Orbitz 2012 Annual Report Download - page 23

23
Our businesses are highly regulated, and any failure to comply with applicable regulations or any changes in those
regulations could adversely affect us.
We operate in a highly regulated industry both in the United States and internationally. Our business, financial condition
and results of operations could be adversely affected by unfavorable changes in or the enactment of new laws, rules and
regulations applicable to us, which could decrease demand for our products and services, increase costs or subject us to
additional liabilities. Moreover, regulatory authorities have relatively broad discretion to grant, renew and revoke licenses and
approvals and to implement regulations. Accordingly, these regulatory authorities could prevent or temporarily suspend us from
carrying on some or all of our activities or otherwise penalize us if our practices were found not to comply with the then current
regulatory or licensing requirements or any interpretation of such requirements by the regulatory authority. Our failure to
comply with any of these requirements or interpretations could have a material adverse effect on our operations. In addition, the
various regulatory regimes to which we are subject may conflict so that compliance with the regulatory requirements in one
jurisdiction may create regulatory issues in another.
Our business is subject to laws and regulations relating to our revenue generating and marketing activities, including
those prohibiting unfair and deceptive advertising or practices. Our travel services are subject to regulation and laws governing
the offer of travel products and services, including laws requiring us to register as a “seller of travel” in various jurisdictions
and to comply with certain disclosure requirements. As an OTC that offers customers the ability to book air travel in the United
States, we are also subject to regulation by the Department of Transportation, which has authority to enforce economic
regulations and may assess civil penalties or challenge our operating authority.
Our failure to comply with these laws and regulations may subject us to fines, penalties and potential criminal violations.
Any changes to these laws or regulations or any new laws or regulations may make it more difficult for us to operate our
businesses and may have a material adverse effect on our operations.
We are exposed to risks associated with online commerce security and credit card fraud.
The secure transmission of confidential information over the Internet is essential in maintaining customer and supplier
confidence in our services. Substantial or ongoing security breaches, whether instigated internally or externally on our system
or other Internet-based systems, could significantly harm our business. We currently require customers to guarantee their
transactions with their credit cards online. We rely on licensed encryption and authentication technology to effect secure
transmission of confidential customer information, including credit card numbers. It is possible that advances in computer
capabilities, new discoveries or other developments could result in a compromise or breach of the technology that we use to
protect customer transaction data.
We incur substantial expense to protect against and remedy security breaches and their consequences. However, our
security measures may not prevent security breaches. We may be unsuccessful in implementing our remediation plan to address
these potential exposures. A party (whether internal, external, an affiliate or unrelated third party) that is able to circumvent our
security systems could steal proprietary information or cause significant interruptions in our operations. Security breaches
could damage our reputation and expose us to a risk of loss or litigation and possible liability. Security breaches could also
cause customers and potential customers to lose confidence in our security, which would have a negative effect on the demand
for our products and services.
Moreover, public perception concerning security and privacy on the Internet could adversely affect customers'
willingness to use our websites. A publicized breach of security, even if it only affects other companies conducting business
over the Internet, could inhibit the growth of the Internet and, therefore, our services as a means of conducting commercial
transactions.
We may be held liable for accepting fraudulent credit cards as payment for transactions where we are the merchant of
record and have established an allowance for such fraudulent purchases. If we are unable to control the amount of fraudulent
chargebacks for which we are liable, our results of operations and financial condition may be adversely affected.
Our processing, storage, use and disclosure of personal data could give rise to liabilities as a result of governmental
regulation, conflicting legal requirements, differing views of personal privacy rights or security breaches.
In the processing of customer transactions, we receive and store a large volume of personally identifiable information.
This information is increasingly subject to legislation and regulations in numerous jurisdictions around the world. This
legislation and regulation is generally intended to protect the privacy and security of personal information, including credit card
information, that is collected, processed and transmitted in or from the governing jurisdiction. We could be adversely affected if