We are reliant on our digital technology, including our Evolus Practice App, which allows customers to open a new account, order products, pay invoices and engage with our customer experience team and medical affairs representatives. In the event that our digital technology is unable to function in the manner it was designed or at all, we would experience difficulty processing customer orders and requests in a timely manner or at all which would have a material adverse effect on our business, results of operations and financial condition.
The information systems underlying our digital technology may not be adequately designed or may not operate with the reliability and redundancy necessary to avoid performance delays or outages that could be harmful to our business. If our digital technology is unavailable when customers attempt to access them, or if they do not load as quickly as expected, users may not use our technology as often in the future, or at all, and our ability to sell our products through a more limited sales force may be disrupted and we may not realize the efficiencies of leveraging our digital technology, any of which could adversely affect our business and financial performance. As the number of users of our digital technology continues to grow we will need an increasing amount of technical infrastructure, including network capacity and computing power, to continue to satisfy our needs. It is possible that we may fail to continue to effectively scale and grow our technical infrastructure to accommodate these increased demands, which may adversely affect our customers' experience with our digital technology which may decrease our revenue and harm our results of operations.
Despite the implementation of security measures, our internal computer systems, including our information systems, and those of third parties on which we rely, are vulnerable to disruption or damage from computer viruses, malware, natural disasters, terrorism, war, telecommunication and electrical failures, cybersecurity incidents, insider threats, persons who access our information systems in an unauthorized manner, or inadvertent misconfiguration of our systems. The risk of a security incident or system disruption, particularly through cybersecurity incidents, including by computer hackers, foreign governments and cybercriminals, has generally increased as the number, intensity and sophistication of attempted attacks, including through the use of emerging technologies, such as artificial intelligence, and intrusions from around the world have increased. While none of the cybersecurity incidents that we have experienced to date have had a material adverse impact on our business, financial condition or operations, future interruptions in our operations caused by such an event could result in a material disruption of our current or future product development programs. The costs to us to mitigate network security problems, bugs, viruses, worms, malicious software programs and security vulnerabilities could be significant, and while we have implemented security measures to protect our data security and information systems, our efforts to address these problems may not be successful, and these problems could result in unexpected interruptions, delays, cessation of service, government files or penalties and other harm to our business and our competitive position. Interruptions in our operations caused by such an event could also result in a material disruption in our relationship with our customers. For example, if our
Evolus Practice App were rendered inoperable, we would have to process orders by telephone or otherwise which may result in slower processing times and harm to our reputation. Our liability insurance may not be sufficient in type or amount to cover us against claims related to security breaches, cybersecurity incidents and other related security incidents.
Failure to comply with confidentiality and data privacy obligations could have a material adverse effect on our business.
As part of our normal operations, we collect, process, transmit and, where appropriate, retain certain sensitive and confidential employee and customer information, including credit card information. As a result, we are subject to various international, federal and state privacy and security laws, including the General Data Protection Regulation, or GDPR, the HIPPA, as amended by HITECH, and its implementing rules and regulations, as well as regulations promulgated by the Federal Trade Commission and state breach notification laws. Additionally, the regulatory environment governing information, security and privacy laws is increasingly demanding and continues to evolve and a number of states have adopted laws and regulations that may affect our privacy and data security practices regarding the use, disclosure and protection of personally identifiable information, or PII. For example, the California Consumer Privacy Act, among other things, has created new individual privacy rights and imposes increased obligations on companies handling PII. We also rely on third parties to host or otherwise process some of the data we collect, process and store. In some instances, these third parties have experienced failures to protect data privacy. If we or these third parties experience a security incident that affects our information systems or results in the unauthorized access to financial information, PII, customer information or data, including credit card transaction data or other sensitive information, our reputation could be materially damaged. Our failure, or the failure of third parties, to protect PII or other sensitive information or our failure to comply with such data privacy and security laws, could expose us to litigation and potential liability, which could materially adversely affect our business, results of operations and financial condition