy Act of 2018 ("CCPA"), which came into effect in January of 2020; the California Privacy Rights Act (CPRA), which went into effect in January 2023; the Virginia Consumer Data Protection Act (Virginia CDPA), which went into effect in January 2023; and the Colorado Privacy Act (ColoPA), which went into effect on July 1, 2023; all of which give new data privacy rights to their respective residents (including, in California, a private right of action in the event of a data breach resulting from our failure to implement and maintain reasonable security procedures and practices). Each of these laws impose significant obligations upon us with regard to any personal data we collect;

• Many U. S. states have also enacted student data privacy laws which apply specifically to the processing of any student personal data. These state student data privacy laws typically prohibit the