Company: CRCL
Filing Date: 2025-08-04
Form Type: DRS
Source: 0000950123-25-006942
Chunk: 95

Company: Circle Internet Group, Inc.
Filing Date: 2025-08-04
Form: DRS
Chunk 95
---
 of operations, financial condition, and prospects.

We obtain and process a large amount of customer data, including sensitive customer data. We also use AI, machine learning, data analytics, and similar tools that collect, aggregate, and analyze data. Any real or perceived improper use of, disclosure of, or access to such data could impose liability on us or harm our reputation and thus have an adverse effect on our business. Furthermore, our use of such AI, machine learning, data analytics, and similar tools could enhance intellectual property, cybersecurity, operational, and technological risks, which could have an adverse effect on our business.

Our operations involve the collection, storage, transmission, and/or other processing of customer data, including highly sensitive data of our customers such
as identity data, financial data, transaction data, marketing, and communication data and location data, among other types of information. We use various methods to collect customer data. For example, we may collect customer data from direct
interactions with customers, such as when customers fill in forms or correspond with us. We may also collect customer data, including usage and technical data, through the use of automated technologies such as logging and cookies. Furthermore, we
may receive customer data from various third parties or publicly available sources, including providers of technical or payment services. Consequently, we are subject to complex and evolving U.S., UK, European, and other jurisdictions’ laws,
rules, regulations, orders, and directives (referred to as “privacy laws”) relating to the collection, use, retention, security, transfer, and other processing of personal information (referred to as “personal data”) in the
countries where we operate. Much of the personal data that we process, especially financial information, is regulated by multiple privacy laws and, in some cases, the privacy laws of multiple jurisdictions, such as the EU’s General Data
Protection Regulation (“GDPR”) and the UK General Data Protection Regulation (the “UK GDPR”). In many cases, these laws apply not only to third-party transactions, but also to transfers of information between or among us and our
subsidiaries. Data protection, privacy, and information security have become the subject of increasing public, media, and legislative concern. If our customers were to reduce their use of our products and services as a result of these concerns, our
business could be materially harmed. Any failure, or perceived failure, by us or our partners and others who use our services to comply with our privacy policies or with any applicable privacy laws in one or more jurisdictions