Skip to main content
StubHub10-K: Compliance burden

StubHub faces significant compliance burden from GDPR, CCPA, and PCI DSS regulations

What happened

The company must comply with a complex web of international and domestic data privacy and payment security laws (GDPR, CCPA, PCI DSS). This requires substantial investment in technology, processes, and legal support to manage data protection, privacy, and security across numerous jurisdictions.

Source

SEC EDGARMar 4, 2026

Annual report (Form 10-K)

StubHub 10-K for FY2025

Filing excerpt

For example, we are required to comply with federal, state and international laws, regulations and other standards designed to protect personal data, including the California Consumer Protection Act ("CCPA"), the GDPR (as defined below), the Payment Card Industry (“PCI”) and Data Security Standard ("DSS"), which govern privacy and the storing, sharing, use, disclosure and protection of personally identifiable information and user data, an area that is increasingly subject to legislation and regulations in numerous jurisdictions.

sec.gov/Archives/edgar/data/1337634/000162828026014844/stub-20251231.htmRead the full source

Other signals in this filing (11)

Extracted by Autobound

From the Signal API record
Signal
10-K: Compliance burden

What this signalsFilings often name leadership changes, deals and spending plans.

Period
FY2025
Fiscal year end
12/31
Filed
Mar 4, 2026

More 10-K signals at other companies

The full record

From the Signal API record

Details

CIK
1337634
Accession number
0001628280-26-014844
Timeframe
Current year
Filing year
2026
Why it matters
GRC tools needed
Signal category
Risk

Extraction

Confidence
High
Relevance
80%
Sentiment
Negative
Detected
Mar 10, 2026
signal_type
sec-10k
signal_subtype
complianceBurden

Use this data

Get every 10-K signal for StubHub and the companies you sell to, in the tools you already use.

  1. Ask Claude about it

    Connect Autobound to Claude, Claude Code or Cursor with MCP. Then ask: “What changed at StubHub this week?”

  2. Send it to your own tools

    The Signal API returns 10-K signals for any list of companies as JSON, for your CRM, warehouse or app.

  3. Try it free

    Sign up and spend your free credits on the companies you sell to.

    Start Free1,000 free credits

The API returns more than this page shows

This page shows a preview. The full sec-10k record in the Signal API and MCP can also have these 8 fields. Some fields are empty for some signals.

Company

  • linkedin_urlValue in the API
  • industriesValue in the API
  • employee_count_lowValue in the API
  • employee_count_highValue in the API
  • revenueValue in the API
  • descriptionValue in the API

Signal

  • signal_nameValue in the API
  • associationValue in the API
Show the full JSONThe record on this page and the API request

GET /v1/signals/1d4a8789-6fe6-4bd2-8cd5-a4650cf15048 returns this record as JSON. POST /v1/companies/enrich returns every signal for stubhub.com.

{
  "signal_id": "1d4a8789-6fe6-4bd2-8cd5-a4650cf15048",
  "signal_type": "sec-10k",
  "signal_subtype": "complianceBurden",
  "detected_at": "2026-03-10T06:44:56.834+00:00",
  "company": {
    "name": "StubHub",
    "domain": "stubhub.com"
  },
  "data": {
    "detail": "The company must comply with a complex web of international and domestic data privacy and payment security laws (GDPR, CCPA, PCI DSS). This requires substantial investment in technology, processes, and legal support to manage data protection, privacy, and security across numerous jurisdictions.",
    "metrics": {
      "timeframe": "current_year"
    },
    "summary": "StubHub faces significant compliance burden from GDPR, CCPA, and PCI DSS regulations",
    "excerpts": "For example, we are required to comply with federal, state and international laws, regulations and other standards designed to protect personal data, including the California Consumer Protection Act (\"CCPA\"), the GDPR (as defined below), the Payment Card Industry (“PCI”) and Data Security Standard (\"DSS\"), which govern privacy and the storing, sharing, use, disclosure and protection of personally identifiable information and user data, an area that is increasingly subject to legislation and regulations in numerous jurisdictions.",
    "relevance": 0.8,
    "sentiment": "negative",
    "confidence": "high",
    "source_url": "https://www.sec.gov/Archives/edgar/data/1337634/000162828026014844/stub-20251231.htm",
    "filing_date": "2026-03-04",
    "filing_year": 2026,
    "fiscal_year_end": "12/31",
    "sales_relevance": "GRC tools needed",
    "signal_category": "risk"
  }
}

Long text fields are shortened on this page.

Looking up one signal by its id is free. Enrich costs 2 credits per signal returned; a call with no results is free.