Xilio Therapeutics (XLO) Risk Factors

Unless and until we can generate a substantial amount of product revenue, we expect to seek additional capital through a combination of public or private equity offerings, debt, collaborations, licensing arrangements or other sources. Our issuance of additional securities, whether equity or debt, or the possibility of such issuance, may cause the market price of our common stock to decline, and our stockholders may not agree with our plans for additional capital or the terms of such capital. To the extent that we raise additional capital through the sale of equity or convertible debt securities, our stockholders' ownership interest will be diluted, and the terms of these securities may include liquidation or other preferences that adversely affect the rights of our existing stockholders. For example, (i) when we issue shares of common stock upon the exercise of the prefunded warrants issued in connection with the private placements to existing accredited investors and to Gilead, (ii) if we issue shares of common stock in connection with the sale of additional shares of our common stock or additional prefunded warrants to Gilead in up to two additional potential private placements, or (iii) if we issue additional shares of our common stock in one or more "at-the-market," or ATM, offerings under our sales agreement with Cowen and Company LLC, our existing stockholders will suffer dilution. In addition, as a condition to providing additional funds to us, Gilead received, and future investors may receive, rights superior to those of existing stockholders. To the extent that we incur additional indebtedness, we would become obligated to make payments to repay the loan balance with interest. The incurrence of any additional indebtedness would result in additional payment obligations and is likely to involve restrictive covenants limiting our flexibility in conducting future business activities, and, in the event of insolvency, would be repaid before holders of our equity securities received any distribution of our corporate assets. Additionally, in raising funds through our collaborations and licensing arrangements with third parties, we have had to, and may in the future need to, relinquish valuable rights, partially or fully, to our technologies, future revenue streams, research programs or product candidates and grant licenses on terms unfavorable to us. In addition, securing additional capital would require a substantial amount of time and attention from our management and may divert a disproportionate amount of their attention away from day-to-day activities, which may adversely affect our management's ability to oversee the development of our product candidates.

Although our common stock is listed on the Nasdaq Global Select Market, an active trading market for our shares may never develop or be sustained. As a result, it may be difficult for our stockholders to sell their shares without depressing the market price for the shares, or at all.

The market price of our common stock has been, and may continue to be, subject to significant fluctuations in response to numerous factors, many of which are beyond our control. The stock market in general and the market for biotechnology and pharmaceutical companies in particular have experienced extreme volatility that has often been unrelated to the operating performance of particular companies. As a result of this volatility, investors may not be able to sell their common stock at or above the price paid for the shares. The market price for our common stock may be influenced by many factors, including: - the results from our preclinical studies and clinical trials;- the commencement, enrollment or results of any current or future clinical trials we may conduct, or changes in the development status of our product candidates;- adverse results from, delays in initiating or completing, or termination of clinical trials;- unanticipated serious safety concerns related to the use of our product candidates;- clinical trial results from, or regulatory developments regarding, a competitor's product candidate;- adverse regulatory decisions, including failure to receive regulatory approval of our product candidates;- regulatory or legal developments in the United States and foreign countries;- any delay in our regulatory filings for our product candidates and any adverse development or perceived adverse development with respect to the applicable regulatory authority's review of such filings, including without limitation the FDA's issuance of a "refusal to file" letter or a request for additional information;- the public's response to press releases or other public announcements by us or third parties, including our filings with the SEC, and announcements relating to acquisitions, strategic transactions, licenses, joint ventures, collaborations, capital commitments, intellectual property, litigation or other disputes impacting us or our business;- lower than expected market acceptance of our product candidates, if approved;- adverse developments concerning our manufacturers;- our inability to obtain adequate product supply for any approved product or inability to do so at acceptable prices;- variations in the level of expenses related to our preclinical and clinical development programs, including relating to the timing of invoices from, and other billing practices of, our CROs and clinical trial sites;- variations in the level of expenses related to our commercialization activities, if any product candidates are approved;- the clinical results of our competitors or potential competitors;- introduction of new products or services by our competitors;- changes in financial estimates by us or by any securities analysts who might cover our common stock;- conditions or trends in our industry;- our cash position;- sales of our common stock by us or our stockholders in the future;- adoption of new, or changes to current accounting standards;- ineffectiveness of our internal controls;- changes in the market valuations of similar companies;- stock market price and volume fluctuations of comparable companies and, in particular, those that operate in the biotechnology and pharmaceutical industry;- publication of research reports about us or our industry or positive or negative recommendations or withdrawal of research coverage by securities analysts;- announcements by us or our competitors of significant acquisitions, strategic partnerships or divestitures;- announcements of investigations or regulatory scrutiny of our operations or lawsuits filed against us;- changes in the structure of healthcare payment systems;- investors' general perception of our company and our business;- overall performance of the equity markets;- trading volume of our common stock;- potential inclusion or exclusion of our common stock in exchange, industry, or other tracking indices;- disputes or other developments relating to proprietary rights, including patents, litigation matters and our ability to obtain patent protection for our technologies and product candidates;- significant lawsuits, including patent or stockholder litigation;- proposed changes to healthcare laws, intellectual property laws or pharmaceutical pricing in the United States or foreign jurisdictions, or speculation regarding such changes;- future sales of our common stock by our officers, directors and significant stockholders;- recruitment or departure of key personnel;- public health epidemics or pandemics, such as the COVID-19 pandemic, and any recession, depression, or other sustained adverse market event or economic impact resulting from such epidemics or pandemics;- general political, economic, industry and market conditions; and - other events or factors described in this "Risk Factors" section, many of which are beyond our control. In addition, in the past, stockholders have initiated class action lawsuits against pharmaceutical and biotechnology companies following periods of volatility in the market prices of these companies' stock. This risk is especially relevant for us, because biopharmaceutical companies have experienced significant stock price volatility in recent years. Such litigation, if instituted against us, could cause us to incur substantial costs and divert management's attention and resources from our business.

The trading market for our common stock relies, in part, on the research and reports that securities or industry analysts publish about us or our business. A limited number of securities and industry analysts currently publish research on our company. There can be no assurance that existing analysts will continue to cover us or that new analysts will begin to cover us. There is also no assurance that any covering analyst will provide favorable coverage. Although we have obtained analyst coverage, if one or more of the analysts covering our business downgrade their evaluations of our stock or publish inaccurate or unfavorable research about our business, or provides more favorable relative recommendations about our competitors, the price of our stock could decline. If one or more of these analysts cease to cover our stock, we could lose visibility in the market for our stock, which in turn could cause our stock price and trading volume to decline.

As of June 30, 2024, our executive officers, directors, holders of 5% or more of our common stock and their respective affiliates beneficially owned shares in the aggregate representing a majority of our outstanding common stock. As a result of their share ownership, these stockholders, if they act together, would have the ability to influence our management and policies and would be able to significantly affect the outcome of matters requiring stockholder approval, such as elections of directors, amendments of our organizational documents or approvals of any merger, sale of assets or other major corporate transaction. This may prevent or discourage unsolicited acquisition proposals or offers for our common stock that our stockholders may feel are in their best interest. Some of these persons or entities may have interests different than our unaffiliated stockholders, or they may want us to pursue strategies that deviate from the interests of other stockholders. In addition, this concentration of ownership might adversely affect the market price of our common stock by: - delaying, deferring or preventing a change of control of us;- entrench our management and board of directors;- impeding a merger, consolidation, takeover or other business combination involving us; or - discouraging a potential acquirer from making a tender offer or otherwise attempting to obtain control of us.

