inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data related to our EU users. Additionally, companies that transfer personal data out of the EEA and UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations.
We publish privacy policies, marketing materials and other statements regarding data privacy and security. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences.
Obligations related to data privacy and security (and consumers’ data privacy expectations) are evolving, becoming increasingly stringent, and creating uncertainty. These obligations may be modified, interpreted and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another, other requirements or legal obligations. Future laws, regulations, standards and other obligations, or amendments or changes in the interpretation of existing laws, regulations, standards and other obligations, could impair our or (or the third parties upon whom we rely) ability to collect, use, disclose or otherwise process information relating to employees or consumers, which could decrease demand for our applications, increase our costs and impair our ability to maintain and grow our client and consumer bases and increase revenue. We may at times fail (or be perceived to have failed) in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or third parties on whom we rely may fail to comply with such obligations, which could negatively impact our business operations. Any failure or perceived failure by us or the third parties upon whom we rely to comply with federal, state, provincial or foreign laws or regulations, industry standards, contractual obligations or other legal obligations may result in governmental enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar) and prosecutions, private litigation (including class actions) and mass arbitration demands, adverse publicity that could cause employees, clients and consumers to lose trust in us, additional reporting requirements and/or oversight, bans on processing personal data, and orders to destroy or not use personal data. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in our business; inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.
Governmental regulation of the internet continues to develop, and unfavorable changes could substantially harm our business and operating results.
We are subject to general business regulations and laws as well as federal, state, provincial and foreign laws specifically governing the internet. Existing and future laws and regulations, narrowing of any existing legal safe harbors, or previous or future court decisions may impede the growth of the internet or online products and solutions, and increase the cost of providing online products and solutions. These laws may govern, among other issues, taxation, tariffs, pricing, content, copyrights, distribution, electronic contracts and other communications, consumer protection, broadband residential internet access and the characteristics and quality of offerings. It is not clear how existing laws governing issues such as property ownership, sales, use and other taxes, and libel apply to the internet or online services. There is also a risk that these laws may be interpreted and applied in conflicting ways across jurisdictions, and in a manner that is not consistent with our current practices. Unfavorable resolution of these issues may limit our business activities, expose us to potential legal claims or cause us to spend significant resources on ensuring compliance, any of which could harm our business and operating results.
We may be subject to claims brought against us as a result of content we provide.
We provide educational information regarding the use and potential effects of various types of cannabis products through our platform, including information regarding therapeutic uses for cannabis. If our content, or content we obtain from third parties, contains inaccuracies, it is possible that consumers or others may sue us for various causes of action. Although our website and mobile applications contain terms and conditions, including disclaimers of