Company: MYSEW
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001013762-25-004290
Chunk: 21

Company: Myseum, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 21
---
, the California Consumer Privacy Act (“CCPA”), which came into force in 2020, provides new data
privacy rights for California consumers and new operational requirements for covered companies. Specifically, the CCPA mandates that
covered companies provide new disclosures to California consumers and afford such consumers new data privacy rights that include, among
other things, the right to request a copy from a covered company of the personal information collected about them, the right to request
deletion of such personal information, and the right to request to opt-out of certain sales of such personal information. The California
Attorney General can enforce the CCPA, including seeking an injunction and civil penalties for violations. The CCPA also provides a private
right of action for certain data breaches that is expected to increase data breach litigation. Additionally, a new privacy law, the California
Privacy Rights Act (“CPRA”), was approved by California voters in the November 3, 2020 election. The CPRA generally takes
effect on January 1, 2023 and significantly modifies the CCPA, including by expanding consumers’ rights with respect to certain
personal information and creating a new state agency to oversee implementation and enforcement efforts, potentially resulting in further
uncertainty and requiring us to incur additional costs and expenses in an effort to comply. Some observers have noted the CCPA and CPRA
could mark the beginning of a trend toward more stringent privacy legislation in the United States, which could also increase our potential
liability and adversely affect our business. For example, the CCPA has encouraged “copycat” or other similar laws to be considered
and proposed in other states across the country, such as in Virginia, New Hampshire, Illinois and Nebraska. This legislation may add
additional complexity, variation in requirements, restrictions and potential legal risk, require additional investment in resources to
compliance programs, could impact strategies and availability of previously useful data and could result in increased compliance costs
and/or changes in business practices and policies.

Various U.S. federal privacy laws are potentially
relevant to our business, including the Federal Trade Commission Act, Controlling the Assault of Non-Solicited Pornography and Marketing
Act, the Family Educational Rights and Privacy Act, the Children’s Online Privacy Protection Act, and the Telephone Consumer Protection
Act. Any actual or perceived failure to comply with these laws could result in a costly investigation or litigation resulting in potentially
significant liability, injunctions and other consequences, loss of trust by our users, and a material and adverse impact on our reputation
and