Coursera Inc
For the period ended Jun 30, 2024. Filed Aug 1, 2024.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Jun 30, 2024 · Filed Aug 1, 2024
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2024-03-31; filed 2024-05-02.
0001651562-24-000035
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsCurrent report: 10-Q
Period ended 2024-06-30; filed 2024-08-01.
0001651562-24-000049
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 375 previous paragraphs and 421 current paragraphs.
330 unchanged; 44 reworded; 47 added; 1 removed; 0 previous and 0 current paragraphs rearranged.
Tables are not compared: 1 previous and 1 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (47)
Current report
The scalability and flexibility of our platforms depend on the functionality of our technology and network infrastructure and our ability to handle increased traffic and demand for bandwidth. The growth in registered learners and Enterprise customers using our platform and the amount of educational content available through our platform has increased the amount of data and requests that we process.
Current report
Federal funding and Congressional and DOE rule-making and priorities with respect to educational programs are subject to change, including as a result of U.S. presidential and congressional elections and political appointments, and such changes may have a material adverse impact on our business, financial condition, and results of operations.
Current report
State legislation could negatively affect our Degrees business model.
Current report
Effective July 1, 2024, a newly enacted Minnesota law prohibits their public universities from entering into revenue share arrangements to procure marketing and recruiting services in support of their online programs. The Minnesota law also mandates institutional approval for OPM contracts, sets strict reporting and marketing guidelines, and includes a temporary exemption for certain contracts modified before July 1, 2023. In the past, other states, such as California, Florida, and New Jersey, have considered similar legislation to Minnesota, but none have been enacted to date. Our current Degrees business model may be negatively affected by such state legislation, and we may be required to make changes to our model and renegotiate the terms of our university partner agreements with public universities located in such states. If we are unable to comply with the terms of such state legislation or negotiate terms with public universities acceptable under such state legislation, we may have to terminate our Degrees business model in those states, and our ability to generate revenue may be adversely affected.
Current report
If we were to become classified as a third-party service (“TPS”) under the HEA, we and our Title IV participating university partners would be subject to new compliance requirements, which could adversely impact our business and operations.
Showing the first 40 of 47 passages. Open the source sections for the rest.
Removed paragraphs (1)
Previous report
Expected guidance from the DOE could classify us as a third-party servicer (“TPS”) under the HEA and could impose new compliance burdens on us and our Title IV participating university partners.
Reworded paragraphs (44)
Previous wording
Our historical growth may not be indicative of our future growth, and our revenue growth rate may decline compared to prior years. Accordingly, you should not rely on our revenue for any previous annual or quarterly period as any indication of our revenue or revenue growth in future periods. As we grow our business, we expect our revenue growth rates to decline compared to prior years for a number of reasons, which may include more challenging comparisons to prior periods as our revenue grows, slowing demand for our platform or offerings, slowing growth of our sales, increasing competition, increasing regulation, a decrease in the growth of our overall market or market saturation, and our failure to capitalize on growth opportunities. In addition, our growth rates are likely to experience increased volatility, and may decline, due to inflation and currency and interest rate fluctuations, the world's recovery from the COVID-19 pandemic, and related shifts in societal and economic circumstances.
Current wording
Our historical growth may not be indicative of our future growth, and our revenue growth rate may decline compared to prior years. Accordingly, you should not rely on our revenue for any previous annual or quarterly period as any indication of our revenue or revenue growth in future periods. As we grow our business, we expect our revenue growth rates may decline compared to prior years for a number of reasons, which may include more challenging comparisons to prior periods as our revenue grows, slowing demand for our platform or offerings, slowing growth of our sales, increasing competition, increasing regulation, a decrease in the growth of our overall market or market saturation, and our failure to capitalize on growth opportunities. In addition, our growth rates are likely to experience increased volatility, and may decline, due to inflation and currency and interest rate fluctuations, and related shifts in societal and economic circumstances.
Previous wording
•our ability to maintain existing customers and attract new customers, including businesses, governmental organizations, and educational institutions that subscribe to our Enterprise platform, as well as learners who access the content and credentialing programs available on our platform;
Current wording
•our ability to maintain existing customers and attract new customers, including businesses, government organizations, academic institutions, and other organizations that subscribe to our Enterprise platform, as well as learners who access the content and credentialing programs available on our platform;
Previous wording
•changes in, or trends affecting, subscriptions to our Enterprise platform from businesses, governmental organizations, and educational institutions;
Current wording
•changes in, or trends affecting, subscriptions to our Enterprise platform from businesses, government organizations, academic institutions, and other organizations;
Previous wording
•changes in, or trends affecting, the mix of partners, including educational institutions, offering open online courses only and those offering certification, degree, or other credentialing programs;
Current wording
•changes in, or trends affecting, the mix of partners, including academic institutions, offering open online courses only and those offering certification, degree, or other credentialing programs;
Previous wording
The success of our business depends in large part on the continued and increased development and volume of compelling educational content and credentialing programs by our university and industry partners, which we refer to collectively as our educator partners, as well as maintaining existing educational content and credentialing programs. We have faced, and may continue to face challenges in establishing, maintaining, and expanding these relationships. For instance, our educator partners who use our platform are required to invest significant time and resources to adjust the manner in which they develop educational content and credentialing programs for an online learning environment. The delivery of degree programs online at educational institutions has not yet achieved widespread acceptance, and administrators and faculty members may have concerns regarding the perceived loss of control over the educational process that might result from offering courses and degrees online, the effectiveness of asynchronous learning, the heightened potential for learners to use generative AI tools to generate their online coursework, as well as concerns regarding the ability to provide high-quality education online that maintains the standards they set for their on-campus programs. There can be no assurance that online programs, such as those offered on our platform, will ever achieve significant market acceptance, and universities and organizations may therefore decline to engage with our platform. Further, if we were to lose a significant number of educator partners, including those who provide a significant portion of the educational content and credentialing programs available on our platform, or are no longer able to offer certain educational content or credentialing programs on our platform, particularly those in high demand, our reputation, growth, and revenue would be materially and adversely impacted. For the three months ended March 31, 2024, we generated approximately 31% of our total revenue from the content and credentialing programs of five partners. Total revenue includes both revenue directly attributable to a particular partner and revenue that we do not consider directly attributable, such as revenue from site-wide subscriptions or our Coursera for Teams offering. The loss of or reduction in educational content and credentialing programs from such partners could negatively affect our ability to sustain or generate revenue or reach future profitability, and would materially and adversely affect our business, financial condition, or results of operation if we are unable to timely secure comparable educational content and credentialing programs at a favorable cost from other partners.
