Skip to main content

ZIFF DAVIS, INC.

For the period ended Dec 31, 2025. Filed Feb 24, 2026.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2025 · Filed Feb 24, 2026

ZD$49.61-8.6%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2024-12-31; filed 2025-02-25.

0001084048-25-000007

Item 1A. Risk Factors

Current report: 10-K

Period ended 2025-12-31; filed 2026-02-24.

0001084048-26-000005

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 285 previous paragraphs and 296 current paragraphs.

211 unchanged; 58 reworded; 14 added; 2 removed; 14 previous and 13 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (14)

Current report

•We operate across many different markets and are subject to a rapidly evolving landscape of laws and self-regulatory regimes in the United States and internationally. Compliance with these obligations may require operational changes, lead to a significant compliance costs, and may limit our ability to collect, use, or monetize data.

Current report

•We may face various government and private actions, laws, or self-regulatory regimes regarding cybersecurity and data privacy, security, and protection, with uncertain interpretations and potentially significant costs and risks, particularly with respect to health data and other sensitive data. Additionally, data laws may restrict our ability to use and monetize certain data, and expose us to significant compliance costs, disputes, and regulatory enforcement.

Current report

On April 24, 2025, we filed a lawsuit against OpenAI, Inc. alleging copyright infringement, violations of the Digital Millennium Copyright Act, unjust enrichment and trademark dilution as a result of OpenAI’s unlawful and unauthorized copying and use of our content. See Item 3 –Legal Proceedings for additional information. There can be no assurance that we will be successful in this litigation, or in preventing other generative AI developers from using our content without authorization or fair compensation. Our business, brand, financial condition and results of operations may suffer as a result.

Current report

Our workforce is exposed to and uses AI technologies for certain tasks related to our business. We have guidelines and policies concerning the use of AI tools in the workplace. Nevertheless, the use of these AI tools, whether authorized or unauthorized, by our workforce, poses potential risks relating to the protection of data, including cybersecurity risk, exposure of our proprietary confidential information to unauthorized recipients, and the misuse of our or third-party intellectual property. Use of AI technology by our workforce, even if consistent with our guidelines, may result in allegations or claims against us related to a violation(s) of third-party intellectual property or other rights, unauthorized access to or use of proprietary information, and failure to comply with open-source software requirements. In addition, our employees use AI tools for various design and engineering tasks such as writing code, and these tools may produce inaccurate responses that could lead to errors in our decision-making, solution development or other business activities, which could have a negative impact on our business, operating results and financial condition. Our ability to mitigate these risks will depend on our provision of effective training, monitoring and enforcement of appropriate policies, guidelines and procedures, and compliance by our workforce.

Current report

Moreover, the passage or adoption of any legislation or regulation affecting the ability of service providers to periodically charge consumers for, among other things, recurring subscription payments may materially adversely affect our business, financial condition and results of operations. For example, under the Payment Services Regulation 2017, banks and other payment services providers must develop and implement strong customer authentication to check that the person requesting access to an account or trying to make a payment is permitted to do so. Such regulations have impacted and could materially adversely affect our payment authorization rate, user journey, paying user conversion rates, and could also in the future affect our payment reversal rates. Legislation or regulation regarding the foregoing, or changes to existing legislation or

Current report

-22- regulation governing subscription payments, have been enacted or are being considered globally, including in many U.S. states and by the Federal Trade Commission, as well as in certain EU countries and the UK (for example, the Digital Markets, Competition and Consumers Act 2024 in the UK, which grants new consumer enforcement powers and sets out new rules for subscription contracts). While we monitor and attempt to comply with these legal developments, we have been in the past, and may be in the future, subject to claims under such legislation or regulation.

Current report

On February 6, 2026, we filed a lawsuit against Google LLC and Alphabet Inc. alleging violations of antitrust laws, as well as unlawful deceptive acts or practices, common law fraud and unjust enrichment related, in part, to publisher ad servers and ad exchanges. See Item 3 –Legal Proceedings for additional information. There can be no assurance that we will be successful in this litigation, or in preventing Google and Alphabet from continuing the conduct alleged in the complaint. Our business, brand, financial condition and results of operations may suffer as a result.

Current report

In the United States, the CDA provides statutory protections to online service providers like us who distribute third-party content. However, government authorities, elected officials, and political candidates have called for amendments to Section 230 of the CDA that would purport to limit or remove protections afforded to interactive computer service providers

Current report

-27- and our current protections from liability for third-party content in the United States could decrease or change. We could incur significant costs investigating and defending such claims and, if we are found liable, significant damages. We could also face fines, orders restricting or blocking our services in particular geographies, or other government-imposed remedies as a result of content hosted on our platform.

Current report

Furthermore, a portion of our business includes acquiring and selling personal data. The acquisition and sale of data from or to third parties has become subject to increased regulatory scrutiny. Therefore, obtaining and selling data from third parties carries risk to us as a data purchaser and reseller. For example, as a data supplier, a portion of our business is currently required to register as a data broker under California, Oregon, Texas, and Vermont law and file reports with regulators, which exposes us to increased scrutiny. Additionally, California’s Delete Act established a mechanism to allow California consumers to submit a single, verifiable request to delete all of their personal data held by all registered data brokers and their service providers. Moreover, third-party data suppliers have recently been subject to increased litigation under various claims of violating certain state privacy laws. These laws and challenges may make it so difficult for us and our suppliers to collect and sell data, and the costs associated with the data may materially increase, or the availability of such data that we or our data suppliers can provide may materially decrease.

Current report

The UK has implemented data protection laws that are broadly equivalent to the GDPR, and many other jurisdictions have adopted GDPR-style privacy regimes that impose similarly stringent obligations. These laws can increase compliance costs, constrain our operations, and require changes to our products, processes and vendor arrangements. Non-compliance may result in investigations, corrective orders and material fines, as well as litigation and reputational harm.

Current report

Additionally, the EU Data Act may apply to our products and services and could require us to provide users (and, at their direction, third parties) with access to and portability of certain data. Compliance may require changes to our systems, APIs, access controls, security measures and support processes, which could increase costs and introduce new operational and cyber-security risks. The EU Data Act may also limit our ability to use and monetize data by reducing exclusivity over certain datasets, enabling customers and third parties to reuse data, including in competing offerings, and imposing prescriptive contractual and process requirements. These obligations could lead to disputes over scope, timing, security standards, trade secret protections, technical feasibility and commercial terms. Regulators may investigate and impose orders and penalties for non-compliance. Any of these factors could materially and adversely affect our business, financial condition and results of operations.

Current report

Online applications are subject to various laws and regulations relating to children's privacy and protection, which if violated, could subject us to an increased risk of litigation and regulatory actions.

Current report

There are a variety of laws and regulations, some of which have been adopted in recent years, aimed at protecting children using the internet, such as Article 8 of the GDPR/UK GDPR, the EU Digital Services Act, the UK Online Safety Act, the Australia Social Media Ban and the California Age-Appropriate Design Code Act. Although our products and services are intended for and targeted to adults only and we implement a combination of measures designed to prevent minors from gaining access to our application, no assurances can be given that such measures will be sufficient to completely avoid allegations of violations of such laws and regulations, any of which could expose us to significant liability, penalties, reputational harm and loss of revenue, among other things. Moreover, new regulations, or changes to existing regulations, could increase the cost of our operations and materially adversely affect our business, financial condition and results of operations.
Removed paragraphs (2)

Previous report

•We operate across many different markets and may be exposed to a variety of government and private actions, laws, or self-regulatory developments regarding cybersecurity, privacy, data security, and data protection with uncertain interpretations and potentially significant compliance costs.

Previous report

•Data privacy and security regulations such as the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), and the Virginia Data Privacy Act (“CDPA”) impose significant compliance costs and expose us to substantial risks, particularly with respect to health data and other sensitive data.
Reworded paragraphs (58)

Previous wording

Before deciding to invest in Ziff Davis or to maintain or increase your investment, you should carefully consider the risks described below in addition to the other cautionary statements and risks described elsewhere in this Annual Report on Form 10-K and our other filings with the SEC, including our subsequent reports on Forms 10-Q and 8-K. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties not presently known to us or that we currently deem immaterial also may affect our business. If any of these known or unknown risks or uncertainties actually occurs, our business, prospects, financial condition, operating results, and cash flows could be materially adversely affected. In that event, the market price of our common stock will likely decline and you may lose part or all of your investment.

Current wording

Before deciding to invest in Ziff Davis or to maintain or increase your investment, you should carefully consider the risks described below in addition to the other cautionary statements and risks described elsewhere in this Annual Report on Form 10-K and our other filings with the SEC, including our subsequent reports on Forms 10-Q and 8-K. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties not presently known to us or that we currently deem immaterial also may affect our business. If any of these known or unknown risks or uncertainties actually occur, our business, prospects, financial condition, operating results, and cash flows could be materially adversely affected. In that event, the market price of our common stock will likely decline and you may lose part or all of your investment.

