Company: SLDE
Filing Date: 2025-06-09
Form Type: S-1/A
Source: 0001193125-25-137410
Chunk: 68

Company: Slide Insurance Holdings, Inc.
Filing Date: 2025-06-09
Form: S-1/A
Chunk 68
---
 and could result in increased compliance costs or changes in business practices and policies.

The CCPA increases privacy rights for California residents and imposes obligations on companies that process personal information about such
residents, including an obligation to provide certain new disclosures and provide new consumer rights to such residents. As a result, the CCPA imposes corresponding obligations on covered businesses, relating to the access to, deletion of and
sharing of personal information collected by covered businesses, including California residents’ right to access and delete personal information about them, opt out of certain sharing and sales of such personal information and receive detailed
information about how such personal information is used. The law exempts from certain requirements of the CCPA certain personal information that is collected, processed, sold or disclosed pursuant to the California Financial Information Privacy Act
(“CFIPA”), the GLBA or the federal Driver’s Privacy Protection Act (“DPPA”). Also, the definition of “personal information” in the CCPA is broad and may encompass other information that we maintain beyond that
excluded under the GLBA, the DPPA or the CFIPA exemption. Further, the CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal information. This private
right of action is expected to increase the likelihood of, and risks associated with, data breach litigation.

On November 3, 2020,
California enacted the CPRA expanding on existing rights under the CCPA and creating new consumer privacy rights for California residents, including rights to correct personal information. Further, the CPRA imposes additional obligations on
businesses to implement data retention and minimization practices, perform cybersecurity audits and risk assessments, and implement reasonable security protections. The CPRA also permits consumers to opt out of the sharing of personal information
for use in behavioral advertising, which may impact our ability to market our products and services. The CPRA also establishes the California Privacy Protection Agency, which is the first data privacy regulator in the United States to enforce the
CPRA. The CPRA strengthens some of the enforcement authority established under the CCPA and could result in increased enforcement actions and fines. The enactment of the CCPA and other state privacy, data protection and cybersecurity laws, rules and
regulations is prompting a wave of similar legislative developments in other states in the United States, which creates the potential for a patchwork of overlapping but different state laws. For example, Virginia has adopted a new state data
protection act referred to as the Virginia Consumer