and increases the privacy and security obligations of entities handling certain personal information of such consumers. The CCPA has prompted a number of proposals for new federal and state-level privacy legislation. Such proposed legislation, if enacted, may add additional complexity, variation in requirements, restrictions and potential legal risk, require additional investment of resources in compliance programs, impact strategies, and the availability of previously useful data, and could result in increased compliance costs and/or changes in business practices and policies.
The regulatory framework governing the collection, processing, storage, use, and sharing of certain information, particularly financial and other personal information, is rapidly evolving and is likely to continue to be subject to uncertainty and varying interpretations. It is possible that these laws may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the features of our services and platform capabilities. Any failure or perceived failure by us, or any third parties with which we do business, to comply with our posted privacy statements or notices, changing consumer expectations, evolving laws, rules and regulations, industry standards, or contractual obligations to which we or such third parties are or may become subject, may result in actions or other claims against us by governmental entities or private actors, the expenditure of substantial costs, time, and other resources or the incurrence of significant fines, penalties, or other liabilities. In addition, any such action, particularly to the extent we were found to have engaged in violations or otherwise liable for damages, would damage our reputation and adversely affect our business, financial condition, and results of operations.
We cannot yet fully determine the impact these or future laws, rules, regulations, and industry standards may have on our business or operations. Any such laws, rules, regulations, and industry standards may be inconsistent among different jurisdictions, subject to differing interpretations or may conflict with our current or future practices. Additionally, our partners and our customers and their guests may be subject to differing privacy laws, rules, and legislation, which may mean that our partners or customers require us to be bound by varying contractual requirements applicable to certain other jurisdictions. If our customers fail to comply with such privacy laws, rules, or legislation, we could be exposed to liability and our business, financial condition, results of operations, and brand could be adversely affected. Adherence to contractual requirements imposed by our partners or customers may impact our collection, use, processing, storage, sharing, and disclosure of various types of information including financial information and other personal information, and may mean we become bound by, or voluntarily comply with, self-regulatory or other industry standards relating to these matters that may further change as laws, rules, and regulations evolve. Complying with these requirements and changing our policies and practices may be onerous and costly, and we may not be able to respond quickly or effectively to regulatory, legislative, and other developments. These changes may in turn impair our ability to offer our existing or planned features, products, and services, and/or increase our cost of doing business. As we expand our partnerships and our customer base, these requirements may vary from customer to customer, and from guest to guest, further increasing the cost of compliance and doing business.
We publicly post documentation regarding our practices concerning the collection, processing, use, and disclosure of information. Although we endeavor to comply with our published statements, notices, and documentation, we may at times fail to do so or be alleged to have failed to do so. Any failure or perceived failure by us to comply with our privacy statements, notices, or any applicable privacy, security, or data protection, information security, or consumer-protection related laws, regulations, orders, or industry standards could expose us to costly litigation, significant awards, fines or judgments, civil and/or criminal penalties, or negative publicity, and could materially and adversely affect our business, financial condition, and results of operations. The publication of our privacy statements, notices, and other documentation that provide promises and assurances about privacy and security can subject us to potential state and federal action if they are found to be deceptive, unfair, or
63