Company: PACB
Filing Date: 2025-05-12
Form Type: 10-Q
Source: 0001299130-25-000102
Chunk: 69

Company: PACIFIC BIOSCIENCES OF CALIFORNIA, INC.
Filing Date: 2025-05-12
Form: 10-Q
Item: Part II, Item 1
Chunk 69
---
 are, and may increasingly become, subject to various laws and regulations, as well as contractual obligations, relating to data privacy and security in the jurisdictions in which we operate. The regulatory environment related to data privacy and security is increasingly rigorous, with new and constantly changing requirements applicable to our business, and enforcement practices are likely to remain uncertain for the foreseeable future. These laws and regulations may be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible that they will be interpreted and applied in ways that may have a material adverse effect on our business, financial condition, results of operations and prospects.

Q1 Fiscal 2025 Form 10-Q80

In the United States, various federal and state regulators, including governmental agencies like the Consumer Financial Protection Bureau and the Federal Trade Commission, have adopted, or are considering adopting, laws and regulations concerning personal information and data security. Certain state laws may be more stringent or broader in scope, or offer greater individual rights, with respect to personal information than federal, international or other state laws, and such laws may differ from each other, all of which may complicate compliance efforts. For example, the California Consumer Privacy Act (“CCPA”), which increases privacy rights for California residents and imposes obligations on companies that process their personal information, came into effect on January 1, 2020. Among other things, the CCPA requires covered companies to provide new disclosures to California consumers and provide such consumers new data protection and privacy rights, including the ability to opt-out of certain sales of personal information. The CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal information. This private right of action may increase the likelihood of, and risks associated with, data breach litigation. In November 2020, California also passed the California Privacy Rights Act, or (“CPRA”), which significantly expanded the CCPA as of January 1, 2023, including by introducing additional obligations such as data minimization and storage limitations and granting additional rights to consumers, among others. The enactment of the CCPA has prompted similar legislative developments in other states, and numerous other states have proposed, and in certain cases enacted, legislation relating to privacy and data security, many of which are similar to the CCPA and CPRA. Similar laws are being considered by other state legislatures. In addition, laws in all 50 U.S. states require businesses to provide notice to consumers whose personal information has been disclosed as a result of a data