Company: ARAI
Filing Date: 2025-01-27
Form Type: S-1/A
Source: 0001493152-25-003660
Chunk: 53

Company: Arrive AI Inc.
Filing Date: 2025-01-27
Form: S-1/A
Chunk 53
---
 of the CCPA has prompted a wave of similar laws in other states in the United States, and there also remains interest in greater regulation regarding the processing of personal information at the federal level as well, which creates a patchwork of overlapping but different state laws. As we have expanded, and may continue to expand, our international presence, we are and may become subject to additional laws relating to the processing of information in countries in which we operate and have customers, including Australia, Brazil, Canada, the European Union, Singapore, South Africa and the United Kingdom. Personal information is increasingly subject to regulation in these and other jurisdictions in which we operate, and the requirements can be more restrictive and rigorous than those in the United States. In particular, we are subject to data protection laws in Europe including the General Data Protection Regulation 2016/679 and the United Kingdom General Data Protection Regulation and Data Protection Act of 2018 (collectively, the “GDPR”), which impose stringent data protection obligations for processors and controllers of personal data with the risk of enforcement action, civil claims (including class actions), significant penalties or requirements for us to cease or change how we process personal data and conduct our business. Amongst other things, the GDPR regulates cross-border transfers of personal information out of the European Economic Area and the United Kingdom. European case law and guidance have imposed additional onerous requirements in relation to data transfers, and we expect the existing legal complexity and uncertainty regarding international personal data transfers to continue. In particular, we expect international transfers from the European Union and the United Kingdom to continue to be subject to enhanced scrutiny by regulators. As regulatory guidance and the enforcement landscape develops, we could suffer additional costs, complaints and/or regulatory investigations or fines, or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and could adversely affect our business, financial condition and results of operations. Applicable requirements regarding data privacy and the processing of information in the United States, Europe and other jurisdictions, and the application and interpretation of such requirements, are continuously evolving and subject to potentially differing interpretations, which increases the complexity of compliance and has required, and may require in the future, us to modify our practices, implement a variety of compliance measures, and incur compliance-related costs and expenses. It is also possible that we could become subject to a regulatory inquiry or investigation, and be required to take additional compliance steps or incur