Previous wording

•We face risks associated with system failures, security breaches, and other technological issues.

Current wording

•We face risks associated with system failures, cybersecurity breaches, and other technological issues.

Previous wording

•Potential indemnification liabilities to Consensus pursuant to the separation agreement could materially and adversely affect our businesses, financial condition, results of operations, and cash flows.

Current wording

•Potential indemnification liabilities to third-parties could materially and adversely affect our businesses, financial condition, results of operations, and cash flows.

Previous wording

•Certain features of our Outstanding Debt may delay or prevent an otherwise beneficial attempt to take over our Company.

Current wording

•Certain features of our Outstanding Debt may delay or prevent an otherwise beneficial attempt to take over our Company or otherwise restructure our business operations.

Previous wording

•We are a holding company and our operations are conducted through, and substantially all of our assets are held by, our subsidiaries, which may be subject to certain restrictions on their ability to pay dividends to us to fund any dividends on our stock, pay interest on our Outstanding Debt, and fund other holding company expenses.

Current wording

•We are a holding company and our operations are conducted through, and substantially all of our assets are held by, our subsidiaries, which may be subject to certain restrictions on their ability to (i) pay dividends to us, (ii) to fund any dividends on our stock, (iii) pay interest on our Outstanding Debt, or (iv) fund other holding company expenses.

Previous wording

Mergers and acquisitions are inherently risky and subject to many factors outside of our control. We cannot give assurances that our previous or future acquisitions will be successful and will not materially adversely affect our business, operating results, or financial condition. Failure to manage and successfully integrate acquisitions could materially harm our

Current wording

Mergers and acquisitions are inherently risky and subject to many factors outside of our control. We cannot give assurances that our previous or future acquisitions will be successful and will not materially adversely affect our business,

Previous wording

-15- business and operating results. In addition, our effective tax rate for future periods is uncertain and could be impacted by mergers and acquisitions.

Current wording

-15- operating results, or financial condition. Failure to manage and successfully integrate acquisitions could materially harm our business and operating results. In addition, our effective tax rate for future periods is uncertain and could be impacted by mergers and acquisitions.

Previous wording

A system failure, security breach, cyber-attack, or other technological risk could delay or interrupt service to our customers, harm our reputation and business, lead to a loss of customers, or subject us to significant liability.

Current wording

A system failure, security breach, cyberattack, or other technological risk could delay or interrupt service to our customers, harm our reputation and business, lead to a loss of customers, or subject us to significant liability.

Previous wording

Our operations are dependent on our network being free from material interruption by damage from fire, earthquake, or other natural disaster, power loss, telecommunications failure, unauthorized entry, computer viruses, cyber-attacks, or any other events beyond our control. Similarly, the operations of our partners and other third parties with which we work are also susceptible to the same risks. There can be no assurance that our existing and planned precautions of backup systems, regular

Current wording

Our operations are dependent on our network being free from material interruption by damage from fire, earthquake, or other natural disaster, power loss, telecommunications failure, unauthorized entry, computer viruses, cyber-attacks, or any other events beyond our control. Similarly, the operations of our partners and other third parties with which we work are also susceptible to the same risks. There can be no assurance that our existing and planned precautions of backup systems, regular data backups, security protocols, and other procedures will be adequate to prevent significant damage, system failure or data loss, and the same is true for our partners, vendors, and other third parties on which we rely. These precautions may change over time as laws and regulations regarding data privacy, security, and protection of information change.

Previous wording

We face a wide variety of cyber-attacks including attempts to gain unauthorized access to customer accounts.

Current wording

We face a wide variety of cyberattacks including attempts to gain unauthorized access to customer accounts.

Previous wording

Increased information technology security threats and more sophisticated cybercrimes and cyberattacks, including computer viruses and other malicious codes, ransomware, unauthorized access attempts, denial-of-service attacks, phishing, social engineering, hacking, and other types of attacks, pose a risk to the security and availability of our information technology systems, networks, products, solutions, and services, including those that are managed, hosted, provided, or used by third parties (and which may not provide the same level of information security as our own products, systems, or solutions), as well as the confidentiality, availability, and integrity of our data and the data of our customers, partners, consumers, employees, stockholders, suppliers and others. Also, many of our services are web-based, and the amount of data we store for our users has been increasing. Despite the implementation of security measures, our infrastructure, and that of our partners, vendors, and other third parties may be vulnerable to computer viruses, errors, bugs, defects, hackers, or similar disruptive problems caused by our vendors, partners, other third parties, subscribers, employees, or other internet users who attempt to invade public and private data networks. As seen in the industries in which we operate and others, these activities have been, and will continue to be, subject to continually evolving cybersecurity and technological risks. The rapid evolution and increased adoption of AI technologies may intensify our cybersecurity risks, as we may be unable to keep pace with the increasing sophistication of AI-based cybersecurity threats. Further, in some cases we do not have in place disaster recovery facilities for certain ancillary services.

Current wording

Increased information technology security threats and more sophisticated cybercrimes and cyberattacks, including computer viruses and other malicious codes, ransomware, unauthorized access attempts, denial-of-service attacks, phishing, social engineering, hacking, and other types of attacks, pose a risk to the security and availability of our information technology systems, networks, products, solutions, and services, including those that are managed, hosted, provided, or used by third parties (and which may not provide the same level of information security as our own products, systems, or solutions), as well as the confidentiality, availability, and integrity of our data and the data of our customers, partners, consumers, employees, stockholders, suppliers and others. Also, many of our services are web-based, and the amount of data we store for our users has been increasing. Despite the implementation of security measures, our infrastructure, and that of our partners, vendors, and other third parties may be vulnerable to computer viruses, errors, bugs, defects, hackers, or similar disruptive problems caused by our vendors, partners, other third parties, subscribers, employees, or other internet users who attempt to invade public and private data networks. As seen in the industries in which we operate and others, these activities have been, and will continue to be, subject to continually evolving cybersecurity and technological risks. The rapid evolution and increased adoption of AI technologies may intensify our cybersecurity risks, as we may be unable to keep pace with the increasing sophistication of AI-based cybersecurity threats. Cyberattacks have become more difficult to detect and respond to since they increasingly employ AI and machine learning techniques, such as generative AI-phishing, deepfake impersonations, automated vulnerability discovery, adaptive malware, and large-scale credential-stuffing campaigns. Further, in some cases we do not have in place disaster recovery facilities for certain ancillary services.

Previous wording

A significant portion of our operations relies heavily on the secure processing, storage, and transmission of confidential and other sensitive data. For example, a significant number of our Cybersecurity & Martech customers authorize us to bill them directly for all transaction fees charged by us. We rely on encryption and authentication technology to effect secure transmission of confidential information, including customer financial information, which is highly dependent on our billing systems functioning. Advances in computer capabilities, new discoveries in the field of cryptography, or other developments may result in a material compromise or breach of the technology used by us, our partners, our vendors, or other third parties to protect transaction and other confidential data. Any system failure or security breach that causes interruptions or data loss in and to our operations and systems or those of our partners, vendors, customers, or other third parties, whether due to human error or misconduct, system errors, or vulnerabilities in our or our third party service providers’ products, systems, or solutions, or which leads to the misappropriation of our or our customers’ confidential information, including as a result of the introduction of new and emerging technologies such as AI, could result in a significant liability to us (including in the form of judicial decisions and/or settlements, regulatory findings and/or forfeitures, and other means), cause considerable harm to us and our reputation (including requiring notification to customers, regulators, and/or the media), cause a loss of confidence in our products and services, and deter current and potential customers from using our services.

Current wording

A significant portion of our operations relies heavily on the secure processing, storage, and transmission of confidential and other sensitive data. For example, a significant number of our Cybersecurity & Martech customers authorize us to bill them directly for all transaction fees charged by us. We rely on encryption and authentication technology to effect secure transmission of confidential information, including customer financial information, which is highly dependent on our billing systems functioning. Advances in computer capabilities, new discoveries in the field of cryptography, or other developments may result in a material compromise or breach of the technology used by us, our partners, our vendors, or other third parties to protect transaction and other confidential data. Any system failure or security breach that causes interruptions or data loss in and to our operations and systems or those of our partners, vendors, customers, or other third parties, whether due to human error, including related to the improper use of AI, or misconduct, system errors, or vulnerabilities in our or our third party service providers’ products, systems, or solutions, or which leads to the misappropriation of our or our customers’ confidential information, including as a result of the introduction of new and emerging technologies such as AI, could result in a significant liability to us (including in the form of judicial decisions and/or settlements, regulatory findings and/or forfeitures, and other means), cause considerable harm to us and our reputation (including requiring notification to customers, regulators, and/or the media), cause a loss of confidence in our products and services, and deter current and potential customers from using our services.

