We collect and maintain significant amounts of personal information and other data relating to our clients and employees. Numerous laws, rules, and regulations in the United States and internationally, including the European Union's General Data Protection Regulation (the "GDPR"), California's Consumer Privacy Act (the "CCPA"), California Privacy Rights Acts of 2020 ("CPRA"), and the UK's Data Protection Act (the "UK GDPR"), govern privacy and the collection, use, and protection of personal information. These laws, rules, and regulations evolve frequently and may be inconsistent from one jurisdiction to another or may be interpreted to conflict with our practices. Any failure or perceived failure by us or any third parties with which we do business to comply with these laws, rules, and regulations, or with other obligations to which we may be or become subject, may result in actions against us by governmental entities, private claims and litigation, fines, penalties, or other liabilities. Any such action could be expensive to defend, damage our reputation, and adversely affect our business and operating results.
The CCPA, as amended by the CPRA (collectively, "CCPA"), applies to personal information of consumers, business representatives, and employees who are California residents, and requires businesses to provide specific disclosures in privacy notices and honor requests of such individuals to exercise certain privacy rights. The CCPA provides for administrative fines of up to $7,500 per violation and allows private litigants affected by certain data breaches to recover significant statutory damages. In addition, the CPRA expanded the CCPA's requirements, including by adding a new right for individuals to correct their personal information and establishing a new regulatory agency to implement and enforce the law. A number of other states, such as Virginia and Colorado, have also passed comprehensive privacy laws, and similar laws are being considered in several other states, as well as at the federal and local levels. These developments further complicate compliance efforts, and increase legal risk and compliance costs for us and the third parties upon whom we rely. Additionally, the Federal Trade Commission and many state attorneys general are interpreting federal and state consumer protection laws as imposing standards for the online collection, use, dissemination, and security of data. Further, the SEC has adopted new rules that require us to provide greater disclosures around proactive security protections that we employ and regarding security incidents. Any such disclosures, including those under state data breach notification laws, can be costly, and the disclosures we make to comply with, or the failure to comply with, such requirements could lead to adverse consequences.
The costs of compliance with and other burdens imposed by privacy and data security laws and regulations may reduce the efficiency of our marketing, lead to negative publicity, make it more difficult or more costly to meet expectations of or commitments to clients, or lead to significant fines, penalties or liabilities for noncompliance, any of which could harm our business. These laws could also impact our ability to offer our products in certain locations. The costs, burdens, and potential liabilities imposed by existing privacy laws could be compounded if other jurisdictions in the U.S. begin to adopt similar or more restrictive laws.
Even the perception that the privacy of personal information is not satisfactorily protected or does not meet regulatory requirements could inhibit clients' use of our service or harm our brand and reputation. Furthermore, our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in such contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. Also, although we maintain insurance, the costs related to significant security breaches or disruptions could be material and could cause us to incur significant expenses beyond any of our insurance coverage.
Any of these matters could materially adversely affect our business, financial condition, or operating results.