In its IPO filing, Facebook said that potential privacy legislation, evolving attitudes around user privacy and cyber attacks, among others, contribute to “risk factors” for its business, The Wall Street Journal reports.

The filing mentions privacy 35 times and includes “privacy and sharing settings” as one way the company creates value for users. Facebook expects “to continue to be subject” to future investigations but added that it has “a dedicated team of privacy professionals who are involved in new product and feature development from design through launch; ongoing review and monitoring of the way data is handled by existing features and apps, and rigorous data security practices.”

Stanford Law School’s Ryan Calo said, “It just struck me about how aware they are of the vulnerabilities…They have a narrow path to walk, and their risk factors really dramatize that in a way we hadn’t seen before.” IAPP