In addition, a comprehensive privacy law has taken effect in the State of California, requiring regulated entities to establish measures to identify, manage, secure, track, produce, and delete personal information. Legislation and regulations on cybersecurity and data privacy may compel us to enhance or modify our systems and infrastructure, invest in new systems and infrastructure, change our service providers, augment our scenario and vulnerability testing, or alter our business practices or our policies on security, data governance, and privacy.