Current wording
The success of our business depends in large part on the continued and increased development and volume of compelling educational content and credentialing programs by our university and industry partners, which we refer to collectively as our educator partners, as well as maintaining existing educational content and credentialing programs. We have faced, and may continue to face challenges in establishing, maintaining, and expanding these relationships. For instance, our educator partners who use our platform are required to invest significant time and resources to adjust the manner in which they develop educational content and credentialing programs for an online learning environment. The delivery of degree programs online at academic institutions has not yet achieved widespread acceptance, and administrators and faculty members may have concerns regarding the perceived loss of control over the educational process that might result from offering courses and degrees online, the effectiveness of asynchronous learning, the heightened potential for learners to use generative AI tools to generate their online coursework, as well as concerns regarding the ability to provide high-quality education online that maintains the standards they set for their on-campus programs. There can be no assurance that online programs, such as those offered on our platform, will ever achieve significant market acceptance, and universities and organizations may therefore decline to engage with our platform. Further, if we were to lose a significant number of educator partners, including those who provide a significant portion of the educational content and credentialing programs available on our platform, or are no longer able to offer certain educational content or credentialing programs on our platform, particularly those in high demand, our reputation, growth, and revenue would be materially and adversely impacted. For the six months ended June 30, 2024, we generated approximately 30% of our total revenue from the content and credentialing programs of five partners. Total revenue includes both revenue directly attributable to a particular partner and revenue that we do not consider directly attributable, such as revenue from site-wide subscriptions or our Coursera for Teams offering. The loss of or reduction in educational content and credentialing programs from such partners could negatively affect our ability to sustain or generate revenue or reach future profitability, and would materially and adversely affect our business, financial condition, or results of operation if we are unable to timely secure comparable educational content and credentialing programs at a favorable cost from other partners.
Previous wording
•Harm to educator partner reputation. Many factors affecting our educator partners’ reputations are beyond our control and can change over time, including their academic performance and ranking among educational institutions, including with respect to a specific degree, certification, or other credentialing program.
Current wording
•Harm to educator partner reputation. Many factors affecting our educator partners’ reputations are beyond our control and can change over time, including their academic performance and ranking among academic institutions, including with respect to a specific degree, certification, or other credentialing program.
Previous wording
•General economic conditions. Enrollment in the courses and credentialing programs offered on our platform may be affected by changes in the U.S. economy and by global economic conditions. For example, an improvement in economic conditions may reduce demand for higher educational services as potential learners may find adequate employment without additional education. Conversely, a decline in employment opportunities or economic conditions may reduce employers’ willingness to sponsor higher educational opportunities for employees given a lack of employer need for enhanced skill sets or an inability to fund such programs and could discourage learners from pursuing higher education due to an inability to afford our programs or a perception that the financial investment may not result in increased earning potential or improved employment opportunities.
Current wording
•General economic conditions. Enrollment in the courses and credentialing programs offered on our platform may be affected by changes in the U.S. economy and by global economic conditions. For example, an improvement in economic conditions may reduce demand for higher educational services as potential learners may find adequate employment without additional education. Conversely, a decline in employment opportunities or economic conditions may reduce employers’ willingness to sponsor higher educational opportunities for employees given a lack of employer need for enhanced skill sets or an inability to fund such programs and could discourage learners from pursuing higher education due to an inability to afford our programs or a perception that the financial investment may not result in increased earning potential or improved employment opportunities. In addition, if current macroeconomic conditions persist or deteriorate, our ability to attract and retain paid subscribers in our Consumer segment, as well as current and prospective customers in our Enterprise segment, could be adversely affected by reductions or delays in their spending decisions.
Previous wording
If we fail to manage the growth of our business both in terms of scale and complexity, our operating results and financial condition could be adversely affected.
Current wording
If we fail to manage the growth of our business both in terms of scale and complexity, our financial results, including profit margins, and financial condition could be adversely affected.
Previous wording
Our revenue increased to $169.1 million in the three months ended March 31, 2024 from $147.6 million in the three months ended March 31, 2023. Our growth has placed, and we expect will continue to place, a significant strain on our administrative and operational infrastructure, facilities, and other resources, and we face challenges of integrating, developing, training, and motivating our global employee base as well as maintaining our company culture with a predominantly remote workforce. Our ability to manage our operations and growth will require us to continue to improve our sales and marketing and content development capacity, and technology, finance, and administration teams globally, as well as our facilities and infrastructure. We will also be required to refine our operational, financial, and management controls and reporting systems and procedures, as well as effectively control our costs. If we fail to efficiently manage this global expansion of our business, our costs and expenses may increase more than anticipated and we may not successfully expand our partnerships with businesses, governmental and other organizations, and educational institutions, enhance our platform and technology-enabled services, increase the volume of new educational content and credentialing programs developed by our educator partners, attract a sufficient number of learners in a cost-effective manner, deploy preferred local payment methods and pricing models, satisfy our existing educator partners’ requirements, increase the volume of Enterprise platform subscriptions, respond to competitive challenges, or otherwise execute our business plan. Although our business has experienced significant growth in the past, we cannot provide any assurance that our business or revenue will continue to grow at the same rate or at all in the future.
Current wording
We have experienced rapid growth and demand for our product offerings amongst both individuals and institutions, including registered learners on our platform and Paid Enterprise Customers serving the needs of businesses, government organizations, academic institutions, and other organizations. The expansion of our business, ecosystem, and offerings places a significant strain on our administrative and operational infrastructure, facilities, and other resources. Managing the future growth of our business will require us to effectively scale our operations, allocate resources, and control costs. This includes continuing to improve our sales and marketing efficiency, content development time and costs, and technology, finance, and administration teams support globally, as well as our infrastructure and platform capabilities to serve our growing learner base. We will also be required to refine our operational, financial, and management controls and reporting systems and procedures. We will need to continue to expand our partnerships with businesses, government organizations, academic institutions, and other organizations, enhance our platform and technology-enabled services, increase the volume of new educational content and credentialing programs developed by our educator partners, attract learners in a cost-effective manner, deploy preferred local payment methods and pricing models, satisfy our existing educator partners’ requirements, increase the volume of Consumer subscriptions and Enterprise licenses, respond to competitive challenges, and otherwise execute our business plan. Although our business has experienced significant growth in past years, we cannot provide any assurance that our business or revenue will continue to grow at the same rate or at all in the future.
Previous wording
Our ability to effectively manage any significant growth of our business will depend on a number of factors, including our ability to:
Current wording
Our ability to effectively manage the growth of our business will depend on a number of factors, including our ability to:
Previous wording
These activities will require significant capital expenditures and allocation of valuable management and employee resources, and our growth will continue to place significant demands on our management and our operational and financial infrastructure. We may be unable to effectively manage any future growth in an efficient, cost-effective, or timely manner, or at all. Any failure to successfully implement systems enhancements and improvements will likely negatively impact our ability to manage our expected growth, ensure uninterrupted operation of key business systems, and comply with the rules and regulations that are applicable to public reporting companies. Moreover, if we do not effectively manage the growth of our business and operations globally, the quality of our platform could suffer, which would negatively affect our reputation, results of operations, and overall business.
