Company: IOT
Filing Date: 2025-03-25
Form Type: 10-K
Source: 0001642896-25-000022
Chunk: 131

Company: Samsara Inc.
Filing Date: 2025-03-25
Form: 10-K
Item: Item 1
Chunk 131
---
, on January 1, 2023, Canada began enforcement of its ELD technical standard, mandating that motor carriers and drivers subject to HOS requirements in Canada use ELDs that have been tested and certified by an accredited, third-party certification body.

We also are subject to other laws and regulations governing issues such as privacy, data security, telecommunications, the use of biometric data, labor and employment, anti-discrimination, exports, anti-bribery, whistleblowing and worker confidentiality obligations, product liability, product certifications, consumer protection and warnings, marketing, taxation, securities, competition, arbitration agreements and class action waiver provisions, and terms of service, among other issues. We could become subject to additional legal or regulatory requirements, including additional or modified requirements around ELD certification, if laws, regulations, or guidance change in the jurisdictions in which we operate. This could include the need to obtain new and different types of licenses or certifications to offer certain products or functionalities. Guiding our actions is a commitment to complying with, and helping our customers comply with, applicable regulations and requirements, and we will continue to devote significant internal resources to these efforts.

See the section titled “Risk Factors—Risks Related to Government Regulation” for additional information about the laws and regulations to which we are subject and the risks to our business associated with such laws and regulations.

Data Protection and Privacy Program

We dedicate significant resources to protecting and securing the data of our customers as part of our overall data protection and privacy program.

18

Table of Contents

In addition to the privacy and security measures that we incorporate into the design, engineering, and testing processes for our solution, including parts of our solution that utilize emerging technology such as AI, we have company-wide policies that describe how we collect, use, protect and disclose data. We provide ongoing training to our employees to appropriately handle and secure data. We are also able to assist our customers in demonstrating their compliance with applicable data protection and privacy laws and regulations through the use of template accountability documentation (e.g., data protection impact assessments, supporting policies, and data transfer impact assessments), which can be configured and tailored by customers to address their particular use cases and organizational requirements. We offer and include the latest EU Standard Contractual Clauses (“SCCs”) and supporting UK International Data Transfer Addendum in our contractual terms with customers for the purpose of helping enable our customers’ continued compliance with the changing regulatory landscape in connection with transferring personal data subject to the GDPR, UK GDPR, and UK DPA to “third countries”