Skip to main content

Weave Communications Inc

For the period ended Sep 30, 2024. Filed Nov 8, 2024.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Sep 30, 2024 · Filed Nov 8, 2024

WEAV$7.40+0.1%Stored close · as of Oct 23, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2024-06-30; filed 2024-08-07.

0001609151-24-000093

Item 1A. Risk FactorsOther Information

Current report: 10-Q

Period ended 2024-09-30; filed 2024-11-08.

0001609151-24-000149

Item 1A. Risk FactorsOther Information

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 350 previous paragraphs and 348 current paragraphs.

332 unchanged; 14 reworded; 1 added; 2 removed; 2 previous and 1 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (1)

Current report

Acquisitions may disrupt our ongoing operations, divert management from their primary responsibilities, subject us to additional liabilities, increase our expenses, subject us to increased regulatory requirements, cause adverse tax consequences or unfavorable accounting treatment, expose us to claims and disputes by stockholders and third parties, and adversely impact our business, financial condition, and results of operations. We may not successfully evaluate or utilize the acquired assets and accurately forecast the financial impact of an acquisition transaction, including accounting charges. We may pay cash for any such acquisition, which would limit other potential uses for our cash. If we incur debt to fund any such acquisition, such debt may subject us to material restrictions in our ability to conduct our business, result in increased fixed obligations, and subject us to covenants or other restrictions that would decrease our operational flexibility and impede our ability to manage our operations. If we issue a significant amount of equity securities in connection with future acquisitions, existing stockholders’ ownership would be diluted.
Removed paragraphs (2)

Previous report

On May 16, 2024, Erin Goodsell, our Chief Legal Officer, adopted a trading plan intended to satisfy the affirmative defense conditions of Rule 10b5-1(c) under the Exchange Act. Mrs. Goodsell’s trading plan provides for the sale of up to 160,000 shares. Mrs. Goodsell’s trading plan is scheduled to terminate on the earlier of August 22, 2025 or when all shares are sold under the plan, subject to early termination for certain specified events set forth therein. The trading plan complied with the then-applicable requirements of Rule 10b5-1(c) when adopted in May 2024.

Previous report

On June 7, 2024, Alan Taylor, our Chief Financial Officer, adopted a trading plan intended to satisfy the affirmative defense conditions of Rule 10b5-1(c) under the Exchange Act. Mr. Taylor’s trading plan provides for the sale of up to 326,962 shares. Mr. Taylor’s trading plan is scheduled to terminate on the earlier of June 6, 2025 or when all shares are sold under the plan, subject to early termination for certain specified events set forth therein. The trading plan complied with the then-applicable requirements of Rule 10b5-1(c) when adopted in June 2024.
Reworded paragraphs (14)

Previous wording

◦If we do not develop enhancements to our platform and products and introduce new products that achieve market acceptance, our business, results of operations and financial condition could be adversely affected.

Current wording

◦If we do not continue to develop enhancements to our platform and products and introduce new products that achieve market acceptance, our business, results of operations and financial condition could be adversely affected.

Previous wording

Our revenue was $170.5 million and $142.1 million during the years ended December 31, 2023 and 2022, respectively, and $97.8 million for the six months ended June 30, 2024 compared with $81.2 million for the six months ended June 30 2023. Additionally, we have experienced significant growth and churn in our number of employees (including both full- and part-time employees) over the last few years creating operational challenges, particularly in our customer service and sales organizations. We have also expanded operations outside of the United States including establishing engineering and administrative operations in India in 2021, support operations in India in 2022, and supplemental customer support operations to the Philippines in 2023.

Current wording

Our revenue was $170.5 million and $142.1 million during the years ended December 31, 2023 and 2022, respectively, and $150.1 million for the nine months ended September 30, 2024 compared with $124.8 million for the nine months ended September 30 2023. Additionally, we have experienced significant growth and churn in our number of employees (including both full- and part-time employees) over the last few years creating operational challenges, particularly in our customer service and sales organizations. We have also expanded operations outside of the United States including establishing engineering and administrative operations in India in 2021, support operations in India in 2022, and supplemental customer support operations to the Philippines in 2023.