Current wording
These activities will require significant capital expenditures and allocation of valuable management and employee resources. We may be unable to effectively manage any future growth in an efficient, cost-effective, or timely manner, or at all, which could negatively affect our financial results and profit margins. Any failure to successfully implement systems enhancements and improvements will likely negatively impact our ability to manage our expected growth, ensure uninterrupted operation of key business systems, and comply with the rules and regulations that are applicable to public reporting companies. Moreover, if we do not effectively manage the growth of our business and operations globally, the quality of our platform could suffer, which would negatively affect our reputation, results of operations, and overall business.
Previous wording
Operating in international markets requires significant resources and management attention and subjects us to regulatory, economic, contractual, reputational, and political risks that are different from those in the U.S. In addition to our employee base in the U.S., including Puerto Rico, we have employees in Australia, Bulgaria, Canada, France, Germany, India, Saudi Arabia, Singapore, the United Arab Emirates, and the United Kingdom in several functional areas, including product and software development, sales and marketing, talent recruitment, and general facilities management, and we have retained professional employer organizations and staffing agencies to engage personnel in certain international locations. Our international operations subject us to the compensation and benefits regulations of those jurisdictions, as well as other employer duties and obligations, that differ from the U.S. Further, enrollments of learners from other countries require us to comply with international data privacy regulations of those countries. Failure to comply with international regulations or to adequately adapt to international markets could harm our ability to successfully operate our business and pursue our business goals.
Current wording
Operating in international markets requires significant resources and management attention and subjects us to regulatory, economic, contractual, reputational, and political risks that are different from those in the U.S. In addition to our employee base in the U.S., including Puerto Rico, we have employees in various countries, including Australia, Bulgaria, Canada, France, Germany, India, Saudi Arabia, Singapore, the United Arab Emirates, and the United Kingdom in several functional areas, including product and software development, sales and marketing, talent recruitment, and general facilities management, and we have retained professional employer organizations and staffing agencies to engage personnel in certain international locations. Our international operations subject us to the compensation and benefits regulations of those jurisdictions, as well as other employer duties and obligations, that differ from the U.S. Further, enrollments of learners from other countries require us to comply with international data privacy regulations of those countries. Failure to comply with international regulations or to adequately adapt to international markets could harm our ability to successfully operate our business and pursue our business goals.
Previous wording
•the need to localize and adapt online credentialing programs for specific countries, including translation into foreign languages and ensuring that these programs enable our educator partners to comply with local education laws and regulations;
Current wording
•the need to localize and adapt online credentialing programs for specific countries, including language translations and ensuring that these programs enable our educator partners to comply with local education laws and regulations;
Previous wording
•different pricing environments, longer sales cycles, longer accounts receivable payment cycles, restrictions on remitting payments to the U.S. or converting local currency into U.S. dollars, difficulties in adopting and supporting new and different payment preferences, increased credit risk and levels of payment fraud, and collections issues;
Current wording
•different pricing environments, longer sales cycles, longer accounts receivable payment cycles, restrictions on remitting payments to the U.S. or converting local currency into U.S. dollars, difficulties in adopting and supporting new and different payment preferences, and increased credit risk, levels of payment fraud, and non-payment from customers;
Previous wording
•compliance and operational challenges related to the complexity of multiple, conflicting, and changing governmental laws and regulations addressing, but not limited to, employment, tax, privacy, data protection, consumer protection, foreign investment restrictions or requirements, economic sanctions, export controls, advertising, boycotting, money laundering, supply chain transparency, modern slavery, bribery, and corruption, such as the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act;
Current wording
•compliance and operational challenges related to the complexity of multiple, conflicting, and changing laws and regulations addressing, but not limited to, employment, tax, privacy, data protection, consumer protection, foreign investment restrictions or requirements, economic sanctions, export controls, advertising, boycotting, money laundering, supply chain transparency, modern slavery, bribery, and corruption, such as the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act;
Previous wording
We incurred net losses of $21.3 million and $32.4 million in the three months ended March 31, 2024 and 2023, and we had an accumulated deficit of $801.9 million as of March 31, 2024. We may or may not achieve or maintain profitability in the future. Even if we achieve profitability, we may not be able to maintain or increase our level of profitability.
Current wording
We incurred net losses of $23.0 million and $31.7 million in the three months ended June 30, 2024 and 2023, and we had an accumulated deficit of $824.9 million as of June 30, 2024. We may not achieve profitability in the future, and even if we do, we may not be able to maintain or increase our level of profitability.
Previous wording
The process of identifying educational content and credentialing programs that we believe will be a good fit for our platform and negotiating agreements with potential educator partners is complex and time-consuming. Because of the initial reluctance on the part of some educational institutions, businesses, and other organizations to embrace online delivery of education, training, and credentialing programs and the complicated approval process within some of these entities, our process to attract and engage a new educator partner can be lengthy.
Current wording
The process of identifying educational content and credentialing programs that we believe will be a good fit for our platform and negotiating agreements with potential educator partners is complex and time-consuming. Because of the initial reluctance on the part of some businesses, government organizations, academic institutions, and other organizations to embrace online delivery of education, training, and credentialing programs and the complicated approval process within some of these entities, our process to attract and engage a new educator partner can be lengthy.
Previous wording
In addition to our offerings for individuals, we sell our Enterprise offerings to businesses, academic institutions, and governmental organizations. These customers utilize our platform to provide relevant training, skills, and credentialing programs to current and potential employees and citizens through our online platform. To maintain and expand our relationships with these entities, we must demonstrate the value, benefits, and return on investment of providing education, training, skills, and credentialing through our online platform and achieve acceptance from both employees and these entities of the merits and legitimacy of our offerings.
Current wording
In addition to our offerings for individuals, we sell our Enterprise offerings to businesses, government organizations, academic institutions, and other organizations. These customers utilize our platform to provide relevant training, skills, and credentialing programs to current and potential employees and citizens through our online platform. To maintain and expand our relationships with these entities, we must demonstrate the value, benefits, and return on investment of providing education, training, skills, and credentialing through our online platform and achieve acceptance from both employees and these entities of the merits and legitimacy of our offerings.
