We and our service providers are subject to risks associated with data security breaches and other cybersecurity events. We collect, process, maintain and use personal information relating to our customers and employees. We also disclose personal information about consumers and employees to third party service providers, who help us with our business operations, including the operation of our e-Commerce websites and the provision of various social media tools and websites we use as part of our marketing strategy. Any attempted or actual unauthorized disclosure of personal information could harm our reputation and credibility, reduce our e-Commerce sales, impair our ability to attract website visitors, reduce our ability to attract and retain customers and could result in litigation, including class action lawsuits, against us or the imposition of significant fines or penalties.
Our online activities, including our e-Commerce websites, may also be subject to denial of service or other forms of cyber-attacks. While we have taken measures we believe are reasonable to protect against those types of attacks, those measures may not adequately protect our online activities from such attacks. If a denial of service attack or other cyber event were to affect our e-Commerce websites or other information technology systems, our business could be disrupted, we may lose sales or valuable data, and our reputation, results of operations and financial condition may be adversely affected. Additionally, new and evolving data protection legislation could impose more onerous requirements that could increase the risks associated with data security breaches. For example, the SEC recently adopted rules requiring the disclosure of cybersecurity incidents that we determine to be "material" to be made promptly following such determination, which can be complex, requiring a number of assumptions based on several factors. It is possible that the SEC may not agree with our determinations, which could result in fines, civil litigation or damage to our reputation.
We have procedures and technology in place designed to safeguard our customers' debit and credit cards and our customers' and employees' other personal information under our control, and we continue to devote significant resources to network security, backup and disaster recovery, and other security measures. Nevertheless, these security measures cannot provide absolute security or guarantee that we will be successful in preventing and responding to breaches, loss, theft, or unauthorized access, disclosure, copying, use, or modification of personal information under our control.
As consumers are gaining more data privacy awareness, in the future there may be new foreign, federal, provincial and state laws and legislative proposals addressing data privacy and security, as well as increased data protection obligations imposed on merchants by credit card issuers. As a result, we may become subject to more extensive requirements to protect the personal information that we collect, use and disclose, resulting in, for example, increased compliance costs.