Company: HCTI
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001213900-25-026218
Chunk: 169

Company: Healthcare Triangle, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 169
---
 Protection Regulation
(“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”), have increased and may increase in the future.
Our corporate systems, third-party systems, and security measures may be breached due to the actions of outside parties, employee error,
malfeasance, a combination of these, or otherwise, and, as a result, an unauthorized party may obtain access to, or compromise the integrity
of, our data, our employees’ data, our customers’ data or any third-party data we may possess. Any such security breach could
require us to comply with various breach notification laws, may affect our ability to operate, and may expose us to litigation, remediation
and investigation costs, increased costs for security measures, loss of revenue, damage to our reputation, and potential liability, each
of which could be material.

22

Various government and consumer agencies have
called for new regulation and changes in industry practices and are continuing to review the need for greater regulation for the collection
of information concerning consumer behavior on the Internet, including regulation aimed at restricting certain targeted advertising practices.
For example, the State of California’s passage of the CCPA, which went into effect on January 1, 2020, and created new privacy rights
for consumers residing in the state. There is also increased attention being given to the collection of data from minors. For instance,
the Children’s Online Privacy Protection Act (“COPPA”) requires companies to obtain parental consent before collecting
personal information from children under the age of 13. Compliance with GDPR, CCPA, COPPA, and similar legal requirements has required
us to devote significant operational resources and incur significant expenses.

We strive to comply with all applicable laws,
policies, legal obligations, and certain industry codes of conduct relating to privacy and data protection, to the extent reasonably attainable.
However, it is possible that these obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to
another and may conflict with other rules or our practices. It is also possible that new laws, policies, legal obligations, or industry
codes of conduct may be passed, or existing laws, policies, legal obligations, or industry codes of conduct may be interpreted in such
a way that could prevent us from being able to offer services to citizens of a certain jurisdiction or may make it costlier or more difficult
for us to do so. Any failure or perceived failure by us to comply with our privacy policy and terms of service, our privacy-related obligations