China
81 of 521 companies dropped a paragraph in Risk Factors that uses one of these words:
China, Chinese, PRC, Hong Kong, Taiwan.
The paragraph was in the earlier 10-K and nothing like it is in the latest.
It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.
By sector
Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.
| Sector | Companies | Compared |
|---|---|---|
| Apparel & Other Finishd Prods of Fabrics & Similar Matl | 1 | 1 |
| Canned, Frozen & Preservd Fruit, Veg & Food Specialties | 1 | 1 |
| Canned, Fruits, Veg, Preserves, Jams & Jellies | 1 | 1 |
| Communications Equipment, NEC | 1 | 1 |
| Electrical Industrial Apparatus | 1 | 1 |
| Electronic Connectors | 1 | 1 |
| Farm Machinery & Equipment | 1 | 1 |
| Games, Toys & Children's Vehicles (No Dolls & Bicycles) | 1 | 1 |
| Meat Packing Plants | 1 | 1 |
| Miscellaneous Food Preparations & Kindred Products | 1 | 1 |
| Motor Vehicle Parts & Accessories | 1 | 1 |
| Ordnance & Accessories, (No Vehicles/Guided Missiles) | 1 | 1 |
| Paper Mills | 1 | 1 |
| Retail-Eating & Drinking Places | 1 | 1 |
| Retail-Radio, Tv & Consumer Electronics Stores | 1 | 1 |
| Special Industry Machinery, NEC | 1 | 1 |
| Telephone & Telegraph Apparatus | 1 | 1 |
| Wholesale-Motor Vehicle Supplies & New Parts | 1 | 1 |
| X-Ray Apparatus & Tubes & Related Irradiation Apparatus | 1 | 1 |
| Computer Communications Equipment | 2 | 3 |
| Plastic Materials, Synth Resins & Nonvulcan Elastomers | 2 | 3 |
| Motor Vehicles & Passenger Car Bodies | 2 | 4 |
| Search, Detection, Navigation, Guidance, Aeronautical Sys | 2 | 4 |
| Aircraft Engines & Engine Parts | 1 | 2 |
| Fats & Oils | 1 | 2 |
| Industrial Organic Chemicals | 1 | 2 |
| Instruments For Meas & Testing of Electricity & Elec Signals | 1 | 2 |
| Printed Circuit Boards | 1 | 2 |
| Pumps & Pumping Equipment | 1 | 2 |
| Radio & Tv Broadcasting & Communications Equipment | 1 | 2 |
| Retail-Auto & Home Supply Stores | 1 | 2 |
| Retail-Lumber & Other Building Materials Dealers | 1 | 2 |
| Rubber & Plastics Footwear | 1 | 2 |
| Services-Medical Laboratories | 1 | 2 |
| Semiconductors & Related Devices | 6 | 15 |
| Orthopedic, Prosthetic & Surgical Appliances & Supplies | 2 | 5 |
| Electronic Computers | 1 | 3 |
| Perfumes, Cosmetics & Other Toilet Preparations | 1 | 3 |
| Finance Services | 9 | 28 |
| Pharmaceutical Preparations | 3 | 11 |
| Investment Advice | 2 | 8 |
| Electronic & Other Electrical Equipment (No Computer Equip) | 1 | 4 |
| Retail-Eating Places | 1 | 4 |
| Surgical & Medical Instruments & Apparatus | 2 | 10 |
| Laboratory Analytical Instruments | 1 | 5 |
| Retail-Variety Stores | 1 | 5 |
| Services-Computer Programming, Data Processing, Etc. | 1 | 5 |
| National Commercial Banks | 2 | 11 |
| Petroleum Refining | 1 | 6 |
| Security Brokers, Dealers & Flotation Companies | 1 | 7 |
| Services-Business Services, NEC | 2 | 16 |
| Real Estate Investment Trusts | 3 | 27 |
| Services-Prepackaged Software | 2 | 19 |
| Electric Services | 1 | 15 |
193 paragraphs · Services-Prepackaged Software show all sectors
Several other countries, including China, Australia, New Zealand, Brazil, and Japan, have also established specific legal requirements for cross-border data transfers. There is also an increasing trend towards data localization policies. For example, China and India have introduced localization requirements for certain data. Other countries also are considering data localization requirements. If this trend continues, and countries implement more restrictive regulations for cross-border personal data transfers (or do not permit personal data to leave the country of origin), it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and our business, financial condition, and results of operations in those jurisdictions could be impacted.
Read in the 10-K filed Mar 6, 2025 ↗
Other countries have imposed or may in the future impose data localization obligations, cross-border data transfer restrictions, and other country specific privacy and security requirements which could be problematic to cloud software and data providers. For example, in 2021, China adopted the Personal Information Protection Law, which, together with the Cybersecurity Law and the Data Security Law, require companies that process personal data of China residents above certain thresholds to seek approval from the Cyberspace Administration of China (CAC) to transfer such data outside of China. In 2023, certain of our Veeva CRM customers in China were required to request such approval from the CAC and had their requests denied. Customers required to request approval may need to implement a CRM solution that does not require data to be transferred outside of China and customers not subject to the requirement may nonetheless choose to do so. While we offer the China CRM Suite, a CRM solution that does not require data to be transferred outside of China, some customers have chosen, and other customers may choose, other CRM providers, which may negatively impact our CRM business in China. Currently, approximately 2% of our total revenue is attributable to China. Additionally, as we expand our data product offerings into new jurisdictions, we are required to assess, monitor, and comply with additional laws and regulations related to our collection and processing of data, which may include new registration, consent, and notification obligations.
Read in the 10-K filed Mar 24, 2025 ↗
U.S. federal and state data privacy laws are rapidly evolving. These laws impose new and modify existing obligations on businesses that collect personal information, create new privacy rights for individuals, and contain enhanced requirements for and restrictions on data brokers. For example, under the California Consumer Privacy Act (CCPA), as amended, we are generally considered a “service provider” for our software solutions and a “business” for our data products. Some of these laws and regulations also target certain types of marketing and advertising based on the use of personal information. The State of Washington, for example, passed the My Health My Data Act, which became effective on March 21, 2024, establishing significant new restrictions on how businesses can collect, use, and disclose consumer health data. Veeva Crossix’s data platform combines large-scale data sets, inclusive of de-identified health and consumer data, to provide insights, analytics, and audience segmentation for our life sciences customers in the U.S. In response to the Washington law, we made modifications to our audience segments that may reduce demand for our Crossix products, which, in turn, could adversely impact the business. Other states have considered, and in certain cases enacted, similar laws. Additionally, the U.S. Department of Justice recently issued a final rule that takes effect on April 8, 2025, and places limitations, and in some cases prohibitions, on certain transfers of sensitive personal data to data to business partners located in China or with other specified links to China and other designated countries. These various laws, regulations, and legislative developments have potentially far-reaching consequences and have and may continue to require us to modify our solutions and data management practices and incur substantial expense in order to comply.
Read in the 10-K filed Mar 24, 2025 ↗