We are an "emerging growth company," or EGC, as defined in the Jumpstart Our Business Startups Act of 2012, or the JOBS Act. We may remain an EGC until December 31, 2026, although if the market value of our common stock that is held by non-affiliates exceeds $700.0 million as of any June 30 before that time or if we have annual gross revenues of $1.235 billion or more in any fiscal year, we would cease to be an EGC as of December 31 of the applicable year. We also would cease to be an EGC if we issue more than $1.0 billion of non-convertible debt over a three-year period. For so long as we remain an EGC, we are permitted and intend to rely on exemptions from certain disclosure requirements that are applicable to other public companies that are not EGCs. These exemptions include: - being permitted to provide only two years of audited financial statements, in addition to any required unaudited interim financial statements, with correspondingly reduced "Management's Discussion and Analysis of financial Condition and Results of Operations" disclosure;- not being required to comply with the auditor attestation requirements in the assessment of our internal control over financial reporting;- not being required to comply with any requirement that may be adopted by the Public Company Accounting Oversight Board regarding mandatory audit firm rotation or a supplement to the auditor's report providing additional information about the audit and the financial statements;- reduced disclosure obligations regarding executive compensation; and - exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved. Even after we no longer qualify as an emerging growth company, we may continue to qualify as a smaller reporting company, which would allow us to take advantage of many of the same exemptions from disclosure requirements, including reduced disclosure obligations regarding executive compensation. In addition, if we are a smaller reporting company with less than $100 million in annual revenue, we would not be required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act of 2002, or Section 404. We cannot predict whether investors will find our common stock less attractive if we rely on these exemptions. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock and our stock price may be more volatile. In addition, the JOBS Act permits an EGC to take advantage of an extended transition period to comply with new or revised accounting standards applicable to public companies until those standards would otherwise apply to private companies. We have elected not to "opt out" of such extended transition period, which means that when a standard is issued or revised and it has different application dates for public or private companies, we can adopt the new or revised standard at the time private companies adopt the new or revised standard and may do so until such time that we either (1) irrevocably elect to "opt out" of such extended transition period or (2) no longer qualify as an EGC or a smaller reporting company. We may choose to early adopt any new or revised accounting standards whenever such early adoption is permitted for private companies.

Effective internal control over financial reporting is necessary for us to provide reliable financial reports and, together with adequate disclosure controls and procedures, is designed to prevent fraud. Any failure to implement required new or improved controls, or difficulties encountered in their implementation could cause us to fail to meet our reporting obligations. In addition, any testing by us conducted in connection with Section 404, or any subsequent testing by our independent registered public accounting firm, may reveal deficiencies in our internal control over financial reporting that are deemed to be material weaknesses or that may require prospective or retroactive changes to our financial statements or identify other areas for further attention or improvement. Inferior internal controls could also subject us to regulatory scrutiny and sanctions, impair our ability to raise revenue and cause investors to lose confidence in our reported financial information, which could harm our business and have a negative effect on the trading price of our common stock and adversely affect our results of operations and financial condition. We are required to disclose changes made in our internal controls and procedures on a quarterly basis and our management is required to assess the effectiveness of these controls annually. However, for as long as we are an EGC or a smaller reporting company with less than $100 million in annual revenue, our independent registered public accounting firm will not be required to attest to the effectiveness of our internal control over financial reporting pursuant to Section 404. An independent assessment of the effectiveness of our internal control over financial reporting could detect problems that our management's assessment might not. Undetected material weaknesses in our internal control over financial reporting could lead to financial statement restatements and require us to incur the expense of remediation, which could have a negative effect on the trading price of our common stock and adversely affect our results of operations and financial condition.

As a public company, we are subject to certain reporting requirements of the Securities Exchange Act of 1934, as amended, or the Exchange Act. Our disclosure controls and procedures are designed to reasonably assure that information required to be disclosed by us in reports we file or submit under the Exchange Act is accumulated and communicated to management, recorded, processed, summarized and reported within the time periods specified in the rules and forms of the SEC. We believe that any disclosure controls and procedures or internal control over financial reporting, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by an unauthorized override of the controls. Accordingly, because of the inherent limitations in our control system, misstatements or insufficient disclosures due to error or fraud may occur and not be detected.

We have incurred significant operating losses since our inception and have not yet generated any revenue. If our product candidates are not successfully developed and approved, we may never generate any revenue. Our net losses were $31.1 million and $42.0 million for the six months ended June 30, 2024 and 2023, respectively. As of June 30, 2024, we had an accumulated deficit of $356.6 million. To date, we have financed our operations primarily from proceeds raised through private placements of preferred units and convertible preferred stock, a debt financing, our initial public offering, or IPO, of common stock in October 2021, private placements of our common stock and prefunded warrants, an upfront payment under our license agreement with Gilead, and our ATM offering program. We have devoted substantially all of our financial resources and efforts to research and development. We are still in the early stages of development of our product candidates, and we have not completed clinical development for our ongoing clinical-stage, tumor-activated product candidates, XTX101 (anti-CTLA-4) and XTX301 (IL-12). We have not generated any revenue from product sales to date. We expect to continue to incur significant expenses and operating losses for the foreseeable future, particularly to the extent we: - continue to advance our current research programs and conduct additional research programs;- advance our current product candidates and any future product candidates we may develop into preclinical and clinical development;- seek marketing approvals for any product candidates that successfully complete clinical trials;- obtain, expand, maintain, defend and enforce our intellectual property;- hire additional research, clinical, regulatory, quality, manufacturing and general and administrative personnel;- establish a commercial and distribution infrastructure to commercialize any products for which we may obtain marketing approval;- continue to discover, validate and develop additional product candidates;- continue to expand manufacturing capacity through third-party manufacturers and manufacture increasing quantities of our current or future product candidates for use in preclinical studies, clinical trials and for any potential commercialization;- acquire or in-license other product candidates, technologies or intellectual property; and - incur additional costs associated with current and future research, development and commercialization efforts and operations as a public company. Even if we successfully complete clinical trials and obtain regulatory approval for one or more of our product candidates, our product candidates may not be commercially successful. In addition, we will continue to incur substantial research and development and other expenditures to develop and market additional product candidates. We may encounter unforeseen expenses, difficulties, complications, delays and other unknown factors that may adversely affect our business. We may not achieve profitability soon after generating product sales, if ever. If we are unable to generate revenue, we will not become profitable and may be unable to continue operations without continued funding.

We are a clinical-stage biotechnology company with a limited operating history upon which investors can evaluate our business and prospects. Since inception, we have devoted substantially all of our financial resources and efforts to performing research and development activities. Our approach to the discovery and development of tumor-activated product candidates using our proprietary platform technology for tumor-activated molecules is unproven, and we do not know whether we will be able to develop any approved products of commercial value. In addition, each of our product candidates is either in early clinical or preclinical development, and all of our other development programs are still in discovery stages. We have not yet demonstrated an ability to successfully complete any late-stage clinical trials, obtain regulatory approvals, manufacture a commercial-scale product, or arrange for a third party to do so on our behalf, or conduct the sales and marketing activities necessary for successful product commercialization. Consequently, any predictions made about our future success or viability may not be as accurate as they could be if we had a history of successfully developing and commercializing biopharmaceutical products.

As a public company, we have incurred and will continue to incur substantial legal, accounting and other expenses. The Sarbanes-Oxley Act of 2002, or the Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act, Nasdaq listing requirements, and other applicable securities rules and regulations impose various requirements on public companies, including establishment and maintenance of effective disclosure and financial controls and corporate governance practices. Our management and other personnel will need to devote a substantial amount of time to these compliance initiatives. Moreover, these rules and regulations will continue to increase our legal and financial compliance costs and will make some activities more time-consuming and costly. We evaluate developments in these rules and regulations as they are promulgated and cannot predict or estimate the amount of additional costs we may incur or the timing of such costs. These rules and regulations are often subject to varying interpretations, in many cases due to their lack of specificity, and, as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. This could result in continuing uncertainty regarding compliance matters and higher costs necessitated by ongoing revisions to disclosure and governance practices. We intend to continue to invest resources to comply with evolving laws, regulations and standards, and this investment may result in increased general and administrative expenses and a diversion of management's time and attention from revenue-generating activities to compliance activities. If notwithstanding our efforts to comply with new laws, regulations and standards, we fail to comply, regulatory authorities may initiate legal proceedings against us and our business may be materially adversely effected. Pursuant to Section 404, we are required to furnish a report by our management on our internal control over financial reporting. However, while we remain an EGC or a smaller reporting company with less than $100 million in annual revenue, we will not be required to include an attestation report on internal control over financial reporting issued by our independent registered public accounting firm. To comply with Section 404, we are engaged in a process to document and evaluate our internal control over financial reporting, which is both costly and challenging. In this regard, we will need to continue to dedicate internal resources, potentially engage outside consultants and adopt a detailed work plan to assess and document the adequacy of internal control over financial reporting, continue steps to improve control processes as appropriate, validate through testing that controls are functioning as documented and implement a continuous reporting and improvement process for internal control over financial reporting. Despite our efforts, there is a risk that we will not be able to conclude, within the prescribed timeframe or at all, that our internal control over financial reporting is effective as required by Section 404. If we identify one or more material weaknesses in our internal control over financial reporting, it could result in an adverse reaction in the financial markets due to a loss of confidence in the reliability of our financial statements.

