Company: ASAN
Filing Date: 2025-03-18
Form Type: 10-K
Source: 0001477720-25-000045
Chunk: 60

Company: Asana, Inc.
Filing Date: 2025-03-18
Form: 10-K
Item: Item 1A
Chunk 60
---
 transparency, deceptive, unfair, misleading, or misrepresentative of our practices, we may become subject to investigation, enforcement actions by regulators, or other adverse consequences. 

Additionally, under various privacy laws and other obligations, we may be required to obtain certain consents to process personal information. For example, some of our data processing practices have been, and may in the future continue to be, subject to challenges or lawsuits under privacy, data protection, and communications laws, including, for example, challenges based on wiretapping laws for sharing consumer information with third parties through 

38

various methods, including chatbot and session replay providers, or via third-party marketing pixels. Our inability or failure to obtain consent for these practices could result in adverse consequences, including class action litigation and mass arbitration demands. 

There are a number of legislative proposals in the United States, at both the federal and state level, and in the European Union and more globally, that could impose new obligations in areas such as e-commerce and other related legislation or liability for copyright infringement by third parties. We cannot yet determine the impact that future laws, regulations, and standards may have on our business. 

In addition to privacy, data protection, and security laws, we are or may become contractually subject to industry standards adopted by industry groups and may become subject to such obligations in the future. We are also bound by other contractual obligations related to privacy, data protection, and security, and our efforts to comply with such obligations may not be successful. 

We use artificial intelligence, including generative artificial intelligence, in our products and services. The development and use of artificial intelligence present various privacy, data protection, and security risks that may impact our business. Artificial intelligence technology is subject to existing privacy, data protection, and security laws, and may be subject to additional new laws and regulations. For example, several countries, states and localities have proposed or enacted measures related to the use of artificial intelligence technologies in products and services, including the EU’s AI Act. The effects of these regulations are difficult to predict and we expect other jurisdictions to adopt similar laws. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal information) and regulate automated decision making, which may be incompatible with our use of artificial intelligence. These obligations may make it harder for us to conduct our business using artificial intelligence, lead to regulatory fines or penalties, require us to change our business practices, retrain our artificial intelligence, or prevent or limit our use of artificial intelligence. For