Previous wording

A majority of our current customer base consists of small businesses. In addition to pursuing continued customer growth among small businesses, we intend to pursue opportunities to expand our customer base among medium-sized businesses in various healthcare industries. As we target a portion of our sales efforts at larger and multi-location businesses, we may incur higher costs and longer sales and installation cycles, and we may be less effective at predicting when we will complete these sales. In these market segments, the decision to purchase our subscriptions may require the approval of more technical personnel and management levels within a potential customer’s organization and, therefore, sales to larger and multi-location businesses may require us to invest more time educating potential customers about the benefits of our subscriptions. In addition, our customers may be acquired by or may consolidate into larger and multi-location businesses that may demand more features, integration services and customization, and may require more highly skilled sales and support personnel. These new businesses may also demand service-level agreements or other contractual terms that may introduce additional risk. Further, our investment in marketing our subscriptions to these potential customers may not be successful, which could adversely affect our results of operations and our overall ability to grow our customer base.

Current wording

A majority of our current customer base consists of small businesses. In addition to pursuing continued customer growth among small businesses, we intend to pursue opportunities to expand our customer base among medium-sized businesses in various healthcare industries. For example, we now provide multi-office functionality through our new platform to all us to better serve organizations with multiple locations. Our ability to expand among medium-sized business will depend upon our ability to successfully sell our new platform to multi-location organizations and effectively retain them. As we target a portion of our sales efforts at larger and multi-location organizations, we may incur higher costs and longer sales and installation cycles, and we may be less effective at predicting when we will complete these sales. In these market segments, the decision to purchase our subscriptions may require the approval of more technical personnel and management levels within a potential customer’s organization and, therefore, sales to larger and multi-location organizations may require us to invest more time educating potential customers about the benefits of our subscriptions. In addition, our customers may be acquired by or may consolidate into larger and multi-location organizations that may demand more features, integration services and customization, and may require more highly skilled sales and support personnel. These new businesses may also demand service-level agreements or other contractual terms that may introduce additional risk. Further, our investment in marketing our subscriptions to these potential customers may not be successful, which could adversely affect our results of operations and our overall ability to grow our customer base.

Previous wording

We have incurred net losses in each year since our inception, including net losses of $31.0 million and $49.7 million in 2023 and 2022, respectively, and a net loss of $15.8 million for the six months ended June 30, 2024. We had an accumulated deficit of $278.4 million as of June 30, 2024. While we have experienced significant revenue growth over the last few years, we are not yet profitable and our revenue growth rate may decline in future periods and you should not rely on the revenue growth of any given prior period as an indication of our future performance. Additionally, we are not certain whether we will be able to sustain or increase our revenue or whether or when we will attain sufficient revenue to achieve or maintain profitability in the future. We have experienced and expect to continue to experience increased costs and expenses in future periods, which could negatively affect our future results of operations if our revenue does not increase by amounts sufficient to offset such costs and expenses. We expect to continue to expend substantial financial and other resources on, among other things:

Current wording

We have incurred net losses in each year since our inception, including net losses of $31.0 million and $49.7 million in 2023 and 2022, respectively, and a net loss of $21.6 million for the nine months ended September 30, 2024. We had an accumulated deficit of $284.3 million as of September 30, 2024. While we have experienced significant revenue growth over the last few years, we are not yet profitable and our revenue growth rate may decline in future periods and you should not rely on the revenue growth of any given prior period as an indication of our future performance. Additionally, we are not certain whether we will be able to sustain or increase our revenue or whether or when we will attain sufficient revenue to achieve or maintain profitability in the future. We have experienced and expect to continue to experience increased costs and expenses in future periods, which could negatively affect our future results of operations if our revenue does not increase by amounts sufficient to offset such costs and expenses. We expect to continue to expend substantial financial and other resources on, among other things:

