Company: IBTA
Filing Date: 2025-08-13
Form Type: 10-Q
Source: 0001538379-25-000010
Chunk: 234

Company: Ibotta, Inc.
Filing Date: 2025-08-13
Form: 10-Q
Item: Item 8
Chunk 234
---
 may face significant fines, penalties, injunctive restrictions, class actions, and damages that could materially adversely affect our business, financial condition, results of operations, and prospects. Further, we could be compelled to provide additional disclosures to our consumers, obtain additional consents from our consumers before collecting, using, or disclosing their information, delete information collected, or implement new safeguards or business processes to help individuals manage our use of their information, among other changes.

Failure to comply with federal and state privacy, data protection, marketing, and consumer protection laws, regulations, and industry standards, or the expansion of current or the enactment or adoption of new privacy, data protection, marketing, and consumer protection laws, regulations, or industry standards, could materially adversely affect our business, financial condition, results of operations, and prospects.

We Process data about consumers, including personal information or personal data, as well as other confidential or proprietary information, for numerous purposes, including legal, marketing, and other business-related purposes. The legal and regulatory framework for privacy and security issues is rapidly evolving, and is expected to increase our compliance costs and exposure to liability. We and our service providers, clients, and publishers are subject to a variety of federal and state laws, regulations, and industry standards regarding privacy, data protection, data security, marketing, and consumer protection, which address Processing of data relating to individuals, as well as the tracking of consumer behavior and other consumer data (Data Protection Laws). We are also subject to laws, regulations, and industry standards relating to endorsements and influencer marketing. Many of these laws, regulations, and industry standards are changing, may be subject to differing interpretations, may be inconsistent among countries or conflict with other rules, and may be costly to comply with or inconsistent among jurisdictions.

In the United States, Data Protection Laws include rules and regulations promulgated under the authority of the Federal Trade Commission, the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the California Consumer Privacy Act of 2018 (CCPA), the California Privacy Rights Act of 2020 (CPRA), the Colorado Privacy Act, and other state and federal laws relating to privacy and data security. These Data Protection Laws require covered companies to make certain disclosures about their Processing practices and, subject to certain exceptions, provide consumers with certain rights regarding their personal data, including the rights to access, delete, and correct personal data, as well as rights to opt out of the sale of personal information, opt out of targeted advertising, and opt out of other specific types of Processing