In March 2024, our wholly-owned subsidiary, Xilio Development, Inc., or Xilio Development, entered into the license agreement with Gilead, pursuant to which Gilead was granted an exclusive global license to develop and commercialize XTX301, our tumor activated IL-12, and other specified molecules directed toward IL-12. We may in the future seek third-party collaborators or licensors for the research, development and commercialization of other current or future product candidates. With respect to our license agreement with Gilead, and what we expect will be the case with any future collaboration agreements we enter into, we have and would likely have limited control over whether such collaborators pursue the development of our product candidates or the amount and timing of resources that our collaborators dedicate to the development or commercialization of our product candidates that we seek to develop with them. For example, under the license agreement with Gilead, if Gilead exercises its right to transition responsibilities for the development and commercialization of XTX301 and the rest of our IL-12 program, it will have sole decision making authority with respect to the continued development and future commercialization of our IL-12 program and may elect to prioritize other assets that it believes are more competitive, or it may exercise its right to terminate the license and return the licensed IL-12 program assets to us. As a result, there can be no assurances that any of the programs covered by our existing or future collaborations or licenses will be developed further or reach commercialization. Further, our ability to generate revenues from these existing and future arrangements will depend on our collaborators' abilities to successfully perform the functions assigned to them in these arrangements. We cannot predict the success of any collaboration that we enter into. Collaborations, licenses or similar arrangements involving our research programs or any product candidates currently pose, and will continue to pose, numerous risks to us, including the following: - collaborators or licensors have significant discretion in determining the efforts and resources that they will apply to these arrangements;- collaborators or licensors may not pursue development and commercialization of our product candidates or may elect not to continue or renew development or commercialization programs based on clinical trial results, changes in such third party's strategic focus or available funding or external factors such as an acquisition that diverts resources or creates competing priorities;- collaborators or licensors may delay programs, preclinical studies or clinical trials, provide insufficient funding for programs, preclinical studies or clinical trials, stop a preclinical study or clinical trial or abandon a product candidate, repeat or conduct new clinical trials or require a new formulation of a product candidate for clinical testing;- collaborators or licensors could independently develop, or develop with third parties, products that compete directly or indirectly with our product candidates if the collaborators believe that competitive products are more likely to be successfully developed or can be commercialized under terms that are more economically attractive than ours;- collaborators or licenses may be acquired by a third party having competitive products or different priorities;- collaborators or licensors with marketing and distribution rights to one or more product candidates may not commit sufficient resources to the marketing and distribution of such product candidate(s);- collaborators or licensors may not properly obtain, maintain, enforce or defend our intellectual property or proprietary rights or may use our proprietary information in such a way as to invite litigation that could jeopardize or invalidate our proprietary information or expose us to potential litigation;- disputes may arise between the collaborators or licensors and us that result in the delay or termination of the research, development, or commercialization of our product candidates or any of our product candidates or that result in costly litigation or arbitration that diverts management attention and resources or that jeopardize or invalidate our intellectual property or proprietary information;- we may lose certain valuable rights under certain circumstances, including if we undergo a change of control;- collaborations or licenses may be terminated and, if terminated, may result in a need for additional capital to pursue further development or commercialization of the applicable product candidates; and - collaborations or license agreements may not lead to development or commercialization of product candidates in the most efficient manner or at all. If a present or future collaborator or licensor of ours were to be involved in a business combination, the continued pursuit and emphasis on our product development or commercialization program under such collaboration could be delayed, diminished or terminated. If our current or future collaborations, licenses or similar transactions do not result in the successful development and commercialization of product candidates, or if one of our collaborators or licensors terminates its agreement with us, we may not receive any future research funding or milestone or royalty payments under such agreement, we may lose valuable rights to our intellectual property, or we may incur significant costs in reestablishing the development and manufacturing of such product candidates. If we do not receive the funding we expect under these agreements, our development of product candidates could be delayed, and we may need additional resources to develop product candidates. In addition, if one of our collaborators terminates its agreement with us, we may find it more difficult to find a suitable replacement collaborator or licensor or for us to attract new collaborators or licensors, and our development programs may be delayed or the perception of us in the business and financial communities could be adversely affected. All of the risks relating to product development, regulatory approval and commercialization described in this Quarterly Report on Form 10-Q apply to the activities of our collaborators or licensors. These relationships, or those like them, may require us to incur non-recurring and other charges, increase our near- and long-term expenditures, issue securities that dilute our existing stockholders, or disrupt our management and business. In addition, we could face significant competition in seeking appropriate collaborators, and the negotiation process is time-consuming and complex. Our ability to reach a definitive collaboration or license agreement with future partners will depend, among other things, upon our assessment of the resources and expertise of such third-party collaborator or licensor and the terms and conditions of the proposed collaboration or license. Further, if we license rights for use in any product candidates we or our collaborators may develop, we may not be able to realize the benefit of such transactions if we are unable to successfully integrate them with our existing operations and company culture.

In order to market and sell our products in the EU and other foreign jurisdictions, we must obtain separate marketing approvals and comply with numerous and varying regulatory requirements. The approval procedure varies among countries and can involve additional testing. The time required to obtain approval may differ substantially from that required to obtain FDA approval. The marketing approval process outside the United States generally includes all of the risks associated with obtaining FDA approval. We may not obtain approvals from regulatory authorities outside the United States on a timely basis, if at all. Approval by the FDA does not ensure approval by regulatory authorities in other countries or jurisdictions, and approval by one regulatory authority outside the United States does not ensure approval by regulatory authorities in other countries or jurisdictions or by the FDA. We may file for marketing approvals but not receive necessary approvals to commercialize our products in any market. In many countries outside the United States, a product candidate must also be approved for reimbursement before it can be sold in that country. In some cases, the price that we intend to charge for our products, if approved, is also subject to approval. Obtaining non-U.S. regulatory approvals and compliance with non-U.S. regulatory requirements could result in significant delays, difficulties and costs for us and could delay or prevent the introduction of our product candidates in certain countries. In addition, if we fail to obtain the non-U.S. approvals required to market our product candidates outside the United States or if we fail to comply with applicable non-U.S. regulatory requirements, our target markets will be reduced and our ability to realize the full market potential of our product candidates will be harmed and our business, financial condition, results of operations and prospects may be adversely affected. Additionally, we could face heightened risks with respect to obtaining marketing authorization in the United Kingdom as a result of the withdrawal of the United Kingdom from the EU, commonly referred to as Brexit. The United Kingdom is no longer part of the European Single Market and EU Customs Union. As of January 1, 2021, the Medicines and Healthcare products Regulatory Agency, or MHRA, became responsible for supervising medicines and medical devices in Great Britain, comprising England, Scotland and Wales under domestic law, whereas under the terms of the Northern Ireland Protocol, Northern Ireland is currently subject to EU rules. The United Kingdom and EU have however agreed to the Windsor Framework which fundamentally changes the existing system under the Northern Ireland Protocol, including with respect to the regulation of medicinal products in the United Kingdom Once implemented, the changes introduced by the Windsor Framework will see the MHRA be responsible for approving all medicinal products destined for the UK market (i.e., Great Britain and Northern Ireland), and the EMA will no longer have any role in approving medicinal products destined for Northern Ireland. Any delay in obtaining, or an inability to obtain, any marketing authorizations, as a result of Brexit or otherwise, may force us to restrict or delay efforts to seek regulatory approval in the United Kingdom for our product candidates, which could significantly and materially harm our business. In addition, foreign regulatory authorities may change their approval policies and new regulations may be enacted. For instance, the EU pharmaceutical legislation is currently undergoing a complete review process, in the context of the Pharmaceutical Strategy for Europe initiative, launched by the European Commission in November 2020. The European Commission's proposal for revision of several legislative instruments related to medicinal products (potentially reducing the duration of regulatory data protection, revising the eligibility for expedited pathways, etc.) was published on April 26, 2023. The proposed revisions remain to be agreed and adopted by the European Parliament and European Council and the proposals may therefore be substantially revised before adoption, which is not anticipated before early 2026. The revisions may however have a significant impact on the pharmaceutical industry and our business in the long term. Any delay in obtaining, or an inability to obtain, any marketing approvals, as a result of Brexit or otherwise, may force us to restrict or delay efforts to seek regulatory approval in the United Kingdom for our product candidates, which could significantly and materially harm our business. We expect that we will be subject to additional risks in commercializing any of our product candidates that receive marketing approval outside the United States, including tariffs, trade barriers and regulatory requirements; economic weakness, including inflation, or political instability in particular foreign economies and markets; compliance with tax, employment, immigration and labor laws for employees living or traveling abroad; foreign currency fluctuations, which could result in increased operating expenses and reduced revenue, and other obligations incident to doing business in another country; and workforce uncertainty in countries where labor unrest is more common than in the United States.

