interactions with officials and employees of government agencies, or state-owned or affiliated entities and we may be held liable for the corrupt or other illegal activities of such parties even if we do not explicitly authorize such activities. As we increase our international sales and business, our risks under these laws may increase.
Any allegations or violation of the FCPA or other applicable anti-bribery and anti-corruption laws could result in whistleblower complaints, sanctions, settlements, prosecution, enforcement actions, fines, damages, adverse media coverage, investigations, loss of export privileges, severe criminal or civil sanctions, suspension or debarment from government contracts, all of which may have an adverse effect on our reputation, business, results of operations and prospects. Responding to any investigation or action will likely result in a materially significant diversion of management’s attention and resources, significant defense costs and other professional fees.
Furthermore, we rely on third parties for our KYC and other compliance obligations. If these third parties fail to effectively provide these services, we may be subject to adverse consequences as described above.
Privacy concerns and laws or other domestic or foreign regulations may reduce the effectiveness of our platform and adversely affect our business.
Although we believe we are operating in compliance with the laws of jurisdictions in which Exodus operates, these laws and regulations are evolving, may impose inconsistent or conflicting standards among jurisdictions, can be subject to significant change and may result in ever-increasing regulatory and public scrutiny and escalating levels of enforcement and sanctions.
For example, foreign countries and governmental bodies, including the European Union (EU) and United Kingdom (U.K.) and other jurisdictions in which we operate or conduct our business, have laws and regulations concerning the collection, use, retention, security and transfer of the personal data of individuals in those jurisdictions. We may become subject to GDPR and U.K. GDPR, which impose stringent privacy and data protection requirements, and could increase the risk of non-compliance and the costs of providing our products and services in a compliant manner. Additionally, the GDPR (covering the European Economic Area), U.K. GDPR and Swiss data protection regimes impose strict rules on the transfer of personal data out of the EU, U.K. or Switzerland to a “third country,” including to the United States. As an un-hosted self-custody wallet provider, we do not process the personal data of our customers and therefore, compliance with these regimes do not currently have a material impact on our business. However, any actual or perceived breach of the GDPR or U.K. GDPR in the future could further add to our compliance costs, limit how we process information, or lead to reputational damage, regulatory investigations or fines. For example, if regulators assert that we have failed to comply with the GDPR or U.K. GDPR, we may be subject to fines. We may also face civil claims, as well as associated costs, diversion of internal resources, and reputational harm.
Aspects of the GDPR, U.K. GDPR, California Consumer Privacy Act (“CCPA”), Swiss Secretariat for Economic Affairs (“SECO”) and other laws, regulations, industry standards and other obligations related to privacy, data protection and data security remain uncertain. As such, compliance may require us to incur additional costs, modify our data handling practices and restrict our business operations. It is also possible that these laws, regulations, industry standards and other obligations may be interpreted and applied in a manner that is, or is alleged to be, inconsistent with our policies and procedures, the Exodus Platform or our services. If so, in addition to the possibility of fines, lawsuits and other claims, we could be required to modify the Exodus Platform or services or make changes to our business activities and practices. We may be unable to make such changes and modifications in a commercially reasonable manner, or at all, and our ability to develop new offerings and features could be limited.
Despite our efforts to comply with applicable laws, regulations and other obligations relating to privacy, data protection, and information security, any actual or perceived failure to meet applicable requirements may result in an adverse effect on our business. We also expect that there will continue to be new proposed laws, regulations and standards relating to privacy and data protection in various jurisdictions, and we cannot determine the impact such laws, regulations and standards may have on our business.
We are subject to export control, import and sanctions laws and regulations that could impair our ability to compete in international markets or subject us to liability if we violate such laws and regulations.
Under U.S. export control and sanctions laws and regulations, including EAR and various economic and trade sanctions administered by OFAC, our business activities are subject to various restrictions related to the sale or supply of certain products and services to U.S. embargoed or sanctioned countries, governments, persons and entities and