Company: TGE
Filing Date: 2025-07-03
Form Type: F-1/A
Source: 0001213900-25-061211
Chunk: 51

Company: Generation Essentials Group
Filing Date: 2025-07-03
Form: F-1/A
Chunk 51
---
 or that they will be sufficient
to prevent a future security incident or other disruption to our network or information systems, or those of our third-party vendors,
and our disaster recovery planning cannot account for all eventualities. Such an event could result in a disruption of our services, unauthorized
access to or improper disclosure of personal data or other confidential information, or theft or misuse of our intellectual property,
all of which could harm our reputation, require us to expend resources to respond to and recover from such a security incident or defend
against further attacks, divert management’s attention or subject us to liability, or otherwise adversely affect our business. The
costs relating to certain kinds of security incidents could be substantial, and our insurance may not be sufficient to cover all losses
related to any future incidents involving our data or systems.

Failure to comply
with laws and regulations with respect to privacy, data protection and customer marketing and subscriptions practices could adversely
affect our business.

Our business is subject to
various laws and regulations with respect to the processing, privacy and security of personal data, as well our customer marketing and
subscriptions practices.

Various laws and regulations
of the jurisdictions in which we operate our business, govern the processing, privacy and security of the data we receive from and about
individuals (personal data), including the European General Data Protection Regulation (GDPR) and ePrivacy Directive; California’s
Customer Privacy Act and Customer Privacy Rights Act, the Personal Data Protection Commission of Singapore, the Personal Data (Privacy)
Ordinance of Hong Kong, and others. Failure to protect personal data in accordance with these requirements, provide individuals with
adequate notice of our privacy policies, respond to customer-rights related requests or obtain required valid consent where applicable,
for example, could subject us to liabilities imposed by these jurisdictions.

In Europe and the UK, we are
subject to the GDPR, which comprehensively regulates our use of personal data, including cross-border transfers of personal data out of
the EEA and the UK. In relation to such cross border transfers of personal data, we expect the existing legal complexity and uncertainty
regarding international personal data transfers to continue. As the regulatory guidance and enforcement landscape in relation to data
transfers continue to develop, we could suffer additional costs, complaints and/or regulatory investigations or fines; we may have to
stop using certain tools and vendors and make other operational changes; we may have to implement alternative data transfer mechanisms
under the GDPR and/or take additional compliance and operational measures; and/or it could otherwise affect