Harte-Hanks (HHS) Risk Factors

The price at which our common stock has traded in recent years has fluctuated greatly and has declined significantly. Our common stock price may continue to be volatile due to several factors including the following (some of which are beyond our control): - variations in our operating results from period to period and variations between our actual operating results and the expectations of securities analysts, investors, and the financial community;- the development and sustainability of an active trading market for our common stock;- unanticipated developments with client engagements or client demand, such as variations in the size, budget, or progress of engagements, variability in the market demand for our services, client consolidations, and the unanticipated termination of several major client engagements;- announcements of developments affecting our businesses;- competition and the operating results of our competitors;- the overall strength of the economies of the markets we serve and general market volatility; and - other factors discussed elsewhere in this Item 1A, "Risk Factors." Because of these and other factors, investors in our common stock may not be able to resell their shares at or above their original purchase price.

Interest rate fluctuations in Europe and the United States may affect the amount of interest we earn on cash equivalents. Our Credit Facility bears interest based upon the Secured Overnight Financing Rate. Our results of operations, cash flows, and financial position could be materially or adversely affected by significant increases in interest rates. We also have exposure to interest rate fluctuations in the United States, specifically money market, the value of our pension obligations and overnight time deposit rates, as these affect our earnings on excess cash. Even with the offsetting increase in earnings on excess cash in the event of an interest rate increase, we cannot be assured that future interest rate increases will not have a material adverse impact on our business, financial position, or operating results. Increased interest rates have put upward pressure on pricing and purchasing power. Pricing pressure has led to some wage inflation which could adversely affect our margins and profitability if it persisted for a long time or wage pressure increased.

Business-to-business and business-to-consumer electronic commerce requires the secure transmission of confidential information over public networks. Some of our products and services are accessed through, or are otherwise dependent on the internet. Security breaches in connection with the delivery of our products and services, or well-publicized security breaches that may affect us or our industry (such as database intrusion) could be severely detrimental to our business, operating results, and financial condition. We cannot be certain that advances in criminal capabilities, cryptography, or other fields will not compromise or breach the technology protecting the information systems that deliver our products, services, and proprietary database information.

Our business is heavily dependent on data centers and telecommunications infrastructures, which are essential to both our call center services and our database services (which require that we efficiently and effectively create, access, manipulate and maintain large and complex databases). In addition to the third-party data centers we use, we also operate several of our own operations centers to support both our own and our clients' needs. Our ability to protect our operations against damage or interruption from fire, flood, tornadoes, power loss, telecommunications or equipment failure, or other disasters and events beyond our control is critical to our continued success. Likewise, as we increase our use of third-party data centers, it is critical that these vendors adequately protect their data centers from the same risks we do. Our services are dependent on regional and international networking and telecommunication providers. We believe we have taken reasonable precautions to protect our data centers and telecommunication infrastructure from events that could interrupt our operations. Any damage to the data centers we use or any failure of our telecommunications links could materially adversely affect our ability to continue to provide services to our clients, which could result in loss of revenues, profitability and client confidence, and may adversely impact our ability to attract new clients and force us to expend significant company resources to repair the damage.

Our sites operate on leasehold property. Our leases are subject to renewal and we may be unable to renew such leases on commercially acceptable terms or at all. Our inability to renew our leases, or a renewal of our leases with a rental rate higher than the prevailing rate under the applicable lease prior to expiration, may cause an increase in operating costs, or may cause additional cost due to relocation.

We are subject to and affected by numerous laws, regulations, and industry standards that regulate direct marketing activities, including those that address privacy, data protection, processing personal information, information security, and marketing communications. As a result of increasing awareness and interest in privacy rights, data protection, the fair use of personal information, consumer protection, information security, and similar matters, national and local governments and industry organizations regularly consider and adopt new laws, rules, regulations, and guidelines that impact, restrict, and regulate our business products and services. Whether already in place or scheduled to become effective in the future, comprehensive data protection, privacy, and marketing laws apply across the jurisdictions in which we operate as well as in the locations where any such personal information originates, including Europe, the Philippines, and most states throughout the United States. These regulations apply when processing personal data for business and marketing purposes and broadly impact all marketing activities, including legitimate activities associated with profiling consumer behaviors, drawing inferences from personal information, making automated decisions about individuals using personal information, transferring personal information between parties and jurisdictions, communicating with existing and prospective customers, and to other similar activities. Additionally, we are subject to operational obligations when processing and storing personal information, including, but not limited to, adopting and upholding a governance framework to protect this information, registering with relevant regulators, implementing secure infrastructure and data security standards and strategies, data breach detection and response solutions, conducting audits to identify security risks as well as carrying out additional procedures to demonstrate accountability and compliance with national and local privacy and data protection regulations. Other relevant compliance considerations in support of these mandates include establishing solutions in support of broad privacy and data protection rights, including those designed to offer notice to individuals, capture prior consent, grant access to personal information, offer choices regarding the decision to share one's personal information and how such information can be used, as well as related controls to honor choices expressed related to if and how personal information can be processed or licensed for marketing purposes. We anticipate new regulations will continue to be proposed and adopted in the future in the jurisdictions in which we operate and/or generate revenue. We also expect any new regulations will reflect the growing trends common to current privacy, data protection and marketing laws requiring companies to bear the burden of proving compliance efforts through demonstrable records, and may subject companies to significant fines and penalties should they violate any substantive or technical requirement. We may implement additional safeguards, controls and measures in response to these changes and trends; and may be required to change or limit our service offerings. Our business may also be affected by the impact of rules and regulations on our clients' business and marketing activities. In addition, as we acquire new capabilities and deploy new technologies to execute our strategy, we may be exposed to additional regulation. Current and future restrictions and regulations could increase compliance costs, and restrict or prevent the collection, management, aggregation, transfer, use or dissemination of personal information or change the requirements so as to require other changes to our business or our clients' businesses, practices and tolerance for risk. Additional restrictions and regulations may limit or prohibit current practices regarding marketing communications and information quality solutions. For example, multiple states have implemented opt out legislation for telephone marketing, requiring the creation of statewide do-not call registries. Such legislation could impact our business and the businesses of our clients and of their customers. In addition, continued public interest in privacy rights, data protection and access, and information security may result in the adoption of additional industry guidelines that could impact our direct marketing activities and business practices. We cannot predict the scope of any new laws, rules, regulations, or industry guidelines or how courts or agencies may interpret existing rules, regulations or guidelines. Additionally, enforcement priorities by governmental authorities will change over time, which may impact our business. Understanding the laws, rules, regulations, and guidelines applicable to specific client multichannel engagements and across many jurisdictions poses a significant challenge, as such laws, rules, regulations, and guidelines are often inconsistent or conflicting, and are sometimes at odds with client objectives. Our failure to properly comply with these regulatory requirements and client needs may materially and adversely affect our business. General compliance with privacy, data protection, and information security obligations is costly and time-consuming, and we may encounter difficulties, delays, or significant expenses in connection with our compliance, or because of our clients' need to comply. We may be exposed to significant penalties, liabilities, reputational harm, and loss of business in the event that we fail to comply. We could suffer a material adverse impact on our business due to the enactment or enforcement of legislation or industry regulations affecting us and/or our clients, the issuance of judicial or governmental interpretations, changed enforcement priorities of governmental agencies, or a change in behavior arising from public concern over privacy, data protection, and information security issues.