Company: MSTR
Filing Date: 2025-07-07
Form Type: 8-K
Source: 0000950170-25-094137
Chunk: 59

Company: Strategy Inc
Filing Date: 2025-07-07
Form: 8-K
Item: Item 8.01
Chunk 59
---
 of affiliated shareholders (other than or not including Mr. Saylor) were to exercise majority voting control of the Company.

Changes in laws or regulations relating to privacy or the collection, processing, disclosure, storage, localization, or transmission of personal data, or any actual or perceived failure by us or our third-party service providers to comply with such laws and regulations, contractual obligations, or applicable privacy policies, could materially adversely affect our business

Certain aspects of our business involve collecting, processing, disclosing, storing, and transmitting personal data, which are subject to certain privacy policies, contractual obligations, and U. S. and foreign laws, regulations, and directives relating to privacy and data protection. In addition, the types of data subject to protection as personal data in the European Union, China, the United States, and elsewhere have been expanding. In recent years, the collection and use of personal data by companies have come under increased regulatory and public scrutiny, especially in relation to the collection and processing of sensitive data, such as healthcare, biometric, genetic, financial services, and children’s data, precise location data, and data regarding a person’s race or ethnic origins, political opinions, or religious beliefs.

There are various enforcement agencies at both the state and federal level that review compliance with these requirements, including the United States Department of Health and Human Services for potential violations of the Health Insurance Portability and Accountability Act of 1996 and the Federal Trade Commission (“FTC”). If we are subject to a potential FTC enforcement action, we may be subject to a settlement order that requires us to adhere to very specific privacy and data security practices, which may impact our business. We may also be required to pay fines as part of a settlement (depending on the nature of the alleged violations). If we violate any consent order that we reach with the FTC, we may be subject to additional fines and compliance requirements. We face risks of similar enforcement from State Attorneys General and, potentially, other regulatory agencies.

Similar laws exist in other foreign jurisdictions, including the European Union, that may impact our business activities. In addition, various U. S. federal and state government agencies and foreign government bodies may enact new or additional laws or regulations, or issue rulings that invalidate prior laws or regulations, concerning privacy, data storage, data protection, and cross-border transfer of data that could materially adversely impact our business.

Any systems failure or security breach that results in the release of, or unauthorized access to, personal data, or any failure or perceived failure by us or our third-party service