Company: BLND
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001855747-25-000017
Chunk: 115

Company: Blend Labs, Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1
Chunk 115
---
, in our capacity as a service provider to financial services firms and as a provider of marketplace services directly to consumers, and our partners, vendors, and other service providers, may be deemed to be subject to certain laws, regulations, and rules through our relationships with our customers including RESPA, FCRA, FTC Act, GLBA, FHA, TCPA, the CAN-SPAM Act, TSR, ESIGN Act, ADA, OFAC, and state laws and regulations, including those that impose requirements related to unfair or deceptive business practices and consumer protection, as well as other state-specific laws relating to privacy, information security, data protection, and conduct in connection with data breaches.

We are also subject to a variety of laws, rules, and regulations relating to the property and casualty insurance, title insurance and settlement services industries, mobile- and internet-based businesses, and information security, advertising, privacy, data protection, and consumer protection laws. For example, we are subject to extensive licensing, anti-kickback, rate, and settlement practices regulations by the applicable state agencies in the jurisdictions in which our title insurance business operates. Title insurance rates are regulated differently in various states, with some states requiring us to file and receive approval of rates before such rates become effective and some states promulgating the rates that can be charged. See “Risk 

11

Factors—Risks Related to Our Legal and Regulatory Environment” for additional information and a discussion of our regulatory risks.

Data Privacy and Security

The data we collect, use, receive, and otherwise process is integral to our business, providing us with insights to improve our software platform and our products. Our collection, use, receipt, and other processing of data in our business subjects us to numerous U.S. state, federal, and foreign laws and regulations addressing privacy, data protection, information security, and the collection, storing, sharing, use, transfer, disclosure, protection and processing of certain types of data. Such regulations include, for example, GLBA, the Children’s Online Privacy Protection Act, the Personal Information Protection and Electronic Documents Act, CAN-SPAM, Canada’s Anti-Spam Law, TCPA, FCRA, the FTC Act, the CCPA, and regulations of relevant regulatory authorities, including the New York Department of Financial Services. We work to comply with, and to help allow customers to comply with, applicable laws and regulations relating to privacy, data protection and information security. This helps underpin our strategy of building trust and providing a strong experience to customers.

Despite our