In our regular business operations, we collect, process, store and transmit to commercial partners sensitive data, including personal information of our customers and employees such as payment processing information and information of our business partners, to provide our services and operate our business.
The Company must manage increasing legislative, regulatory and consumer focus on privacy issues, data security and cybersecurity risk management in a variety of jurisdictions domestically and across the globe. For example, the EU's General Data Protection Regulation imposes significant privacy and data security requirements, as well as potential for substantial penalties for non-compliance that have resulted in substantial adverse financial consequences to non-compliant companies. Similarly, Executive Order 14117 (Preventing Access to Americans' Bulk Sensitive Personal Data and US Government Related Data By Countries of Concern), and its implementing regulations, may limit our ability to share information with China and other "Countries of Concern" and certain service providers. Depending on the regulatory interpretation and enforcement of emerging data protection regulations and industry standards, the Company's business operations could be impacted, up to and including being unable to operate, within certain jurisdictions. Also, some of the Company's commercial partners, such as credit card companies, have imposed data security standards that the Company must meet. The Company will continue its efforts to meet its privacy, data security and cybersecurity risk management obligations; however, it is possible that certain new obligations or customer expectations may be difficult to meet and could require changes in the Company's operating processes and increase the Company's costs. Any significant liabilities associated with violations of any related laws or regulations could also have an adverse effect on our business, operating results, financial condition and liquidity, reputation and consumer relationships.
Additionally, the Company must manage the increasing threat of continually evolving cybersecurity risks. Our network, systems and storage applications, and those systems and applications maintained by our third-party commercial partners (such as aircraft and engine suppliers, cloud computing companies, credit card companies, regional airline carriers and international airline partners) have been and likely will continue to be subject to attempts to gain unauthorized access, breaches, malfeasance or other system disruptions, including those involving criminal hackers, denial of service attacks, hacktivists, state-sponsored actors, corporate espionage, employee malfeasance and human or technological error. In some cases, it is difficult to anticipate or to detect immediately such incidents and the damage caused thereby, and we may not be able to realize the benefits of our proactive defense measures and may experience operational difficulty in implementing them. Our use of AI applications has resulted in certain immaterial cybersecurity incidents and may in the future result in additional cybersecurity incidents, including incidents that implicate the personal data of our customers, employees or users of such applications, any of which could have an adverse effect on our business, operating results, financial condition and liquidity, reputation and consumer relationships. In addition, as attacks by cybercriminals and nation state actors become more sophisticated, frequent and intense, the costs of proactive defense measures have increased and will likely continue to increase. Furthermore, the Company's remote work arrangements may make it more vulnerable to targeted activity from cybercriminals and significantly increase the risk of cyberattacks or other security breaches. While we endeavor to safeguard our network, systems and applications, including through risk assessments, system monitoring, cybersecurity and data protection policies, processes and technologies and employee awareness and training, and seek to require that third parties adhere to security standards, there is no assurance that such actions will be sufficient to prevent actual or perceived cybersecurity incidents or data breaches or the damages and impacts to our business that result therefrom.
Any such cybersecurity incident or data breach could result in significant costs, including monetary damages, operational impacts, including service interruptions and delays, and reputational harm. Furthermore, the loss, disclosure, misappropriation of or access to sensitive Company information, customers', employees' or business partners' information or the Company's failure to meet its privacy or data protection obligations could result in legal claims or proceedings, penalties and remediation costs. A significant data breach or the Company's failure to meet its data privacy or data protection obligations may adversely affect the Company's operations, reputation, relationships with our business partners, business, operating results, financial condition and business strategy.