Previous wording

We use vendors to assist with cybersecurity risks, but these vendors may not be able to assist us adequately in preparing for or responding to a cybersecurity incident. We maintain insurance related to cybersecurity risks, but this insurance may not be sufficient to cover all of our losses from any breaches or other adverse consequences related to a cybersecurity event. Any of these events could have a material adverse effect on our business, prospects, financial condition, operating results, and cash flows, or a negative impact to our reputation could cause us to suffer other negative consequences. For example, we may incur remediation costs (such as liability for stolen assets or information, repairs of system damage, and incentives to customers or business partners in an effort to maintain relationships after an attack); increased cybersecurity protection costs (which may include the costs of making organizational changes, deploying additional personnel and protection technologies, training employees, and engaging third-party experts and consultants); lost revenues resulting from (i) the unauthorized use of proprietary information, (ii) the failure to retain or attract customers following an attack, or (iii) the diversion of our resources away from revenue-generating activity and towards remediation activity; litigation and legal risks (including regulatory actions by state and federal governmental authorities and non-U.S. authorities); increased insurance premiums; reputational damage that adversely affects customer or investor confidence; damage to our competitiveness and stock price; and diminished long-term shareholder value. To date, such events have not resulted in the material impairment of our business operations.

Current wording

We use vendors to assist with cybersecurity risks, but these vendors may not be able to assist us adequately in preparing for or responding to a cybersecurity incident. We maintain insurance related to cybersecurity risks, but this insurance may not be sufficient to cover all of our losses from any breaches or other adverse consequences related to a cybersecurity event. Any of these events could have a material adverse effect on our business, prospects, financial condition, operating results, and cash flows, or a negative impact to our reputation could cause us to suffer other negative consequences. For example, we may incur costs related to the investigation of data breaches (including for forensic analysis, legal advice, and breach notifications); remediation costs (such as liability for stolen assets or information, repairs of system damage, and incentives to customers or business partners in an effort to maintain relationships after an attack); increased cybersecurity protection costs (which may include the costs of making organizational changes, deploying additional personnel and protection technologies, training employees, recruiting people with specific expertise, and engaging third-party experts and consultants); lost revenues resulting from (i) the unauthorized use of proprietary information, (ii) the failure to retain or attract customers following an attack, or (iii) the diversion of our resources away from revenue-generating activity and towards remediation activity; litigation and legal risks (including regulatory actions by state and federal governmental authorities and non-U.S. authorities); increased insurance premiums; reputational damage that adversely affects customer or investor confidence; damage

Previous wording

Developments in the use of generative AI and related technologies make it easier to access, duplicate, and distribute our content, or otherwise generate output based on our content, without authorization, fair compensation, or proper attribution. These technologies may reduce our online traffic and audience sizes, infringe our intellectual property rights, and adversely affect our business, financial condition, and results of operations. Our reputation may also be harmed if these technologies wrongly attribute inaccurate information to us. We seek to limit such threats; however, policing unauthorized use of our content and intellectual property is often difficult and the steps taken by us may not prevent misuse and infringement of our intellectual property. Although we do not believe these threats have been material to our businesses to date, we expect to continue to be

Current wording

Developments in the use of generative AI and related technologies make it easier to access, duplicate, and distribute our content, or otherwise generate output based on our content, without authorization, fair compensation, or proper attribution. These technologies may reduce our online traffic and audience sizes, infringe our intellectual property rights, and adversely affect our business, financial condition, and results of operations. Our reputation may also be harmed if these technologies wrongly attribute inaccurate information to us. We seek to limit such threats which are significantly more acute with respect to certain of our Digital Media Businesses; however, policing unauthorized use of our content and intellectual property is often difficult and the steps taken by us may not prevent misuse and infringement of our intellectual property. Although we seek to minimize such threats to our businesses, particularly with respect to our Digital Media Businesses, we expect to continue to be subject to them and there can be no assurance that we will not experience a negative impact on our business as a result of them.

Previous wording

The use of copyrighted material by generative AI and related technologies has not been fully interpreted by federal, state, or international courts, and the legal and regulatory framework for generative AI continues to evolve and remains uncertain. It is possible that new laws and regulations will be adopted in the jurisdictions in which we operate, or existing laws and regulations may be interpreted in new ways, which may affect how operators of generative AI and related technologies seek to use our content. For example, in 2024 California enacted a range of laws regulating the use and development of AI, which generally relate to transparency, privacy, and fairness, among other concerns. Furthermore, in Europe the EU’s AI Act was published in the Official Journal of the European Union on July 12, 2024 and entered into force on August 1, 2024. We are still evaluating the impact of these laws on our business. The cost for us to enforce such laws and regulations, or otherwise protect our content and intellectual property rights, could be significant.

Current wording

The use of copyrighted material by generative AI and related technologies has not been fully interpreted by federal, state, or international courts, and the legal and regulatory framework for generative AI continues to evolve and remains uncertain. It is possible that new laws and regulations will be adopted in the jurisdictions in which we operate, or existing laws and regulations may be interpreted in new ways, which may affect how operators of generative AI and related technologies seek to use our content. For example, in 2024 California enacted a range of laws regulating the use and development of AI, which generally relate to transparency, privacy, and fairness, among other concerns. Furthermore, in Europe the EU’s AI Act began to apply on February 2, 2025, with remaining requirements becoming effective on a staggered basis until August 2027. The EU AI Act will impose material requirements on both providers and users of AI technologies, and will prohibit certain AI practices, with infringement punishable by sanctions of up to 7% of annual worldwide turnover or 35 million euros, whichever is higher. We are still evaluating the impact of these laws on our business. The cost for us to enforce such laws and regulations, or otherwise protect our content and intellectual property rights, could be significant. Moreover, any failure or perceived failure by us to comply with new laws or regulations concerning AI could have an adverse impact on our business. Anticipated further evolution of regulations and legislation on this topic may substantially increase the penalties to which we could be subject in the event of any non-compliance. Compliance with these laws is challenging, constantly evolving and time consuming and federal regulators, state attorney generals and plaintiff’s attorneys have been and will likely continue to be active in this space. We may incur substantial expense in complying with legal obligations to be imposed by new regulations and we may be required to make significant changes to our solutions and expanding business operations, all of which may adversely affect our operations.

Previous wording

Climate change may have an adverse impact on our business locations, and those of our customers and vendors. For example, our business locations, or those of our customers and vendors, may experience adverse climate-related events, including fluctuations in temperature or water availability, floods, wildfires (and resultant air quality impacts), other unusual or prolonged adverse weather patterns, and power shutoffs associated with these events. A climate-related event that destroys or disrupts any of our critical systems could severely impact our ability to conduct business, and we cannot ensure that our systems and data centers will remain fully operational during and immediately after such an event or disruption. Climate-related events also pose risks to our employees’ ability to stay connected and perform their job duties, particularly for those who work from home. We may experience increased employee turnover, business losses or additional costs to maintain or resume operations due to climate-related events. In addition, changes in regulatory requirements, markets and shareholder expectations regarding climate change may impact our business, financial condition and results of operations. We are assessing and managing the climate-related risks to our operations, including through our Environmental, Social and Governance Committee, but we cannot ensure that we are fully able to assess or manage such risks.

Current wording

-19- prolonged adverse weather patterns, and power shutoffs associated with these events. A climate-related event that destroys or disrupts any of our critical systems could severely impact our ability to conduct business, and we cannot ensure that our systems and data centers will remain fully operational during and immediately after such an event or disruption. Climate-related events also pose risks to our employees’ ability to stay connected and perform their job duties, particularly for those who work from home. We may experience increased employee turnover, business losses or additional costs to maintain or resume operations due to climate-related events. In addition, changes in regulatory requirements, markets and shareholder expectations regarding climate change may impact our business, financial condition and results of operations. We are assessing and managing the climate-related risks to our operations, including through our Environmental, Social and Governance Committee, but we cannot ensure that we are fully able to assess or manage such risks.

Previous wording

The markets in which we operate are highly competitive and are undergoing rapid technological changes. Some of our competitors include major companies with much greater resources and significantly larger customer bases than we have. Some of these competitors offer their services at lower prices than we do. These companies may be able to develop and expand their network infrastructures and capabilities more quickly, adapt more swiftly to new or emerging technologies and changes in customer requirements, take advantage of acquisition and other opportunities more readily, and devote greater resources to the marketing and sale of their products and services than we can. There can be no assurance that additional competitors will not enter markets that we are currently serving and plan to serve or that we will be able to compete effectively. Competitive pressures may reduce our revenue, operating profits, or both.

Current wording

The markets in which we operate are highly competitive and are undergoing rapid technological changes. Some of our competitors include major companies with much greater resources and significantly larger customer bases than we have. Some of these competitors offer their services at lower prices than we do. These companies may be able to develop and expand their network infrastructures and capabilities more quickly, adapt more swiftly to new or emerging technologies, including AI implementations, and changes in customer requirements, take advantage of acquisition and other opportunities more readily, and devote greater resources to the marketing and sale of their products and services than we can. There can be no assurance that additional competitors will not enter markets that we are currently serving and plan to serve or that we will be able to compete effectively. Competitive pressures may reduce our revenue, operating profits, or both.

