Adverse macroeconomic conditions could cause decreases or delays in spending by our clients in response to consumer demand and could harm our ability to generate revenue and our results of operations. Changes in the macroeconomic or market conditions and changes in the regulatory environment have in the past affected, and may continue to negatively affect, our clients' businesses, marketing practices and budgets and, therefore, impact our business, financial condition, operating results and cash flows.
Worldwide economic conditions remain uncertain due to various global disruptions, including geopolitical events, such as war, the threat of war (including collateral damage from cyberwarfare and targeted security attacks), terrorist activity, natural disasters, climate change and extreme-weather related events, power shortages or outages, major public health issues, including pandemics, and significant local, national, or global events capturing the attention of a large part of the population, which could prevent or hinder our, our third-party publishers' or our clients' ability to do business, increase our costs, and negatively affect our stock price. Adverse consequences resulting from increasing economic or political conflicts between the United States and China, Russia's invasion of Ukraine and the subsequent economic sanctions imposed by the U.S., NATO and other countries, the Israel-Hamas war and the possible expansion of such conflict in the surrounding areas, and various other market issues may have broader implications on economies outside of their respective regions, including increased instability in the worldwide financial markets and economy, increases in inflation, recessionary economic cycles, and enhanced volatility in foreign currency exchange rates. These uncertainties have in the past and may in the future cause our clients or potential clients to delay or reduce spending, which could negatively impact our revenue and operating results and make it difficult for us to accurately plan future business activities.
We, our third-party publishers', and our clients' businesses operate in highly regulated industries, subject to many laws and regulatory requirements, including federal, state, and local laws and regulations regarding unsolicited commercial email, telemarketing, search engines, Internet tracking technologies, comparison shopping platforms, direct marketing, data privacy and security, advertising and consumer protection, pricing, sweepstakes, promotions, intellectual property ownership and infringement, trade secrets, use of artificial intelligence, export of encryption technology, acceptable content and quality of goods, and taxation, among others. Each of our financial services and other client verticals is also subject to various laws and regulations, and our marketing activities on behalf of our clients are regulated. Many of these laws and regulations are frequently changing and can be subject to vagaries of interpretation and emphasis, and the extent and evolution of future regulation is uncertain. Keeping our business in compliance with existing laws and regulations or bringing our business into compliance with new laws and regulations, therefore, may be costly, affect our revenue and harm our financial results.
For example, regulation in data privacy and security is rapidly evolving in the U.S. and internationally, including laws, rules and regulations applying to the solicitation, collection, retention, deletion, sharing, use and other processing of personal information. At the U.S. federal level, we are subject to the laws and regulations promulgated under the authority of the Federal Trade Commission, which regulates unfair or deceptive acts or practices (including with respect to data privacy and security). At the state level, we are subject to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA"). The CCPA requires covered businesses to, among other things, provide disclosures to California residents about their data collection, use, sharing and processing practices and, with limited business exceptions, the CCPA affords such individuals various rights with respect to their personal information, including to request deletion of personal information collected about them and to opt-out of certain personal information selling and sharing practices. A number of other states such as Oregon, Texas, Virginia, Colorado, Connecticut, and Utah have also enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose strict requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments, and allow for statutory fines for noncompliance. In addition, laws in all 50 U.S. states require businesses to provide notice under certain circumstances to consumers whose personal information has been disclosed as a result of a data breach.
Further, foreign laws and regulations such as the European Union General Data Protection Regulation (the "EU GDPR"), and the version thereof implemented into the laws of the United Kingdom (the "UK GDPR"), may apply to our business and marketing activities that are offered to European Union and United Kingdom users. The EU GDPR and UK GDPR include a range of compliance obligations and penalties for non-compliance are significant. Although the substantive requirements of the UK GDPR are largely aligned with those of the EU GDPR, exposing us to burdens and risks comparable to the EU GDPR, that may change over time. Preparing for and complying with existing and new data privacy and security laws and regulations requires significant time and resources to ensure we store, use, share and otherwise process personal information in accordance with applicable laws and regulations. We also are, and in the future may become, subject to various other obligations relating to data privacy and security, including industry standards, external and internal policies, contracts and other obligations. For example, numerous jurisdictions are considering laws and regulations that would impose additional data privacy and other compliance requirements on the use of Artificial Intelligence ("AI") and could require us to adjust or limit our product offerings in such jurisdictions. Violations or alleged violations of laws and regulations, or any such obligations, by us, our third-party publishers, our clients or our third-party service providers on which we rely to process personal information on our behalf, could result in enforcement actions, litigation, damages, fines, criminal prosecution, unfavorable publicity, and restrictions on our ability to operate, any of which could have a material adverse effect on our business, financial condition, and results of operations. In addition, new laws or regulations (including amendments thereof or changes in enforcement of existing laws or regulations applicable to us or our clients) could affect the activities or strategies of us, our clients or our third-party service providers and, therefore, lead to reductions in their level of business with us or otherwise impact our business or our business model.
