Company: MYSZ
Filing Date: 2025-03-27
Form Type: 10-K
Source: 0001641172-25-000990
Chunk: 1147

Company: My Size, Inc.
Filing Date: 2025-03-27
Form: 10-K
Item: Item 1
Chunk 1147
---
 We may be
unable to develop non-infringing technology or obtain a license on commercially reasonable terms, if at all.

Government
Regulation

We
are subject to a number foreign and domestic laws and regulations that involve matters central to our business. These laws and regulations
may involve privacy, data protection, intellectual property, or other subjects. Many of the laws and regulations to which we are subject
are still evolving and being tested in courts and could be interpreted in ways that could harm our business. In addition, the application
and interpretation of these laws and regulations often are uncertain, particularly in the new and rapidly evolving industry in which
we operate. Because global laws and regulations have continued to develop and evolve rapidly, it is possible that we, our products, or
our platform may not be, or may not have been, compliant with each such applicable law or regulation.

In
particular, we are subject to a variety of federal, state and international laws and regulations governing the processing of personal
data. Many U.S. states have passed laws requiring notification to data subjects when there is a security breach of personally identifiable
data. There are also a number of legislative proposals pending before the U.S. Congress, various state legislative bodies and foreign
governments concerning data protection. In addition, data protection laws in Europe and other jurisdictions outside the United States
can be more restrictive than those within the United States, and the interpretation and application of these laws are still uncertain
and in flux.

For
example, the General Data Protection Regulation, or GDPR, which took effect on May 25, 2018, enhances data protection obligations for
entities that process personal data about individuals, including obligations to cooperate with European data protection authorities,
implement security measures and keep records of personal data processing activities. Noncompliance with the GDPR can trigger fines equal
to the greater of €20 million or 4% of global annual revenue. In addition, the California Consumer Privacy Act of 2018, or CCPA,
effective as of January 1, 2020, gives California residents expanded rights to access and require deletion of their personal information,
opt out of certain personal information sharing, and receive detailed information about how their personal information is used. The CCPA
provides for civil penalties for violations, as well as a private right of action for data breaches, that is expected to increase data
breach litigation. Further, failure to comply with the Israeli Privacy Protection Law of 1981, and its regulations, as well