Company: PLSAY
Filing Date: 2025-05-09
Form Type: 20-F
Source: 0001884082-25-000012
Chunk: 48

Company: Polestar Automotive Holding UK PLC
Filing Date: 2025-05-09
Form: 20-F
Item: Item 3
Chunk 48
---
. In addition, regardless of their veracity, reports of unauthorized access to Polestar’s vehicles or data or Polestar’s or its service providers’ and vendors’ systems, as well as other factors that may result in the perception that such vehicles, systems or data are capable of being “hacked,” could negatively affect Polestar’s brand. In addition, some members of the U. S. federal government, including certain members of Congress and the National Highway Traffic Safety Administration (“ NHTSA”), have recently focused attention on automotive cybersecurity issues and may in the future propose or implement regulations specific to automotive cybersecurity. In addition, the United Nations Economic Commission for Europe has introduced regulations governing connected vehicle cybersecurity, which became effective in January 2021 and apply in the European Union to all new vehicle types beginning in July 2022 and will become mandatory for all new vehicles produced from July 2024. Such regulations are also in effect, or expected to come into effect, in certain other international jurisdictions. These and other regulations could adversely affect Polestar’s business in Europe and other markets, and if such regulations or other future regulations are inconsistent with Polestar’s approach to automotive cybersecurity, Polestar would be required to modify its systems (or cause its service providers and vendors to modify their systems) to comply with such regulations, which would impose additional costs and delays and could expose Polestar to potential liability to the extent its automotive cybersecurity systems and practices are inconsistent with such regulation.

Data privacy concerns are generally increasing, which could result in new legislation, in negative public perception of Polestar’s current data collection practices and certain of its services or technologies and/or in changing user behaviors that negatively affect Polestar’s business and product development plans.

In the course of its operations, Polestar collects, uses, stores, discloses, transfers and otherwise processes personal information from its customers, employees and third parties with whom it conducts business, including names, accounts, user IDs and passwords and payment or transaction related information. Additionally, Polestar uses its vehicles’ electronic systems to log information about vehicle use, such as charge time, battery usage, mileage and driving behavior, in order to aid it in vehicle diagnostics, repair and maintenance, as well as to help it customize and improve the driving experience.

Data privacy concerns of consumers are generally increasing, which could result in new legislation, in negative public perception of Polestar’s current data collection practices and certain of its services or technologies and/or in changing user behaviors that negatively affect Polestar’s business and product development plans. New concerns or vulnerabilities