Previous wording
Our growth strategy is dependent upon increasing sales of our Enterprise offerings to these entities, which we offer on a subscription basis. We have a limited history with our subscription and pricing models and changes in our models could adversely affect our revenue and financial condition. In addition, as the market for our learning platform grows (if ever), as new competitors introduce competitive applications or services, or as we enter into new international markets, we may be unable to attract new customers at the same price or based on the same pricing models we have historically used, or for contract lengths consistent with our historical averages. For example, we often enter into subscription arrangements with businesses, academic institutions, and governmental organizations in which we offer more favorable pricing terms in exchange for larger total contract values or longer contract terms. Changes to our pricing models or contract lengths could negatively impact our revenue and financial position, and we may have increased difficulty achieving growth or profitability. As we drive a greater portion of our revenue through subscriptions to our Enterprise platform, this may also result in reduced margins in the future.
Current wording
Our growth strategy is dependent upon increasing sales of our Enterprise offerings to these entities, which we offer on a subscription basis. We have a limited history with our subscription and pricing models and changes in our models could adversely affect our revenue and financial condition. In addition, as the market for our learning platform grows (if ever), as new competitors introduce competitive applications or services, or as we enter into new international markets, we may be unable to attract new customers at the same price or based on the same pricing models we have historically used, or for contract lengths consistent with our historical averages. For example, we often enter into subscription arrangements with businesses, government organizations, academic institutions, and other organizations in which we offer more favorable pricing terms in exchange for larger total contract values or longer contract terms. Changes to our pricing models or contract lengths could negatively impact our revenue and financial position, and we may have increased difficulty achieving growth or profitability. As we drive a greater portion of our revenue through subscriptions to our Enterprise platform, this may also result in reduced margins in the future.
Previous wording
We expect these and other existing competitors and new entrants to the online learning market to continually revise and improve their business models. If these or other market participants introduce new or improved delivery of online education and technology-enabled services that are more compelling or widely accepted than ours, our ability to grow our revenue and achieve profitability could suffer. Several new and existing companies in the online education industry provide or may provide offerings similar to what we offer on our platform, and these companies may pursue relationships with our educator partners that may reduce the educational content our partners produce for our platform. In addition, educational institutions, as well as businesses, governmental and other organizations, may choose to continue using or develop their own online learning or training solutions in-house, which may become more prevalent as emerging technologies such as generative AI provide additional means of developing educational programs, rather than pay for our solutions.
Current wording
We expect these and other existing competitors and new entrants to the online learning market to continually revise and improve their business models. If these or other market participants introduce new or improved delivery of online education and technology-enabled services that are more compelling or widely accepted than ours, our ability to grow our revenue and achieve profitability could suffer. Several new and existing companies in the online education industry provide or may provide offerings similar to what we offer on our platform, and these companies may pursue relationships with our educator partners that may reduce the educational content our partners produce for our platform. In addition, academic institutions, as well as businesses, government, and other organizations, may choose to continue using or develop their own online learning or training solutions in-house, which may become more prevalent as emerging technologies such as generative AI provide additional means of developing educational programs, rather than pay for our solutions.
Previous wording
•the ability of our current and future competitors to establish relationships with businesses, governmental and other organizations, and educational institutions to enhance their services and expand their markets; and
Current wording
•the ability of our current and future competitors to establish relationships with businesses, government organizations, academic institutions, and other organizations to enhance their services and expand their markets; and
Previous wording
For-profit postsecondary institutions, many of which provide course offerings predominantly online, are under intense regulatory and other scrutiny, which has led to media attention that has sometimes portrayed that sector in an unflattering light. Some for-profit online school operators have been subject to governmental investigations alleging the misuse of public funds, financial irregularities, and failure to achieve positive outcomes for learners, including the inability to obtain employment in their fields, or to earn sufficient income to repay debt incurred for their education. These allegations have attracted significant adverse media coverage and have prompted legislative hearings and regulatory responses. These investigations have focused on specific companies and individuals, as well as entire industries in the case of recruiting practices by for-profit higher education companies. Even though we do not enter into university partnerships with these institutions, this negative media attention and regulatory scrutiny may nevertheless add to the skepticism about online higher education generally, including our solutions. Certain service providers assisting higher education institutions with online program development and management, typically referred to as online program managers or OPMs, are also under intense media and other scrutiny, which has led to calls for reform and enforcement by policymakers and members of Congress. Even though we do not have the kinds of affiliations or business models that have been the focus of this scrutiny, this negative media attention and regulatory scrutiny may lead to additional limitations or restrictions on our business, and our ability to grow our business and achieve profitability could be harmed.
Current wording
For-profit postsecondary institutions, many of which provide course offerings predominantly online, are under intense regulatory and other scrutiny, which has led to media attention that has sometimes portrayed that sector in an unflattering light. Some for-profit online school operators have been subject to government investigations alleging the misuse of public funds, financial irregularities, and failure to achieve positive outcomes for learners, including the inability to obtain employment in their fields, or to earn sufficient income to repay debt incurred for their education. These allegations have attracted significant adverse media coverage and have prompted legislative hearings and regulatory responses. These investigations have focused on specific companies and individuals, as well as entire industries in the case of recruiting practices by for-profit higher education companies. Even though we do not enter into university partnerships with these institutions, this negative media attention and regulatory scrutiny may nevertheless add to the skepticism about online higher education generally, including our solutions. Certain service providers assisting higher education institutions with online program development and management, typically referred to as online program managers or OPMs, are also under intense media and other scrutiny, which has led to calls for reform and enforcement by policymakers and members of Congress. Even though we do not have the kinds of affiliations or business models that have been the focus of this scrutiny, this negative media attention and regulatory scrutiny may lead to additional limitations or restrictions on our business, and our ability to grow our business and achieve profitability could be harmed.
Previous wording
The impact of these negative public perceptions on our current and future business is difficult to predict. If these few situations, or any additional misconduct, cause all online learning programs to be viewed unfavorably by the public or policymakers, we may find it difficult to enter into or renew agreements with our educator partners or attract additional learners for their programs. In addition, this perception or any further governmental investigation could serve as the impetus for more restrictive legislation or regulation, which could limit our future business opportunities. Moreover, allegations of abuse of federal financial aid funds and other statutory violations against for-profit higher education companies could negatively impact our ability to succeed due to increased regulation and decreased demand. Any of these factors could negatively impact our ability to increase our educator partner base and grow their programs, which would make it difficult to continue growing our business and could negatively affect our stock price.
Current wording
The impact of these negative public perceptions on our current and future business is difficult to predict. If these few situations, or any additional misconduct, cause all online learning programs to be viewed unfavorably by the public or policymakers, we may find it difficult to enter into or renew agreements with our educator partners or attract additional learners for their programs. In addition, this perception or any further government investigation could serve as the impetus for more restrictive legislation or regulation, which could limit our future business opportunities. Moreover, allegations of abuse of federal financial aid funds and other statutory violations against for-profit higher education companies could negatively impact our ability to succeed due to increased regulation and decreased demand. Any of these factors could negatively impact our ability to increase our educator partner base and grow their programs, which would make it difficult to continue growing our business and could negatively affect our stock price.
