Company: CLH
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0000822818-25-000007
Chunk: 275

Company: CLEAN HARBORS INC
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1A
Chunk 275
---
 safety risks such as those noted above or negatively impact our service to our customers and our business reputation. System failures could also impede our ability to collect and report financial results timely or comply with regulations associated with our operations.

Identification of new and emerging technologies, including the use of artificial intelligence, may be a risk and an opportunity to our business. Research and development of new technologies may require significant spending which may negatively impact our operating results and cash flows. Failure to innovate and focus on new technologies that provide superior alternatives to traditional environmental services, waste disposal or oil collection and re-refining service offerings may negatively impact our financial results.

A cybersecurity incident could negatively impact our business, operations and relationships with customers.

We use technology in substantially all aspects of our business operations. Mobile devices and other online technologies connect our employees to our customers and our networks. Such uses give rise to cybersecurity risks, including security breach, espionage, system disruption, theft, disruption of our business operations, remediation costs for repairs of system damage and inadvertent release of information. Our business involves operational technology integral to our day to day business and the storage and transmission of numerous classes of sensitive and/or confidential information and intellectual property including, but not limited to, private information about employees and financial and strategic information about our Company and our business partners. Furthermore, as we pursue our strategy to grow through acquisitions and new initiatives that improve our operations and cost structure, we are also expanding and improving our information technologies, resulting in a larger technological presence and corresponding exposure to cybersecurity risk.

We maintain what we believe is sufficient insurance coverage that may (subject to certain policy terms and conditions, including deductibles) cover certain aspects of third-party security and cybersecurity risks and business interruption, however, our insurance coverage may not always cover all related costs or losses.

We actively assess our cybersecurity and technology risks and modify our operational response to such risks as circumstances and technology change. If we fail to assess and identify current cybersecurity risks and those associated with acquisitions and new initiatives, we may become increasingly vulnerable to such risks. We have implemented measures aimed at preventing security breaches and cyber incidents, including the establishment of processes, procedures and systems focused on response readiness, planning, disaster recovery and business continuity. To avoid the collection and housing of customer payment records, we partner with a Payment Card Industry compliant third party to handle our customers’ credit card transactions in a secure a manner. Despite our best efforts, our preventative measures and incident response efforts may not be entirely effective. The theft, destruction, loss, misappropriation or release of sensitive and