We receive, store and otherwise process personal information and other data from and about our customers and our employees. We also receive personal information and other data about our customers' consumers or other social media audiences. There are numerous federal, state, local and international laws and regulations regarding privacy, data protection, information security and the storing, sharing, use, processing, transfer, disclosure, retention and protection of personal information and other content, the scope of which is rapidly changing, subject to differing interpretations and may be inconsistent among countries and states, or conflict with other rules. We are also subject to the terms of our privacy policies and contractual obligations to third parties related to privacy, data protection and information security. We strive to comply with applicable laws, regulations, policies and other legal obligations relating to privacy, data protection and information security. However, the regulatory framework for privacy, data protection and information security worldwide is, and is likely to remain, uncertain for the foreseeable future, and it is possible that these or other actual or alleged obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other rules or our practices.
We also expect that there will continue to be new laws, regulations and industry standards concerning privacy, data protection and information security proposed and enacted in various jurisdictions. The United States, the European Union ("EU"), and other countries in which we currently or may operate are increasingly adopting or revising privacy, copyright, information security and data protection laws and regulations that could have a significant impact on our current and planned privacy, data protection and information security-related practices, our collection, use, sharing, retention and safeguarding of customer, consumer and/or employee information, as well as any other third-party information we receive, and some of our current or planned business activities. New and changing laws, regulations, and industry standards concerning privacy, data protection and information security may also impact the social media platforms and data providers we utilize, and thereby indirectly impact our business. In the United States, this includes increased privacy-related regulations and enforcement activity at both the federal level and state levels that impose requirements on the personal information we collect in the course of our business activities. In the EU, this includes the General Data Protection Regulation ("GDPR"), which came into effect in May 2018. While we have taken measures to comply with applicable requirements contained in the GDPR, we may need to continue to make adjustments as more clarification and guidance on the requirements of the GDPR and how to comply with such requirements becomes available. Further, following a referendum in June 2016 in which voters in the United Kingdom approved an exit from the EU, the United Kingdom government has initiated a process to leave the EU, known as Brexit. Brexit has created uncertainty with regard to the regulation of data protection in the United Kingdom. In particular, although the United Kingdom enacted a Data Protection Act in May 2018 that is designed to be consistent with the GDPR, uncertainty remains regarding how data transfers to and from the United Kingdom will be regulated. Additionally, although we have self-certified under the U.S.-EU and U.S.-Swiss Privacy Shield Frameworks with regard to our transfer of certain personal data from the EU and Switzerland to the United States, some regulatory uncertainty remains surrounding the future of data transfers from the EU and Switzerland to the United States, and we are monitoring regulatory developments in this area. California also recently enacted legislation, the California Consumer Privacy Act of 2018, (the "CCPA"), that will afford consumers expanded privacy protections and control over the collection, use and sharing of their personal information when it goes into effect on January 1, 2020. The CCPA was recently amended, and it is possible that it will be amended again before it goes into effect. The potential effects of this legislation are far-reaching and may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. For example, the CCPA gives California residents expanded rights to access and require deletion of their personal information, opt out of certain personal information sharing and receive detailed information about how their personal information is used. The CCPA also provides for civil penalties for violations, as well as a private right of action for data breaches that may increase data breach litigation.
With laws and regulations such as the GDPR in the EU and the CCPA in the United States imposing new and relatively burdensome obligations, and with substantial uncertainty over the interpretation and application of these and other laws and regulations, we may face challenges in addressing their requirements and making necessary changes to our policies and practices, and may incur significant costs and expenses in an effort to do so. For example, the increased consumer control over the sharing of their personal information afforded by CCPA may affect our customers' ability to share such personal information with us or may require us to delete or remove consumer information from our records or data sets, which may create considerable costs for our organization. In addition, any failure or perceived failure by us to comply with our privacy policies, our privacy-, data protection- or information security-related obligations to customers, users or other third parties or any of our other legal obligations relating to privacy, data protection or information security may result in governmental investigations or enforcement actions, litigation, claims or public statements against us by consumer advocacy groups or others, and could result in significant liability, loss of relationships with key third parties including social media networks and other data providers, or cause our users to lose trust in us, which could have an adverse effect on our reputation and business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations and policies that are applicable to the businesses of our users may limit the adoption and use of, and reduce the overall demand for, our platform.
Additionally, if the third parties we work with, such as vendors or developers, violate applicable laws or regulations or our policies, such violations may also put our customers' and their users' and consumers' or other social media audiences' content at risk and could in turn have an adverse effect on our business. Any significant change to applicable laws, regulations or industry practices regarding the collection, use, retention, security or disclosure of such content, or regarding the manner in which the express or implied consent of such persons for the collection, use, retention or disclosure of such content is obtained, could increase our costs and require us to modify our services and features, possibly in a material manner, which we may be unable to complete and may limit our ability to store and process user data or develop new services and features. All of these implications could adversely affect our revenue, results of operations, business and financial condition.
We may also face different obligations in foreign jurisdictions when providing access to AM/FM radio station simulcasts through the faidr App. In the United States, we will generally not be liable for monetary damages for copyright infringement arising from a radio station's transmissions made accessible through the faidr App even if the owner of the station has failed to obtain all necessary licenses to simulcast music over the Internet. In the UK and the EU, the laws differ from those in the United States for companies that operate directory services and we may either have to disable access to stations that have failed to obtain the necessary licenses for accessibility through the faidr App in different jurisdictions or obtain licenses to cover the communications to the public made by such stations and accessed through the faidr App. The costs for such licenses could be excessive and negatively impact our business, operations and financial condition.