Company: GPOR
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001628280-25-008043
Chunk: 52

Company: GULFPORT ENERGY CORP
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 52
---
 specific provisions or the effective date of any such legislation would be. In addition, at the state level, legislative changes imposing increased taxes on oil and gas production have periodically been considered in Ohio and Oklahoma. These proposed changes in the U.S. federal and state tax law, if adopted, or other similar changes that would impose additional tax on our activities or reduce or eliminate deductions currently available with respect to natural gas and oil exploration, development or similar activities, could adversely affect our business, results of operations, financial condition and cash flows.

34

Table of ContentsIndex to Financial Statements

Our business is subject to complex and evolving laws and regulations regarding privacy and data protection.

The regulatory environment surrounding data privacy and protection is constantly evolving and can be subject to significant change. New laws and regulations governing data privacy and the unauthorized disclosure of confidential information pose increasingly complex compliance challenges and potentially elevate our costs as we collect, use, share, and store personal data related to royalty owners. Any failure to comply with these laws and regulations could result in significant penalties and legal liability. For example, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), establishes certain transparency rules and creates new data privacy rights for individuals, including limitations on our use of certain sensitive personal information and more ability for individuals to control the purposes for which their data is shared with third parties. The CPRA also provides for statutory fines for data security breaches or other CPRA violations. Meanwhile, many other states enacted, and others have considered, privacy laws like the CPRA. We will continue to monitor and assess the impact of these state laws, which may impose substantial penalties for violations, impose significant costs for investigations and compliance, require us to change our business practices, allow private class-action litigation and carry significant potential liability for our business should we fail to comply with any such applicable laws.

Any failure, or perceived failure, by us to comply with applicable data protection laws could result in heightened risk of litigation, including private rights of action, and proceedings or actions against us by governmental entities or others, subject us to significant fines, penalties, judgments and negative publicity, require us to change our business practices, increase the costs and complexity of compliance, and adversely affect our business. As noted above, we are also subject to the possibility of cyber incidents or attacks, which themselves may result in a violation of these laws. Additionally, if we acquire a company that has violated or is not in compliance with applicable data protection laws, we may incur significant liabilities and penalties