Previous wording
Our future success is substantially dependent on the continued service of our senior management team, and in particular of our chief executive officer. The expertise of our senior management team in negotiating with businesses, governmental and other organizations, and educational institutions is critical in navigating the complex approval processes of these entities. We do not maintain key-person insurance on any of our employees, including our senior management team, and our management and other U.S. employees are generally employed on an at-will basis. The loss of the services of any individual on our senior management team would make it more difficult to successfully operate our business and pursue our business goals.
Current wording
Our future success is substantially dependent on the continued service of our senior management team, and in particular of our chief executive officer. The expertise of our senior management team in negotiating with businesses, government organizations, academic institutions, and other organizations is critical in navigating the complex approval processes of these entities. We do not maintain key-person insurance on any of our employees, including our senior management team, and our management and other U.S. employees are generally employed on an at-will basis. The loss of the services of any individual on our senior management team would make it more difficult to successfully operate our business and pursue our business goals.
Previous wording
In addition, although the COVID-19 pandemic has subsided, pandemics or other public health crises could impact our business, key metrics, and results of operations. For example, a resurgence of the COVID-19 pandemic or the emergence of another widespread health crisis could adversely impact our business if our employees or our partners’ or third-party service providers’ employees become ill and are unable to perform their duties, and our operations, internet, or mobile networks, or the operations of one or more of our third-party service providers, is impacted. Although we believe our business was positively impacted to some extent by several trends related to the height of the COVID-19 pandemic, including the increased need or willingness of businesses, governmental organizations, educational institutions and learners to adopt remote, online, and asynchronous learning and training, we cannot be certain that these trends will continue given that the risk and barriers associated with in-person learning and training have significantly decreased. In addition, in the event of another widespread public health crisis, we may experience an adverse impact to our business and the value of our common stock as a result of the crisis’ impact on the global economy and financial markets, including inflation or recession. More generally, a public health crisis or other catastrophic event could adversely affect economies and financial markets and lead to an economic downturn, which could harm our business, financial condition, and operating results.
Current wording
In addition, although the COVID-19 pandemic has subsided, pandemics or other public health crises could impact our business, key metrics, and results of operations. For example, a resurgence of the COVID-19 pandemic or the emergence of another widespread health crisis could adversely impact our business if our employees or our partners’ or third-party service providers’ employees become ill and are unable to perform their duties, and our operations, internet, or mobile networks, or the operations of one or more of our third-party service providers, is impacted. Although we believe our business was positively impacted to some extent by several trends related to the height of the COVID-19 pandemic, including the increased need or willingness of businesses, government organizations, academic institutions, other organizations, and learners to adopt remote, online, and asynchronous learning and training, we cannot be certain that these trends will continue given that the risk and barriers associated with in-person learning and training have significantly decreased. In addition, in the event of another widespread public health crisis, we may experience an adverse impact to our business and the value of our common stock as a result of the crisis’ impact on the global economy and financial markets, including inflation or recession. More generally, a public health crisis or other catastrophic event could adversely affect economies and financial markets and lead to an economic downturn, which could harm our business, financial condition, and operating results.
Previous wording
We are a remote-first company, allowing for almost all roles to be open to remote employees on an ongoing basis. Our remote-first employment policy could have a negative impact on the execution of our business plans and operations and create productivity, connectivity, and oversight challenges. For example, if a natural disaster, power outage, connectivity issue, or other event occurred that impacted our employees’ ability to work remotely, it may be difficult for us to continue our business for a period of time. The shift to remote working may also result in consumer privacy, IT security, and fraud vulnerabilities, which, if exploited, could result in significant recovery costs and harm to our reputation. Operating in a predominantly remote work environment and providing and maintaining the operational infrastructure necessary to support a remote work environment also present significant challenges to maintaining our company culture, including employee engagement and productivity. As a result, our culture, information technology requirements, cybersecurity risk, and business operations could be adversely affected.
Current wording
We are a remote-first company, allowing for almost all roles to be open to remote employees on an ongoing basis. Our remote-first employment policy could have a negative impact on the execution of our business plans and operations and create productivity, connectivity, and oversight challenges. For example, if a natural disaster, power outage, connectivity issue, or other event occurred that impacted our employees’ ability to work remotely, it may be difficult for us to continue our business for a period of time. The shift to remote working may also result in consumer privacy, IT security, and fraud vulnerabilities, which, if exploited, could result in significant recovery costs and harm to our reputation. Operating in a predominantly remote work environment and providing and maintaining the operational infrastructure necessary to support a remote work environment also present significant challenges of managing, integrating, developing, training, and motivating our global employee base, transitioning knowledge, maintaining our company culture, and employee engagement and productivity. As a result, our culture, information technology requirements, cybersecurity risk, and business operations could be adversely affected.
Previous wording
The loss or suspension of an educator partner’s accreditation or other adverse action by their institutional accreditor would render the institution or its program ineligible to participate in Title IV programs or similar government funding programs that may be in place and available to students enrolled at our Degrees partners based in and outside of the U.S. This loss, suspension or other adverse action could prevent the educator partner from offering certain educational programs, could prevent students enrolled at our Degrees partners from accessing such funding programs, and could make it impossible for the graduates of the educator partner’s program to practice the profession for which they trained. If any of these results occurs, it could hurt our ability to generate revenue from that program.
Current wording
The loss or suspension of an educator partner’s accreditation or other adverse action by their institutional accreditor would render the institution or its program ineligible to participate in Title IV programs or similar government funding programs that may be in place and available to students enrolled at our Degrees partners based in and outside of the U.S. This loss, suspension or other adverse action could prevent the educator partner from offering certain educational programs, could prevent students enrolled at our Degrees partners from accessing such funding programs, and could make it impossible for the graduates of the educator partner’s program to practice the profession for which they trained. If any of these results occur, it could hurt our ability to generate revenue from that program.
Previous wording
In addition, the increased scrutiny and results-based accountability initiatives in the education sector, as well as ongoing policy differences in Congress regarding spending levels, could lead to significant changes in connection with the pending reauthorization of the HEA and the associated negotiated rulemaking or otherwise. These changes may place additional regulatory burdens on postsecondary schools participating in the Title IV programs generally, and specific changes may be targeted at companies like us that serve higher education within the U.S. The adoption of any laws or regulations that limit our ability to provide our bundled services to our educator partners could compromise our ability to offer their programs or make our solutions less attractive to them. Congress could also enact laws or regulations that require us to modify our practices in ways that could increase our costs.