Additionally, in connection with our owned and our third-party publishers' telemarketing campaigns to generate traffic for our clients, we are subject to various state and federal laws regulating telemarketing communications (including SMS or text messaging), including the federal TCPA, which requires prior express written consent for certain types of telemarketing calls and adherence to "do-not-call" registry requirements which, in part, mandate that callers maintain and regularly update lists of consumers who have chosen not to be called and restrict calls to consumers who are on the national do-not-call list. As currently construed, the TCPA does not distinguish between voice and data, and, as such, text and SMS/MMS messages are also "calls" for the purpose of TCPA obligations and restrictions. For violations of the TCPA, the law provides for a private right of action under which a plaintiff may recover monetary damages of $500 for each call or text made in violation of the prohibitions on certain calls made using an artificial or pre-recorded voice or an automatic telephone dialing system and certain calls made to numbers properly registered on the federal "do-not-call" list. The TCPA and other similar state laws are subject to interpretations that may change. We regularly evaluate how this may apply to our business. Our efforts to comply with the TCPA have not had a material impact on traffic conversion rates. However, depending on future traffic and product mix, it could potentially have a material effect on our revenue and profitability, including increasing our and our clients' exposure to enforcement actions, litigation and statutory damages. The TCPA regulations have resulted in an increase in individual and class action litigation against marketing companies for alleged TCPA violations. TCPA violations can result in significant financial penalties, including penalties or criminal fines imposed by the Federal Communications Commission (the "FCC") or fines of up to $1,500 per violation imposed through private litigation or by state authorities. Additionally, we generate inquiries from users that provide a phone number, and a significant amount of revenue comes from calls made by our internal call centers as well as, in some cases, by third-party publishers' call centers. We also purchase a portion of inquiry data from third-party publishers and cannot guarantee that these third-parties will comply with applicable laws and regulations. Any failure by us or the third-party publishers on which we rely for telemarketing, email marketing, and other performance marketing activities to adhere to or successfully implement appropriate processes and procedures in response to existing laws and regulations and changing regulatory requirements could result in legal and monetary liability, significant fines and penalties, or damage to our reputation in the marketplace, any of which could have a material adverse effect on our business, financial condition, and results of operations. Furthermore, our clients may make business decisions based on their own experiences with the TCPA regardless of our products and the changes we implemented to comply with the new regulations. These decisions may negatively affect our revenue or profitability.
Changes in regulations, or the regulatory environment, applicable to us or our media sources, third party publishers or clients could also have a material adverse effect on our business. For example, in December 2023, the FCC adopted new rules to further restrict the transmission of text messages. One of these rules has been appealed and is being subjected to judicial review, but generally these new rules are scheduled to take effect over the course of 2024 and early 2025 to further restrict the transmission of text messages. The rules, among other things, amend TCPA consent requirements to prohibit the practice of allowing a single consumer consent to be grounds for multiple entities to deliver automated marketing calls and text messages, thereby requiring consent for such calls and text messages to be secured and provided on a "one-to-one" basis and requiring the consent to be "logically and topically associated" with the interaction that prompted the consent. Further, the new rules allow the FCC to "red flag" certain numbers, requiring mobile carriers to block texts from those numbers. The rules also codify that the national Do-Not-Call list protections apply to text messaging, making it illegal for marketing texts to be sent to numbers on the national Do-Not-Call registry absent an applicable exception. The FCC order adopting the new rules also encourages providers to make email-to-text messages an opt-in service for end users. Except for the "one-to-one" and "logically and topically associated" consent rule and the "red flag" blocking requirements, the new rules took effect on March 26, 2024. The "one-to-one" and "logically and topically associated" consent rule, which has been appealed, is scheduled to take effect on January 27, 2025, absent judicial intervention. The "red flag" blocking requirements requiring mobile wireless providers to block texts from phone numbers on a "reasonable" do-not-originate list became effective on September 3, 2024 and a similar rule which requires mobile wireless providers to block texts from numbers identified by the FCC through its Enforcement Bureau became effective on July 24, 2024.
As another example, in February 2024, the FCC adopted new rules governing the ability of call and text message recipients to revoke consent previously given and thereby "opt-out" of receiving future calls and text messages from a sender. These new rules specify when a call or text message recipient's consent must be considered revoked and create certain presumptions about other forms of consent revocation that a sender of a call or text message can rebut pursuant to a totality of circumstances test administered by the FCC or a court. They also require valid consent revocations to be honored within a reasonable period not to exceed ten business days from receipt of such request. Additionally, when a recipient has consented to several categories of text messages from a sender and opt-out of a text message from that sender, the new rules permit a sender to seek to clarify the scope of the opt-out request through a one-time opt-out confirmation text message. This rule permitting a sender to seek such clarification through a one-time opt-out confirmation text message took effect on April 4, 2024. The remaining consent revocation rules are expected to take effect on April 11, 2025.
