Company: CRL
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001100682-25-000011
Chunk: 62

Company: CHARLES RIVER LABORATORIES INTERNATIONAL, INC.
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1A
Chunk 62
---
 of personal information, including federal and state data privacy laws, data breach notification laws, and data disposal laws. For example, at the federal level, we are subject the regulations of the Federal Trade Commission, which has the authority to regulate and enforce against unfair or deceptive acts or practices in or affecting commerce, including acts and practices with respect to data privacy and security. If our public statements about our use, collection, disclosure and other processing of personal information are alleged to be deceptive, unfair or misrepresentative of our actual practices, we may be subject to potential government or legal investigation or action. If we are found to have violated applicable laws or regulations, we may also be subject to penalties, fines, damages, injunctions or other outcomes that may adversely affect our operations and financial results. The United States Congress also has considered, and may in the future consider, various proposals from time to time for comprehensive federal data privacy legislation to which we may become subject if passed and which may adversely affect our operations and financial results.

At the state level, we are subject to laws and regulations like the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). The CCPA and CPRA create transparency requirements for companies, grant California residents various rights with regard to their personal information, and impose additional data protection obligations on companies doing business in California. Failure to comply with the CCPA and CPRA may result in, among other things, significant civil penalties and injunctive relief, or potential statutory or actual damages. The CCPA and CPRA also provide a private right of action for data breaches that result in the loss of personal information. The CCPA and CPRA may impact our business activities and require compliance costs that adversely affect business, operating results, prospects and financial condition. These state statutes, and other similar state or federal laws that may be enacted in the future may require us to modify our data processing practices and policies, incur substantial compliance-related costs and expenses, and otherwise suffer adverse impacts on our business.

Additionally, while collecting research products from donors, we may collect, use, disclose, maintain and transmit donor information in ways that will be subject to many of the numerous state, federal and international laws and regulations governing the collection, use, disclosure, storage, transmission or confidentiality of patient-identifiable health information. 

We have made changes to, and investments in, our business practices and will continue to monitor developments and make appropriate changes to help attain compliance with these evolving and complex laws, rules, regulations and standards. Any actual