Current wording
In addition, the increased scrutiny and results-based accountability initiatives in the education sector, as well as ongoing policy differences in Congress regarding spending levels, could lead to significant changes in connection with the pending reauthorization of the HEA and the associated negotiated rulemaking or otherwise. These changes may place additional regulatory burdens on postsecondary schools participating in the Title IV programs generally, and specific changes may be targeted at companies like us that serve higher education within the U.S. The adoption of any laws or regulations that limit our ability to provide our bundled services to our educator partners could compromise our ability to offer their programs or make our solutions less attractive to them. Congress could also enact laws or regulations that require us to modify our practices in ways that could increase our costs or otherwise adversely impact our business.
Previous wording
Regulatory activities and initiatives of the DOE may have similar consequences for our business even in the absence of Congressional action. No assurances can be given as to how any new rules may affect our business.
Current wording
Regulatory activities and initiatives of the DOE may have similar consequences for our business even in the absence of Congressional action. According to its regulatory agenda, the DOE intends to issue proposed regulations related to distance education as early as July 2024 and related to state authorization and accreditation, among others, as early as November 2024. No assurances can be given as to how any new rules may affect our business. In addition, the U.S. Supreme Court’s decision in Loper Bright Enterprises v. Raimondo (Loper Bright) in June 2024, overturning the “Chevron doctrine” that provided for judicial deference to federal agency interpretations of statutes, has resulted in regulatory uncertainty and may cause industry uncertainty, increasing the risk of legal challenges to current DOE rules, policies, and guidance, and the potential for future enactment of Congressional legislation.
Previous wording
While our degree business model is designed to align with guidance from a DOE“Dear Colleague” Letter, such guidance is not codified by statute or regulation and may be subject to change.
Current wording
While our Degrees business model is designed to align with guidance from a DOE“Dear Colleague” Letter, such guidance is not codified by statute or regulation and may be subject to change.
Previous wording
Further, because the bundled services rule was promulgated by agency guidance through the DCL and is not codified by statute or regulation, there is risk that the exception could be altered or removed without prior notice, public comment period, or other administrative procedural requirements that accompany formal agency rulemaking. The DCL has been criticized by commentators and lawmakers, including in a June 2022 report by the U.S. House Committee on Appropriations, which urged the DOE to rescind the guidance. On February 15, 2023, the DOE announced that it is reviewing its DCL guidance on incentive compensation compliance. As a result, if the guidance is rescinded or amended, such changes may materially and adversely impact our business and operations as we may need to alter or replace the current tuition revenue-sharing models in our agreements with Title IV participating university partners.
Current wording
Further, because the bundled services exception was promulgated by agency guidance through the DCL and is not codified by statute or regulation, there is risk that the exception could be altered or removed without prior notice, public comment period, or other administrative procedural requirements that accompany formal agency rulemaking. The U.S. Supreme Court’s decision in the Loper Bright case may also result in legal challenges to the DCL or otherwise result in future changes to the bundled services exception. The DCL has been criticized by commentatorsand lawmakers, including in a June 2022 report by the U.S. House Committee on Appropriations, which urged the DOE to rescind the guidance. On February 15, 2023, the DOE announced that it is reviewing its DCL guidance on incentive compensation compliance. As a result, if the guidance is rescinded or amended, such changes may materially and adversely impact our business and operations as we may need to alter or replace the current tuition revenue-sharing models in our agreements with Title IV participating university partners.
Previous wording
On February 15, 2023, the DOE issued “Requirements and Responsibilities for Third-Party Servicers and Institutions” (“GEN-23-03”). Prior to GEN-23-03 and based on longstanding DOE policy, only companies that assisted in financial aid administration functions were classified as a TPS. GEN-23-03 expanded the scope of TPS status to include companies that provide (among other things) recruiting services to Title IV participating universities. A Title IV participating university that engages a TPS must include specific provisions in the TPS contract and must report each TPS contract to the DOE. A company classified as a TPS falls under direct DOE oversight, is jointly and severally liable with the university for any HEA violations, and must undergo an annual audit. Subsequent to the receipt of numerous comments related to GEN-23-03 and a legal challenge, the DOE has delayed implementation of GEN-23-03 and intends to issue updated guidance on Third Party Servicers in 2024. The DOE has not provided any estimate of the timing for re-issuance. If we are considered a TPS under the new guidance to those Title IV participating university partners who receive recruiting services from us, those university partners could hesitate to engage us for recruiting services to avoid compliance obligations, and we would incur additional expense in complying with TPS requirements, which could materially and adversely impact our business and operations.
Current wording
On February 15, 2023, the DOE issued “Requirements and Responsibilities for Third-Party Servicers and Institutions” (“GEN-23-03”). Prior to GEN-23-03 and based on longstanding DOE policy, only companies that assisted in financial aid administration functions were classified as a TPS. GEN-23-03 expanded the scope of TPS status to include companies that provide (among other things) recruiting services to Title IV participating universities. A Title IV participating university that engages a TPS must include specific provisions in the TPS contract and must report each TPS contract to the DOE. A company classified as a TPS falls under direct DOE oversight, is jointly and severally liable with the university for any HEA violations, and must undergo an annual audit. Subsequent to the receipt of numerous comments related to GEN-23-03 and a legal challenge, the DOE has delayed implementation of GEN-23-03 and communicated its intention to issue updated guidance on Third Party Servicers. The DOE has not provided any estimate of the timing for re-issuance of TPS-related guidance. However, according to the DOE’s regulatory agenda, the DOE intends to issue a TPS proposed regulation as early as June 2025. If in the future we are considered a TPS to those Title IV participating university partners who receive recruiting services from us, those university partners could hesitate to engage us for recruiting services to avoid compliance obligations, and we would incur additional expense in complying with TPS requirements, which could materially and adversely impact our business and operations.
Previous wording
While we rely on a variety of statutory and common-law frameworks and defenses, including those provided by the Digital Millennium Copyright Act of 1998 (“DMCA”), the Communications Decency Act of 1996 (“CDA”), the fair-use doctrine in the U.S., and the e-Commerce Directive in the European Union (“EU”), differences between statutes, limitations on immunity, requirements to maintain immunity, and moderation efforts in the many jurisdictions in which we operate may affect our ability to rely on these frameworks and defenses, or create uncertainty regarding liability for information or content uploaded by educator partners or learners or otherwise contributed by third-parties to our platform. For example, while Section 230 of the CDA provides certain legal protections to online platforms from litigation related to content posted by users of their platforms, Section 230 has faced increasing litigation challenges and legislative proposals regarding the scope of its protection, including the Gonzalez v. Google case challenging Section 230, which the Supreme Court recently announced it will hear. These actions may increase the uncertainty of litigation risk for online platforms such as ours. As an additional example, Article 17 of the Directive on Copyright in the Digital Single Market was passed in the E.U., which affords copyright owners some enforcement rights that may conflict with U.S. safe harbor protections afforded to us under the DMCA. Member states in the EU are in the process of determining how Article 17 will be implemented in their particular country. Moreover, regulators in the U.S. and in other countries in which we operate may introduce new regulatory regimes that increase potential liability for information or content available on our platform, or which impose additional obligations to monitor such information or content, which could increase our costs.