Any product candidate for which we obtain marketing approval will be subject to continual requirements of and review by the FDA and other regulatory authorities. These requirements include submissions of safety and other post-marketing information and reports, registration and listing requirements, cGMP requirements relating to quality control and manufacturing, quality assurance and corresponding maintenance of records and documents, and requirements regarding the distribution of samples to physicians and recordkeeping. In addition, the approval may be subject to limitations on the indicated uses for which the product may be marketed or to the conditions of approval or contain requirements for costly post-marketing testing and surveillance to monitor the safety or efficacy of the medicine, including the requirement to implement a risk evaluation and mitigation strategy. Accordingly, if we receive marketing approval for one or more of our product candidates, we will continue to expend time, money and effort in all areas of regulatory compliance, including manufacturing, production, product surveillance and quality control. If we fail to comply with these requirements, we could have the marketing approvals for our products withdrawn by regulatory authorities and our ability to market any products could be limited, which could adversely affect our ability to achieve or sustain profitability. Failure to comply with regulatory requirements, may yield various results, including: - restrictions on such products, manufacturers or manufacturing processes;- restrictions on the labeling or marketing of a product;- restrictions on distribution or use of a product;- requirements to conduct post-marketing studies or clinical trials;- warning letters or untitled letters;- withdrawal of the products from the market;- refusal to approve pending applications or supplements to approved applications that we submit;- recall of products;- damage to relationships with collaborators;- unfavorable press coverage and damage to our reputation;- fines, restitution or disgorgement of profits or revenues;- suspension or withdrawal of marketing approvals;- refusal to permit the import or export of our products;- product seizure;- injunctions or the imposition of civil or criminal penalties; and - litigation involving patients using our products. Non-compliance with EU requirements regarding safety monitoring or pharmacovigilance, and with requirements related to the development of products for the pediatric population, can also result in significant financial penalties. Similarly, failure to comply with the EU's requirements regarding the protection of personal information can also lead to significant penalties and sanctions. Further, the marketing and promotion of authorized drugs, including industry-sponsored continuing medical education and advertising directed toward the prescribers of drugs and/or the general public, are strictly regulated in the EU notably under Directive 2001/83EC, as amended, and are also subject to EU Member State laws. Direct-to-consumer advertising of prescription medicines is prohibited across the EU. Accordingly, assuming we, or our collaborators, receive marketing approval for one or more of our product candidates, we, and our collaborators, and our and their contract manufacturers will continue to expend time, money and effort in all areas of regulatory compliance, including manufacturing, production, product surveillance and quality control. If we, and our collaborators, are not able to comply with post-approval regulatory requirements, our or our collaborators' ability to market any future products could be limited, which could adversely affect our ability to achieve or sustain profitability. Further, the cost of compliance with post-approval regulations may have a negative effect on our operating results and financial condition.

The regulations relating to the promotion of products for unapproved uses are complex and subject to substantial interpretation by the FDA, EMA, MHRA and other government agencies. In September 2021, the FDA published final regulations which describe the types of evidence that the agency will consider in determining the intended use of a drug product. Physicians may nevertheless prescribe products off-label to their patients in a manner that is inconsistent with the approved label. Prior to the approval of any of our product candidates, we intend to implement compliance and training programs designed to ensure that any future sales and marketing practices comply with applicable regulations. Notwithstanding these programs, the FDA or other government agencies may allege or find that our practices constitute prohibited promotion of our products for unapproved uses. We also cannot be sure that our employees will comply with company policies and applicable regulations regarding the promotion of products for unapproved uses. Notwithstanding the regulatory restrictions on off-label promotion, the FDA and other regulatory authorities allow companies to engage in truthful, non-misleading, and non-promotional scientific communications concerning their products in certain circumstances. For example, in October 2023, the FDA published draft guidance outlining the agency's non-binding policies governing the distribution of scientific information on unapproved uses to healthcare providers. This draft guidance calls for such communications to be truthful, non-misleading, factual, and unbiased and include all information necessary for healthcare providers to interpret the strengths and weaknesses and validity and utility of the information about the unapproved use. In addition, under some relatively recent guidance from the FDA and the Pre-Approval Information Exchange Act, or PIE Act, signed into law as part of the Consolidated Appropriations Act of 2023, companies may also promote information that is consistent with the prescribing information and proactively speak to formulary committee members of payors regarding data for an unapproved drug or unapproved uses of an approved drug. We may engage in these discussions and communicate with healthcare providers, payors and other constituencies in compliance with all applicable laws, regulatory guidance and industry best practices. We will need to carefully navigate the FDA's various regulations, guidance and policies, along with recently enacted legislation, to ensure compliance with restrictions governing promotion of our products. In recent years, a significant number of pharmaceutical and biotechnology companies have been the target of inquiries and investigations by various federal and state regulatory, investigative, prosecutorial and administrative entities in connection with the promotion of products for unapproved uses and other sales practices, including the Department of Justice and various U.S. Attorneys' Offices, the Office of Inspector General of the Department of Health and Human Services, the FDA, the Federal Trade Commission, or the FTC, and various state Attorneys General offices. These investigations have alleged violations of various federal and state laws and regulations, including claims asserting antitrust violations, violations of the FDCA, the False Claims Act, the Prescription Drug Marketing Act and anti-kickback laws and other alleged violations in connection with the promotion of products for unapproved uses, pricing and Medicare and/or Medicaid reimbursement. Many of these investigations originate as "qui tam" actions under the False Claims Act. Under the False Claims Act, any individual can bring a claim on behalf of the government alleging that a person or entity has presented a false claim or caused a false claim to be submitted to the government for payment. The person bringing a qui tam suit is entitled to a share of any recovery or settlement. Qui tam suits, also commonly referred to as "whistleblower suits," are often brought by current or former employees. In a qui tam suit, the government must decide whether to intervene and prosecute the case. If it declines, the individual may pursue the case alone. If the FDA or any other governmental agency initiates an enforcement action against us or if we are the subject of a qui tam suit and it is determined that we violated prohibitions relating to the promotion of products for unapproved uses, we could be subject to substantial civil or criminal fines or damage awards and other sanctions such as consent decrees and corporate integrity agreements pursuant to which our activities would be subject to ongoing scrutiny and monitoring to ensure compliance with applicable laws and regulations. Any such fines, awards or other sanctions would have an adverse effect on our revenue, business, financial prospects and reputation.

