We engage in a wide array of online activities globally and are thus subject to a broad range of related laws and regulations including, for example, those relating to privacy, consumer protection, data retention and data protection, online behavioral advertising, geo-location tracking, text messaging, e-mail advertising, mobile advertising, content regulation, defamation, age verification, the protection of children online, social media and other Internet, mobile and online-related prohibitions and restrictions. The regulatory framework for privacy and data security issues worldwide has become increasingly burdensome and complex, and is likely to continue to be so for the foreseeable future. Practices regarding the collection, use, storage, transmission, security and disclosure of personal information by companies operating over the Internet and mobile platforms are receiving ever-increasing public and governmental scrutiny.
The U.S. government, including Congress, the Federal Trade Commission and the Department of Commerce, has announced that it is reviewing the need for even greater regulation for the collection of information concerning consumer behavior on the Internet and mobile platforms, including regulation aimed at restricting certain targeted advertising practices, the use of location data and disclosures of privacy practices in the online and mobile environments, including with respect to online and mobile applications. State governments are engaged in similar legislative and regulatory activities (including the California Consumer Privacy Act ("CCPA") effective on January 1, 2020, the California Privacy Rights and Enforcement Act, effective January 1, 2023 ("CPRA") and other analogous statutes more recently in other states). The effects of CCPA and these other recently adopted laws includes an increased ability of individuals to control the use of their personal data; heightened transparency obligations, increased obligations of companies to maintain the security of data; and increased exposure to fines or damages for companies that do not accord individuals their specified privacy rights, that experience data breaches or that do not maintain cybersecurity at certain levels of quality.
In addition, privacy and data security laws and regulations around the world are being implemented rapidly and evolving. These new and evolving laws (including the European Union General Data Protection Regulation effective on May 25, 2018) have resulted in greater compliance burdens for companies with global operations. Globally, many government and consumer agencies have also called for new regulation and changes in industry practices with respect to information collected from consumers, electronic marketing and the use of third-party cookies, web beacons and similar technology for online behavioral advertising.
Our business, including our ability to operate and expand internationally, could be adversely affected if laws or regulations are adopted, interpreted or implemented in a manner that is inconsistent with our current business practices and that require changes to these practices. Therefore, our business could be harmed by any significant change to applicable laws, regulations or industry practices regarding the collection, use or disclosure of customer data, or regarding the manner in which the express or implied consent of consumers for such collection, use and disclosure is obtained. Such changes may require us to modify our operations, possibly in a material manner, and may limit our ability to develop new products, services, mechanisms, platforms and features that make use of data regarding our customers and potential customers. Any actual or alleged violations of laws and regulations relating to privacy and data security, and any relevant claims, may expose us to potential liability, fines and may require us to expend significant resources in responding to and defending such allegations and claims, regardless of merit. Claims or allegations that we have violated laws and regulations relating to privacy and data security could also result in negative publicity and a loss of confidence in us.