Current wording
While we rely on a variety of statutory and common-law frameworks and defenses, including those provided by the Digital Millennium Copyright Act of 1998 (“DMCA”), the Communications Decency Act of 1996 (“CDA”), the fair-use doctrine in the U.S., as well as the Digital Services Act (“DSA”), the Digital Markets Act (“DMA”) and the e-Commerce Directive in the European Union (“EU”), differences between statutes, limitations on immunity, requirements to maintain immunity, and moderation efforts in the many jurisdictions in which we operate may affect our ability to rely on these frameworks and defenses, or create uncertainty regarding liability for information or content uploaded by educator partners or learners or otherwise contributed by third-parties to our platform. For example, while Section 230 of the CDA provides certain legal protections to online platforms from litigation related to content posted by users of their platforms, Section 230 has faced increasing litigation challenges and legislative proposals regarding the scope of its protection. These actions may increase the uncertainty of litigation risk for online platforms such as ours. Furthermore, Article 17 of the EU Directive on Copyright in the Digital Single Market affords copyright owners some enforcement rights that may conflict with U.S. safe harbor protections afforded to us under the DMCA. The DSA and DMA have gone into effect in the EU, updating the rules surrounding illegal content and requiring reports on the moderation of content. Moreover, regulators in the U.S. and in other countries in which we operate may introduce new regulatory regimes that increase potential liability for information or content available on our platform, or which impose additional obligations to monitor such information or content, which could increase our costs.
Previous wording
We are subject to governmental export and import controls and anti-corruption laws and regulations that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with applicable laws.
Current wording
We are subject to government export and import controls and anti-corruption laws and regulations that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with applicable laws.
Previous wording
From time to time, we may become involved in litigation matters including IP, commercial, employment, class action, securities, whistleblower, accessibility, and other litigation and claims, and governmental and other regulatory investigations and proceedings. For example, we are currently party to a class action lawsuit alleging certain violations of the VPPA (as defined below). See “Legal Proceedings.”
Current wording
From time to time, we may be subject to claims, lawsuits, government investigations, arbitrations, and other proceedings including IP, privacy, commercial, employment, class action, securities, whistleblower, accessibility, advertising and marketing, consumer protection, and other litigation and claims, and government and other regulatory investigations and proceedings. For example, we are currently party to a class action lawsuit alleging certain violations of the VPPA (as defined below) and face arbitration demands for alleged breach of the VPPA and other privacy laws. Additional allegations or litigation may arise against us in the future, including related to the VPPA and other privacy and consumer protection laws.
Previous wording
Any failure or perceived failure by us to comply with our privacy policies, our privacy or data protection obligations to learners or other third parties, or our privacy or data protection legal obligations, or any compromise of security that results in the unauthorized access, release, use, or transfer of sensitive information, which may include personal data or other data, may result in governmental enforcement actions, litigation, or public statements against us by consumer advocacy groups or others and could cause learners to lose trust in us, which could have an adverse effect on our business. Furthermore, under the terms of our agreements with degree partners and customers, and our primary legal obligations, we are responsible for the costs of investigating and disclosing data breaches. In addition to costs associated with investigating and fully disclosing a data breach in such instances, we could be subject to substantial costs to remedy the data breach, substantial monetary fines, or private claims by affected parties, and our reputation would likely be harmed.
Current wording
Any failure or perceived failure by us to comply with our privacy policies, our privacy or data protection obligations to learners or other third parties, or our privacy or data protection legal obligations, or any compromise of security that results in the unauthorized access, release, use, or transfer of sensitive information, which may include personal data or other data, may result in government enforcement actions, litigation, or public statements against us by consumer advocacy groups or others and could cause learners to lose trust in us, which could have an adverse effect on our business. Furthermore, under the terms of our agreements with degree partners and customers, and our primary legal obligations, we are responsible for the costs of investigating and disclosing data breaches. In addition to costs associated with investigating and fully disclosing a data breach in such instances, we could be subject to substantial costs to remedy the data breach, substantial monetary fines, or private claims by affected parties, and our reputation would likely be harmed.
Previous wording
We have experienced, and expect that in the future, we will experience, interruptions, delays, and outages in service and availability from time to time due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions, capacity constraints, and lack of network connectivity in one or more regions, which could affect the availability of services on our platform and prevent or inhibit the ability of learners to access or complete courses and programs on our platform. In particular, our technology infrastructure is currently hosted by third-party data center facilities operated by Amazon Web Services (“AWS”). Further, our platform and underlying technology is supported by multiple third-party providers. Any disruption in its services, or any failure of AWS or any other third-party provider to handle the demands of our platform, could significantly harm our business and damage our reputation. We do not have control over the operations of the facilities of the third-party providers that we use, and these facilities may be vulnerable to damage or interruption from natural disasters, cybersecurity attacks, terrorist attacks, power outages, and similar events or acts of misconduct.
Current wording
We have experienced, and expect that in the future, we will experience, interruptions, delays, and outages in service and availability from time to time due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions, capacity constraints, and lack of network connectivity in one or more regions, which could affect the availability of services on our platform and prevent or inhibit the ability of learners to access or complete courses and programs on our platform. Our technology infrastructure is currently hosted in third-party data centers operated by Amazon Web Services (“AWS”), and our platform and underlying technology is supported by multiple third-party providers. Any disruption in its services, or any failure of AWS or any other third-party provider to handle the demands of our platform, could significantly harm our business and damage our reputation. We do not have control over the operations of the facilities of the third-party providers that we use, and these facilities may be vulnerable to damage or interruption from natural disasters, cybersecurity attacks, terrorist attacks, power outages, and similar events or acts of misconduct.
