Privacy and data rules
122 of 521 companies dropped a paragraph in Risk Factors that uses one of these words:
privacy, GDPR, personal data, personal information.
The paragraph was in the earlier 10-K and nothing like it is in the latest.
It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.
By sector
Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.
| Sector | Companies | Compared |
|---|---|---|
| Computer Peripheral Equipment, NEC | 2 | 2 |
| Men's & Boys' Furnishgs, Work Clothg, & Allied Garments | 2 | 2 |
| Rubber & Plastics Footwear | 2 | 2 |
| Transportation Services | 2 | 2 |
| Air Courier Services | 1 | 1 |
| Aircraft | 1 | 1 |
| Communications Equipment, NEC | 1 | 1 |
| Electrical Industrial Apparatus | 1 | 1 |
| Electronic Connectors | 1 | 1 |
| Farm Machinery & Equipment | 1 | 1 |
| Leather & Leather Products | 1 | 1 |
| Misc Industrial & Commercial Machinery & Equipment | 1 | 1 |
| Miscellaneous Food Preparations & Kindred Products | 1 | 1 |
| Newspapers: Publishing or Publishing & Printing | 1 | 1 |
| Paper Mills | 1 | 1 |
| Real Estate | 1 | 1 |
| Retail-Eating & Drinking Places | 1 | 1 |
| Retail-Radio, Tv & Consumer Electronics Stores | 1 | 1 |
| Services-Advertising Agencies | 1 | 1 |
| Services-Misc Health & Allied Services, NEC | 1 | 1 |
| Telephone & Telegraph Apparatus | 1 | 1 |
| Television Broadcasting Stations | 1 | 1 |
| Wholesale-Medical, Dental & Hospital Equipment & Supplies | 1 | 1 |
| Surgical & Medical Instruments & Apparatus | 7 | 10 |
| Computer Communications Equipment | 2 | 3 |
| Services-Consumer Credit Reporting, Collection Agencies | 2 | 3 |
| Services-Computer Programming, Data Processing, Etc. | 3 | 5 |
| Investment Advice | 4 | 8 |
| Retail-Eating Places | 2 | 4 |
| Search, Detection, Navigation, Guidance, Aeronautical Sys | 2 | 4 |
| Accident & Health Insurance | 1 | 2 |
| Aircraft Engines & Engine Parts | 1 | 2 |
| Industrial Organic Chemicals | 1 | 2 |
| Oil & Gas Field Services, NEC | 1 | 2 |
| Printed Circuit Boards | 1 | 2 |
| Pumps & Pumping Equipment | 1 | 2 |
| Refuse Systems | 1 | 2 |
| Retail-Catalog & Mail-Order Houses | 1 | 2 |
| Retail-Family Clothing Stores | 1 | 2 |
| Services-Computer Programming Services | 1 | 2 |
| Services-General Medical & Surgical Hospitals, NEC | 1 | 2 |
| Services-Medical Laboratories | 1 | 2 |
| Services-To Dwellings & Other Buildings | 1 | 2 |
| Ship & Boat Building & Repairing | 1 | 2 |
| Wholesale-Groceries & Related Products | 1 | 2 |
| Beverages | 2 | 5 |
| Biological Products, (No Diagnostic Substances) | 2 | 5 |
| Computer Storage Devices | 2 | 5 |
| Hospital & Medical Service Plans | 2 | 5 |
| Orthopedic, Prosthetic & Surgical Appliances & Supplies | 2 | 5 |
| Finance Services | 11 | 28 |
| National Commercial Banks | 4 | 11 |
| Semiconductors & Related Devices | 5 | 15 |
| Computer & office Equipment | 1 | 3 |
| Soap, Detergents, Cleang Preparations, Perfumes, Cosmetics | 1 | 3 |
| Services-Prepackaged Software | 5 | 19 |
| Services-Business Services, NEC | 4 | 16 |
| Electronic & Other Electrical Equipment (No Computer Equip) | 1 | 4 |
| Motor Vehicles & Passenger Car Bodies | 1 | 4 |
| Security & Commodity Brokers, Dealers, Exchanges & Services | 1 | 4 |
| Hotels & Motels | 1 | 5 |
| Laboratory Analytical Instruments | 1 | 5 |
| Pharmaceutical Preparations | 2 | 11 |
| Electric & Other Services Combined | 2 | 12 |
| Fire, Marine & Casualty Insurance | 2 | 12 |
| Insurance Agents, Brokers & Service | 1 | 6 |
| Petroleum Refining | 1 | 6 |
| State Commercial Banks | 1 | 6 |
| Crude Petroleum & Natural Gas | 1 | 7 |
| Real Estate Investment Trusts | 2 | 27 |
301 paragraphs · Petroleum Refining show all sectors
The GDPR applies to the transfer and processing of personal data of those who live in the EU or UK, respectively. As interpretation and enforcement of the GDPR evolves, it creates a range of new compliance obligations, which could cause us to incur additional costs. Failure to comply could result in significant penalties that may materially adversely affect our business, reputation, results of operations and cash flows.
Read in the 10-K filed Feb 21, 2025 ↗
The CCPA, which came into effect on January 1, 2020, gives California residents specific rights in relation to their personal information, requires that companies take certain actions, including notifications for security incidents and may apply to activities regarding personal information that is collected by us, directly or indirectly, from California residents. As interpretation and enforcement of the CCPA evolves, it creates a range of new compliance obligations, with the possibility for significant financial penalties for noncompliance that may materially adversely affect our business, reputation, results of operations and cash flows.
Read in the 10-K filed Feb 21, 2025 ↗
Comprehensive privacy laws with some similarities to the CCPA have been proposed or passed at the U.S. federal and state levels, such as the Colorado Privacy Act. Additionally, the Federal Trade Commission and many state attorneys general are interpreting federal and state consumer protection laws to impose standards for the online collection, use, dissemination and security of data as well as requiring disclosures about these practices. Existing and potential future data privacy laws pose increasingly complex compliance challenges and potentially elevate our costs. Any failure by us to comply with these laws and regulations, including as a result of a security or privacy breach, could result in significant penalties and liabilities for us. Additionally, if we acquire a company that has violated or is not in compliance with applicable data protection laws, we may incur significant liabilities and penalties as a result.
Read in the 10-K filed Feb 21, 2025 ↗