Previous wording

We rely on hardware, purchased or leased from, software licensed from, and services rendered by third parties in order to provide our solutions and run our business, sometimes by a single-source supplier. In particular, we rely on single-source suppliers for phones and point-of-sale terminals: Yealink to supply phones for our platform and Stripe to provide point-of-sale devices and payment processing services for Weave Payments. Additionally, Bandwidth and Telnyx power the text messaging functionality of our platform. We also rely on hosted Software as a Service technologies from third parties in order to operate critical internal functions of our business, including enterprise resource planning, customer support and customer relations management services. We do not have long-term supply agreements with our sole source hardware suppliers and we maintain only a small amount of inventory, making us vulnerable to price increases and supplier capacity and supply chain constraints. Third-party hardware, software and services have in the past and may in the future cease to be available on a timely basis, on commercially reasonable terms, or at all. Any loss of the supply, right to use or any failures of third-party hardware, software or services, could result in delays in our ability to provide our platform and products or run our business. In addition, even if we are able to identify replacement hardware, software or services or are able to internally develop a replacement solution, integrating any new hardware, software or service could be costly and time-consuming and may not result in an equivalent solution, any of which could adversely affect our business, results of operations and financial condition.

Current wording

We rely on hardware, purchased or leased from, software licensed from, and services rendered by third parties in order to provide our solutions and run our business, sometimes by a single-source supplier. In particular, we rely on single-source suppliers for phones and point-of-sale terminals: Yealink to supply phones for our platform and Stripe Inc. (“Stripe”) to provide point-of-sale devices and payment processing services for Weave Payments. Additionally, Bandwidth and Telnyx power the text messaging functionality of our platform. We also rely on hosted Software as a Service technologies from third parties in order to operate critical internal functions of our business, including enterprise resource planning, customer support and customer relations management services. We do not have long-term supply agreements with our sole source hardware suppliers and we maintain only a small amount of inventory, making us vulnerable to price increases and supplier capacity and supply chain constraints. Third-party hardware, software and services have in the past and may in the future cease to be available on a timely basis, on commercially reasonable terms, or at all. Any loss of the supply, right to use or any failures of third-party hardware, software or services, could result in delays in our ability to provide our platform and products or run our business. In addition, even if we are able to identify replacement hardware, software or services or are able to internally develop a replacement solution, integrating any new hardware, software or service could be costly and time-consuming and may not result in an equivalent solution, any of which could adversely affect our business, results of operations and financial condition.

Previous wording

In order to provide Weave Payments, we have entered into payment service provider agreements with Stripe Inc. (“Stripe”). These payment service provider agreements provide for terms which expire at various dates after 2028, and in some cases, renew for subsequent 12-month terms unless we provide a notice of termination prior to the end of the then current term. These agreements are integral to Weave Payments, and any problems with Stripe or disruption affecting its services could have an adverse effect on our reputation, results of operations and financial results. If Stripe were to terminate its relationship with us, we could incur substantial delays and expense in finding and integrating an alternative payment service provider into Weave Payments, and the quality and reliability of such alternative payment service provider may not be comparable. Any temporary or permanent disruption in our ability to offer Weave Payments, whether as a result of an interruption in Stripe’s services due to technical or other issues, or due to the termination of our agreement with Stripe, would decrease our revenue and adversely affect our business.

Current wording

In order to provide Weave Payments, we have entered into payment service provider agreements with Stripe. These payment service provider agreements provide for terms which expire at various dates after 2028, and in some cases, renew for subsequent 12-month terms unless we provide a notice of termination prior to the end of the then current term. These agreements are integral to Weave Payments, and any problems with Stripe or disruption affecting its services could have an adverse effect on our reputation, results of operations and financial results. If Stripe were to terminate its relationship with us, we could incur substantial delays and expense in finding and integrating an alternative payment service provider into Weave Payments, and the quality and reliability of such alternative payment service provider may not be comparable. Any temporary or permanent disruption in our ability to offer Weave Payments, whether as a result of an interruption in Stripe’s services due to technical or other issues, or due to the termination of our agreement with Stripe, would decrease our revenue and adversely affect our business.

Previous wording

The use of artificial intelligence (“AI”) technologies in our platform and our business may not produce the desired benefits, and may result in increased liability, reputational harm, or other adverse consequences.

Current wording

The use of AI technologies in our platform and our business may not produce the desired benefits, and may result in increased liability, reputational harm, or other adverse consequences.

Previous wording

We currently market our platform and products only in the United States and Canada, which we entered for the first time in 2019. We may open additional international offices and hire employees to work at these offices in order to gain access to additional technical talent. For example, we opened an office in India in 2021 and as of June 30, 2024 had approximately 100 employees in India to further our engineering and administrative operations. Additionally, in 2023 we began utilizing resources in the Philippines to supplement our customer support operations.