Previous wording

-19- companies to attract advertising spending. Some of our existing competitors and possible entrants may have greater brand recognition for certain products and services, more expertise in a particular segment of the market, and greater operational, strategic, technological, financial, personnel, or other resources than we do. Many of our competitors have access to considerable financial and technical resources with which to compete aggressively, including by funding future growth and expansion and investing in acquisitions, technologies, and research and development. Further, emerging start-ups may be able to innovate and provide new products and services faster than we can. In addition, competitors may consolidate with each other or collaborate, and new competitors may enter the market. Some of the competitors of our Cybersecurity & Martech business in international markets have a substantial competitive advantage over us because they have dominant market share in their territories, are owned by local telecommunications providers, have greater brand recognition, are focused on a single market, are more familiar with local tastes and preferences, or have greater regulatory and operational flexibility due to the fact that we may be subject to both U.S. and foreign regulatory requirements.

Current wording

In addition, several competitors offer products and services that directly compete for users with our business offerings. Similarly, the advertising networks operated by our competitors or by other participants in the display marketplace offer services that directly compete with our offerings for advertisers, including advertising exchanges, ad networks, demand side platforms, ad serving technologies, and sponsored search offerings. We also compete with traditional print and broadcast media companies to attract advertising spending. Some of our existing competitors and possible entrants may have greater brand recognition for certain products and services, more expertise in a particular segment of the market, and greater operational, strategic, technological, financial, personnel, or other resources than we do. Many of our competitors have access to considerable financial and technical resources with which to compete aggressively, including by funding future growth and expansion and investing in acquisitions, technologies, and research and development. Further, emerging start-ups may be able to innovate and provide new products and services faster than we can. In addition, competitors may consolidate with each other or collaborate, and new competitors may enter the market. Some of the competitors of our Cybersecurity & Martech business in international markets have a substantial competitive advantage over us because they have dominant market share in their territories, are owned by local telecommunications providers, have greater brand recognition, are focused on a single market, are more familiar with local tastes and preferences, or have greater regulatory and operational flexibility due to the fact that we may be subject to both U.S. and foreign regulatory requirements.

Previous wording

-20- letter ruling were based, among other things, on various facts and assumptions, as well as certain representations, statements and undertakings of Ziff Davis and Consensus (including those relating to the past and future conduct of Ziff Davis and Consensus). If any of these facts, assumptions, representations, statements or undertakings is, or becomes, inaccurate or incomplete, or if Ziff Davis or Consensus breach any of their respective covenants contained in any of the separation-related agreements or in the documents relating to the IRS private letter ruling and/or any opinion, the IRS private letter ruling and/or any opinion may be invalid. Accordingly, notwithstanding receipt of the IRS private letter ruling and/or opinions of counsel or other external tax advisors, the IRS could determine that the distribution and certain related transactions should be treated as taxable transactions for U.S. federal income tax purposes if it determines that any of the facts, assumptions, representations, statements or undertakings that were included in the request for the IRS private letter ruling or on which any opinion was based are false or have been violated. In addition, the IRS private letter ruling does not address all of the issues that are relevant to determining whether the distribution, together with certain related transactions, qualifies as a transaction that is generally tax-free for U.S. federal income tax purposes, and an opinion of outside counsel or other external tax advisor represents the judgment of such counsel or advisor which is not binding on the IRS or any court. Accordingly, notwithstanding receipt by Ziff Davis of the IRS private letter ruling and the tax opinions referred to above, there can be no assurance that the IRS will not assert that the distribution and/or certain related transactions do not qualify for tax-free treatment for U.S. federal income tax purposes or that a court would not sustain such a challenge. In the event the IRS were to prevail with such a challenge, Ziff Davis, Consensus and Ziff Davis’ stockholders could be subject to significant U.S. federal income tax liability.

Current wording

On October 7, 2021, the Company completed the separation of its cloud fax business into Consensus, an independent publicly traded company. The separation of Consensus was effected by a pro rata distribution to our shareholders of 80.1% of the stock of Consensus, comprising our prior cloud fax business. We obtained (i) a private letter ruling from the IRS, satisfactory to our Board of Directors, regarding certain U.S. federal income tax matters relating to the separation and related transactions and (ii) an opinion of outside counsel, satisfactory to our Board of Directors, regarding the qualification of the distribution, together with certain related transactions, as generally tax-free, for U.S. federal income tax purposes, under Sections 355 and 368(a)(1)(D) of the Internal Revenue Code (the “Code”). The opinion of outside counsel and the IRS private letter ruling were based, among other things, on various facts and assumptions, as well as certain representations, statements and undertakings of Ziff Davis and Consensus (including those relating to the past and future conduct of Ziff Davis and Consensus). If any of these facts, assumptions, representations, statements or undertakings is, or becomes, inaccurate or incomplete, or if Ziff Davis or Consensus breach any of their respective covenants contained in any of the separation-related agreements or in the documents relating to the IRS private letter ruling and/or any opinion, the IRS private letter ruling and/or any opinion may be invalid. Accordingly, notwithstanding receipt of the IRS private letter ruling and/or opinions of counsel or other external tax advisors, the IRS could determine that the distribution and certain related transactions should be treated as taxable transactions for U.S. federal income tax purposes if it determines that any of the facts, assumptions, representations, statements or undertakings that were included in the request for the IRS private letter ruling or on which any opinion was based are false or have been violated. In addition, the IRS private letter ruling does not address all of the issues that are relevant to determining whether the distribution, together with certain related transactions, qualifies as a transaction that is generally tax-free for U.S. federal income tax purposes, and an opinion of outside counsel or other external tax advisor represents the judgment of such counsel or advisor which is not binding on the IRS or any court. Accordingly, notwithstanding receipt by Ziff Davis of the IRS private letter ruling and the tax opinions referred to above, there can be no assurance that the IRS will not assert that the distribution and/or certain related transactions do not qualify for tax-free treatment for U.S. federal income tax purposes or that a court would not sustain such a challenge. In the event the IRS were to prevail with such a challenge, Ziff Davis, Consensus and Ziff Davis’ stockholders could be subject to significant U.S. federal income tax…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

A significant part of our revenues depends on prompt and accurate billing processes. Customer billing is a highly complex process, and our billing systems must efficiently interface with third-party systems, such as those of credit card processing companies. Our ability to accurately and efficiently bill our customers is dependent on the successful operation of our billing systems and the third-party systems upon which we rely, such as our credit card processor, and our ability to provide these third parties the information required to process transactions. In addition, our ability to offer new services or alternative-billing plans is dependent on our ability to customize our billing systems. Any failures or errors in our billing systems or procedures could impair our ability to properly bill our current customers or attract and service new customers, and thereby could materially and adversely affect our business and financial results.

Current wording

A significant part of our revenues depends on prompt and accurate billing processes. Customer billing is a highly complex process, and our billing systems must efficiently interface with third-party systems, such as those of credit card processing companies. Our ability to accurately and efficiently bill our customers is dependent on the successful operation of our billing systems and the third-party systems upon which we rely, such as our credit card processor, and our ability to provide these third parties the information required to process transactions. To the extent there are increases in payment processing fees, disruptions in our or third-party payment processing systems; errors in charges made to subscribers; material changes in the payment ecosystem such as large reissuances of payment cards by credit card issuers and the introduction of new subscription management tools; or significant changes to certifications, rules, regulations, industry standards or laws concerning payment processing; or other changes that affect our billing systems, our ability to accept payments or retain users could be hindered, we could experience increased costs, and we could be subject to fines and civil liability, which could harm our reputation and adversely impact our revenues, operating expenses and/or results of operations. In addition, our ability to offer new services or alternative-billing plans is dependent on our ability to customize our billing systems. Any failures or errors in our billing systems or procedures could impair our ability to properly bill our current customers or attract and service new customers, and thereby could materially and adversely affect our business and financial results.

Previous wording

Additionally, if people pay for these services with stolen credit cards, we could incur substantial unreimbursed third-party vendor costs. We also incur losses from claims that customers did not authorize credit card transactions to purchase our services. If the numbers of unauthorized credit card transactions become excessive, we could be assessed substantial fines for excess chargebacks and could lose the right to accept credit cards for payment. In addition, we are subject to Payment Card Industry (“PCI”) data security standards, which require periodic audits by independent third parties to assess our compliance. PCI standards are a comprehensive set of requirements for enhancing payment account data security. Failure to comply with the security requirements or rectify a security issue may result in fines or a restriction on accepting payment cards. Credit card companies may change the standards required to utilize their services from time to time. If we are unable to meet these new standards, we could be unable to accept credit cards. Further, the law relating to the liability of providers of online payment

Current wording

Additionally, if people pay for these services with stolen credit cards, we could incur substantial unreimbursed third-party vendor costs. We also incur losses from claims that customers did not authorize credit card transactions to purchase our services. If the numbers of unauthorized credit card transactions become excessive, we could be assessed substantial fines for excess chargebacks and could lose the right to accept credit cards for payment. In addition, we are subject to Payment Card Industry (“PCI”) data security standards, which require periodic audits by independent third parties to assess our compliance. PCI standards are a comprehensive set of requirements for enhancing payment account data security. Failure to comply with the security requirements or rectify a security issue may result in fines or a restriction on accepting payment cards. Credit card companies may change the standards required to utilize their services from time to time. If we are unable to meet these new standards, we could be unable to accept credit cards. Further, the law relating to the liability of providers of online payment services is currently unsettled and states may enact their own rules with which we may not comply. Substantial losses due to fraud or our inability to accept credit card payments, which could cause our paid subscriber base to significantly decrease, could have a material adverse effect on our business, prospects, financial condition, operating results and cash flows.