The FCC rules could have a material adverse impact on our media sources and our clients, especially smaller businesses, as they may not be able to continue to participate in, or may substantially reduce their participation in, the online advertising channel due to increased costs, technological compliance challenges and additional legal risks, including potential liabilities or claims relating to compliance. Decreased participation in online advertising by our media sources or clients as a result of the rules could have a material adverse impact on our business, results of operation and financial condition, as it may reduce the availability to us of qualified inquiries. Moreover, our business could be materially and adversely affected directly by the FCC's rules, as we also generate a substantial portion of our revenue from our own operation of websites to generate qualified inquiries. While some of the rules become effective in 2025, recommendations for best practices from associations such as the Cellular Telecommunications Industry Association ("CTIA") may encourage mobile wireless carriers to require senders of SMS or text messages to comply with the amended rules ahead of the applicable effective dates. In addition, wireline and mobile wireless carriers or their service providers could elect to impose additional requirements, including with respect to prerecorded calls and the use of short codes and ten-digit long codes to transmit or receive text messages, which could have the effect of hindering our ability to contact consumers, which could have a material adverse effect on our business. The scope and application of these rules and related industry practices may be subject to changes and uncertainties. The operation of or compliance with the rules and related industry practices may decrease our revenues or increase our costs. In addition, any failure by us or our media sources or clients to comply with such laws and practices may subject us to significant liabilities.
An increased focus by regulatory agencies on the enforcement of certain regulations regarding comparison-shopping could have a material adverse effect on our business. For example, on February 29, 2024, the Consumer Financial Protection Bureau ("CFPB") published Consumer Financial Protection Circular 2024-01, Preferencing and steering practices by digital intermediaries for consumer financial products or services (the "Circular"). The Circular advised that operators of comparison-shopping websites may violate the prohibition against "abusive" conduct in the Consumer Financial Protection Act ("CFPA") by steering consumers to certain products or services based on how the site operators are compensated. The Circular also discusses how operators of digital comparison-shopping tools can violate the prohibition on abusive practices by virtue of receiving compensation from financial service providers in exchange for preferential treatment on comparison-shopping sites. The Circular was intended to provide guidance to other law enforcement agencies with authority to enforce the CFPA's "abusiveness" provisions, most notably state attorneys general. Violations of the abusiveness provisions are subject to civil money penalties and possible conduct prohibitions. In connection with our owned and our third-party publishers' email campaigns to generate traffic for our clients, we are also subject to various state and federal laws regulating commercial email communications, including the federal CAN-SPAM Act. For example, in 2012, several of our clients were named defendants in a California Anti-Spam lawsuit relating to commercial emails which allegedly originated from us and our third-party publishers. While the matter was ultimately resolved in our clients' favor, we were nonetheless obligated to indemnify certain of our clients for the fees incurred in the defense of such matter. Further, foreign laws and regulations, such as the Canadian Anti-Spam Law, may also apply to our business activities to the extent we are doing business with or marketing to consumers in foreign jurisdictions. If we or any of our third-party publishers fail to comply with any provisions of these laws or regulations, we could be subject to regulatory investigation, enforcement actions and litigation, as well as indemnification obligations with respect to our clients. Any negative outcomes from such regulatory actions or litigation, including monetary penalties or damages, could have a material adverse effect on our financial condition, results of operation and reputation.
From time to time, we are subject to audits, inquiries, investigations, claims of non-compliance and lawsuits by federal and state governmental agencies, regulatory agencies, attorneys general and other governmental or regulatory bodies, any of whom may allege violations of legal and regulatory requirements. For our dispositioned assets or businesses, we retain certain liabilities or obligations in connection with our pre-closing actions or omissions, contractual or otherwise. For example, in June 2012, we entered into an Assurance of Voluntary Compliance agreement following a civil investigation into certain of our marketing practices related to our education client vertical that was conducted by the attorneys general of a number of states; and, in the first quarter of fiscal year 2021, we dispositioned our education client vertical. Because our subsidiary CCM provides performance marketing agency and technology services to clients in financial services, education and other markets, we may still be subject to investigations, audits, inquiries, claims or litigation related to education. If any audits, inquiries, investigations, claims of non-compliance and lawsuits by federal and state governmental agencies, regulatory agencies, attorneys general and other governmental or regulatory bodies are unfavorable to us, we may be required to pay monetary fines or penalties or have restrictions placed on our business, which could materially adversely affect our business, financial condition, results of operations and cash flows.