Current wording

We currently market our platform and products only in the United States and Canada. We may open additional international offices and hire employees to work at these offices in order to gain access to additional technical talent. For example, we opened an office in India in 2021 and as of September 30, 2024 had approximately 100 employees in India to further our engineering and administrative operations. Additionally, in 2023 we began utilizing resources in the Philippines to supplement our customer support operations.

Previous wording

The STIR/SHAKEN framework is expected to be used throughout the world. Weave has implemented STIR/SHAKEN for voice traffic originating in the U.S. and we rely on our service providers to sign our voice traffic originating in Canada. However, it is likely that the standards to obtain STIR/SHAKEN signing authority in other countries will differ from the U.S. requirements and these differing standards may not be interoperable with the U.S. requirements. For example, the Canadian Radio-television and Telecommunications Commission (“CRTC”) required all telecommunications service providers implement STIR/SHAKEN to authenticate and verify caller identification information for IP-based voice calls, effective in November 2021, and file status reports every six months starting in May 2022. Despite initially denying non-facilities based providers access, the Canadian Secure Token Governance Authority (“CST-GA”) created a process in November 2021 for such providers to obtain Service Provider Code Tokens and, in turn, Secure Telephone Identity Certificates (“STI Certificates”) to allow higher (Level A or B) call attestation. Calls that are not attested at a higher level, either directly or by an underlying provider, are at a greater risk of being blocked or flagged and ignored by end users. Further, it is unclear how cross-border calls originating from U.S. service providers will be authenticated under Canada’s framework or vice versa. In July 2022, the CST-GA signed a memorandum of understanding with the U.S. Secure Telephone Identity Governance Authority to coordinate interconnection of SHAKEN in both the U.S. and Canada to allow providers to sign calls in one country and accept the signature in the other. However, the SHAKEN interconnection between the U.S. and Canada is not yet operational. Until operational, we may be required to obtain STI Certificates or otherwise incur costs to sign our calls in both the U.S. and Canada, which could impose substantial compliance costs and negatively affect our margins or could make our services less competitive than incumbent providers. In addition, foreign regulators have allowed terminating voice service providers to block voice traffic to address robo-calling or other unwanted calls.

Current wording

The STIR/SHAKEN framework is expected to be used throughout the world. We have implemented STIR/SHAKEN for voice traffic originating in the U.S. and we rely on our service providers to sign our voice traffic originating in Canada. However, it is likely that the standards to obtain STIR/SHAKEN signing authority in other countries will differ from the U.S. requirements and these differing standards may not be interoperable with the U.S. requirements. For example, the Canadian Radio-television and Telecommunications Commission (“CRTC”) required all telecommunications service providers implement STIR/SHAKEN to authenticate and verify caller identification information for IP-based voice calls, effective in November 2021, and file status reports every six months starting in May 2022. Despite initially denying non-facilities based providers access, the Canadian Secure Token Governance Authority (“CST-GA”) created a process in November 2021 for such providers to obtain Service Provider Code Tokens and, in turn, Secure Telephone Identity Certificates (“STI Certificates”) to allow higher (Level A or B) call attestation. Calls that are not attested at a higher level, either directly or by an underlying provider, are at a greater risk of being blocked or flagged and ignored by end users. Further, it is unclear how cross-border calls originating from U.S. service providers will be authenticated under Canada’s framework or vice versa. In July 2022, the CST-GA signed a memorandum of understanding with the U.S. Secure Telephone Identity Governance Authority to coordinate interconnection of SHAKEN in both the U.S. and Canada to allow providers to sign calls in one country and accept the signature in the other. However, the SHAKEN interconnection between the U.S. and Canada is not yet operational. Until operational, we may be required to obtain STI Certificates or otherwise incur costs to sign our calls in both the U.S. and Canada, which could impose substantial compliance costs and negatively affect our margins or could make our services less competitive than incumbent providers. In addition, foreign regulators have allowed terminating voice service providers to block voice traffic to address robo-calling or other unwanted calls.

