Our business could be adversely impacted by existing or future laws, regulations or actions by domestic or foreign regulatory agencies, or by our customers' or partners' efforts to comply with these laws. For example, privacy, data protection and personal information, intellectual property, advertising, data security, data retention and deletion, protection of minors, consumer protection, economic or other trade prohibitions or sanctions concerns have and could continue to lead to legislative, judicial and regulatory limitations on our and our partners' ability to collect, maintain and use information about consumers' behavior and media consumption in the U.S. and abroad, impacting the amount and quality of data in our products and increasing our costs.
State and federal laws within the U.S. and foreign laws and regulations are varied, overlapping and at times conflicting, resulting in higher risk related to compliance. A number of laws have recently come into effect, and there are proposals pending before federal, state and foreign legislative and regulatory bodies that have affected and are likely to continue to affect our business. For example, the European Union's ("EU") General Data Protection Regulation, or GDPR, became effective in 2018, imposing more stringent EU data protection requirements and providing for greater penalties for noncompliance. In addition, regulators in the EU, the U.S. and elsewhere are increasingly focused on transparency, consent, consumer choice and the collection of data using tracking technologies. In the EU, cross-border data transfers are increasingly scrutinized to ensure compliance, and there have been expanded enforcement efforts in this area. Many U.S. states have also adopted comprehensive privacy laws governing the collection and use of personal information. The California Consumer Privacy Act, which went into effect in 2020, was substantially expanded by the California Privacy Rights Act of 2020, which went into effect in 2023. The Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act and the Utah Consumer Privacy Act all came into effect in 2023 as well. Additional comprehensive state laws will come into effect over the next few years. These laws have expanded consumer rights to include individual rights of access, deletion, portability, correction and appeal and the right to "opt in" to collection and use of certain types of personal information deemed sensitive under the laws. These U.S. federal and state and foreign laws and regulations, which in some cases can be enforced by private parties in addition to government entities, are constantly evolving and impose new and complex requirements on our business.
Artificial intelligence, or AI, is also the subject of evolving review by various governments and regulatory agencies around the world. For example, provisional agreement on a proposed EU AI Act was reached in 2023, including that specific transparency and other requirements would be introduced for general purpose AI systems and the models on which those systems are based. In addition, a U.S. Executive Order on the Safe, Secure and Trustworthy Development and Use of Artificial Intelligence devises a framework for the U.S. government to regulate private-sector use and development of certain foundational models, among other things. These new and changing laws and regulations covering the development, use and provision of AI technologies and other digital products and services could impact our ability to use certain methodologies or limit our ability to pursue alternative strategies to build our products. We may also be required to expend resources to adjust and analyze certain product offerings and methodologies as the regulatory environment evolves.
We have implemented policies and procedures to comply with the GDPR, state privacy laws, the Children's Online Privacy Protection Act and other existing laws and regulations, and we continue to evaluate and implement processes and technical enhancements and monitor changes in laws and regulations. However, the application, interpretation, and enforcement of these laws and regulations are often uncertain, particularly in the rapidly evolving industries in which we operate, and may be interpreted and applied inconsistently from country to country, state to state, and customer to customer, and inconsistently with our current policies and practices.
Additionally, the costs of compliance with, and the other burdens imposed by, these and other laws, regulatory actions and customer or partner policies may prevent us from selling our products, may require us to alter our products in ways that make them less competitive or compelling to customers, may divert development resources from other priorities, may continue to increase the costs associated with selling our products, and may affect our ability to invest in or jointly develop products in the U.S. and in foreign jurisdictions. In addition, failure to comply with these and other laws and regulations may result in, among other things, government enforcement actions and substantial fines, individual and class action lawsuits, contractual breaches, significant legal fees, and civil and criminal liability. Any regulatory or civil action that is brought against us, even if unsuccessful, may distract our management's attention, divert our resources, negatively affect our public image or reputation among our panelists, customers, partners and vendors, and harm our business.