Company: BLCO
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001860742-25-000004
Chunk: 239

Company: Bausch & Lomb Corp
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1A
Chunk 239
---
 bribery laws generally prohibit companies and their intermediaries from making improper payments to officials for the purpose of obtaining or retaining business. Our policies mandate compliance with these anti-bribery laws. We operate in many parts of the world that have experienced governmental corruption and in certain circumstances, strict compliance with anti-bribery laws may conflict with local customs and practices or may require us to interact with doctors and hospitals, some of which may be state controlled, in a manner that is different than in the United States and Canada. We cannot provide assurance that our internal control policies and procedures will protect us from reckless or criminal acts committed by our employees, consultants, distributors, third party contractors or agents. Violations of these laws, or allegations of such violations, could disrupt our business and result in criminal or civil penalties or remedial measures, any of which could have a material adverse effect on our business, financial condition, cash flows and results of operations and could cause the market value of our common shares and/or debt securities to decline.We are also subject to various state, federal and international laws and regulations governing the collection, transmission, dissemination, use, privacy, confidentiality, security, retention, availability, integrity and other processing of health-related and other sensitive and personal information, including the HIPAA. Many states in which we operate have laws that protect the privacy and security of sensitive and personal information, including health-related information. Certain state laws may be more stringent or broader in scope, or offer greater individual rights, with respect to sensitive and personal information than federal, international or other state laws, and such laws may differ from each other, which may complicate compliance efforts. For example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CPRA,” and collectively, “CCPA”) imposes stringent data privacy and security requirements and obligations with respect to the personal information of California residents and provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal data that may increase the likelihood of, and risks associated with, data breach litigation. The effects on our business of the CCPA and other similar state laws are potentially significant. State laws are changing rapidly and there is discussion in Congress of a new federal data protection and privacy law to which we may be subject. For instance, the CPRA maintains the core framework of the CCPA while also making a number of substantive changes. Additionally, some statutory requirements, both in the United States and abroad, include obligations for companies to notify