Previous wording

For subscriptions that can be utilized from more than one physical location, we must provide automated dispatchable location, if technically feasible, registered location information and provide end customers one or more methods of updating their physical location, or alternative location information. Because we are not able to confirm that the service is used at the physical addresses provided by our end customers, and because end customers may provide an incorrect location or fail to provide updated location information, it is possible that emergency services calls may be routed to the wrong PSAP. If emergency services calls are not routed to the correct PSAP, and if the delay results in serious injury or death, we could be sued and the damages could be substantial.

Current wording

In connection with the regulatory requirements that we provide access to emergency services dialing to our VoIP customers, we must obtain from each end customer, prior to the initiation of or changes to service, the physical locations at which the service will first be used for each VoIP line. We must be able to automatically transmit that physical location to the public safety answering point when a user dials 911. For subscriptions that can be utilized from more than one physical location, we must provide automated dispatchable location, if technically feasible, registered location information and provide end customers one or more methods of updating their physical location, or alternative location information. Because we are not able to confirm that the service is used at the physical addresses provided by our end customers, and because end customers may provide an incorrect location or fail to provide updated location information, it is possible that emergency services calls may be routed to the wrong PSAP. If emergency services calls are not routed to the correct PSAP, and if the delay results in serious injury or death, we could be sued and the damages could be substantial.

Previous wording

Data protection legislation is also becoming increasingly common in the United States at both the federal and state level. For example, California enacted legislation, the California Consumer Privacy Act of 2018 (the “CCPA”), which affords consumers expanded privacy protections. The potential effects of this legislation are far-reaching and have required Weave to implement enhanced practices and policies in an effort to comply. Specifically, the CCPA gives California residents expanded rights to request access to and deletion of their personal information, opt out of certain personal information sharing and receive detailed information about how their personal information is used. The CCPA also provides for civil penalties for violations, as well as a private right of action for data breaches that may increase data breach litigation. In addition, the CCPA has prompted a number of proposals for new federal and state privacy legislation that, if passed, could increase our potential liability, increase our compliance costs, and adversely affect our business. It remains unclear how much private litigation will ensue under the data breach private right of action. Additionally, the California Privacy Rights Act of 2020 (“CPRA”), which became fully effective on January 1, 2023, expanded the rights of California residents with respect to their personal information. The CPRA, among other things, gives California residents the ability to limit use of certain sensitive personal information, further restrict the use of cross-contextual advertising, establish restrictions on the retention of personal information, expand the types of data breaches subject to the

Current wording

Data protection legislation is also becoming increasingly common in the United States at both the federal and state level. For example, California enacted legislation, the California Consumer Privacy Act of 2018 (the “CCPA”), which affords consumers expanded privacy protections. The potential effects of this legislation are far-reaching and have required Weave to implement enhanced practices and policies in an effort to comply. Specifically, the CCPA gives California residents expanded rights to request access to and deletion of their personal information, opt out of certain personal information sharing and receive detailed information about how their personal information is used. The CCPA also provides for civil penalties for violations, as well as a private right of action for data breaches that may increase data breach litigation. In addition, the CCPA has prompted a number of proposals for new federal and state privacy legislation that, if passed, could increase our potential liability, increase our compliance costs, and adversely affect our business. It remains unclear how much private litigation will ensue under the data breach private right of action. Additionally, the California Privacy Rights Act of 2020 (“CPRA”), which became fully effective on January 1, 2023, expanded the rights of California residents with respect to their personal information. The CPRA, among other things, gives California residents the ability to limit use of certain sensitive personal information, further restrict the use of cross-contextual advertising, establish restrictions on the retention of personal information, expand the types of data breaches subject to the CCPA’s private right of action, provide for increased penalties for CPRA violations concerning California residents under the age of 16, and establish a new California Privacy Protection Agency to implement and enforce the new law which may result in increased regulatory scrutiny of California businesses in the areas of data protection and security. Similar laws have been proposed or enacted in other states and at the federal level. For example, Virginia enacted the Consumer Data Protection Act, Colorado enacted the Colorado Privacy Act, and Utah enacted the Utah Consumer Privacy Act. Compliance with any newly enacted privacy and data security laws or regulations may be challenging and cost and time-intensive, and we may be required to put in place additional mechanisms to comply with applicable legal requirements. In addition, the various state privacy laws may limit how we use personal information we collect, particularly with respect to marketing and the use of online advertising networks.

