Privacy and data rules
122 of 521 companies dropped a paragraph in Risk Factors that uses one of these words:
privacy, GDPR, personal data, personal information.
The paragraph was in the earlier 10-K and nothing like it is in the latest.
It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.
By sector
Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.
| Sector | Companies | Compared |
|---|---|---|
| Computer Peripheral Equipment, NEC | 2 | 2 |
| Men's & Boys' Furnishgs, Work Clothg, & Allied Garments | 2 | 2 |
| Rubber & Plastics Footwear | 2 | 2 |
| Transportation Services | 2 | 2 |
| Air Courier Services | 1 | 1 |
| Aircraft | 1 | 1 |
| Communications Equipment, NEC | 1 | 1 |
| Electrical Industrial Apparatus | 1 | 1 |
| Electronic Connectors | 1 | 1 |
| Farm Machinery & Equipment | 1 | 1 |
| Leather & Leather Products | 1 | 1 |
| Misc Industrial & Commercial Machinery & Equipment | 1 | 1 |
| Miscellaneous Food Preparations & Kindred Products | 1 | 1 |
| Newspapers: Publishing or Publishing & Printing | 1 | 1 |
| Paper Mills | 1 | 1 |
| Real Estate | 1 | 1 |
| Retail-Eating & Drinking Places | 1 | 1 |
| Retail-Radio, Tv & Consumer Electronics Stores | 1 | 1 |
| Services-Advertising Agencies | 1 | 1 |
| Services-Misc Health & Allied Services, NEC | 1 | 1 |
| Telephone & Telegraph Apparatus | 1 | 1 |
| Television Broadcasting Stations | 1 | 1 |
| Wholesale-Medical, Dental & Hospital Equipment & Supplies | 1 | 1 |
| Surgical & Medical Instruments & Apparatus | 7 | 10 |
| Computer Communications Equipment | 2 | 3 |
| Services-Consumer Credit Reporting, Collection Agencies | 2 | 3 |
| Services-Computer Programming, Data Processing, Etc. | 3 | 5 |
| Investment Advice | 4 | 8 |
| Retail-Eating Places | 2 | 4 |
| Search, Detection, Navigation, Guidance, Aeronautical Sys | 2 | 4 |
| Accident & Health Insurance | 1 | 2 |
| Aircraft Engines & Engine Parts | 1 | 2 |
| Industrial Organic Chemicals | 1 | 2 |
| Oil & Gas Field Services, NEC | 1 | 2 |
| Printed Circuit Boards | 1 | 2 |
| Pumps & Pumping Equipment | 1 | 2 |
| Refuse Systems | 1 | 2 |
| Retail-Catalog & Mail-Order Houses | 1 | 2 |
| Retail-Family Clothing Stores | 1 | 2 |
| Services-Computer Programming Services | 1 | 2 |
| Services-General Medical & Surgical Hospitals, NEC | 1 | 2 |
| Services-Medical Laboratories | 1 | 2 |
| Services-To Dwellings & Other Buildings | 1 | 2 |
| Ship & Boat Building & Repairing | 1 | 2 |
| Wholesale-Groceries & Related Products | 1 | 2 |
| Finance Services | 12 | 28 |
| Beverages | 2 | 5 |
| Biological Products, (No Diagnostic Substances) | 2 | 5 |
| Computer Storage Devices | 2 | 5 |
| Hospital & Medical Service Plans | 2 | 5 |
| Orthopedic, Prosthetic & Surgical Appliances & Supplies | 2 | 5 |
| National Commercial Banks | 4 | 11 |
| Computer & office Equipment | 1 | 3 |
| Soap, Detergents, Cleang Preparations, Perfumes, Cosmetics | 1 | 3 |
| Semiconductors & Related Devices | 4 | 15 |
| Services-Prepackaged Software | 5 | 19 |
| Services-Business Services, NEC | 4 | 16 |
| Electronic & Other Electrical Equipment (No Computer Equip) | 1 | 4 |
| Motor Vehicles & Passenger Car Bodies | 1 | 4 |
| Security & Commodity Brokers, Dealers, Exchanges & Services | 1 | 4 |
| Hotels & Motels | 1 | 5 |
| Laboratory Analytical Instruments | 1 | 5 |
| Pharmaceutical Preparations | 2 | 11 |
| Electric & Other Services Combined | 2 | 12 |
| Fire, Marine & Casualty Insurance | 2 | 12 |
| Insurance Agents, Brokers & Service | 1 | 6 |
| Petroleum Refining | 1 | 6 |
| State Commercial Banks | 1 | 6 |
| Crude Petroleum & Natural Gas | 1 | 7 |
| Real Estate Investment Trusts | 2 | 27 |
301 paragraphs · Services-Medical Laboratories show all sectors
The Company has previously experienced and expects to continue to experience attempts by unauthorized parties to compromise the Company’s cybersecurity controls, like the 2018 ransomware attack. The Company has also experienced and expects to continue to experience similar attempts by threat actors to penetrate the systems of third-party suppliers and vendors to whom the Company has provided data, like the 2019 AMCA data breach. These attempts, if successful, could result in the misappropriation or compromise of personal information or proprietary or confidential information stored within the Company's systems or within the systems of third parties, create system disruptions or cause shutdowns. Threat actors have a variety of attack methods, including without limitation, by developing and deploying viruses, worms, and other malicious software programs that attack the Company’s systems, the systems of third-parties, or otherwise exploit any security vulnerabilities. In addition, the increased use of AI by threat actors is enhancing the scale sophistication and effectiveness of their cyberattacks. Outside parties may also attempt to fraudulently induce employees to take actions, including the release of confidential or sensitive information or to make fraudulent payments through illegal electronic spamming, phishing, spear phishing, and other tactics.
Read in the 10-K filed Feb 25, 2025 ↗
The Company depends on third parties to provide services critical to the Company's business, including supplies, ground and air transport of clinical and diagnostic testing supplies and specimens, research products, and people, among other services and depends on them to comply with applicable laws and regulations. Third parties that provide services to the Company are subject to similar risks related to security of customer-related information and compliance with U.S., state, local, or international environmental, health and safety, and privacy and security laws and regulations as the Company. Any failure by third parties to comply with applicable laws, or any failure of third parties to provide services more generally, could have a material impact on the Company, whether because of the loss of the ability to receive services from the third parties, legal liability of the Company for the actions or inactions of third parties, or otherwise.
Read in the 10-K filed Feb 25, 2025 ↗
In addition, third parties to whom the Company outsources certain services or functions may process personal data, or other confidential information of the Company. A cybersecurity incident affecting these third parties, like the AMCA Incident, could also harm the Company's business, results of operations and reputation.
Read in the 10-K filed Feb 25, 2025 ↗