Privacy and data rules
173 of 521 companies added a paragraph in Risk Factors that uses one of these words:
privacy, GDPR, personal data, personal information.
The paragraph is in the latest 10-K and nothing like it was in the one before.
It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.
By sector
Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.
| Sector | Companies | Compared |
|---|---|---|
| Orthopedic, Prosthetic & Surgical Appliances & Supplies | 5 | 5 |
| Computer Peripheral Equipment, NEC | 2 | 2 |
| Instruments For Meas & Testing of Electricity & Elec Signals | 2 | 2 |
| Men's & Boys' Furnishgs, Work Clothg, & Allied Garments | 2 | 2 |
| Rubber & Plastics Footwear | 2 | 2 |
| Air Courier Services | 1 | 1 |
| Apparel & Other Finishd Prods of Fabrics & Similar Matl | 1 | 1 |
| Bottled & Canned Soft Drinks & Carbonated Waters | 1 | 1 |
| Electronic Components & Accessories | 1 | 1 |
| Electronic Connectors | 1 | 1 |
| Engines & Turbines | 1 | 1 |
| Gas & Other Services Combined | 1 | 1 |
| General Industrial Machinery & Equipment, NEC | 1 | 1 |
| Grain Mill Products | 1 | 1 |
| Leather & Leather Products | 1 | 1 |
| Meat Packing Plants | 1 | 1 |
| Misc Industrial & Commercial Machinery & Equipment | 1 | 1 |
| Miscellaneous Food Preparations & Kindred Products | 1 | 1 |
| Oil & Gas Field Machinery & Equipment | 1 | 1 |
| Paints, Varnishes, Lacquers, Enamels & Allied Prods | 1 | 1 |
| Paper Mills | 1 | 1 |
| Radiotelephone Communications | 1 | 1 |
| Real Estate | 1 | 1 |
| Retail-Drug Stores and Proprietary Stores | 1 | 1 |
| Retail-Eating & Drinking Places | 1 | 1 |
| Retail-Radio, Tv & Consumer Electronics Stores | 1 | 1 |
| Retail-Retail Stores, NEC | 1 | 1 |
| Rolling Drawing & Extruding of Nonferrous Metals | 1 | 1 |
| Services-Advertising Agencies | 1 | 1 |
| Services-Detective, Guard & Armored Car Services | 1 | 1 |
| Services-Equipment Rental & Leasing, NEC | 1 | 1 |
| Services-Miscellaneous Amusement & Recreation | 1 | 1 |
| Services-Video Tape Rental | 1 | 1 |
| Special Industry Machinery, NEC | 1 | 1 |
| Water Supply | 1 | 1 |
| Wholesale-Medical, Dental & Hospital Equipment & Supplies | 1 | 1 |
| Computer Communications Equipment | 2 | 3 |
| Electronic Computers | 2 | 3 |
| Measuring & Controlling Devices, NEC | 2 | 3 |
| Retail-Auto Dealers & Gasoline Stations | 2 | 3 |
| Services-Commercial Physical & Biological Research | 2 | 3 |
| Services-Computer Integrated Systems Design | 2 | 3 |
| Services-Consumer Credit Reporting, Collection Agencies | 2 | 3 |
| Services-Prepackaged Software | 12 | 19 |
| Finance Services | 17 | 28 |
| Biological Products, (No Diagnostic Substances) | 3 | 5 |
| Computer Storage Devices | 3 | 5 |
| Industrial Instruments For Measurement, Display, and Control | 3 | 5 |
| Electronic & Other Electrical Equipment (No Computer Equip) | 2 | 4 |
| Retail-Eating Places | 2 | 4 |
| Services-Computer Processing & Data Preparation | 2 | 4 |
| Accident & Health Insurance | 1 | 2 |
| Cigarettes | 1 | 2 |
| Cutlery, Handtools & General Hardware | 1 | 2 |
| Industrial Organic Chemicals | 1 | 2 |
| Mining & Quarrying of Nonmetallic Minerals (No Fuels) | 1 | 2 |
| Paperboard Containers & Boxes | 1 | 2 |
| Printed Circuit Boards | 1 | 2 |
| Radio & Tv Broadcasting & Communications Equipment | 1 | 2 |
| Retail-Auto & Home Supply Stores | 1 | 2 |
| Services-Medical Laboratories | 1 | 2 |
| Services-To Dwellings & Other Buildings | 1 | 2 |
| Telephone Communications (No Radiotelephone) | 1 | 2 |
| Transportation Services | 1 | 2 |
| Trucking (No Local) | 1 | 2 |
| Wholesale-Groceries & Related Products | 1 | 2 |
| Services-Computer Programming, Data Processing, Etc. | 2 | 5 |
| Services-Business Services, NEC | 6 | 16 |
| Investment Advice | 3 | 8 |
| National Commercial Banks | 4 | 11 |
| Real Estate Investment Trusts | 9 | 27 |
| Insurance Agents, Brokers & Service | 2 | 6 |
| Air-Cond & Warm Air Heatg Equip & Comm & Indl Refrig Equip | 1 | 3 |
| Computer & office Equipment | 1 | 3 |
| Life Insurance | 1 | 3 |
| Perfumes, Cosmetics & Other Toilet Preparations | 1 | 3 |
| Retail-Building Materials, Hardware, Garden Supply | 1 | 3 |
| Soap, Detergents, Cleang Preparations, Perfumes, Cosmetics | 1 | 3 |
| Surgical & Medical Instruments & Apparatus | 3 | 10 |
| Security Brokers, Dealers & Flotation Companies | 2 | 7 |
| Semiconductors & Related Devices | 4 | 15 |
