Risks Related to Legal Matters and Regulations
Privacy concerns and laws, or other regulations, may adversely affect EVgo’s business.
State and local governments and agencies in the jurisdictions in which EVgo operates, and in which customers operate, have adopted, are considering adopting, or may adopt laws and regulations regarding the collection, use, storage, processing, and disclosure of information regarding consumers and other individuals, which could impact EVgo’s ability to offer services in certain jurisdictions. Laws and regulations relating to the collection, use, disclosure, security, and other processing of individuals’ information can vary significantly from jurisdiction to jurisdiction. The costs of compliance with, and other burdens imposed by, laws, regulations, standards, and other obligations relating to privacy, data protection, and information security are significant. In addition, some companies, particularly larger enterprises, often will not contract with vendors that do not meet these rigorous standards. Accordingly, the failure, or perceived inability, to comply with these laws, regulations, standards, and other obligations may limit the use and adoption of EVgo’s products and services, reduce overall demand, lead to regulatory investigations, litigation, and significant fines, penalties, or liabilities for actual or alleged noncompliance, or slow the pace at which EVgo closes sales transactions, any of which could harm EVgo’s business. Moreover, if EVgo or any of EVgo’s employees or contractors fail or are believed to fail to adhere to appropriate practices regarding customers’ data, it may damage EVgo’s reputation and brand.
Additionally, existing laws, regulations, standards, and other obligations may be interpreted in new and differing manners in the future and may be inconsistent among jurisdictions. Future laws, regulations, standards, and other obligations, and changes in the interpretation of existing laws, regulations, standards, and other obligations could result in increased regulation, increased costs of compliance and penalties for non-compliance, and limitations on data collection, use, disclosure, and transfer for the Company and EVgo’s customers. Further, California adopted the California Consumer Privacy Protection Act (“CCPA”), and the California State Attorney General has begun enforcement actions. Further, on November 3, 2020, California voters approved the California Privacy Rights Act (“CPRA”). Although EVgo initiated a compliance program designed to comply with CCPA after consulting with outside privacy counsel, EVgo remains exposed to ongoing legal risks related to the CCPA and the expansion of the CCPA under the CPRA, which becomes effective January 1, 2023. The costs of compliance with, and other burdens imposed by, laws and regulations relating to privacy, data protection, and information security that are applicable to the businesses of customers may adversely affect the ability and willingness to process, handle, store, use, and transmit certain types of information, such as demographic and other personal information.
In addition to government activity, privacy advocacy groups, the technology industry and other industries have established or may establish various new, additional or different self-regulatory standards that may place additional burdens on technology companies. Customers may expect that EVgo will meet voluntary certifications or adhere to other standards established by them or third parties. If EVgo is unable to maintain these certifications or meet these standards, it could reduce demand for EVgo’s solutions and adversely affect EVgo’s business.
Existing and future environmental health and safety laws and regulations could result in increased compliance costs or additional operating costs or construction costs and restrictions. Failure to comply with such laws and regulations may result in substantial fines or other limitations that may adversely impact EVgo’s financial results or results of operation.
EVgo and EVgo’s operations, as well as those of EVgo’s contractors, suppliers and customers, are subject to certain environmental laws and regulations, including laws related to the use, handling, storage, transportation and disposal of hazardous substances and wastes, as well as electronic wastes and hardware, whether hazardous or not. These laws may require the Company or others in EVgo’s value chain to obtain permits and comply with procedures that impose various restrictions and obligations that may have material effects on EVgo’s operations. If key permits and approvals cannot be obtained on acceptable terms, or if other operational requirements cannot be met in a manner satisfactory for EVgo’s operations or on a timeline that meets EVgo’s commercial obligations, it may adversely impact EVgo’s business.
Environmental and health and safety laws and regulations can be complex and may be subject to change, such as through new requirements enacted at the supranational, national, sub-national, and/or local level or new or modified regulations that may be implemented under existing law. The nature and extent of any changes in these laws, rules,