We are subject to export control and import laws and regulations, including the U.S. Export Administration Regulations, U.S. Customs regulations, various economic and trade sanctions regulations administered by the U.S. Treasury Department's Office of Foreign Assets Control, the U.S. Foreign Corrupt Practices Act of 1977, as amended, or the FCPA, the U.S. domestic bribery statute contained in 18 U.S.C. § 202, the U.S. Travel Act, the USA PATRIOT Act, and other state and national anti-bribery and anti-money laundering laws in countries in which we conduct activities. Anti-corruption laws are interpreted broadly and prohibit companies and their employees, agents, third-party intermediaries, joint venture partners and collaborators from authorizing, promising, offering or providing, directly or indirectly, improper payments or benefits to recipients in the public or private sector. We may have direct or indirect interactions with officials and employees of government agencies or government-affiliated hospitals, universities and other organizations. In addition, we may engage third-party intermediaries to promote our clinical research activities abroad and/or to obtain necessary permits, licenses, and other regulatory approvals. We can be held liable for the corrupt or other illegal activities of these third-party intermediaries, our employees, representatives, contractors, partners and agents, even if we do not explicitly authorize or have actual knowledge of such activities. Noncompliance with the laws and regulations described above could subject us to whistleblower complaints, investigations, sanctions, settlements, prosecution, other enforcement actions, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, suspension and/or debarment from contracting with certain persons, the loss of export privileges, reputational harm, adverse media coverage and other collateral consequences. If any subpoenas, investigations or other enforcement actions are launched, or governmental or other sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business, results of operations and financial condition could be materially harmed. In addition, responding to any action will likely result in a materially significant diversion of management's attention and resources and significant defense and compliance costs and other professional fees. In certain cases, enforcement authorities may even cause us to appoint an independent compliance monitor which can result in added costs and administrative burdens.

We may seek approval of any of our current and future product candidates using the FDA's accelerated approval pathway. A product may be eligible for accelerated approval if it treats a serious or life-threatening condition, generally provides a meaningful advantage over available therapies, and demonstrates an effect on a surrogate endpoint that is reasonably likely to predict clinical benefit. The FDA or other applicable regulatory agency makes the determination regarding whether a surrogate endpoint is reasonably likely to predict long-term clinical benefit. Prior to seeking such accelerated approval, we will seek feedback from the FDA and otherwise evaluate our ability to seek and receive such accelerated approval. As a condition of approval, the FDA requires that a sponsor of a product receiving accelerated approval perform an adequate and well-controlled post-marketing confirmatory clinical trial or trials. These confirmatory trials must be completed with due diligence and we may be required to evaluate different or additional endpoints in these post-marketing confirmatory trials. These confirmatory trials may require enrollment of more patients than we currently anticipate and will result in additional costs, which may be greater than the estimated costs we currently anticipate. In addition, the FDA currently requires as a condition for accelerated approval preapproval of promotional materials, which could adversely impact the timing of the commercial launch of the product. There can be no assurance that the FDA will agree with any proposed surrogate endpoints or that we will decide to pursue or submit a BLA for accelerated approval or any other form of expedited development, review or approval for any of our current or future product candidates. Similarly, there can be no assurance that, after feedback from FDA, we will continue to pursue or apply for accelerated approval or any other form of expedited development, review or approval, even if we initially decide to do so. Furthermore, if we decide to submit an application for accelerated approval or under another expedited regulatory designation, there can be no assurance that such submission or application will be accepted or that any expedited review or approval will be granted on a timely basis, or at all. The FDA may withdraw approval of a product candidate approved under the accelerated approval pathway if, for example, the trial required to verify the predicted clinical benefit of our product candidate fails to verify such benefit or does not demonstrate sufficient clinical benefit to justify the risks associated with the drug. The FDA may also withdraw approval if other evidence demonstrates that our product candidate is not shown to be safe or effective under the conditions of use, we fail to conduct any required post approval trial of our product candidate with due diligence or we disseminate false or misleading promotional materials relating to our product candidate. A failure to obtain accelerated approval or any other form of expedited development, review or approval for our product candidates, or withdrawal of a product candidate, would result in a longer time period for commercialization of such product candidate, could increase the cost of development of such product candidate and could harm our competitive position in the marketplace. With passage of the FDORA in December 2022, Congress modified certain provisions governing accelerated approval of drug and biologic products. Specifically, the new legislation authorized the FDA to: require a sponsor to have its confirmatory clinical trial underway before accelerated approval is awarded, require a sponsor of a product granted accelerated approval to submit progress reports on its post-approval studies to the FDA every six months until the study is completed; and use expedited procedures to withdraw accelerated approval of a new drug application or BLA after the confirmatory trial fails to verify the product's clinical benefit. Further, FDORA requires the agency to publish on its website "the rationale for why a post-approval study is not appropriate or necessary" whenever it decides not to require such a study upon granting accelerated approval. More recently, in March 2023, the FDA issued draft guidance that outlines its current thinking and approach to accelerated approval. The FDA indicated that the accelerated approval pathway is commonly used for approval of oncology drugs due to the serious and life-threatening nature of cancer. Although single-arm trials have been commonly used to support accelerated approval, a randomized controlled trial is the preferred approach as it provides a more robust efficacy and safety assessment and allows for direct comparisons to an available therapy. To that end, the FDA outlined considerations for designing, conducting, and analyzing data for trials intended to support accelerated approvals of oncology therapeutics. While this guidance is currently only in draft form and will not be legally binding even when finalized, we will need to consider the FDA's guidance closely if we seek accelerated approval for any of our products. Accordingly, even if we do receive accelerated approval, we may not experience a faster development or regulatory review or approval process, and receiving accelerated approval does not provide assurance of ultimate full FDA approval. In the EU, a "conditional" marketing authorization may be granted in cases where all the required safety and efficacy data are not yet available. A conditional marketing authorization is subject to conditions to be fulfilled for generating missing data or ensuring increased safety measures. A conditional marketing authorization is valid for one year and has to be renewed annually until fulfillment of all relevant conditions. Once the applicable pending studies are provided, a conditional marketing authorization can become a "standard" marketing authorization. However, if the conditions are not fulfilled within the timeframe set by the EMA, the marketing authorization will cease to be renewed.

