Company: TRUE
Filing Date: 2025-08-07
Form Type: 10-Q
Source: 0001327318-25-000036
Chunk: 47

Company: TrueCar, Inc.
Filing Date: 2025-08-07
Form: 10-Q
Item: Part I, Item 4
Chunk 47
---
 and operating results.

We collect, process, store, share, disclose and use personal information and other data provided by consumers and dealers. We rely on encryption and authentication technology licensed from third parties to effect secure transmission of this information. From time to time, concerns have been expressed about whether our products, services or processes compromise the privacy of our users. Concerns about our practices with regard to the collection, use or disclosure of personal information or other privacy-related matters, even if unfounded, could harm our business and operating results.

57

There are many federal, state, local and foreign laws regarding privacy and the collection, processing, storage, sharing, disclosure, use or protection of personal information and other data. The scope of these laws is changing, they are subject to differing interpretations, and they may be costly to comply with and may be inconsistent between countries and jurisdictions or conflict with other rules. 

Numerous jurisdictions in which we do business are currently considering, or have enacted, data protection legislation, most prominently, the California Consumer Privacy Act of 2018, which we refer to as the CCPA. The CCPA imposes sweeping data protection obligations on many companies doing business in California and provides for substantial fines for non-compliance and, in some cases, a private right of action for consumers who are victims of data breaches involving their unencrypted personal information. Moreover, California voters approved the California Privacy Rights Act in 2020, which amended the CCPA to, among other things, further restrict information sharing, heighten penalties and establish a new governmental agency to enforce the CCPA. The CCPA has increased our compliance costs and potential liability. Modifications to our data processing practices and policies, products and consumer experience that we have made to comply with the CCPA and similar legislation, or that we may be required to make in the future as a result of the continuing changes to the requirements under that legislation or similar future legislation, may materially negatively impact our business, operating results, financial condition and prospects.

Legislation similar to the CCPA has also passed and has been proposed in a number of other states. The potential effects of these states’ legislation are far-reaching and may require us to incur substantial costs and expenses in an effort to comply, and it is unclear whether, and if so how, the United States Congress will respond to these overlapping, state-by-state enactments. Certain states have also enacted or proposed laws regulating the use of certain artificial intelligence technologies. California is considering new regulations for automated decision-making technologies. These new and proposed laws and regulations