As a payments technology company, our business is affected by laws and complex regulations and examinations that affect us and our industry in the countries in which we operate. Regulation and proposed regulation of the payments industry have continued to increase significantly in recent years. Failure to comply with regulations or guidelines may result in the suspension or revocation of a license or registration, the limitation, suspension or termination of service, and the imposition of civil and criminal penalties, including fines, or may cause customers or potential customers to be reluctant to do business with us, any of which could have an adverse effect on our financial condition.
Interchange fees are subject to intense legal, regulatory and legislative scrutiny worldwide. For instance, the Dodd-Frank Act restricts the amounts of debit card fees that certain issuing institutions can charge merchants and allows merchants to set minimum amounts for the acceptance of credit cards and to offer discounts for different payment methods. These types of restrictions could negatively affect the number of debit transactions, which would adversely affect our business. The Dodd-Frank Act also created the CFPB, which has responsibility for enforcing federal consumer protection laws, and the Financial Stability Oversight Council, which has the authority to determine whether any nonbank financial company, like us, should be supervised by the Board of Governors of the Federal Reserve on the ground that it is "systemically important" to the U.S. financial system. Any such designation would result in increased regulatory burdens on our business, which increases our risk profile and may have an adverse effect on our business, financial condition, results of operations and cash flows.
Additionally, interchange and/or other processing fees have recently become the subject of newly enacted and/or proposed new legislation that seeks to limit the application of interchange and/or other processing fees to portions of transactions processed via credit or debit. Such legislation would add significant complexity to existing systems and processes and/or would require code development and technological changes, the cost of which may not be recouped. The inability to apply interchange and/or other processing fees to portions of transactions could negatively affect the economic opportunity associated with such transactions and result in an adverse effect to our business, financial condition, results of operations and cash flows.
Because we directly or indirectly offer or provide financial services to consumers, we are subject to prohibitions against unfair, deceptive, or abusive acts or practices under the Dodd-Frank Act. More generally, all persons engaged in commerce, including, but not limited to, us and our merchant and financial institution customers, are subject to Section 5 of the FTC Act prohibiting unfair or deceptive acts or practices ("UDAP"). We also have businesses that are subject to credit reporting and debt collection laws and regulations in the U.S. Various federal and state regulatory enforcement agencies, including the FTC, the CFPB and the states' attorneys general, may seek to take action against nonbanks that engage in UDAP or violate other laws, rules or regulations and, to the extent we are in violation of these laws, rules or regulations or are processing payments for a merchant that may be in violation of these laws, rules or regulations, we may be subject to enforcement actions and as a result may incur losses and liabilities.
We are also subject to examination by the FFIEC as a result of our provision of data processing services to financial institutions. As the regulatory environment remains unpredictable and subject to rapid change, new obligations could increase the cost and complexity of compliance. Evolving regulations also increase the risk of investigations, fines, nonmonetary penalties and litigation. Because of our services in relation to the banking industry, much of our business is obligated, either under law or via contracts with our customers, to comply with anti-money laundering regulations. Noncompliance with these regulations could lead to substantial regulatory fines and penalties or damages from private causes of action. The effect of such regulations could adversely affect our business, financial condition, results of operations and cash flows.
In addition, we and our sponsor financial institutions are subject to the laws and regulations enforced by the Office of Foreign Assets Control, which prohibit U.S. persons from engaging in transactions with certain prohibited persons or entities. Similar requirements apply in other countries. Furthermore, certain of our businesses are regulated as money transmitters or otherwise require licensing in one or more states or jurisdictions, subjecting us to various licensing, supervisory and other requirements.
Continuing developments in privacy and data protection regulation globally, combined with the rapid pace of technology innovation, have created risks and operational challenges for many of our business activities as described in "Item 1 - Business" of this Annual Report on Form 10-K. It is possible that these laws may be interpreted and applied in a manner that is inconsistent with our data privacy practices or operations model, which could result in potential fines, damages or a need to incur substantial costs to modify our operations. Compliance with these laws and regulations can be costly and time consuming, adding a layer of complexity to business practices and innovation. Our failure to comply could result in public or private enforcement action and accompanying litigation costs, losses, fines and penalties, which could adversely affect our business, financial condition, results of operations and cash flows.
In addition, U.S. banking agencies and the SEC have adopted or proposed enhanced cybersecurity risk management rules and/or standards that could apply to us and our financial institution clients and that address cybersecurity risk governance and management, management of internal and external dependencies, and incident response, cyber resilience and situational awareness. Several states and foreign countries also have adopted or proposed new privacy and cybersecurity laws covering these issues. Legislation and regulations on cybersecurity, data privacy and data localization may compel us to enhance or modify our systems, invest in new systems or alter our business practices or our policies on data governance, security and privacy. If any of these laws, rules or standards are applicable to us, our operational costs could increase significantly.
The rise in the use of generative AI has dramatically altered the corporate landscape. Incorporating AI, including machine learning technologies, into our businesses presents numerous risks and uncertainties. Furthermore, the global regulatory framework has not kept pace with the rapid developments in generative AI technology which has created uncertainties regarding compliance with applicable laws, rules and regulations. Aside from legal considerations regarding the development and deployment of AI technology, ethical considerations also exist given the potential risk of generating misleading or harmful content. The unpredictable nature of AI-generated content further amplifies the risk of unintended consequences and biases. Additionally, without clear requirements to explain AI-generated content and/or the data used to train AI models, there is a risk of intellectual property disputes, including those involving the protection or infringement of AI-generated content. We are exploring opportunities to expand our portfolio with AI capabilities to strengthen our market position, expand our teams' technological capabilities, and enhance our customers' experiences. If we are unsuccessful in doing so, we may have a competitive disadvantage in developing new solutions and operating our business, and, as a result, our customers may prefer different solutions. See "-Risks Related to Our Business Model and Operations-Our business may be affected by current and future laws and regulations governing the development, use and deployment of AI technologies, as well as potentially related private litigation" for further information about the risks of the use and deployment of AI technologies.
Changes to laws and regulations, or interpretation or enforcement thereof, even if we are not involved, may adversely affect our business by requiring significant efforts to change our systems and services requiring changes to how we price our services to customers. We may have difficulty aligning our operations to comply with varying or conflicting laws, rules and regulations. A failure to comply with laws, rules and regulations, even if inadvertent, and social expectations of corporate fairness relating to AI, could damage our business or our reputation.