In the United States and foreign jurisdictions, there have been a number of legislative and regulatory changes and proposed changes regarding the healthcare system that could prevent or delay marketing approval of our product candidates, restrict or regulate post-approval activities and affect our ability to profitably sell any product candidates for which we obtain marketing approval. We expect that current laws, as well as other healthcare reform measures that may be adopted in the future, may result in more rigorous coverage criteria and in additional downward pressure on the price that we may receive for any approved products. If reimbursement of our products is unavailable or limited in scope, our business could be materially harmed. In March 2010, President Obama signed into law the ACA. In addition, other legislative changes have been proposed and adopted since the ACA was enacted. In August 2011, the Budget Control Act of 2011, among other things, created measures for spending reductions by Congress. A Joint Select Committee on Deficit Reduction, tasked with recommending a targeted deficit reduction of at least $1.2 trillion for the years 2013 through 2021, was unable to reach required goals, thereby triggering the legislation's automatic reduction to several government programs. These changes included aggregate reductions to Medicare payments to providers of up to 2% per fiscal year, which went into effect in April 2013 and will remain in effect through 2031 under the CARES Act. The American Taxpayer Relief Act of 2012, among other things, reduced Medicare payments to several providers and increased the statute of limitations period for the government to recover overpayments to providers from three to five years. These laws may result in additional reductions in Medicare and other healthcare funding and otherwise affect the prices we may obtain for any of our product candidates for which we may obtain regulatory approval or the frequency with which any such product candidate is prescribed or used. Under current legislation, the actual reductions in Medicare payments may vary up to 4%. The Consolidated Appropriations Act, which was signed into law by President Biden in December 2022, made several changes to sequestration of the Medicare program. Section 1001 of the Consolidated Appropriations Act delays the 4% Statutory Pay-As-You-Go Act of 2010, or PAYGO, sequester for two years, through the end of calendar year 2024. Triggered by enactment of the American Rescue Plan Act of 2021, the 4% cut to the Medicare program would have taken effect in January 2023. The Consolidated Appropriation Act's health care offset title includes Section 4163, which extends the 2% Budget Control Act of 2011 Medicare sequester for six months into fiscal year 2032 and lowers the payment reduction percentages in fiscal years 2030 and 2031. Since enactment of the ACA, there have been, and continue to be, numerous legal challenges and Congressional actions to repeal and replace provisions of the law. For example, with enactment of the Tax Act, which was signed by President Trump on December 22, 2017, Congress repealed the "individual mandate." The repeal of this provision, which requires most Americans to carry a minimal level of health insurance, became effective in 2019. Further, on June 17, 2021, the U.S. Supreme Court dismissed the most recent judicial challenge to the ACA brought by several states without specifically ruling on the constitutionality of the ACA. Litigation and legislation over the ACA are likely to continue, with unpredictable and uncertain results. The Trump Administration also took executive actions to undermine or delay implementation of the ACA, including directing federal agencies with authorities and responsibilities under the ACA to waive, defer, grant exemptions from, or delay the implementation of any provision of the ACA that would impose a fiscal or regulatory burden on states, individuals, healthcare providers, health insurers or manufacturers of pharmaceuticals or medical devices. On January 28, 2021, however, President Biden issued an executive order that initiated a special enrollment period for purposes of obtaining health insurance coverage through the Affordable Care Act marketplace, which began on February 15, 2021 and remained open through August 15, 2021. The executive order also instructed certain governmental agencies to review and reconsider their existing policies and rules that limit access to healthcare, including among others, reexamining Medicaid demonstration projects and waiver programs that include work requirements, and policies that create unnecessary barriers to obtaining access to health insurance coverage through Medicaid or the ACA. It is possible that the ACA will be subject to judicial or Congressional challenges in the future. It is unclear how such other challenges to repeal or replace the ACA or the health reform measures of the Biden administration will impact the ACA or our business. In the EU, on December 13, 2021, Regulation No 2021/2282 on Health Technology Assessment, or HTA, amending Directive 2011/24/EU, was adopted. While the Regulation entered into force in January 2022, it will only begin to apply from January 2025 onwards, with preparatory and implementation-related steps to take place in the interim. Once applicable, it will have a phased implementation depending on the concerned products. The Regulation intends to boost cooperation among EU member states in assessing health technologies, including new medicinal products as well as certain high-risk medical devices, and provide the basis for cooperation at the EU level for joint clinical assessments in these areas. It will permit EU member states to use common HTA tools, methodologies, and procedures across the EU, working together in four main areas, including joint clinical assessment of the innovative health technologies with the highest potential impact for patients, joint scientific consultations whereby developers can seek advice from HTA authorities,identification of emerging health technologies to identify promising technologies early, and continuing voluntary cooperation in other areas. Individual EU member states will continue to be responsible for assessing non-clinical (e.g., economic, social, ethical) aspects of health technology, and making decisions on pricing and reimbursement. We expect that these healthcare reforms, as well as other healthcare reform measures that may be adopted in the future, may result in additional reductions in Medicare and other healthcare funding, more rigorous coverage criteria, new payment methodologies and additional downward pressure on the price that we receive for any approved product and/or the level of reimbursement physicians receive for administering any approved product we might bring to market. Reductions in reimbursement levels may negatively impact the prices we receive or the frequency with which our products are prescribed or administered. Any reduction in reimbursement from Medicare or other government programs may result in a similar reduction in payments from private payors. Accordingly, such reforms, if enacted, could have an adverse effect on anticipated revenue from product candidates that we may successfully develop and for which we may obtain marketing approval and may affect our overall financial condition and ability to develop or commercialize product candidates.

