We rely on information technology hardware, software, networks and systems (collectively, "IT Systems"), some of which are provided by vendors, to process, transmit and store personal information, tenant and lease data, and other electronic information (collectively, "Confidential Information"), and to manage or support a variety of business processes, including financial transactions and records. Our business requires us and some of our vendors to use and store personal and other sensitive information of our tenants and employees. The collection, use and other processing of personal information is governed by federal and state laws and regulations. Privacy and cybersecurity laws continue to evolve, with several states passing new data privacy laws that govern the processing of information about state residents, and laws may be inconsistent from one jurisdiction to another. The Company endeavors to comply with privacy laws and regulations applicable to it, including the California Consumer Privacy Act ("CCPA") which governs the collection, use, disclosure and security of information about California residents. The CCPA requires the Company to, among other things, provide certain disclosures to California residents, promptly respond to certain consumer requests related to their data, and contractually impose certain obligations on vendors. Compliance with existing and future laws and regulations related to data privacy and protection may increase the Company's operating costs and adversely impact the Company's ability to market the Company's properties and services, and any failure to comply with such laws and regulations could harm our business, reputation and financial results.
Although we have taken steps to abide by applicable privacy and cybersecurity laws, and strive to protect the security of our IT Systems and Confidential Information, the compliance and security measures put in place by the Company and its vendors cannot guarantee perfect compliance or provide absolute security, and the Company and its vendors' IT Systems may be vulnerable to cyber-attacks or cybersecurity incidents that threaten the confidentiality, integrity and availability of our IT Systems and Confidential Information, including through ransomware distributed denial-of-service attempts, data theft, account takeovers, social engineering/phishing, technological error, employee error, malfeasance, misconfigurations, "bugs", or other vulnerabilities in Company, or vendor, IT Systems. These threats can also come from diverse threat actors, such as state-sponsored organizations, opportunistic hackers and hacktivists. Any incident could compromise the Company's or our vendors' IT Systems (or the IT Systems of third parties that facilitate the Company's or such vendors' business activities), and the Confidential Information stored by or on behalf of the Company or such vendors could be accessed, misused, publicly disclosed, corrupted, lost, or stolen, resulting in fraud, including wire fraud related to Company assets or tenant payments, or other harm. Moreover, if there is a compliance failure, or if a cybersecurity incident affects the Company's or vendors' systems, whether through a breach of the Company's IT Systems or a breach of the IT Systems of third parties, or results in the unauthorized release of Confidential Information, the Company's reputation and brand could be materially damaged, which could increase our costs in attracting and retaining tenants, and other serious consequences may result.
Potential other consequences include potential exposure to litigation, including government enforcement actions, private litigation (including class actions), fines or criminal penalties; and potential exposure to a risk of loss including loss related to the fact that agreements with such vendors, or such vendors' financial condition, may not allow the Company to recover all costs related to a cybersecurity incident for which they alone or they and the Company should be jointly responsible for, which could result in a material adverse effect on the Company's business, results of operations and financial condition.
Privacy and cybersecurity risks have generally increased in recent years because of the proliferation of new technologies, such as ransomware and generative AI, and the increased sophistication, techniques and activities of threat actors; accordingly, the Company may be unable to anticipate these techniques or implement adequate preventative measures . We maintain cyber risk insurance which may be insufficient type or amount to cover us against claims related to a cybersecurity incident, and we cannot be certain that such insurance will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claims.
In the future, the Company may expend additional resources to continue to enhance the Company's cybersecurity measures to investigate and remediate any cybersecurity vulnerabilities and/or to further ensure compliance with privacy and cybersecurity laws. Despite these steps, the Company may suffer a significant cybersecurity incident in the future, unauthorized parties may gain access to Confidential Information stored on the Company's or its vendors' IT Systems, and any such incident may not be discovered in a timely manner. Any cybersecurity incident or failure in the implementation, compliance with or effectiveness of the Company's IT Systems or cybersecurity program or those of third party service providers, or a breach of other third party systems that ultimately impacts the operational or IT Systems of the could result in a wide range of potentially serious harm to our business and results of operations.