COMTECH TELECOMMUNICATIONS CORP DE

In addition to the rules and regulations that pertain to us as a U.S. government contractor and subcontractor, we are also subject to a variety of local, state and federal governmental regulations.

Our products that are incorporated into wireless communications systems must comply with various government regulations, including those of the FCC. Our manufacturing facilities, which may store, handle, emit, generate and dispose of hazardous substances that are used in the manufacture of our products, are subject to a variety of local, state and federal regulations, including those issued by the Environmental Protection Agency. Our products are also subject to European Union directives related to the recycling of electrical and electronic equipment.

Our international sales are subject to U.S. and foreign regulations such as the Arms Export Control Act, the International Emergency Economic Powers Act ("IEEPA"), the International Traffic in Arms Regulations ("ITAR"), the Export Administration Regulations ("EAR") and the trade sanctions laws and regulations administered by the U.S. Department of the Treasury’s Office of Foreign Assets Control ("OFAC"), the Department of Commerce ("DoC") and their foreign counterparts as well as other applicable laws relating to trade, export controls and foreign corrupt practices, the violation of which could adversely affect our operations. We must comply with all applicable export control laws and regulations of the U.S. and other countries. Certain of our products and systems may require licenses from U.S. government agencies for export from the U.S. or other countries, and some of our products are not permitted to be exported. We cannot be certain that we will be able to obtain necessary export licenses, and such failure would materially adversely affect our operations. If we are unable to receive appropriate export authorizations in the future, we may be prohibited from selling our products and services internationally, which may limit our sales and have a material adverse effect on our business, results of operations and financial condition. In addition, in certain cases, U.S. and foreign export controls also severely limit unlicensed technical discussions, such as discussions with any persons who are not U.S. citizens or permanent residents. As a result, in cases where we may need an export license, our ability to compete against a non-U.S. domiciled foreign company that may not be subject to the same U.S. laws may be materially adversely affected. In addition, we are subject to the FCPA and other local laws that generally bar bribes or unreasonable gifts to foreign governments or officials. Violations of these laws or regulations could result in significant sanctions, including disgorgement of profits, fines, and criminal sanctions against us, our officers, our directors, or our employees, more onerous compliance requirements, more extensive debarments from export privileges or loss of authorizations needed to conduct aspects of our international business. A violation of any of the regulations enumerated above could materially adversely affect our business, financial condition and results of operations. Additionally, changes in regulatory requirements could further restrict our ability to deliver services to our international customers or negatively impact our business, including the addition of a country to the list of sanctioned countries under the IEEPA or similar legislation.

In the past, we have self-reported violations of export control laws or regulations to the U.S. Department of State, Directorate of Defense Trade Controls ("DDTC"), DoC, OFAC and their foreign counterparts. In addition, we have made various commitments to U.S. government agencies that oversee trade and export matters that we will maintain certain policies and procedures including maintaining a company-wide Office of Trade Compliance and conducting ongoing internal assessments and reporting any future violations to those agencies.

Our financial reporting, corporate governance, public disclosure and compliance practices are governed by laws such as the Sarbanes-Oxley Act of 2002, Dodd-Frank Act of 2010, and rules and regulations issued by the SEC. The SEC has adopted rules which require, among other things, public companies to conduct certain inquiries to determine whether or not Conflict Minerals (as that term is defined in the SEC rules) that are necessary to the functionality of their manufactured products or their product's production processes originated in a Covered Country (as that term is defined in the SEC rules) and ultimately file a report with the SEC. Conflict Minerals are widely used in many industries, including the telecommunications industry and almost all of our products include component parts purchased from third-party suppliers and we must rely heavily on information received from suppliers to determine the origin of those materials. We have implemented a due diligence program consistent with the Organization for Economic Co-operation and Development guidelines to collect information concerning the country of origin of Conflict Minerals and in that regard, have adopted a policy that requires our suppliers (both public and private) to commit to a code of conduct relating to the responsible sourcing of minerals and to establish a policy to reasonably assure that the products they manufacture do not contain Conflict Minerals that originated in a Covered Country. Efforts to comply with this SEC rule have resulted in additional costs to us and, we believe, to our suppliers. As such, the availability of raw materials used in our operations could be negatively impacted and/or raw material prices could increase. Further, if we are unable to certify that our products are conflict free, we may face challenges with our customers, which could place us at a competitive disadvantage and could harm our reputation.

Laws and regulations have been enacted that affect companies conducting business on the Internet, including the European General Data Protection Regulation ("GDPR"). The GDPR imposes certain privacy related requirements on companies that receive or process personal data of residents of the European Union that are currently different than those in the United States and include significant penalties for non-compliance. Similarly, there are several legislative proposals in the United States, at both the federal and state level, that could impose new obligations in areas affecting our business, such as liability for personal data protection. In addition, some countries are considering or have passed legislation implementing data protection requirements or requiring local storage and processing of data or similar requirements that could increase the cost and complexity of delivering our services. Our costs to comply with the GDPR as well any other similar laws and regulations that emerge may negatively impact our business.