The efficient operation of our business is dependent on computer hardware and software systems, as well as data processing systems and the secure processing, storage and transmission of information, all of which are potentially vulnerable to security breaches and cyber-attacks or other security breaches, which may include intentional attacks or accidental losses, either of which may result in unauthorized access to, or corruption of, our hardware, software, or data processing systems, or to our confidential, personal, or other sensitive information. In addition, we, our Sponsor or its affiliates may be the target of fraudulent emails or other targeted attempts to gain unauthorized access to confidential, personal, or other sensitive information. The result of any cyber-attack or other security incidents may include disrupted operations, misstated or unreliable financial data, fraudulent transfers or requests for transfers of money, liability for stolen assets or information (including personal information), fines or penalties, investigations, increased cybersecurity protection and insurance costs, litigation, or damage to our business relationships and reputation, in each case, causing our business and results of operations to suffer. The rapid evolution and increasing prevalence of artificial intelligence technologies may also increase our cybersecurity risks.
Although we are not currently aware of any cyber-attacks or other incidents that, individually or in the aggregate, have materially affected, or would reasonably be expected to materially affect, our operations or financial condition, there has been an increase in the frequency and sophistication of the cyber and security threats that we face, with attacks ranging from those common to businesses generally to more advanced and persistent attacks. Cyber-attacks and other security threats could originate from a wide variety of sources, including cyber criminals, nation state hackers, hacktivists and other outside or inside parties. We, or our third-party providers, may face a heightened risk of a security breach or disruption with respect to confidential, personal or other sensitive information resulting from an attack by foreign governments or cyber terrorists. Further, we are dependent on third-party providers for hosting hardware, software and data processing systems that we do not control. We also rely on third-party service providers for certain aspects of our business, including for certain information systems and technology. While we rely on the cybersecurity strategy and policies implemented by Ares Management, which include the performance of risk assessments on our third-party providers, our reliance on them and their potential reliance on other third-party providers removes certain cybersecurity functions from outside of our immediate control, and cyber-attacks on Ares Management, on us or on our third-party providers could adversely affect us, our business and our reputation. The costs related to cyber-attacks or other security threats or disruptions may not be fully insured or indemnified by others, including by our third-party providers.
As our reliance on computer hardware and software systems, data processing systems, and other technology has increased, so have the risks posed to such systems, both those we or Ares Management controls and those provided by our third-party providers. Cyber-attacks may originate from a wide variety of sources, and while Ares Management has implemented processes, procedures and internal controls designed to mitigate cybersecurity risks and cyber-attacks, these measures do not guarantee that a cyber-attack will not occur or that our financial results, operations or confidential information, personal or other sensitive information will not be negatively impacted by such an incident, especially because the techniques of threat actors change frequently and are often not recognized until launched. Ares Management relies on industry accepted security measures and technology to securely maintain confidential and proprietary information maintained on their information systems, as well as on policies and procedures to protect against the unauthorized or unlawful disclosure of confidential, personal or other sensitive information. Although Ares Management takes protective measures and endeavors to strengthen its computer systems, software, technology assets and networks to prevent and address potential cyber-attacks, there can be no assurance that any of these measures prove effective. Ares Management expects to be required to devote increasing levels of funding and resources to comply with evolving cybersecurity and privacy laws and regulations and to continually monitor and enhance its cybersecurity procedures and controls.
Cybersecurity risks are exacerbated by the rapidly increasing volume of highly sensitive data, including our proprietary business information and intellectual property, personal information of our Sponsor and its affiliates, our investors and others and other sensitive information that Ares Management collects, processes and stores in its data centers and on its networks or those of its third-party service providers. The secure processing, maintenance and transmission of this information are critical to our operations. A significant actual or potential theft, loss, corruption, exposure, fraudulent use or misuse of investor, employee or other personal information, proprietary business data or other sensitive information, whether by third parties or as a result of employee malfeasance or otherwise, non-compliance with applicable contractual or other legal obligations regarding such data or intellectual property or a violation of applicable privacy and security policies with respect to such data could result in significant investigation, remediation and other costs, fines, penalties, litigation or regulatory actions against us and significant reputational harm, any of which could harm our business and results of operations.
The costs related to cyber or other security threats or disruptions may not be fully insured or indemnified by other means. Cybersecurity has become a priority for regulators in the U.S. and around the world. In the latter half of 2021, the SEC brought three charges, sanctioning eight companies, all of which were registered as broker dealers, investment advisory firms or both, for deficient cybersecurity policies and procedures, and settled charges in two separate actions against public companies for deficient disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information. More recently, the SEC proposed new rules related to cybersecurity risk management for registered investment advisers, registered investment companies and business development companies, as well as amendments to certain rules that govern investment adviser and fund disclosures. In July 2023, the SEC also adopted rules requiring public companies to disclose material cybersecurity incidents on Form 8-K and periodic disclosure of a registrant's cybersecurity risk management, strategy, and governance in annual reports. The rules became effective beginning with annual reports for fiscal years ending on or after December 15, 2023 and beginning with Form 8-Ks on December 18, 2023. With the SEC particularly focused on cybersecurity, we expect increased scrutiny of our and Ares Management's policies and systems designed to manage cybersecurity risks and related disclosures. We also expect to face increased costs to comply with the new SEC rules, including Ares Management's increased costs for cybersecurity training and management. Many jurisdictions in which we operate have laws and regulations relating to data privacy, cybersecurity and protection of personal information, including, the California Consumer Privacy Act of 2018 ("CCPA"), the New York SHIELD Act, the General Data Protection Regulation ("GDPR") and the United Kingdom General Data Protection Regulation. In addition, the SEC has indicated in recent periods that one of its examination priorities for the Office of Compliance Inspections and Examinations is to continue to examine cybersecurity procedures and controls, including testing the implementation of these procedures and controls.
There may be substantial financial penalties or fines for breach of privacy laws (which may include insufficient security for personal or other sensitive information). For example, the maximum penalty for breach of the GDPR is the greater of 20 million Euros and 4% of group annual worldwide turnover, and fines for each violation of the CCPA are $2,500, or $7,500 per violation for intentional violations. Non-compliance with any applicable privacy or data security laws represents a serious risk to our business. Some jurisdictions have also enacted laws requiring companies to notify individuals of data security breaches involving certain types of personal information. Breaches in security could potentially jeopardize our, our Sponsor or its affiliates' confidential or other information processed and stored in, or transmitted through, our or Ares Management's computer systems and networks (or those of our third-party service providers), or otherwise cause interruptions or malfunctions in our, our Sponsor or its affiliates', our counterparties' or third parties' operations, which could result in significant losses, increased costs, disruption of our business, liability to our investors and other counterparties, fines or penalties, litigation, regulatory intervention or reputational damage, which could also lead to loss of investors.