Allied has implemented various features intended to better comply with applicable privacy and security requirements in the collection and use of customer data, but these features do not ensure compliance and may not be effective against all potential privacy and data security concerns. A wide variety of domestic and foreign laws and regulations apply to the collection, use, retention, protection, disclosure, transfer, disposal and other processing of personal data. These data protection and privacy-related laws and regulations are evolving and may result in regulatory and public scrutiny and escalating levels of enforcement and sanctions. Our failure to comply with applicable laws and regulations, or to protect any personal data, could result in enforcement actions against us, including fines, claims for damages by customers and other affected individuals, damage to our reputation and loss of goodwill (both in relation to existing customers and prospective customers), any of which could adversely affect our business, operating results, financial performance and prospects.
Evolving and changing definitions of personal data and personal information within the European Union ("EU"), the United States, and elsewhere may limit or inhibit our ability to operate or expand our business. In jurisdictions outside of the United States, we may face data protection and privacy requirements that are more stringent than those in place in the United States. We are at risk of enforcement actions taken by certain EU data protection authorities until such point in time that we may be able to ensure that all transfers of personal data to us in the United States from the EU are conducted in compliance with all applicable regulatory obligations, the guidance of data protection authorities and evolving best practices. The European General Data Protection Regulation ("GDPR") may impose additional obligations, costs and risks upon our business. The GDPR may increase substantially the penalties to which we could be subject in the event of any non-compliance. In addition, we may incur substantial expense in complying with the obligations imposed by the GDPR and we may be required to make significant changes in our business operations, all of which may adversely affect our revenues and our business overall.
Loss, retention or misuse of certain information and alleged violations of laws and regulations relating to privacy and data security, and any relevant claims, may expose us to potential liability and may require us to expend significant resources on data security and in responding to and defending such allegations and claims. In addition, future laws, regulations, standards and other obligations, and changes in the interpretation of existing laws, regulations, standards and other obligations, could impair our ability to collect, use or disclose data relating to individuals, which could increase our costs and impair our ability to maintain and grow our customer base and increase our revenue.
Allied publicly posts its privacy policies and practices concerning processing, use, and disclosure of the personally identifiable information provided to it by website visitors. Publication of such privacy policies and other statements published that provide promises and assurances about privacy and security can subject us to potential state and federal action if they are found to be deceptive or misrepresentative of actual policies and practices or if actual practices are found to be unfair. Evolving and changing definitions of what constitutes "Personal Information" and "Personal Data" within the EU, the United States and elsewhere, especially relating to classification of IP addresses, machine or device identification numbers, location data and other information, may limit or inhibit our ability to operate or expand our business, including limiting technology alliance relationships that may involve the sharing of data.