Previous wording
In the U.S., a significant example of this is the California Consumer Privacy Act (the “CCPA”), which provides data privacy rights for California consumers and new operational requirements for covered companies. The CCPA provides that covered companies must provide disclosures to California consumers and afford such consumers new data privacy rights that include the right to request a copy from a covered company of the personal information collected about them, the right to request deletion of such personal information, and the right to request to opt-out of certain sales of such personal information. The California Privacy Rights Act (the “CPRA”), effective as of January 1, 2023, significantly modifies the CCPA, including by imposing additional obligations on covered companies and expanding consumers’ rights with respect to certain sensitive personal information and rights to object to sharing information for behavioral advertising purposes, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. The CPRA also creates a new state agency that will be vested with authority to implement and enforce the CCPA and the CPRA. Additionally, the Virginia Consumer Data Protection Act, effective from January 1, 2023, the Colorado Privacy Act and the Connecticut Data Privacy Act, both effective from July 1, 2023, and the Utah Consumer Privacy Act, effective from December 31, 2023, each impose similar requirements on covered businesses. New privacy laws have also recently been passed in Indiana (Indiana Consumer Data Protection Act), Iowa (Iowa Consumer Data Protection Act), Montana (Montana Consumer Data Privacy Act) and Tennessee (Tennessee Information Protection Act), which will become effective between 2024 and 2026. There are a number of additional proposals for U.S. federal and state privacy laws that, if passed, could increase our potential liability, add layers of complexity to compliance in the U.S. market, increase our compliance costs, and adversely affect our business. In addition, all 50 states have laws, including obligations to provide notification of security breaches of computer databases that contain personal information to affected individuals, state officers, and others. Aspects of these U.S. state privacy laws and other laws and regulations relating to data protection, privacy, and information security, as well as their enforcement, remain unclear, and we may be required to modify our practices in an effort to comply with them.
Current wording
In the U.S., a significant example of this is the California Consumer Privacy Act (the “CCPA”), which provides data privacy rights for California consumers and new operational requirements for covered companies. The CCPA provides that covered companies must provide disclosures to California consumers and afford such consumers new data privacy rights that include the right to request a copy from a covered company of the personal information collected about them, the right to request deletion of such personal information, and the right to request to opt-out of certain sales of such personal information. The California Privacy Rights Act (the “CPRA”), effective as of January 1, 2023, significantly modifies the CCPA, including by imposing additional obligations on covered companies and expanding consumers’ rights with respect to certain sensitive personal information and rights to object to sharing information for behavioral advertising purposes, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. The CPRA also creates a new state agency that will be vested with authority to implement and enforce the CCPA and the CPRA. Additionally, Virginia, Colorado, Connecticut, and Utah passed privacy laws that went into effect in 2023. New privacy laws have also recently been passed in Indiana, Iowa, Montana and Tennessee, which will become effective between 2024 and 2026. There are a number of additional proposals for U.S. federal and state privacy laws that, if passed, could increase our potential liability, add layers of complexity to compliance in the U.S. market, increase our compliance costs, and adversely affect our business. In addition, all 50 states have laws, including obligations to provide notification of security breaches of computer databases that contain personal information to affected individuals, state officers, and others. Aspects of these U.S. state privacy laws and other laws and regulations relating to data protection, privacy, and information security, as well as their enforcement, remain unclear, and we may be required to modify our practices in an effort to comply with them.
Previous wording
The EU General Data Protection Regulation and UK General Data Protection Regulation (together, “GDPR”) impose stringent data protection requirements on businesses processing personal data of EU and UK data subjects, respectively. The GDPR is wide-ranging in scope and imposes numerous additional requirements on companies that process personal data, including requiring that lawful bases exist for all processing of personal data, requiring disclosures to individuals regarding data processing activities, requiring that safeguards are implemented to protect the security of personal data, creating mandatory data breach notification requirements in certain circumstances, and requiring that certain measures (including contractual obligations) are taken when engaging third-party processors or transferring data overseas. The GDPR also provides individuals with various rights in respect of their personal data, including rights of access, erasure, portability, rectification, restriction, and objection. Complying with the GDPR remains an onerous and potentially costly obligation as interpretations of the specific requirements emerge through the courts, enforcement decisions and regulatory guidance. In addition, where personal data subject to the GDPR is transferred to non-adequate jurisdictions (e.g., where an EU customer transfers personal data to us in the U.S.), there is still considerable uncertainty surrounding the future trajectory of the perception of such transfers by EU courts and data protection authorities following the decision on July 16, 2020 by the Court of Justice of the EU in its Case C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems and associated enforcement action by certain EU data protection authorities (such as the Irish Data Protection Commission in May 2023). The European Commission issued an adequacy decision in respect of the EU-U.S. Data Privacy Framework on July 10, 2023, permitting transfers of personal data from the EU to U.S. organizations certified under the Framework, without additional transfer mechanisms. However, legal challenges to the validity of this adequacy decision have already been lodged in the EU, with further challenges expected.
Current wording
The EU General Data Protection Regulation and UK General Data Protection Regulation (together, “GDPR”) impose stringent data protection requirements on businesses processing personal data of EU and UK data subjects, respectively. The GDPR is wide-ranging in scope and imposes numerous additional requirements on companies that process personal data, including requiring that lawful bases exist for all processing of personal data, requiring disclosures to individuals regarding data processing activities, requiring that safeguards are implemented to protect the security of personal data, creating mandatory data breach notification requirements in certain circumstances, and requiring that certain measures (including contractual obligations) are taken when engaging third-party processors or transferring data overseas. The GDPR also provides individuals with various rights in respect of their personal data, including rights of access, erasure, portability, rectification, restriction, and objection. Complying with the GDPR remains an onerous and potentially costly obligation as interpretations of the specific requirements emerge through the courts, enforcement decisions and regulatory guidance. The European Commission issued an adequacy decision in respect of the EU-U.S. Data Privacy Framework on July 10, 2023, permitting transfers of personal data from the EU to U.S. organizations certified under the Framework, without additional transfer mechanisms. The Framework also applies to transfers from the UK to the U.S. as of October 12, 2023. However, legal challenges to the validity of this adequacy decision have already been lodged in the EU, with further challenges expected.
Previous wording
Similar data privacy laws, rules, and regulations in other countries may also impact our business. The People’s Republic of China implemented the Personal Information Protection Law on November 1, 2021, which includes both similarities and differences to the GDPR. Singapore also amended its privacy law in 2021, imposing additional obligations on businesses processing the data of Singaporean data subjects, including restrictions on foreign transfers. In addition, the Brazilian General Data Protection Law, in force since late 2020, is a comprehensive data protection regime modeled in part on the GDPR. In August 2023, the Indian Parliament passed a new data privacy law, the Digital Personal Data Protection Act, 2023, which completely overhauls India’s privacy regime. The law has received the President’s assent and is expected to come into force shortly.
Current wording
Similar data privacy laws, rules, and regulations in other countries may also impact our business, such as laws in the People’s Republic of China, Singapore, Brazil, and India.
Showing the first 40 of 44 pairs. Open the source sections for the rest.