Company: SIDU
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001641172-25-001742
Chunk: 1261

Company: Sidus Space Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 1261
---
 govern the collection, use, retention, sharing and security of this information. Laws and regulations relating to
privacy, data protection and consumer protection are evolving and subject to potentially differing interpretations. These requirements
may not be harmonized, may be interpreted, and applied in a manner that is inconsistent from one jurisdiction to another or may conflict
with other rules or our practices. As a result, our practices may not have complied or may not comply in the future with all such laws,
regulations, requirements, and obligations.

We
expect that new industry standards, laws and regulations will continue to be proposed regarding privacy, data protection and information
security in many jurisdictions. We cannot yet determine the impact such future laws, regulations and standards may have on our business.
Complying with these evolving obligations is costly.

As
we expand our international presence, we may also become subject to additional privacy rules, many of which, such as the General Data
Protection Regulation promulgated by the European Union (the “GDPR”) and national laws supplementing the GDPR, such as in
the United Kingdom, are significantly more stringent than those currently enforced in the United States. The law requires companies to
meet stringent requirements regarding the handling of personal data of individuals located in the EEA. These more stringent requirements
include expanded disclosures to inform customers about how we may use their personal data through external privacy notices, increased
controls on profiling customers and increased rights for data subjects (including customers and employees) to access, control and delete
their personal data. In addition, there are mandatory data breach notification requirements. The law also includes significant penalties
for non-compliance, which may result in monetary penalties of up to the higher of €20.0 million or 4% of a group’s worldwide
turnover for the preceding financial year for the most serious violations. The GDPR and other similar regulations require companies to
give specific types of notice and informed consent is required for the placement of a cookie or similar technologies on a user’s
device for online tracking for behavioral advertising and other purposes and for direct electronic marketing, and the GDPR also imposes
additional conditions in order to satisfy such consent, such as a prohibition on pre-checked tick boxes and bundled consents, thereby
requiring customers to affirmatively consent for a given purpose through separate tick boxes or other affirmative action.

28

A
significant data breach or any failure, or perceived failure, by us to comply with any federal, state or foreign privacy or consumer
protection-related laws, regulations or other