Global Business Travel Group Inc

Current report

Interruptions in and unauthorized access to our information technology systems, security breaches or incidents impacting our systems or data that we or our service providers maintain or otherwise process, could adversely affect our business.

Current report

Cyber-attacks are increasing in number and sophistication, are well-financed, in some cases supported by nation-state actors, and are designed to not only attack, but also to evade detection. Since the techniques used to obtain unauthorized access to systems, or to otherwise sabotage them, change frequently and are often not recognized until launched against a target, we may be unable to anticipate these techniques or to implement adequate detection or preventative measures. The emergence and maturation of artificial intelligence capabilities has led to new and/or more sophisticated methods of attack, including fraud that relies upon “deep fake” impersonation technology, of which we have been a target, or other forms of generative automation that have scaled up the effectiveness of cyber threat activity.

Current report

We develop and maintain systems and processes aimed at detecting and preventing data breaches and fraudulent activity, which require significant investment, maintenance and ongoing monitoring and updating as technologies and regulatory requirements change and as efforts to overcome security measures become more sophisticated. Despite our efforts, the possibility of data breaches, malicious social engineering and fraudulent or other malicious activities, deep fake attacks and human error or malfeasance cannot be eliminated entirely, and risks associated with each of these remain, including the unauthorized disclosure, release, gathering, monitoring, misuse, loss or destruction of confidential, proprietary and other information (including account data information), online accounts and systems.

Current report

If our information technology systems experience a significant disruption or breach or if actual or perceived fraud levels or other illegal activities were to arise due to a data breach at a business partner, merchant or other market participant, employee error, malfeasance or otherwise, it could lead to the loss of data or data integrity, regulatory investigations, increased litigation (including class action litigation), remediation and response costs, greater concerns of customers and/or business partners relating to the privacy and security of their data, and reputational and financial damage to our brand, which could have a material adverse impact on our business. If such disruptions or breaches are not detected immediately, their effect and resulting impact could be compounded. Data breaches and other actual or perceived failures to maintain confidentiality, integrity, privacy and/or data protection, including leaked business data, may also disrupt our operations, undermine our competitive advantage through the disclosure of sensitive Company information, divert management attention and resources and negatively impact the assessment of us and our subsidiaries by regulatory authorities and rating agencies.

Previous report

Use of artificial intelligence in our operations could result in reputational or competitive harm and legal or regulatory liability.

Previous report

We have incorporated certain artificial intelligence (AI) solutions into our operations. We may not be able to achieve the anticipated benefits of the AI initiatives, including expected costs savings. The use of AI also involves various risks and challenges that could adversely affect our business. The development and deployment of AI systems involve inherent technical complexities and uncertainties, and our AI systems may encounter unexpected technical difficulties, limitations or errors, including inaccuracies in data processing or flawed algorithms. In addition, our competitors or other third parties may incorporate AI into their operations and products more quickly or more successfully than us, which could impair our ability to compete effectively.

Previous report

Customers and other end-users who rely on our software products and services for applications that are integral to their businesses may have a greater sensitivity to product errors and security vulnerabilities than customers for software products generally. We utilize various generative AI solutions from our third-party providers as part of some of our software products. There are risks associated with the use of emerging technologies such as generative AI, including risks related to testing and validating the security and privacy mechanisms of the third-party providers, as well as risks related to implementing technical security controls to govern and mange this technology in a secure manner. If we were to experience a cybersecurity incident related to the integration of AI capabilities into our software product offerings, or if there are deficiencies or other failures of such AI solutions from our third-party providers, our business and results of operations could be adversely affected. AI also presents various emerging legal, regulatory and ethical issues, and the incorporation of AI into our software products could require us to expend significant resources in developing, testing and maintaining our product offerings and may cause us to experience brand, reputational, or competitive harm, or incur legal liability.

Previous report

Governments have passed and are likely to pass additional laws regulating generative AI. The introduction of AI technologies into our operations may result in new or enhanced governmental or regulatory scrutiny, litigation, confidentiality or security risks or other complications that could adversely affect our business. The regulatory landscape governing AI technologies is evolving rapidly, and changes in laws, regulations or enforcement practices may impose new compliance requirements, restrict certain AI applications or increase our regulatory obligations, which could negatively impact our business.