Previous wording

As we expand our international operations, we could be exposed to significant risks of currency fluctuations. In some countries outside the U.S., we offer our services in the applicable local currency, including but not limited to the Canadian Dollar, the British Pound Sterling, the Australian Dollar, the Euro, the Japanese Yen, the Danish Krone, the Swedish Krona, and the Norwegian Krone, among others. As a result, fluctuations in foreign currency exchange rates affect the results of our operations, which in turn may materially adversely affect reported earnings and the comparability of period-to-period results of operations. Changes in currency exchange rates may also affect the relative prices at which we and foreign competitors sell our services in the same market. In addition, changes in the value of the relevant currencies may affect the cost of certain items

Current wording

As we expand our international operations, we could be exposed to significant risks of currency fluctuations. In some countries outside the U.S., we offer our services in the applicable local currency, including but not limited to the Canadian Dollar, the British Pound Sterling, the Australian Dollar, the Euro, the Japanese Yen, the Danish Krone, the Swedish Krona, and the Norwegian Krone, among others. As a result, fluctuations in foreign currency exchange rates affect the results of our

Previous wording

-22- required in our operations. Furthermore, we may become subject to exchange control regulations, which might restrict or prohibit our conversion of other currencies into U.S. Dollars. We cannot assure you that future exchange rate movements will not have a material adverse effect on our future business, prospects, financial condition, operating results, and cash flows. To date, we have not entered into foreign currency hedging transactions to control or minimize these risks.

Current wording

-23- operations, which in turn may materially adversely affect reported earnings and the comparability of period-to-period results of operations. Changes in currency exchange rates may also affect the relative prices at which we and foreign competitors sell our services in the same market. In addition, changes in the value of the relevant currencies may affect the cost of certain items required in our operations. Furthermore, we may become subject to exchange control regulations, which might restrict or prohibit our conversion of other currencies into U.S. Dollars. We cannot assure you that future exchange rate movements will not have a material adverse effect on our future business, prospects, financial condition, operating results, and cash flows. To date, we have not entered into foreign currency hedging transactions to control or minimize these risks.

Previous wording

Monitoring unauthorized use of the content on our websites and mobile applications, and our other intellectual property and technology, is difficult and costly. Our efforts to protect our proprietary rights and intellectual property may not have been and may not be adequate to prevent their misappropriation or misuse. Third parties from time to time copy content or other intellectual property or technology from our solutions without authorization and seek to use it for their own benefit. We generally seek to address such unauthorized copying or use, but we have not always been successful in stopping all unauthorized use of our content or other intellectual property, or technology, and may not be successful in doing so in the future. Further, we may not have been and may not be able to detect unauthorized use of our technology, content, or intellectual property, or to take appropriate steps to enforce our intellectual property rights.

Current wording

Monitoring unauthorized use of the content on our websites and mobile applications, and our other intellectual property and technology, is difficult and costly. Our efforts to protect our proprietary rights and intellectual property may not have been and may not be adequate to prevent their misappropriation or misuse. Third parties from time to time copy content or other intellectual property or technology from our solutions without authorization and seek to use it for their own benefit. We generally seek to address such unauthorized copying or use, but we have not always been successful in stopping all unauthorized use of our content or other intellectual property, or technology, and may not be successful in doing so in the

Previous wording

The successful operation of our business depends upon the supply of critical business elements and marketing relationships from other companies.

Current wording

The successful operation of our business depends upon the supply of critical business elements and relationships from other companies.

Previous wording

We depend upon third parties for critical elements of our business, including technology, infrastructure, customer service, and sales and marketing components. We rely on private third-party providers for our internet, telecommunications, website traffic, and other connections and services and for co-location of a significant portion of our servers and other hosting services. In addition, we rely on third-party platforms to facilitate and provide access to products sold through our sites. Any disruption in the services provided by any of these suppliers, any adverse change in access to their platforms or services or in their terms and conditions of use or services, or any failure by them to handle current or higher volumes of activity could have a material adverse effect on our business, prospects, financial condition, operating results, and cash flows. To obtain new customers, we have marketing agreements with operators of leading search engines and websites and employ the use of resellers to sell our products. These arrangements typically are not exclusive and do not extend over a significant period of time. Failure to continue these relationships on terms that are acceptable to us or to continue to create additional relationships could have a material adverse effect on our business, prospects, financial condition, operating results and cash flows.

Current wording

We depend upon third parties for critical elements of our business, including technology, infrastructure, customer service, and sales and marketing components. We rely on private third-party providers for our internet, telecommunications, website traffic, and other connections and services and for co-location of a significant portion of our servers and other hosting services. In addition, we rely on third-party platforms to facilitate and provide access to products sold through our sites. Our advertising operations rely on ad servers and ad exchanges, that could be disrupted, and providers of such services may leverage their power to alter the structure or operations of the ad servers and ad exchanges. Any disruption in the services provided by any of these suppliers, any adverse change in access to their platforms or services or in their terms and conditions of use or services, any failure by them to handle current or higher volumes of activity, or any other issues with the services they provide could have a material adverse effect on our business, prospects, financial condition, operating results, and cash flows.

Previous wording

We have established and continue to maintain, assess, and update our internal controls and procedures regarding our business operations and financial reporting. Our internal controls and procedures are designed to provide reasonable assurances regarding our business operations and financial reporting. However, because of the inherent limitations in this process, internal controls and procedures may not prevent or detect all errors or misstatements. To the extent our internal controls are inadequate or not adhered to by our employees, our business, financial condition, and operating results could be materially adversely affected. We have previously identified a material weakness in our internal controls, which we subsequently remediated. We cannot assure you that additional material weaknesses in our internal control over financial reporting will not be identified in the future. A material weakness in our internal controls could result in a material misstatement of our consolidated financial statements.

Current wording

We have established and continue to maintain, assess, and update our internal controls and procedures regarding our business operations and financial reporting. Our internal controls and procedures are designed to provide reasonable assurances regarding our business operations and financial reporting. However, because of the inherent limitations in this process, internal controls and procedures may not prevent or detect all errors or misstatements. To the extent our internal controls are inadequate or not adhered to by our employees, our business, financial condition, and operating results could be materially adversely affected. We have previously identified a material weakness in our internal controls, which we subsequently remediated. We

Previous wording

-24- and challenges that could negatively impact our business. For example, when we decide to sell or otherwise dispose of a business or assets, we may be unable to do so on satisfactory terms within our anticipated timeframe or at all, and even after reaching a definitive agreement to sell or dispose a business the sale is typically subject to satisfaction of pre-closing conditions which may not become satisfied. In addition, divestitures or other dispositions may dilute our earnings per share, have other adverse financial and accounting impacts, and distract management, and disputes may arise with buyers. Furthermore, we have retained responsibility for and/or have agreed to indemnify buyers against some known and unknown contingent liabilities related to a number of businesses we have sold or disposed of. The resolution of these contingencies has not had a material effect on our financial statements but we cannot be certain that this favorable pattern will continue.

Current wording

We continually assess the strategic fit of our existing businesses and may divest or otherwise dispose of businesses that are deemed not to fit with our strategic plan or are not achieving the desired return on investment. Our ability to consummate a sale of one or more of our business lines pursuant to our announced review of potential value-creating opportunities poses risks and challenges that could negatively impact our business. For example, when we decide to sell or otherwise dispose of a business or assets, we may be unable to do so on satisfactory terms within our anticipated timeframe or at all, and even after reaching a definitive agreement to sell or dispose a business the sale is typically subject to satisfaction of pre-closing conditions which may not become satisfied. In addition, divestitures or other dispositions may dilute our earnings per share, have other adverse financial and accounting impacts, and distract management, and disputes may arise with buyers. Furthermore, we have retained responsibility for and/or have agreed to indemnify buyers against some known and unknown contingent liabilities related to a number of businesses we have sold or disposed of. The resolution of these contingencies has not had a material effect on our financial statements but we cannot be certain that this favorable pattern will continue.

Previous wording

Potential indemnification liabilities to Consensus pursuant to the separation agreement could materially and adversely affect our businesses, financial condition, results of operations, and cash flows.