The prices of prescription pharmaceuticals have also been the subject of considerable discussion in the United States. There have been several recent U.S. congressional inquiries, as well as proposed and enacted state and federal legislation designed to, among other things, bring more transparency to pharmaceutical pricing, review the relationship between pricing and manufacturer patient programs, and reduce the costs of pharmaceuticals under Medicare and Medicaid. In 2020, President Trump issued several executive orders intended to lower the costs of prescription products and certain provisions in these orders have been incorporated into regulations. These regulations include an interim final rule implementing a most favored nation model for prices that would tie Medicare Part B payments for certain physician-administered pharmaceuticals to the lowest price paid in other economically advanced countries, effective January 1, 2021. That rule, however, has been subject to a nationwide preliminary injunction and, on December 29, 2021, the Centers for Medicare & Medicaid Services, or CMS, issued a final rule to rescind it. With issuance of this rule, CMS stated that it will explore all options to incorporate value into payments for Medicare Part B pharmaceuticals and improve beneficiaries' access to evidence-based care. In addition, in October 2020, HHS and the FDA published a final rule allowing states and other entities to develop a Section 804 Importation Program, or SIP, to import certain prescription drugs from Canada into the United States. That regulation was challenged in a lawsuit by the Pharmaceutical Research and Manufacturers of America, or PhRMA, but the case was dismissed by a federal district court in February 2023 after the court found that PhRMA did not have standing to sue HHS. Nine states (Colorado, Florida, Maine, New Hampshire, New Mexico, North Dakota, Texas, Vermont and Wisconsin) have passed laws allowing for the importation of drugs from Canada. Certain of these states have submitted Section 804 Importation Program proposals and are awaiting approval. On January 5, 2023, the FDA approved Florida's plan for Canadian drug importation. Further, on November 20, 2020, HHS finalized a regulation removing safe harbor protection for price reductions from pharmaceutical manufacturers to plan sponsors under Part D, either directly or through pharmacy benefit managers, unless the price reduction is required by law. The implementation of the rule has been delayed by the Biden administration until January 1, 2026 by the Infrastructure Investment and Jobs Act. The final rule would eliminate the current safe harbor for Medicare drug rebates and create new safe harbors for beneficiary point-of-sale discounts and pharmacy benefit manager service fees. It originally was set to go into effect on January 1, 2022, but with the passage of the Inflation Reduction Act of 2022, or the IRA, has been delayed by Congress to January 1, 2032. On July 9, 2021, President Biden signed Executive Order 14063, which focuses on, among other things, the price of pharmaceuticals. The Order directs HHS to create a plan within 45 days to combat "excessive pricing of prescription pharmaceuticals and enhance domestic pharmaceutical supply chains, to reduce the prices paid by the federal government for such pharmaceuticals, and to address the recurrent problem of price gouging." On September 9, 2021, HHS released its plan to reduce pharmaceutical prices. The key features of that plan are to: (a) make pharmaceutical prices more affordable and equitable for all consumers and throughout the health care system by supporting pharmaceutical price negotiations with manufacturers; (b) improve and promote competition throughout the prescription pharmaceutical industry by supporting market changes that strengthen supply chains, promote biosimilars and generic drugs, and increase transparency; and (c) foster scientific innovation to promote better healthcare and improve health by supporting public and private research and making sure that market incentives promote discovery of valuable and accessible new treatments. On August 16, 2022, the IRA was signed into law by President Biden. The new legislation has implications for Medicare Part D, which is a program available to individuals who are entitled to Medicare Part A or enrolled in Medicare Part B, to give them the option of paying a monthly premium for outpatient prescription drug coverage. Among other things, the IRA requires manufacturers of certain drugs to engage in price negotiations with Medicare (beginning in 2026), with prices that can be negotiated subject to a cap; imposes rebates under Medicare Part B and Medicare Part D to penalize price increases that outpace inflation (first due in 2023); and replaces the Part D coverage gap discount program with a new discounting program (beginning in 2025). The IRA permits the Secretary of the Department of HHS to implement many of these provisions through guidance, as opposed to regulation, for the initial years. Specifically, with respect to price negotiations, Congress authorized Medicare to negotiate lower prices for certain costly single-source drug and biologic products that do not have competing generics or biosimilars and are reimbursed under Medicare Part B and Part D. CMS may negotiate prices for ten high-cost drugs paid for by Medicare Part D starting in 2026, followed by 15 Part D drugs in 2027, 15 Part B or Part D drugs in 2028, and 20 Part B or Part D drugs in 2029 and beyond. This provision applies to drug products that have been approved for at least 9 years and biologics that have been licensed for 13 years, but it does not apply to drugs and biologics that have been approved for a single rare disease or condition. Nonetheless, since CMS may establish a maximum price for these products in price negotiations, we would be fully at risk of government action if our products are the subject of Medicare price negotiations. Moreover, given the risk that could be the case, these provisions of the IRA may also further heighten the risk that we would not be able to achieve the expected return on our drug products or full value of our patents protecting our products if prices are set after such products have been on the market for nine years. Further, the legislation subjects drug manufacturers to civil monetary penalties and a potential excise tax for failing to comply with the legislation by offering a price that is not equal to or less than the negotiated "maximum fair price" under the law or for taking price increases that exceed inflation. The legislation also requires manufacturers to pay rebates for drugs in Medicare Part D whose price increases exceed inflation. The new law also caps Medicare out-of-pocket drug costs at an estimated $4,000 a year in 2024 and, thereafter beginning in 2025, at $2,000 a year. In addition, the IRA potentially raises legal risks with respect to individuals participating in a Medicare Part D prescription drug plan who may experience a gap in coverage if they required coverage above their initial annual coverage limit before they reached the higher threshold, or "catastrophic period" of the plan. Individuals requiring services exceeding the initial annual coverage limit and below the catastrophic period must pay 100% of the cost of their prescriptions until they reach the catastrophic period. Among other things, the IRA contains many provisions aimed at reducing this financial burden on individuals by reducing the co-insurance and co-payment costs, expanding eligibility for lower income subsidy plans, and price caps on annual out-of-pocket expenses, each of which could have potential pricing and reporting implications. We expect that current or future litigation involving provisions of the IRA will have unpredictable and uncertain results on the implementation and impact of the IRA on biotechnology industry generally, as well as our business and current or future products. For example, on June 6, 2023, Merck & Co., or Merck, filed a lawsuit against the HHS and CMS asserting that, among other things, the IRA's Drug Price Negotiation Program for Medicare constitutes an uncompensated taking in violation of the Fifth Amendment of the Constitution. Subsequently, a number of other parties, including the U.S. Chamber of Commerce, Bristol Myers Squibb Company, the PhRMA, Astellas, Novo Nordisk, Janssen Pharmaceuticals, Novartis, AstraZeneca and Boehringer Ingelheim, also filed lawsuits in various courts with similar constitutional claims against the HHS and CMS. We expect that litigation involving these and other provisions of the IRA will continue, with unpredictable and uncertain results. Accordingly, while it is currently unclear how the IRA will be effectuated, we cannot predict with certainty what impact any federal or state health reforms will have on us, but such changes could impose new or more stringent regulatory requirements on our activities or result in reduced reimbursement for our products, any of which could adversely affect our business, results of operations and financial condition. At the state level, individual states are increasingly aggressive in passing legislation and implementing regulations designed to control pharmaceutical and biological product pricing, including price or patient reimbursement constraints, discounts, restrictions on certain product access and marketing cost disclosure and transparency measures, and, in some cases, designed to encourage importation from other countries and bulk purchasing. In addition, regional healthcare organizations and individual hospitals are increasingly using bidding procedures to determine what pharmaceutical products and which suppliers will be included in their prescription drug and other healthcare programs. These measures could reduce the ultimate demand for our products, once approved, or put pressure on our product pricing. We expect that additional state and federal healthcare reform measures will be adopted in the future, any of which could limit the amounts that federal and state governments will pay for healthcare products and services, which could result in reduced demand for our product candidates or additional pricing pressures. Finally, outside the United States, in some nations, including those of the EU, the pricing of prescription pharmaceuticals is subject to governmental control and access. In these countries, pricing negotiations with governmental authorities can take considerable time after the receipt of marketing approval for a product. To obtain reimbursement or pricing approval in some countries, we or our collaborators may be required to conduct a clinical trial that compares the cost-effectiveness of our product to other available therapies. If reimbursement of our products is unavailable or limited in scope or amount, or if pricing is set at unsatisfactory levels, our business could be materially harmed.

