Company: G
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001398659-25-000035
Chunk: 59

Company: Genpact LTD
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 59
---
 on companies operating in the U.S. 

In the EU, the GDPR imposes privacy and data security compliance obligations and significant penalties for noncompliance. The GDPR presents numerous privacy-related changes for companies operating in the EU, including rights guaranteed to data subjects, requirements for data portability for EU consumers, data breach notification requirements and significant fines for noncompliance. In GDPR enforcement matters, companies have faced fines for violations of certain provisions. Fines can reach as high as 4% of a company’s annual total revenue, potentially including the revenue of a company’s international affiliates. Additionally, governments outside of the EU are also taking steps to fortify their data privacy laws and regulations. For example, some countries in Africa, Asia and Latin America, including Brazil and South Africa, where we have operations, have implemented or are considering data protection laws. India recently enacted a data protection law, the Digital Personal Data Protection Act (the "DPDP Act"), that will impact how we handle vendor and employee data in India and may require us to develop new controls governing our processing of employee data. Given the size and scope of our operations in India, the costs of compliance with the DPDP Act, and any fines or penalties for breaches thereof, could be significant and could have a material adverse effect on our business, financial condition and results of operations. As privacy laws and regulations around the world continue to evolve, these changes and others could adversely affect our business operations, websites and mobile applications that are accessed by residents in the applicable countries.

30

In many parts of the world, including countries in which we operate and/or seek to expand, common practices in the local business community might not conform to international business standards and could violate anticorruption laws or regulations, including the U.S. Foreign Corrupt Practices Act and the UK Bribery Act 2010. Our employees, subcontractors, agents, joint venture partners, the companies we acquire and their employees, subcontractors and agents, and other third parties with which we associate, could take actions that violate policies or procedures designed to promote legal and regulatory compliance or applicable anticorruption laws or regulations. Violations of these laws or regulations by us, our employees or any of these third parties could subject us to criminal or civil enforcement actions (whether or not we participated or knew about the actions leading to the violations), including fines or penalties, disgorgement of profits and suspension or disqualification from work, any of which could materially adversely affect our business, including our results of operations and our reputation. 

In addition