Company: CRCL
Filing Date: 2025-02-13
Form Type: DRS/A
Source: 0000950123-25-001965
Chunk: 97

Company: Circle Internet Group, Inc.
Filing Date: 2025-02-13
Form: DRS/A
Chunk 97
---
 machine learning or generative AI. In addition to the general risks that may exist from incomplete or inaccurate data, human error, or lack of appropriate
controls and processes, the technologies underlying how we store and leverage data and their use cases are subject to a variety of laws, including intellectual property, privacy, consumer protection, and federal equal opportunity laws. If we do not
have sufficient rights to use the data on which various tools rely, we may incur liability through the violation of such laws, third-party privacy, or other rights or contracts to which we are a party.

Additionally, we may see increasing government and supranational regulation and ethical concerns related to the use of Data Tools which may also significantly increase
the burden and cost of research, development, and compliance in this area. This includes the European Union’s Artificial Intelligence Act, which came into force on August 1, 2024. Because of the interest in Data Tools by many governmental
authorities, there may be additional laws or regulations that limit or restrict our ability to use such Data Tools or apply novel liability frameworks to the use of such Data Tools, and any of the foregoing may cause adverse effects to our business,
operations or financial condition.

We are subject to complex and evolving laws, regulations, and industry requirements related to data privacy, data protection, and information security across different markets where we conduct our business, including in the United States, United Kingdom, and EEA. Such laws, regulations, and industry requirements are constantly evolving and changing. Our or our third-party providers’ or partners’ actual or perceived failure to comply with such laws, regulations, and industry requirements or our privacy policies/notices could result in enforcement actions, litigation, fines, and reputational harm.

Various local, state, federal, and foreign laws, directives, and regulations apply to our collection, use, retention, protection, disclosure, transfer, and
any other processing of personal data. There is uncertainty and inconsistency in how these data protection and privacy laws and regulations are interpreted and applied, and they continue to evolve in ways that could adversely impact our business.
These laws have a substantial impact on our operations both outside and in the United States, directly as a data controller/business and as a data processor/service provider and handler for various offshore entities.

61

CONFIDENTIAL TREATMENT REQUESTED BY CIRCLE INTERNET GROUP, INC. PURSUANT TO 17 C.F.R. § 200.83

Laws, regulations, and standards covering marketing, advertising, and other activities