During our day-to-day business operations we receive, collect, store, process, transfer, and use personal information and other user data. As the result, we are subject to numerous federal, state, local, and international laws and regulations regarding privacy, data protection, information security, and the collection, storing, sharing, use, processing, transfer, disclosure, and protection of personal information and other content. We are also subject to the terms of our privacy policies and obligations to third parties related to privacy, data protection, and information security. We strive to comply with applicable laws, regulations, policies, and other legal obligations relating to privacy, data protection, and information security to the extent possible. However, the regulatory framework for privacy and data protection both in the United States and abroad is, and is likely to remain for the foreseeable future, uncertain and complex, is changing, and the interpretation and enforcement of the rules and regulations that form part of this regulatory framework may be inconsistent among jurisdictions, or conflict with other laws and regulations. Such laws and regulations as they apply to us may be interpreted and enforced in a manner that we do not currently anticipate. Any significant change in the applicable laws, regulations, or industry practices regarding the collection, use, retention, security, or disclosure of user data, or their interpretation, or any changes regarding the manner in which the express or implied consent of users for the collection, use, retention, or disclosure of such data must be obtained, could increase our costs and require us to modify our platform and our products and services, in a manner that could materially affect our business.
The laws, regulations, and industry standards concerning privacy, data protection, and information security also continue to evolve. For example, in June 2018, California passed the California Consumer Privacy Act (the "CCPA"), effective January 1, 2020, which requires companies that process personal information of California residents to make new disclosures to consumers about such companies' data collection, use, and sharing practices and inform consumers of their personal information rights such as deletion rights, allows consumers to opt out of certain data sharing with third parties, and provides a new cause of action for data breaches. The State of Nevada has also passed a law, effective October 1, 2019, that amends the state's online privacy law to allow consumers to submit requests to prevent websites and online service providers from selling personally identifiable information that they collect through a website or online service. The costs of compliance with, and other burdens imposed by, the privacy and data protection laws and regulations may limit the use and adoption of our services and could have a material adverse impact on our business. As a result, we may need to modify the way we treat such information.
Any failure or perceived failure by us to comply with any privacy and data protection policies, laws, rules, and regulations could result in proceedings or actions against us by individuals, consumer rights groups, governmental entities or agencies, or others. We could incur significant costs investigating and defending such claims and, if found liable, significant damages. Further, public scrutiny of or complaints about technology companies or their data handling or data protection practices, even if unrelated to our business, industry, or operations, may lead to increased scrutiny of technology companies, including us, and may cause government agencies to enact additional regulatory requirements, or to modify their enforcement or investigation activities, which may increase our costs and risks.