| Search, Detection, Navigation, Guidance, Aeronautical Sys | 1 | 4 |
| Security & Commodity Brokers, Dealers, Exchanges & Services | 1 | 4 |
| Hospital & Medical Service Plans | 1 | 5 |
| Hotels & Motels | 1 | 5 |
| Laboratory Analytical Instruments | 1 | 5 |
| Retail-Variety Stores | 1 | 5 |
| Pharmaceutical Preparations | 2 | 11 |
| Fire, Marine & Casualty Insurance | 2 | 12 |
| Petroleum Refining | 1 | 6 |
| State Commercial Banks | 1 | 6 |
| Crude Petroleum & Natural Gas | 1 | 7 |
| Electric Services | 2 | 15 |
432 paragraphs · Computer Storage Devices show all sectors
cybersecurity threats and also may suffer cybersecurity incidents or other security breaches. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. In addition, supply-chain attacks have increased in frequency and severity, and third parties’ infrastructure in our supply chain or our third-party partners’ supply chains may become compromised. A cybersecurity incident at a third-party service provider could result in unauthorized access to or disclosure of personal data for which NetApp has protection obligations, potentially triggering breach notification requirements across multiple jurisdictions and exposing NetApp to regulatory enforcement actions, fines, and litigation.
Read in the 10-K filed Jun 5, 2026 ↗
We have implemented security measures designed to prevent, detect, and respond to cybersecurity threats, but these measures may not be effective against all threats or prevent every incident. We cannot guarantee that our or our third party providers’ products, systems, components, software, or infrastructure are free of exploitable defects, bugs, or vulnerabilities, and use of AI technologies by us or our customers, suppliers, or other third parties may increase the complexity and effectiveness of cybersecurity threats and introduce new vulnerabilities into systems, software, products, and business processes. A cybersecurity incident or other compromise of our products, systems, or AI technologies used in our business, or those of our customers or third party providers, could result in unauthorized access to, disclosure, loss, misuse, or corruption of proprietary, confidential, or personal information, including intellectual property or information about our manufacturing, financials, customers, or employees. Cybersecurity incidents, as well as efforts to prevent, detect, or respond to such incidents, also may impair the functionality of our products, information technology systems, manufacturing operations, supply chain activities, product development efforts, or other critical business functions, or result in increased costs associated with investigation, containment, remediation and recovery, product updates, customer support, customer claims, contractual disputes, litigation, indemnification obligations, regulatory investigations, fines or penalties, damage to our reputation, and reduced sales or profitability. Any of these events, whether affecting our systems directly, the products and services we provide, or the systems of third parties on which we depend, could have a material adverse effect on our business, financial condition, and results of operations.
Read in the 10-K filed Aug 4, 2026 ↗
In addition, the use of AI in the development of our products could potentially lead to ambiguities in intellectual property ownership, infringement or misappropriation risks, which could impact our competitive position and expose us to litigation, monetary penalties, or operational disruptions. The unauthorized or unapproved use of generative AI tools by our employees, contractors, or other third parties, as well as overreliance on AI automation or agentic AI without appropriate human oversight, may lead to the inadvertent disclosure of confidential, proprietary, or personal information, flawed or unauthorized actions, or other adverse consequences, including disruptions to business operations, exposing us to data security, privacy, legal, regulatory, and reputational risks.
Read in the 10-K filed Aug 14, 2026 ↗
controversy due to their perceived or actual impact on society, including concerns relating to human rights, privacy, employment, or other social, economic, or political issues, we may experience reputational harm, competitive harm, or legal liability, even if we do not directly control the end-use applications.
Read in the 10-K filed Aug 14, 2026 ↗