Wideopenwest (WOW) Risk Analysis

In general, under Section 382 ("Section 382") of the Internal Revenue Code of 1986, as amended, a corporation that undergoes an "ownership change" is subject to limitations on its ability to utilize its existing federal and state net operating losses and capital losses. Future changes in our stock ownership, some of which are outside of our control, could result in an additional ownership change under Section 382. Furthermore, our ability to utilize NOLs of companies that we have acquired or may acquire in the future may be subject to limitations. There is also a risk that due to regulatory changes, such as suspensions on the use of NOLs or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to offset future income tax liabilities, including for state tax purposes. The generation of NOLs subsequent to December 31, 2017 are subject to the Tax Cut and Jobs Act, which removes NOL expirations, but limits utilization against taxable income to 80%. For these reasons, we may not be able to utilize a material portion of the NOLs, even if we return to profitability.

As a provider of high speed data, video and telephony services, we are subject to an array of privacy related laws and regulations that are constantly evolving and can be subject to significant change. In the course of providing service, we collect certain information about our subscribers and their use of our services. Our collection and use of personally identifiable information about our subscribers is subject to a variety of federal and state privacy requirements, including those imposed specifically on cable operators by Section 631 of the Communications Act. That section generally restricts the nonconsensual collection and disclosure to third parties of cable customers' personally identifiable information by cable operators, subject to certain specified exceptions. Several states and numerous local jurisdictions have enacted privacy laws or franchise privacy provisions that apply to cable services. Section 222 of the Communications Act also governs our use of customer proprietary network information ("CPNI") related to our telecommunications services. In addition, FCC regulations apply to our use, disclosure, and protection of CPNI associated with our telecommunications and VoIP telephone service. The FCC's April 2024 Order reclassifying broadband Internet access as a telecommunications service would apply Section 222, but not the FCC's regulations implementing Section 222, to broadband services.  As noted above, that order has been stayed by a federal court of appeals.  We cannot predict the outcome of that appeal or any additional action the FCC may take once that appeal is resolved.  As we continue to provide interactive and other advanced services, additional privacy considerations may arise. Privacy continues to be a major focus of Congress, the Federal Trade Commission, the FCC, the U.S. Department of Commerce, and the states. Additional laws, regulations, or advisory guidelines could affect our ability to use and share customer information under various additional circumstances or generally increase our operating expenses. We are also subject to state and federal regulations and laws regarding information security. Most of these regulations and laws apply to customer information that could be used to commit identity theft. Nearly all U.S. states and the District of Columbia have enacted some form of security breach notification laws. These laws generally require that we give notice to customers whose personal account information has been disclosed because of a security breach. The Communications Act and FCC rules also impose breach notification and information security requirements, which may require that we give notice to customers of breaches in some circumstances where notice would not be required by state law. In December 2023, the FCC adopted an order revising its data breach notification rules to require reporting for both intentional and unintentional unauthorized disclosures of data, including data that constitutes "personally identifiable information," even if that data does not constitute CPNI.  These rules will likely go into effect in 2025, but are currently subject to a legal challenge in a federal court of appeals.  We cannot predict the timing or outcome of that legal challenge or how the FCC may react to the court's decision.  Our efforts to protect customer information may be unsuccessful due to the actions of third parties, technical malfunctions, employee error, employee malfeasance, cyber-criminals, state-sponsored espionage or cyberwarfare, or other factors. If any of these events occur, the confidentiality, integrity, or accessibility of our customers' information could be compromised, and could subsequently be used, accessed or disclosed improperly. Claims resulting from actual or purported violations of these or other federal or state privacy laws could impact our business. Adverse rulings in privacy related litigation or regulatory proceedings could cause us to incur significant expense and liability or result in orders or consent decrees forcing us to modify our business practices. Moreover, because many of these privacy and data security laws are relatively new, there is not a robust body of case law to suggest how courts may interpret compliance or assess fines. Finally, any actual or purported incidents involving unauthorized access to or improper use of the information of our customers could damage our reputation and our brand and diminish our competitive position.