Current wording

Potential indemnification liabilities to third-parties could materially and adversely affect our businesses, financial condition, results of operations, and cash flows.

Previous wording

We entered into a separation and distribution agreement and related agreements with Consensus to govern the separation and distribution of Consensus and the relationship between the two companies going forward. These agreements provide for specific indemnity and liability obligations of each party and could lead to disputes between the parties. If we are required to indemnify Consensus under the circumstances set forth in these agreements, we may be subject to substantial liabilities. In addition, with respect to the liabilities for which Consensus has agreed to indemnify us under these agreements, there can be no assurance that the indemnity rights we have against Consensus will be sufficient to protect us against the full amount of the liabilities, or that Consensus will be able to fully satisfy its indemnification obligations. Each of these risks could negatively affect our businesses, financial condition, results of operations, and cash flows.

Current wording

Occasionally, we enter into liability indemnification agreements with third-parties. These agreements provide for specific indemnity and liability obligations of each party and could lead to disputes between the parties. If we are required to indemnify a third-party under the circumstances set forth in these agreements, we may be subject to substantial liabilities. In addition, with respect to the liabilities for which a third-party has agreed to indemnify us under these agreements, there can be no assurance that the indemnity rights we have against a third-party will be sufficient to protect us against the full amount of the liabilities, or that a third-party will be able to fully satisfy its indemnification obligations. Each of these risks could negatively affect our businesses, financial condition, results of operations, and cash flows.

Previous wording

From time to time, we release guidance in our earnings conference calls, earnings releases, or otherwise, regarding our expected future performance that represents our management's estimates as of the date of release. This guidance often includes forward-looking statements based on projections prepared by our management. Projections are based upon a number of assumptions and estimates that, while presented with numerical specificity, are inherently subject to significant business, economic and competitive uncertainties and contingencies, many of which are beyond our control and/or are based upon specific assumptions with respect to future business decisions, some of which will change. Some of those key assumptions relate to the macroeconomic environment, including inflation and interest rates, which are inherently difficult to predict. Others are related to the future actions of existing and potential customers and vendors and relate to outcomes that we do not control. We generally state possible outcomes as high and low ranges, which are intended to provide a sensitivity analysis as variables are changed but are not intended to imply that actual results could not fall outside of the suggested ranges. Furthermore, analysts and investors may develop and publish their own projections of our business, which may form a consensus about our future performance. Our actual business results may vary significantly from such guidance or that consensus due to a number of factors, many of which are outside of our control, including those described in this “Risk Factors” section, any of which or combination thereof could materially and adversely affect our business and future operating results. Guidance is necessarily speculative in nature, and it can be expected that some or all of the assumptions underlying the guidance furnished by us will not materialize or will vary significantly from actual results. Accordingly, our guidance is only an estimate of what management believes is realizable as of the date of release. Actual results may vary from our guidance and the variations may be material.

Current wording

-26- specific assumptions with respect to future business decisions, some of which will change. Some of those key assumptions relate to the macroeconomic environment, including inflation and interest rates, which are inherently difficult to predict. Others are related to the future actions of existing and potential customers and vendors and relate to outcomes that we do not control. We generally state possible outcomes as high and low ranges, which are intended to provide a sensitivity analysis as variables are changed but are not intended to imply that actual results could not fall outside of the suggested ranges. Furthermore, analysts and investors may develop and publish their own projections of our business, which may form a consensus about our future performance. Our actual business results may vary significantly from such guidance or that consensus due to a number of factors, many of which are outside of our control, including those described in this “Risk Factors” section, any of which or combination thereof could materially and adversely affect our business and future operating results. Guidance is necessarily speculative in nature, and it can be expected that some or all of the assumptions underlying the guidance furnished by us will not materialize or will vary significantly from actual results. Accordingly, our guidance is only an estimate of what management believes is realizable as of the date of release. Actual results may vary from our guidance and the variations may be material.

Previous wording

The application of existing domestic and international laws and regulations to us relating to issues such as labor, defamation, pricing, advertising, taxation, promotions, billing, e-commerce, consumer protection, accessibility, content regulation, data privacy, youth safety, export restrictions and sanctions, telecommunications, mobile communications and media, television, intellectual property ownership and infringement, real estate, anti-corruption, foreign exchange controls and cash repatriation restrictions, anti-competition, climate, environmental, health, safety, and accreditation, in many instances, is unclear or unsettled. In addition, we will also be subject to any new laws and regulations directly applicable to our domestic and international activities. Compliance with these laws, regulations and similar requirements may be onerous and expensive, and these laws may be inconsistent from jurisdiction to jurisdiction, further increasing the cost of compliance and doing business. Any such costs, which may rise in the future as a result of changes in these laws and regulations or in their interpretation, could individually or in the aggregate make our products and services less attractive to our customers, delay the introduction of new products in one or more regions, or cause us to change or limit our business practices. We have implemented policies and procedures designed to ensure compliance with applicable laws and regulations, but there can be no assurance that our employees, contractors, or agents will not violate such laws and regulations or our policies and procedures. Further, the application of existing laws to us or our subsidiaries regulating or requiring licenses for certain businesses of our advertisers including, for example, distribution of pharmaceuticals, alcohol, or other regulated substances, adult content, tobacco, or firearms, as well as insurance and securities brokerage, and legal services, can be unclear. Internationally, we may also be subject to laws regulating our activities in foreign countries and to foreign laws and regulations that are inconsistent from country to country. Our businesses utilize contractors, freelancers and/or staff from third-party outsourcers to provide content and other services. However, in the future, arrangements with such individuals may not be deemed appropriate by a relevant government authority, which could result in additional costs and expenses. We may incur substantial liabilities for expenses necessary to defend against litigation regarding these laws and regulations or to otherwise comply with these laws and regulations, and we may incur potentially substantial penalties for any failure to comply. Compliance with these laws and regulations may also cause us to change or limit our business practices in a manner adverse to our business.

Current wording

The application of existing domestic and international laws and regulations to us relating to issues such as labor, defamation, pricing, advertising, taxation, promotions, billing, e-commerce, consumer protection, accessibility, content regulation, data privacy, cybersecurity, AI, youth safety, export restrictions and sanctions, telecommunications, mobile communications and media, television, intellectual property ownership and infringement, real estate, anti-corruption, foreign exchange controls and cash repatriation restrictions, anti-competition, climate, environmental, health, safety, and accreditation, in many instances, is unclear or unsettled. In addition, we will also be subject to any new laws and regulations directly applicable to our domestic and international activities. Compliance with these laws, regulations and similar requirements may be onerous and expensive, and these laws may be inconsistent from jurisdiction to jurisdiction, further increasing the cost of compliance and doing business. Any such costs, which may rise in the future as a result of changes in these laws and regulations or in their interpretation, could individually or in the aggregate make our products and services less attractive to our customers, delay the introduction of new products in one or more regions, or cause us to change or limit our business practices. We have implemented policies and procedures designed to ensure compliance with applicable laws and regulations, but there can be no assurance that our employees, contractors, or agents will not violate such laws and regulations or our policies and procedures. Further, the application of existing laws to us or our subsidiaries regulating or requiring licenses for certain businesses of our advertisers including, for example, distribution of pharmaceuticals, alcohol, or other regulated substances, adult content, tobacco, or firearms, as well as insurance and securities brokerage, and legal services, can be unclear. Internationally, we may also be subject to laws regulating our activities in foreign countries and to foreign laws and regulations that are inconsistent from country to country. Our businesses utilize contractors, freelancers and/or staff from third-party outsourcers to provide content and other services. However, in the future, arrangements with such individuals may not be deemed appropriate by a relevant government authority, which could result in additional costs and expenses. We may incur substantial liabilities for expenses necessary to defend against litigation regarding these laws and regulations or to otherwise comply with these laws and regulations, and we may incur potentially substantial penalties for any failure to comply. Compliance with these laws and regulations may also cause us to change or limit our business practices in a manner adverse to our business.

Previous wording

Cybersecurity, privacy, data security, consumer protection, and data protection laws are constantly evolving at the federal and state levels in the United States, as well as abroad. We are currently subject to such laws both at the federal and state levels in the U.S. as well as similar laws in a variety of international jurisdictions. For example, our use or sharing or certain data subjects us to the Video Privacy Protection Act ("VPPA"), the California Invasion of Privacy Act ("CIPA"), the California Consumer Privacy Act (the “CCPA”) as amended by the California Privacy Rights Act (the “CPRA”) and the General Data Protection Regulation (“GDPR”), as discussed more below. The interpretation of these laws may be uncertain and may also impose conflicting obligations on us.

