Company: CXAI
Filing Date: 2025-04-07
Form Type: 10-K
Source: 0001829126-25-002438
Chunk: 43

Company: CXApp Inc.
Filing Date: 2025-04-07
Form: 10-K
Item: Item 1
Chunk 43
---
. Fines for noncompliance may be up to $7,500 per violation. The burdens imposed by the GDPR and CCPA, and changes to existing laws or new laws regulating the solicitation, collection, processing, or sharing of personal and consumer information, and consumer protection could affect our customers’ utilization of our services and technology and could potentially reduce demand or impose restrictions that make it more difficult or expensive for us to provide our services.

In addition, ongoing legal challenges in Europe to the mechanisms allowing companies to transfer personal data from the European Economic Area to the United States could result in further limitations on the ability to transfer data across borders, particularly if governments are unable or unwilling to reach new or maintain existing agreements that support cross-border data transfers, such as the EU-U.S. and Swiss-U.S. Privacy Shield frameworks and the European Commission’s Model Contractual Clauses, each of which are currently under particular scrutiny. Additionally, certain countries have passed or are considering passing laws requiring local data residency. The costs of compliance with, and other burdens imposed by, privacy laws, regulations and standards may limit the use and adoption of our services, reduce overall demand for our services, make it more difficult to meet expectations from or commitments to customers, lead to significant fines, penalties or liabilities for noncompliance, impact our reputation, or slow the pace at which we close sales transactions, any of which could harm our business.

Furthermore, the uncertain and shifting regulatory environment and trust climate may cause concerns regarding data privacy and may cause our customers or our customers’ customers to resist providing the data necessary to allow our customers to use our services effectively. Even the perception that the privacy of personal information is not satisfactorily protected or does not meet regulatory requirements could inhibit sales of our products or services and could limit adoption of our cloud-based solutions.

32

If our customers fail to abide by applicable privacy laws or to provide adequate notice and/or obtain any required consent from end users, we could be subject to litigation or enforcement action or reduced demand for our services.

Our customers utilize our services and technologies to track connected devices anonymously and we must rely on our customers to implement and administer notice and choice mechanisms required under applicable laws. If we or our customers fail to abide by these laws, it could result in litigation or regulatory or enforcement action against our customers or against us directly.

Any actual or perceived failure to comply with our privacy policy or legal or regulatory requirements in one or multiple jurisdictions could result in proceedings, actions or penalties against us.

Any failure or perceived failure to comply with