We are subject to data privacy and protection laws and regulations that apply to the collection, transmission, storage and use of personally identifiable information, which among other things, impose certain requirements relating to the privacy, security and transmission of personal information, including comprehensive regulatory systems in the United States, EU and United Kingdom. The legislative and regulatory landscape for privacy and data protection continues to evolve in jurisdictions worldwide, and there has been an increasing focus on privacy and data protection issues with the potential to affect our business. Failure to comply with any of these laws and regulations could result in enforcement action against us, including fines, claims for damages by affected individuals, damage to our reputation and loss of goodwill, any of which could have a material adverse effect on our business, financial condition, results of operations or prospects. There are numerous U.S. federal and state laws and regulations related to the privacy and security of personal information. In particular, regulations promulgated pursuant to HIPAA establish privacy and security standards that limit the use and disclosure of individually identifiable health information, or protected health information, and require the implementation of administrative, physical and technological safeguards to protect the privacy of protected health information and ensure the confidentiality, integrity and availability of electronic protected health information. Determining whether protected health information has been handled in compliance with applicable privacy standards and our contractual obligations can be complex and may be subject to changing interpretation. These obligations may be applicable to some or all of our business activities now or in the future. If we are unable to properly protect the privacy and security of protected health information, we could be found to have breached our contracts. Further, if we fail to comply with applicable privacy laws, including applicable HIPAA privacy and security standards, we could face civil and criminal penalties. HHS enforcement activity can result in financial liability and reputational harm, and responses to such enforcement activity can consume significant internal resources. In addition, state attorneys general are authorized to bring civil actions seeking either injunctions or damages in response to violations that threaten the privacy of state residents. We cannot be sure how these regulations will be interpreted, enforced or applied to our operations. In addition to the risks associated with enforcement activities and potential contractual liabilities, our ongoing efforts to comply with evolving laws and regulations at the federal and state level may be costly and require ongoing modifications to our policies, procedures and systems. There are a broad variety of data protection laws that are applicable to our activities, and a wide range of enforcement agencies at both the state and federal levels that can review companies for privacy and data security concerns based on general consumer protection laws. The Federal Trade Commission, or FTC, and state attorneys general all are aggressive in reviewing privacy and data security protections for consumers. In addition, new laws have been enacted or are considered at both the federal and state levels. As a result, we will need to seek to ensure our business practices comply with evolving rules and guidance at the federal and state level related to privacy and data security in order to mitigate our risk for any potential enforcement action, which may be costly. In addition, if we are subject to an enforcement action and settlement order, we may be required to adhere to very specific privacy and data security practices or pay fines and adhere to specified compliance requirements, all of which could be costly and adversely impact our business. For example, the FTC has been particularly focused on the unpermitted processing of health and genetic data through its recent enforcement actions and is expanding the types of privacy violations that it interprets to be "unfair" under Section 5 of the FTC Act, as well as the types of activities it views to trigger the Health Breach Notification Rule, which the FTC also has the authority to enforce, and is in the process of developing rules related to commercial surveillance and data security. Similarly, in 2018, California passed into law the California Consumer Privacy Act, or the CCPA, which took effect on January 1, 2020 and imposed many requirements on businesses that process the personal information of California residents. Many of the CCPA's requirements are similar to those found in the General Data Protection Regulation, or the GDPR, including requiring businesses to provide notice to data subjects regarding the information collected about them and how such information is used and shared, and providing data subjects the right to request access to such personal information and, in certain cases, request the erasure of such personal information. The CCPA also affords California residents the right to opt-out of "sales" of their personal information. The CCPA contains significant penalties for companies that violate its requirements. In addition, the California Privacy Rights Act, or the CPRA, went into effect on January 1, 2023 and significantly expanded the CCPA to incorporate additional GDPR-like provisions including requiring that the use, retention, and sharing of personal information of California residents be reasonably necessary and proportionate to the purposes of collection or processing, granting additional protections for sensitive personal information, and requiring greater disclosures related to notice to residents regarding retention of information. The CPRA also created the California Privacy Protection Agency, a new enforcement agency whose sole responsibility is to enforce the CPRA. In addition to California, at least 11 other states have passed comprehensive privacy laws similar to the CCPA and CPRA. These laws are either in effect or will go into effect sometime before the end of 2026. Like the CCPA and CPRA, these laws create obligations related to the processing of personal information, as well as special obligations for the processing of "sensitive" data (which includes health data in some cases). Some of the provisions of these laws may apply to our business activities. There are also states that are strongly considering or have already passed comprehensive privacy laws during the 2023 legislative sessions that will go into effect in 2024 and beyond, including New Hampshire and New Jersey. Other states will be considering these laws in the future, and Congress has also been debating passing a federal privacy law. There are also states that are specifically regulating health information that may affect our business. For example, Washington state recently passed a health privacy law that will regulate the collection and sharing of health information,and the law also has a private right of action, which further increases the relevant compliance risk. Connecticut and Nevada have also passed similar laws regulating consumer health data. These laws may impact our business activities, including our identification of research subjects, relationships with business partners and ultimately the marketing and distribution of our products. Similar to the laws in the United States, there are significant privacy and data security laws that apply in Europe and other countries. The collection, use, disclosure, transfer, or other processing of personal data, including personal health data, regarding individuals who are located in the European Economic Area, or the EEA, and the processing of personal data that takes place in the EEA, is regulated by the GDPR, which went into effect in May 2018 and which imposes obligations on companies that operate in our industry with respect to the processing of personal data and the cross-border transfer of such data. The GDPR imposes onerous accountability obligations requiring data controllers and processors to maintain a record of their data processing and policies. If our or our partners' or service providers' privacy or data security measures fail to comply with the GDPR requirements, we may be subject to litigation, regulatory investigations, enforcement notices requiring us to change the way we use personal data and/or fines of up to 20 million Euros or up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher, as well as compensation claims by affected individuals, negative publicity, reputational harm and a potential loss of business and goodwill. The GDPR places restrictions on the cross-border transfer of personal data from the EU to countries that have not been found by the EC to offer adequate data protection legislation, such as the United States. There are ongoing concerns about the ability of companies to transfer personal data from the EU to other countries. In July 2020, the Court of Justice of the European Union, or the CJEU, invalidated the EU-U.S. Privacy Shield, one of the mechanisms used to legitimize the transfer of personal data from the EEA to the United States. The CJEU decision also drew into question the long-term viability of an alternative means of data transfer, the standard contractual clauses, for transfers of personal data from the EEA to the United States. While we were not self-certified under the Privacy Shield, this CJEU decision may lead to increased scrutiny on data transfers from the EEA to the United States generally and increase our costs of compliance with data privacy legislation, as well as our costs of negotiating appropriate privacy and security agreements with our vendors and business partners. Additionally, in October 2022, President Biden signed an executive order to implement the EU-U.S. Data Privacy Framework, which would serve as a replacement to the EU-U.S. Privacy Shield. The EU initiated the process to adopt an adequacy decision for the EU-U.S. Data Privacy Framework in December 2022 and the European Commission adopted the adequacy decision on July 10, 2023. The adequacy decision will permit U.S. companies who self-certify to the EU-U.S. Data Privacy Framework to rely on it as a valid data transfer mechanism for data transfers from the EU to the United States. However, some privacy advocacy groups have already suggested that they will be challenging the EU-U.S. Data Privacy Framework. If these challenges are successful, they may not only impact the EU-U.S. Data Privacy Framework, but also further limit the viability of the standard contractual clauses and other data transfer mechanisms. The uncertainty around this issue has the potential to impact our business at the international level. Furthermore, while the Data Protection Act of 2018 in the United Kingdom that "implements" and complements the GDPR has achieved Royal Assent on May 23, 2018 and is now effective in the United Kingdom, it is still unclear whether transfer of data from the EEA to the United Kingdom will remain lawful under GDPR. The Trade and Cooperation Agreement provides for a transitional period during which the United Kingdom will be treated like a EU member state in relation to processing and transfers of personal data for four months from January 1, 2021. This may be extended by two further months. After such period, the United Kingdom will be a "third country" under the GDPR unless the European Commission adopts an adequacy decision in respect of transfers of personal data to the United Kingdom. The United Kingdom has already determined that it considers all of the EU 27 and EEA member states to be adequate for the purposes of data protection, ensuring that data flows from the United Kingdom to the EU/EEA remain unaffected. Beyond GDPR, there are privacy and data security laws in a growing number of countries around the world. While many loosely follow GDPR as a model, other laws contain different or conflicting provisions. These laws will impact our ability to conduct our business activities, including both our clinical trials and the sale and distribution of commercial products, through increased compliance costs, costs associated with contracting and potential enforcement actions. While we continue to address the implications of the recent changes to data privacy regulations, data privacy remains an evolving landscape at both the domestic and international level, with new regulations coming into effect and continued legal challenges, and our efforts to comply with the evolving data protection rules may be unsuccessful. It is possible that these laws may be interpreted and applied in a manner that is inconsistent with our practices. We must devote significant resources to understanding and complying with this changing landscape. Failure to comply with laws regarding data protection would expose us to risk of enforcement actions taken by data protection authorities in the EEA and elsewhere and carries with it the potential for significant penalties if we are found to be non-compliant. Similarly, failure to comply with federal and state laws in the United States regarding privacy and security of personal information could expose us to penalties under such laws. Any such failure to comply with data protection and privacy laws could result in government-imposed fines or orders requiring that we change our practices, claims for damages or other liabilities, regulatory investigations and enforcement action, litigation and significant costs for remediation, any of which could adversely affect our business. Even if we are not determined to have violated these laws, government investigations into these issues typically require the expenditure of significant resources and generate negative publicity, which could harm our business, financial condition, results of operations or prospects.

We are exposed to the risk of fraud or other misconduct by our employees, independent contractors, CROs, consultants, commercial partners, vendors and, if we commence clinical trials, our principal investigators. Misconduct by these parties could include intentional failures to comply with FDA regulations or the regulations applicable in the EU and other jurisdictions, provide accurate information to the FDA, the EC and other regulatory authorities, comply with healthcare fraud and abuse laws and regulations in the United States and abroad, report financial information or data accurately, or disclose unauthorized activities to us. In particular, sales, marketing and business arrangements in the healthcare industry are subject to extensive laws and regulations intended to prevent fraud, misconduct, kickbacks, self-dealing and other abusive practices. These laws and regulations restrict or prohibit a wide range of pricing, discounting, marketing and promotion, sales commission, customer incentive programs and other business arrangements. Such misconduct also could involve the improper use of information obtained in the course of clinical trials or interactions with the FDA or other regulatory authorities, which could result in regulatory sanctions and cause serious harm to our reputation. Even with appropriate policies and procedures, it is not always possible to identify and deter misconduct, and the precautions we take to detect and prevent such activity may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from government investigations or other actions or lawsuits stemming from a failure to comply with these laws or regulations. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business, financial condition, results of operations and prospects, including the imposition of significant fines or other sanctions.