Company: MYSZ
Filing Date: 2025-03-27
Form Type: 10-K
Source: 0001641172-25-000990
Chunk: 1168

Company: My Size, Inc.
Filing Date: 2025-03-27
Form: 10-K
Item: Item 1
Chunk 1168
---
 of customers to cooperate with European data protection authorities,
implement security measures and keep records of personal data processing activities. Noncompliance with the GDPR can trigger fines equal
to or greater of €20 million or 4% of global annual revenues. In addition, the CCPA, effective as of January 1, 2020, gives California
residents expanded rights to access and require deletion of their personal information, opt out of certain personal information sharing,
and receive detailed information about how their personal information is used. The CCPA provides for civil penalties for violations,
as well as a private right of action for data breaches, that is expected to increase data breach litigation. Further, failure to comply
with the Israeli Privacy Protection Law of 1981, and its regulations, as well as the guidelines of the Israeli Privacy Protection Authority,
may expose us to administrative fines, civil claims (including class actions) and in certain cases criminal liability. Current pending
legislation may result in a change of the current enforcement measures and sanctions. There are also additional laws and regulations
in additional jurisdictions around the world which govern the protection of consumers and of electronic communications. If our efforts
to comply with GDPR, CCPA or other applicable laws and regulations are not successful, we may be subject to penalties and fines that
would adversely impact our business and results of operations, and our ability to conduct business could be significantly impaired.

22

Additionally,
although we endeavor to have our products comply with applicable laws and regulations, these and other obligations may be modified, they
may be interpreted and applied in an inconsistent manner from one jurisdiction to another, and they may conflict with one another, other
regulatory requirements, contractual commitments or our internal practices. We also may be bound by contractual obligations relating
to our collection, use and disclosure of personal, financial and other data or may find it necessary or desirable to join industry or
other self-regulatory bodies or other privacy- or data protection-related organizations that require compliance with their rules pertaining
to privacy and data protection.

We
expect that there will continue to be new proposed laws, rules of self-regulatory bodies, regulations and industry standards concerning
privacy, data protection and information security in the United States, the European Union and other jurisdictions, and we cannot yet
determine the impact such future laws, rules, regulations and standards may have on our business. Moreover, existing U.S. federal and
various state and foreign privacy- and data protection-related laws and regulations are evolving and subject to potentially differing