Current wording

Cybersecurity, data privacy, data security, consumer protection, data protection, and AI laws are constantly evolving at the federal and state levels in the United States, as well as abroad. We are currently subject to such laws both at the federal and state levels in the U.S. as well as similar laws in a variety of international jurisdictions. For example, our use or sharing or certain data subjects us to the Video Privacy Protection Act ("VPPA"), the California Invasion of Privacy Act ("CIPA"), the California Consumer Privacy Act (the “CCPA”) as amended by the California Privacy Rights Act (the “CPRA”) and may subject us to additional comprehensive or sector-specific U.S. state privacy laws, as well as international laws, including the General Data Protection Regulation (“GDPR”) and the EU Data Act. The interpretation of these laws may be uncertain and may also impose conflicting obligations on us.

Previous wording

-26- make them accessible to and navigable by to persons with disabilities. There is currently a split in the federal courts of appeal as to whether a website or mobile application can be a “place of public accommodation” under the ADA. A majority of federal circuit courts to address the issue have concluded that standalone websites are not, because a place of public accommodation is a physical establishment. A minority of federal circuit courts have extended the concept of “places of public accommodation” to remote businesses, including standalone websites. The Supreme Court, which would have the authority to resolve the issue nationwide, has not yet ruled on the issue. We cannot predict how the Supreme Court will resolve the issue if and when it has the opportunity to do so.

Current wording

Plaintiffs across the country have filed lawsuits arguing that websites and mobile applications are “places of public accommodation” under Title III of the Americans with Disabilities Act (“ADA”) and, as such, must include functionality to make them accessible to and navigable by to persons with disabilities. There is currently a split in the federal courts of appeal as to whether a website or mobile application can be a “place of public accommodation” under the ADA. A majority of federal circuit courts to address the issue have concluded that standalone websites are not, because a place of public accommodation is a physical establishment. A minority of federal circuit courts have extended the concept of “places of public accommodation” to remote businesses, including standalone websites. The Supreme Court, which would have the authority to resolve the issue nationwide, has not yet ruled on the issue. We cannot predict how the Supreme Court will resolve the issue if and when it has the opportunity to do so.

Previous wording

We believe that many of our cloud services are “information services” under the Telecommunications Act of 1996 and related precedent, or, if not “information services”, that we are entitled to other exemptions. In connection with our Cybersecurity & Martech business, we utilize data transmissions over public telephone lines and other facilities provided by third-party carriers. These transmissions are subject to foreign and domestic laws, regulations and requirements by the Federal Communications Commission (the “FCC”), state public utility commissions, foreign governmental authorities, and industry trade associations such as the CTIA. These regulations and requirements affect our ability to provide services, the availability of numbers, the prices we pay for transmission services, the administrative costs associated with providing our services, the competition we face from telecommunications service providers and other aspects of our market. However, as the services we offer expand, we may become subject to other regulatory agency regulation. It is also possible that a federal or state regulatory agency could take the position that our offerings, or a subset of our offerings, are properly classified as telecommunications services or otherwise not entitled to certain exemptions upon which we currently rely. Such a finding could potentially subject us to fines, penalties or enforcement actions as well as liabilities for past regulatory fees and charges, retroactive contributions to various telecommunications-related funds, telecommunications-related taxes, penalties, and interest. It is also possible that such a finding could subject us to additional regulatory obligations that could potentially require us either to modify our offerings in a costly manner, diminish our ability to retain customers, or discontinue certain offerings, in order to comply with certain regulations. Changes in the regulatory environment could decrease our revenues, increase our costs and restrict our service offerings. In many of our international locations, we are subject to regulation by the applicable governmental authority.

Current wording

-28- third-party carriers. These transmissions are subject to foreign and domestic laws, regulations and requirements by the Federal Communications Commission (the “FCC”), state public utility commissions, foreign governmental authorities, and industry trade associations such as the CTIA. These regulations and requirements affect our ability to provide services, the availability of numbers, the prices we pay for transmission services, the administrative costs associated with providing our services, the competition we face from telecommunications service providers and other aspects of our market. However, as the services we offer expand, we may become subject to other regulatory agency regulation. It is also possible that a federal or state regulatory agency could take the position that our offerings, or a subset of our offerings, are properly classified as telecommunications services or otherwise not entitled to certain exemptions upon which we currently rely. Such a finding could potentially subject us to fines, penalties or enforcement actions as well as liabilities for past regulatory fees and charges, retroactive contributions to various telecommunications-related funds, telecommunications-related taxes, penalties, and interest. It is also possible that such a finding could subject us to additional regulatory obligations that could potentially require us either to modify our offerings in a costly manner, diminish our ability to retain customers, or discontinue certain offerings, in order to comply with certain regulations. Changes in the regulatory environment could decrease our revenues, increase our costs and restrict our service offerings. In many of our international locations, we are subject to regulation by the applicable governmental authority.

Previous wording

In addition, due to the number of text messages, phone calls and other communications we send or make on behalf of our customers in connection with the services we provide, communication-related privacy laws could result in particularly significant damage awards or fines. For example, in the United States, the Telephone Consumer Protection Act (“TCPA”) prohibits placing calls or sending text messages to mobile phones without “prior express consent” subject to limited exceptions. As currently construed, the TCPA does not distinguish between voice and data, and, as such, text and SMS/MMS messages may also be “calls” for the purpose of TCPA obligations and restrictions. For violations of the TCPA, a plaintiff may seek actual monetary loss or statutory damages of $500 per violation, whichever is greater, and courts may treble the damage award for willful or knowing violations. Parties that solely enable calling or text messaging are only directly liable under the TCPA pursuant to federal common law vicarious liability principles. We take significant steps to ensure that users understand that they are responsible for how they use our technology, including complying with relevant federal and state law. However, because we do not enjoy absolute exemption from liability under the TCPA and related FCC and FTC rules, we could face inquiries from the FCC and FTC or enforcement actions by these agencies, or private causes of action, if someone uses our service for such impermissible purposes. If this were to occur and we were to be held liable for someone’s use of our service for unauthorized

Current wording

In addition, due to the number of text messages, phone calls and other communications we send or make on behalf of our customers in connection with the services we provide, communication-related privacy laws could result in particularly significant damage awards or fines. For example, in the United States, the Telephone Consumer Protection Act (“TCPA”) prohibits placing calls or sending text messages to mobile phones without “prior express consent” subject to limited exceptions. As currently construed, the TCPA does not distinguish between voice and data, and, as such, text and SMS/MMS messages may also be “calls” for the purpose of TCPA obligations and restrictions. For violations of the TCPA, a plaintiff may seek actual monetary loss or statutory damages of $500 per violation, whichever is greater, and courts may treble the damage award for willful or knowing violations. Parties that solely enable calling or text messaging are only directly liable under the TCPA pursuant to federal common law vicarious liability principles. We take significant steps to ensure that users understand that they are responsible for how they use our technology, including complying with relevant federal and state law. However, because we do not enjoy absolute exemption from liability under the TCPA and related FCC and FTC rules, we could face inquiries from the FCC and FTC or enforcement actions by these agencies, or private causes of action, if someone uses our service for such impermissible purposes. If this were to occur and we were to be held liable for someone’s use of our service for unauthorized calling or text messaging mobile users, the financial penalties could cause a material adverse effect on our operations and harm our business reputation.

Previous wording

Government and private actions or self-regulatory developments may subject us to cybersecurity, privacy, data security, and data protection laws with uncertain interpretations as well as impose conflicting obligations on us and could adversely affect our ability to conduct our business.

Current wording

Privacy and cybersecurity laws, as well as self-regulatory developments may have uncertain interpretations and/or impose conflicting obligations on us and could adversely affect our ability to conduct our business, and may lead to regulatory investigations, government enforcement, and private actions.

Previous wording

The use of consumer data is a topic of active interest among federal, state, and international regulatory bodies, as well as by private parties, and the legal and regulatory environment is unsettled and evolving. Federal, state, and international laws and regulations govern the collection, use, retention, disclosure, sharing, and security of data that we receive from and about our users. Our privacy and cookie policies and practices concerning the collection, use, and disclosure of user data are posted on our websites.

Current wording

The use of consumer data is a topic of active interest among federal, state, and international regulatory bodies, as well as private parties, and the legal and regulatory environment is unsettled and evolving. Federal, state, and international laws and regulations govern the collection, use, retention, disclosure, sharing, and security of data that we receive from and about our users. Our privacy and cookie policies and practices concerning the collection, use, and disclosure of user data are posted on our websites.

Previous wording

Certain business units within our Digital Media Businesses and Connectivity business collect and sell data about their users’ online behavior, and the revenue associated with this activity could be impacted by government regulation and enforcement, industry trends, self-regulation, technology changes, consumer behavior and attitude, and private action. We also use such information to work with our advertisers to more effectively target ads to relevant users and consumers, which ads command a higher rate.

Current wording

Certain business units within our Digital Media Businesses and Connectivity business collect and sell data about their users’ online behavior, and the revenue associated with this activity could be impacted by government regulation and enforcement, industry trends, self-regulation, technology changes, consumer behavior and attitude, and private actions. We also use such information to work with our advertisers to more effectively target ads to relevant users and consumers, which ads command a higher rate.

