Company: NCEL
Filing Date: 2025-03-31
Form Type: F-4/A
Source: 0001213900-25-026428
Chunk: 674

Company: NewcelX Ltd.
Filing Date: 2025-03-31
Form: F-4/A
Chunk 674
---
 impose obligations in connection with the collection, processing and use of personal data, financial data, health or other similar data and general cybersecurity. Multiple jurisdictions have adopted or proposed limitations on, or requirements regarding, the collection, distribution, use, security and storage of information, including personally identifiable information of individuals. In the United States, the U.S. Federal Trade Commission and numerous state attorneys general are applying federal and state consumer protection laws to impose standards on the online collection, use and dissemination of data, and to the security measures applied to such data. We continue to see increased regulation of privacy cybersecurity and data protection, including the adoption of more stringent subject matter specific state laws in the Annex F-36 United States. For example, in 2018, California enacted the California Consumer Privacy Act, or the CCPA, which took effect on January 1, 2020. The CCPA gives California residents expanded rights to access and delete their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information is used. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. The CCPA may increase our compliance costs and potential liability, and we may be required to modify our practices and take additional steps in an effort to comply with the CCPA. Some observers have noted that the CCPA could mark the beginning of a trend toward more stringent state privacy legislation in the United States, which could increase our potential liability and adversely affect our business. Similarly, many other countries and governmental bodies, including the EU member states, have laws and regulations concerning the collection and use of personal data obtained from individuals located in the EU or by businesses operating within their jurisdiction, which are often more restrictive than those in the United States. Laws and regulations in these jurisdictions apply broadly to the collection, use, storage, disclosure and security of personal data that identifies or may be used to identify an individual, such as names, telephone numbers, email addresses and, in certain circumstances, IP addresses and other online identifiers. For example, the EU has adopted the GDPR, which enhances data protection obligations for businesses and requires service providers (data processors) processing personal data on behalf of customers to cooperate with European data protection authorities, implement security measures and keep records of personal data processing activities. The GDPR also extends the geographical scope of EU data protection law to non -EUentities under certain conditions, tightens existing EU data protection principles and creates new obligations for companies and new rights