Previous wording

Changes in laws or regulations relating to the use of the internet could require us to modify our products and platform in order to comply with these changes. In addition, government agencies or private organizations have imposed and may impose additional taxes, fees or other charges for accessing the internet or commerce conducted via the internet. These laws or charges could limit the growth of internet related commerce or communications generally or result in reductions in the demand for internet based products and services such as our products and platform. In particular, a re-adoption of “network neutrality” rules in the United States could affect the services used by us and our customers. In October 2023, the FCC voted to advance a proposal of reinstating “net neutrality” and to allow the FCC to regulate broadband internet access as a utility. A number of other states have likewise adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. If we are not able to adapt our platform and products to address any new laws or regulations, our business, results of operations and financial condition could be adversely affected.

Current wording

Changes in laws or regulations relating to the use of the internet could require us to modify our products and platform in order to comply with these changes. In addition, government agencies or private organizations have imposed and may impose additional taxes, fees or other charges for accessing the internet or commerce conducted via the internet. These laws or charges could limit the growth of internet related commerce or communications generally or result in reductions in the demand for internet based products and services such as our products and platform. In particular, a re-adoption of “network neutrality” rules in the United States could affect the services used by us and our customers. In October

Previous wording

Our executive officers, directors, holders of more than 5% of our capital stock and affiliated entities together beneficially owned approximately 46.2% of our total shares outstanding as of June 30, 2024. As a result, these stockholders, acting together, will have control over our management and affairs and over all matters requiring stockholder approval, including election of directors and significant corporate transactions, such as a merger or other sale of us or our assets, for the foreseeable future. Corporate action might be taken even if other stockholders oppose them. This concentration of ownership could also delay or prevent a change of control of us that other stockholders may view as beneficial.

Current wording

Our executive officers, directors, holders of more than 5% of our capital stock and affiliated entities together beneficially owned approximately 45.7% of our total shares outstanding as of September 30, 2024. As a result, these stockholders, acting together, will have control over our management and affairs and over all matters requiring stockholder approval, including election of directors and significant corporate transactions, such as a merger or other sale of us or our assets, for the foreseeable future. Corporate action might be taken even if other stockholders oppose them. This concentration of ownership could also delay or prevent a change of control of us that other stockholders may view as beneficial.

Previous wording

During the fiscal quarter ended June 30, 2024, none of our directors or officers informed us of theadoption ortermination of a “Rule 10b5-1 trading arrangement” or “non-Rule 10b5-1 trading arrangement,” as those terms are defined in Regulation S-K, Item 408, except as follows;

Current wording

During the fiscal quarter ended September 30, 2024, none of our directors or officers informed us of theadoption ortermination of a “Rule 10b5-1 trading arrangement” or “non-Rule 10b5-1 trading arrangement,” as those terms are defined in Regulation S-K, Item 408.
Rearranged current paragraphs (1)

Current report — wording carried from elsewhere

2023, the FCC voted to advance a proposal of reinstating “net neutrality” and to allow the FCC to regulate broadband internet access as a utility. A number of other states have likewise adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. If we are not able to adapt our platform and products to address any new laws or regulations, our business, results of operations and financial condition could be adversely affected.
Rearranged previous paragraphs (2)

Previous report — wording carried elsewhere

In connection with the regulatory requirements that we provide access to emergency services dialing to our VoIP customers, we must obtain from each end customer, prior to the initiation of or changes to service, the physical locations at which the service will first be used for each VoIP line. We must be able to automatically transmit that physical location to the public safety answering point when a user dials 911.

Previous report — wording carried elsewhere

CCPA’s private right of action, provide for increased penalties for CPRA violations concerning California residents under the age of 16, and establish a new California Privacy Protection Agency to implement and enforce the new law which may result in increased regulatory scrutiny of California businesses in the areas of data protection and security. Similar laws have been proposed or enacted in other states and at the federal level. For example, Virginia enacted the Consumer Data Protection Act, Colorado enacted the Colorado Privacy Act, and Utah enacted the Utah Consumer Privacy Act. Compliance with any newly enacted privacy and data security laws or regulations may be challenging and cost and time-intensive, and we may be required to put in place additional mechanisms to comply with applicable legal requirements. In addition, the various state privacy laws may limit how we use personal information we collect, particularly with respect to marketing and the use of online advertising networks.