Company: IPGP
Filing Date: 2025-02-20
Form Type: 10-K
Source: 0001111928-25-000023
Chunk: 85

Company: IPG PHOTONICS CORP
Filing Date: 2025-02-20
Form: 10-K
Item: Item 1A
Chunk 85
---
 costs to address the foregoing security problems and security vulnerabilities before or after a cyber-incident could be significant. Our remediation efforts may not be successful and could result in interruptions, delays, a cessation of service, and a loss of existing or potential customers, impeding our sales, manufacturing, distribution, and other critical functions. 

We may face particular privacy, data security and data protection risks due to laws and regulations regulating the protection or security of personal and other sensitive data.

We may face particular privacy, data security and data protection risks due to laws and regulations regulating the protection or security of personal and other sensitive data, including in particular several laws and regulations that have recently been enacted or adopted or are likely to be enacted or adopted in the future.  For instance, in 2018, the European General Data Protection Regulation (“GDPR”) imposed additional obligations and risk upon our business and substantially increased the penalties to which we could be subject in the event of any non-compliance. GDPR requires companies to satisfy requirements regarding the handling of personal data (generally, of EU residents), including its use, protection and the rights of affected persons regarding their data. Failure to comply with GDPR requirements could result in penalties of up to 4% of worldwide revenue. In addition, several other jurisdictions around the world have recently enacted privacy laws or regulations similar to GDPR. For instance, in 2020, California enacted the California Consumer Privacy Act (“CCPA”), giving consumers many of the same rights as those available under GDPR. Several laws similar to the CCPA have been approved in the United States at the state level and more are being proposed at the federal and state levels. GDPR and other similar laws and regulations, as well as any associated inquiries or investigations or any other government actions, may be costly to comply with, result in negative publicity, increase our operating costs, require significant management time and attention, and subject us to remedies that may harm our business. We are evaluating these requirements and taking measures to ensure compliance with all applicable privacy and data protection-related laws and regulations. Because there is limited interpretation and enforcement of many of these laws and regulations, some measures initially might not satisfy standard or best practices that will be established in the coming years.

Changes in tax rates, tax liabilities or tax accounting rules could affect future results.

As a global company, we are subject to taxation in the United States and various other countries and jurisdictions. Significant judgment is required to determine worldwide tax liabilities, particularly related to intercompany pricing we apply to products shipped between various tax jurisdictions, commonly