The transmission of data over the Internet and cellular networks is a critical component of our SaaS business model. As Internet commerce continues to evolve, increased regulation by federal, state or foreign agencies becomes more likely, particularly in the areas of data privacy and data security. In addition, taxation of services provided over the Internet or other charges imposed by government agencies or by private organizations for accessing the Internet may be imposed. Any regulation imposing greater fees for Internet use or restricting information exchange over the Internet could result in a decline in the profitability and viability of Internet-based services, which could harm our business.
Our solutions enable us to collect, manage and store a wide range of data related to fleet management, vehicle location and tracking and other telematics services such as fuel usage, engine temperature, speed and mileage and, in the case of our field service application, includes customer information, job data, schedule and invoice information. A valuable component of our solutions is our ability to analyze this data and present the user with actionable business intelligence. We obtain our data from a variety of sources, including our customers and third-party sources or service providers. We cannot assure you that the data we require for our proprietary data sets will be available from these sources in the future or that the cost of such data will not increase. The United States and various state governments have adopted or proposed limitations on the collection, distribution and use of personal information. Several foreign jurisdictions, including South Africa, Singapore and the European Union, have adopted legislation (including directives or regulations) that increase or change the requirements governing data collection and storage in these jurisdictions. Further, such data privacy laws and regulations may be amended in the future. Any failure to adhere to or successfully implement processes in response to changing regulatory requirements in this area could result in legal liability or impairment to our reputation in the marketplace, which could have a material adverse effect on our business, financial condition, results of operations and prospects.
The current European Union legislation related to data protection is the General Data Protection Regulation ("GDPR"), which came into effect on May 25, 2018. While we appointed a Data Protection Officer to oversee and supervise our compliance with European data protection regulations and have obtained in certain instances data privacy insurance policies and have taken steps to mitigate the risks of GDPR, we cannot provide any assurance that we are in compliance with all aspects of European data protection regulations, including GDPR. Despite our ongoing efforts to bring practices into compliance, we may not be successful either due to various factors within our control, such as limited financial or human resources, or other factors outside of our control. For example, while we seek to enter into data processing agreements with third-parties with whom we share data, or who share data with us, we may be unable to execute agreements with all such third-parties. It is also possible that local data protection authorities may have different interpretations of the GDPR, leading to potential inconsistencies amongst various EU member states.
In Singapore, the Personal Data Protection Act 2012, No. 26 of 2012 generally requires organizations to give notice and obtain consents prior to collection, use or disclosure of personal data (data, whether true or not, about an individual who can be identified from that data or other accessible information). The Protection of Personal Information Act, No. 4 of 2013 (the "POPI Act") applies to our South African subsidiaries. We have updated and will continue to evaluate our Group data protection and security policies, charters, and procedures to assist in maintaining data privacy and data security in line with international practices. If our privacy or data security measures fail to comply, or are perceived to fail to comply, with current or future laws and regulations, we may be subject to litigation, regulatory investigations or other liabilities.
Moreover, if future laws and regulations limit our customers' ability to use and share this data or our ability to store, process and share data with our clients over the Internet, demand for our solution could decrease, our costs could increase, and our results of operations and financial condition could be harmed.
For example, we will have to consider the potential implications of the new privacy law in California, the California Consumer Privacy Act ("CCPA"), which creates new rights for consumers and will be widely applicable to businesses (regardless of location) that collect personal information about California residents. The potential effects of this legislation are far reaching and may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. The CCPA also provides for civil penalties for violations, as well as a private right of action for data breaches that may increase the volume of, and costs associated with, data breach litigation. The California Attorney General may also bring enforcement actions under the CCPA resulting in financial penalties for violations.
In 2023, a proliferation of comprehensive state data privacy laws was enacted in several jurisdictions in the US, in addition to those already in effect. It is expected that additional states will enact similar laws in 2024 in the absence of a federal framework. Furthermore, as regulations continue to develop, enforcement actions may increase. As such, businesses are required to allocate adequate resources to ensure compliance with data privacy laws.
In addition, AI has seen a huge expansion in terms of technology, adoption, proposed regulation and enforcement, and the expansion of AI policies and regulation, particularly at the U.S. state level, is expected.
On the U.S. federal level, despite the American Data Privacy and Protection Act in 2022, there has not been significant advancement toward an omnibus privacy law since the American Data Privacy and Protection Act in 2022.
We also run an insurance agency and brokerage unit that sells short-term insurance policies and selected insurance-related value-add vehicle products to our customers. This results in us receiving personally identifiable information with the customer's consent. This information is increasingly subject to legislation and regulation. This legislation and regulation are generally intended to protect individual privacy and the privacy and security of personal information. We could be adversely affected if government regulations require us to significantly change our business practices with respect to this type of information or if the insurance providers who use our marketplace violate applicable laws and regulations.
Changes in applicable laws and regulations may materially increase our direct and indirect compliance and other expenses of doing business, having a material adverse effect on our business, financial condition and results of operations. If there were to be changes to statutory or regulatory requirements, we may be unable to comply fully with or maintain all required licenses and approvals. Regulatory authorities have relatively broad discretion to grant, renew and revoke licenses and approvals. If we do not have all requisite licenses and approvals, or do not comply with applicable statutory and regulatory requirements, the regulatory authorities could preclude or temporarily suspend us from carrying on some or all of our activities or institute financial penalties on us, which could have a material adverse effect on our business, results of operations and financial condition.
We cannot predict whether any proposed legislation or regulatory changes will be adopted, or what impact, if any, such proposals or, if enacted, such laws could have on our business, results of operations and financial condition. If we fail to comply with applicable laws and regulations, we may be subject to investigations, criminal penalties or civil remedies, including fines, injunctions, loss of an operating license or approval, increased scrutiny or oversight by regulatory authorities, the suspension of individual employees, limitations on engaging in a particular business or redress to customers. The cost of compliance and the consequences of non-compliance could have a material adverse effect on our business, results of operations and financial condition. In addition, a failure to comply with applicable laws and regulations could have a material adverse effect on our business, results of operations and financial condition by exposing us to negative publicity and reputational damage or by harming our customer or employee relationships.
In most jurisdictions, government regulatory authorities have the power to interpret and amend applicable laws and regulations, and have discretion to grant, renew and revoke the various licenses and approvals we need to conduct our activities. Such authorities may require us to incur substantial costs in order to comply with such laws and regulations. Regulatory statutes are broad in scope and subject to differing interpretation. In some areas of our businesses, we act on our own or the industry's interpretations of applicable laws or regulations, which may differ by jurisdiction. In the event those interpretations are different from the interpretations of regulatory authorities, we may be penalized or precluded from carrying on our previous activities.