The Company relies on information technology networks and systems, including the Internet, to process, transmit and store electronic information, and to manage or support a variety of business processes and activities, including procurement, manufacturing, distribution, invoicing and collection. These technology networks and systems may be susceptible to damage, disruptions or shutdowns due to failures during the process of upgrading or replacing software, databases or components; power outages; hardware failures; computer viruses; employee error or malfeasance; and attacks by computer hackers, which have continued to increase on a global scale in both magnitude and frequency, taken on novel and unprecedented forms and become more difficult to detect. The risk and severity of cybersecurity attacks could increase as artificial intelligence is used by threat actors to identify vulnerabilities and conduct increasingly sophisticated attacks. Minor security breaches have occurred from time to time and are expected to occur in the future. Although the cyber-attacks experienced to date have not had a material impact, future security breaches of our technology networks and systems or those of our vendors and third-party service providers could result in unauthorized disclosure of confidential information or personal data belonging to our employees, partners, customers or suppliers, which could cause reputational and legal harm as we are subject to data privacy laws, including the EU General Data Protection Regulation, in the various countries in which we operate. If our information technology systems suffer severe damage, disruption, or shutdown, and business continuity plans do not effectively resolve the issues in a timely manner, or if we violate data privacy laws, there could be a negative impact on operating results and/or the financial reporting process and the Company may suffer financial or reputational damage.
In addition, cybersecurity laws and regulations continue to evolve, and are increasingly demanding, both in the U.S. and globally, which adds compliance complexity and may increase costs of compliance and expose the Company to reputational damage or litigation, monetary damages, regulatory enforcement actions or fines in one or more jurisdictions.