Previous wording

We append data from third-party sources to augment our user profiles. If we are unable to acquire data from third-party sources for whatever reason, or if there is a marked increase in the cost of obtaining such data, our ability to personalize content and provide marketing solutions could be negatively impacted.

Current wording

We append data from third-party sources to augment our user profiles. If we are unable to acquire data from third-party sources for whatever reason, if we are limited in use of such data, or if there is a marked increase in the cost of obtaining such data, our ability to personalize content and provide marketing solutions could be negatively impacted.

Showing the first 40 of 58 pairs. Open the source sections for the rest.

Rearranged current paragraphs (13)

Current report — wording carried from elsewhere

-17- to our competitiveness and stock price; and diminished long-term shareholder value. To date, such events have not resulted in the material impairment of our business operations.

Current report — wording carried from elsewhere

Climate change may have an adverse impact on our business locations, and those of our customers and vendors. For example, our business locations, or those of our customers and vendors, may experience adverse climate-related events, including fluctuations in temperature or water availability, floods, wildfires (and resultant air quality impacts), other unusual or

Current report — wording carried from elsewhere

-24- future. Further, we may not have been and may not be able to detect unauthorized use of our technology, content, or intellectual property, or to take appropriate steps to enforce our intellectual property rights.

Current report — wording carried from elsewhere

In addition, in order to obtain new customers, we have marketing agreements with operators of leading search engines and websites and employ the use of resellers to sell our products and services. These arrangements typically are not exclusive and do not extend over a significant period of time. Failure to continue these relationships on terms that are acceptable to us or to continue to create additional relationships could have a material adverse effect on our business, prospects, financial condition, operating results and cash flows.

Current report — wording carried from elsewhere

-25- cannot assure you that additional material weaknesses in our internal control over financial reporting will not be identified in the future. A material weakness in our internal controls could result in a material misstatement of our consolidated financial statements.

Current report — wording carried from elsewhere

From time to time, we release guidance in our earnings conference calls, earnings releases, or otherwise, regarding our expected future performance that represents our management's estimates as of the date of release. This guidance often includes forward-looking statements based on projections prepared by our management. Projections are based upon a number of assumptions and estimates that, while presented with numerical specificity, are inherently subject to significant business, economic and competitive uncertainties and contingencies, many of which are beyond our control and/or are based upon

Current report — wording carried from elsewhere

We believe that many of our cloud services are “information services” under the Telecommunications Act of 1996 and related precedent, or, if not “information services”, that we are entitled to other exemptions. In connection with our Cybersecurity & Martech business, we utilize data transmissions over public telephone lines and other facilities provided by

Current report — wording carried from elsewhere

European Commission to formally launch the process to adopt an adequacy decision based on the Executive Order in December 2022, and the adequacy decision was adopted on July 10, 2023. The TDPF has been recognized as adequate under the E.U. to allow transfers of personal data from the E.U. to companies in the U.S. that have self-certified to the framework. However, the TDPF remains subject to legal challenges and could be invalidated by EU courts, which could increase compliance costs and could disrupt or restrict our cross-border data transfers.

Current report — wording carried from elsewhere

-31- legislation or regulations that could significantly restrict our ability to collect, augment, analyze, use, and share de-identified or anonymous data, which could increase our costs and reduce our revenue.

Current report — wording carried from elsewhere

-32- the provision of the products and services developed for other third parties or in connection with certain of our other services that may transmit or store protected health information.

Current report — wording carried from elsewhere

The healthcare industry is highly regulated and subject to changing political, legislative, regulatory, and other influences. Existing and future laws and regulations affecting the healthcare industry could create unexpected liabilities for us, cause us to incur additional costs, and restrict our operations. Many healthcare laws are complex, and their application may not

Current report — wording carried from elsewhere

-34- by more of our users could have a material impact on our revenues. We have implemented third-party products to combat these ad-blocking technologies and are developing other strategies to address advertisement blocking. However, our efforts may not be successful to offset the potential increasing impact of these advertising blocking products.

Current report — wording carried from elsewhere

-36- operations, or that future borrowings will be available, in an amount sufficient to enable us to pay our debt or to fund our other liquidity needs.
Rearranged previous paragraphs (14)

Previous report — wording carried elsewhere

-16- data backups, security protocols, and other procedures will be adequate to prevent significant damage, system failure or data loss, and the same is true for our partners, vendors, and other third parties on which we rely. These precautions may change over time as laws and regulations regarding data privacy, security, and protection of information change.

Previous report — wording carried elsewhere

-17- subject to these threats and there can be no assurance that we will not experience a negative impact on our business as a result of them.

Previous report — wording carried elsewhere

In addition, several competitors offer products and services that directly compete for users with our business offerings. Similarly, the advertising networks operated by our competitors or by other participants in the display marketplace offer services that directly compete with our offerings for advertisers, including advertising exchanges, ad networks, demand side platforms, ad serving technologies, and sponsored search offerings. We also compete with traditional print and broadcast media

Previous report — wording carried elsewhere

On October 7, 2021, the Company completed the separation of its cloud fax business into Consensus, an independent publicly traded company. The separation of Consensus was effected by a pro rata distribution to our shareholders of 80.1% of the stock of Consensus, comprising our prior cloud fax business. We obtained (i) a private letter ruling from the IRS, satisfactory to our Board of Directors, regarding certain U.S. federal income tax matters relating to the separation and related transactions and (ii) an opinion of outside counsel, satisfactory to our Board of Directors, regarding the qualification of the distribution, together with certain related transactions, as generally tax-free, for U.S. federal income tax purposes, under Sections 355 and 368(a)(1)(D) of the Internal Revenue Code (the “Code”). The opinion of outside counsel and the IRS private

Previous report — wording carried elsewhere

-21- services is currently unsettled and states may enact their own rules with which we may not comply. Substantial losses due to fraud or our inability to accept credit card payments, which could cause our paid subscriber base to significantly decrease, could have a material adverse effect on our business, prospects, financial condition, operating results and cash flows.

Previous report — wording carried elsewhere

We continually assess the strategic fit of our existing businesses and may divest or otherwise dispose of businesses that are deemed not to fit with our strategic plan or are not achieving the desired return on investment. These transactions pose risks

Previous report — wording carried elsewhere

Plaintiffs across the country have filed lawsuits arguing that websites and mobile applications are “places of public accommodation” under Title III of the Americans with Disabilities Act (“ADA”) and, as such, must include functionality to

Previous report — wording carried elsewhere

-27- calling or text messaging mobile users, the financial penalties could cause a material adverse effect on our operations and harm our business reputation.

Previous report — wording carried elsewhere

Numerous other countries have, or are developing, laws governing the collection, use and transmission of personal information as well. For example, we are subject to the GDPR which governs the collection and use of personal data in the

Previous report — wording carried elsewhere

-29- advertising and data businesses. U.S. regulatory agencies have also placed an increased focus on online privacy matters and, in particular, on online advertising activities that utilize cookies or other tracking tools. Consumer and industry groups have expressed concerns about online data collection and use by companies, which has resulted in the release of various industry self-regulatory codes of conduct and best practice guidelines that are binding for member companies and that govern, among other things, the ways in which companies can collect, use and disclose user information, how companies must give notice of these practices and what choices companies must provide to consumers regarding these practices.

Previous report — wording carried elsewhere

-31- services for which payment is made by a federal healthcare program. Our sale of advertising and sponsorships to healthcare providers potentially implicates these laws. However, we review our practices to ensure that we comply with all applicable laws. The laws in this area are broad, and we cannot determine precisely how they will be applied to our business practices. Any determination by a state or federal regulatory agency that any of our practices violate any of these laws could subject us to liability and require us to change or terminate some portions of our business.

Previous report — wording carried elsewhere

-32- or choose to manage traffic quality in a way that advertisers find unsatisfactory, the affected advertisers may experience or perceive a reduced return on their investment in our advertising programs which could lead the advertisers to become dissatisfied with our advertising programs and they might refuse to pay, demand refunds, or withdraw future business. Undetected click fraud could damage our brands and lead to a loss of advertisers and revenue. We obtain third-party certification that certain of our products apply “best practices” to detect and prevent click fraud. If we are unable to maintain such certification, advertisers might refuse to pay, demand refunds, and withdraw future business, and our business reputation might be harmed.

Previous report — wording carried elsewhere

Holders of our Convertible Notes have the right to require us to repurchase all or a portion of their notes in the applicable series upon the occurrence of a fundamental change (as defined in the indentures governing such notes) before the maturity date at a repurchase price equal to 100% of the principal amount of the notes to be repurchased, plus accrued and unpaid interest, if any. In addition, upon conversion of the Convertible Notes, unless we elect to deliver solely shares of our

Previous report — wording carried elsewhere

-35- actual timing, number and value of shares repurchased will depend on various factors, including the market price of our common stock, trading volume, general market conditions, and other corporate and economic considerations.