We collect, maintain, use, and share personal information provided to us through our various marketing activities, including email and social media marketing and postal mailings, as well as other consumer, employee, and business-to-business interactions, in order to provide a better experience for our customers, employees, and vendors. Our current and future marketing and advertising practices depend on our ability to collect, maintain, use, and share this personal information with certain service providers and other third-party vendors, and we are subject to various federal and state laws and regulations that govern such marketing and advertising practices. In addition, we also collect, store, and transmit employees' health information for certain reasons, such as administering employee benefits; accommodating disabilities and injuries; complying with public health requirements; and maintaining employee safety in the workplace.
Laws and regulations relating to privacy, data protection, cybersecurity, marketing and advertising, and consumer protection are evolving and subject to potentially differing interpretations. While we strive to comply with all such regulations and believe that we are good stewards of our customers' data, this area is rapidly evolving, and it is possible that these requirements may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another or may conflict with other rules or our practices. If so, we may be subject to proceedings or actions against us by governmental entities or others, and we may suffer damage to our reputation as a result of such proceedings or actions. We may also be contractually required to indemnify and hold harmless third parties from the costs or consequences of non-compliance with any laws, regulations or other legal obligations relating to privacy, data protection, cybersecurity or consumer protection or any inadvertent or unauthorized use or disclosure of data that we store or handle as part of operating our business.
Federal and state governmental authorities continue to evaluate the privacy implications inherent in the use of third-party "cookies" and other methods of online tracking for behavioral advertising and other purposes. The U.S. government and state governments have enacted, have considered or are considering enacting, legislation or regulations that could significantly restrict the ability of companies and individuals to engage in these activities, such as by regulating the level of consumer notice and consent required before a company can employ cookies or other electronic tracking tools or the use of data gathered with such tools. Additionally, some providers of consumer devices and web browsers have implemented, or announced plans to implement, means to make it easier for Internet users to prevent the placement of cookies or to block other tracking technologies, which could result in the use of third-party cookies and other methods of online tracking becoming significantly less effective. The regulation of the use of these cookies and other current online tracking and advertising practices or a loss in our ability to make effective use of services that employ such technologies could increase our costs of operations and limit our ability to acquire new customers on cost-effective terms and consequently, materially and adversely affect our business, financial condition, and results of operations.
In addition, various federal and state legislative and regulatory bodies, or self-regulatory organizations, may expand current laws or regulations, enact new laws or regulations or issue revised rules or guidance regarding privacy, data protection, cybersecurity, consumer protection, and advertising. For example, in June 2018, the State of California enacted the California Consumer Privacy Act of 2018 (the "CCPA"), which became effective on January 1, 2020. The CCPA requires companies that process information of California residents to make new disclosures to consumers about their data collection, use and sharing practices, and allows consumers to opt out of selling their data to third parties and provides a new cause of action for data breaches. Further, on November 3, 2020, the California Privacy Rights Act (the "CPRA") was voted into law by California residents. The CPRA significantly amends the CCPA, and imposes additional data protection obligations on companies doing business in California, including additional consumer rights processes and opt outs for certain uses of sensitive data. It also creates a new California data protection agency specifically tasked to enforce the law, which could result in increased regulatory scrutiny of businesses conducting activities in California in the areas of data protection and security. The substantive requirements for businesses subject to the CPRA went into effect on January 1, 2023, and will be enforced effective from July 1, 2023. Other states in which we operate have also enacted laws similar to CPRA and similar laws have been proposed in other states and at the federal level, and if passed, such laws may have potentially conflicting requirements that would make compliance challenging. Additionally, the Federal Trade Commission (the "FTC") and many state attorneys general are interpreting federal and state consumer protection laws to impose standards for the online collection, use, dissemination and security of data. Consumer protection laws require us to publish statements that describe how we handle personal data and choices individuals may have about the way we handle their personal data. If such information that we publish is considered untrue, we may be subject to government claims of unfair or deceptive trade practices, which could lead to significant liabilities and consequences. Further, according to the FTC, violating consumers' privacy rights or failing to take appropriate steps to keep consumers' personal data secure may constitute unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act. Each of these privacy, security, and data protection laws and regulations, and any other such changes or new laws or regulations, could impose significant limitations, require changes to our business, impose fines and other penalties or restrict our use or storage of personal information, which may increase our compliance expenses and make our business more costly or less efficient to conduct. Any such changes could compromise our ability to develop an adequate marketing strategy and pursue our growth strategy effectively, which, in turn, could adversely affect our business, financial condition, and results of operations.