ARTIVION INC

Previous wording

•Broader exposure to corruption and expanded compliance obligations, including under the Foreign Corrupt Practices Act, the UK Bribery Law, local anti-corruption laws, Office of Foreign Asset Control administered sanction programs, the European Union’s General Data Protection Regulation and Corporate Sustainability Reporting Directive, and other emerging corruption, sustainability, and data privacy regulations;

Current wording

•Broader exposure to corruption and expanded compliance obligations, including under the Foreign Corrupt Practices Act, the UK Bribery Law, local anti-corruption laws, Office of Foreign Asset Control administered sanction programs, the European Union’s General Data Protection Regulation and Corporate Sustainability Reporting Directive, and other emerging corruption, sustainability, and data privacy and cybersecurity regulations;

Previous wording

As an example of this risk, via a Ministerial Decree of July 6, 2022, published September 15, 2022, the Italian government stated that the spending ceiling for medical devices at the national and regional levels had been exceeded, requiring medical device companies to pay back alleged overpayments the government claims companies received between 2015 and 2018. Currently, Artivion’s repayment exposure for this period is estimated at approximately €400,000, which is subject to change as judicial challenges and negotiations between us, industry, US government representatives, and the Italian government are ongoing.

Current wording

As an example of this risk, via a Ministerial Decree of July 6, 2022, published September 15, 2022, the Italian government stated that the spending ceiling for medical devices at the national and regional levels had been exceeded, requiring medical device companies to pay back alleged overpayments the government claims companies received between 2015 and 2018. Currently, Artivion’s repayment exposure for this period is estimated at approximately €215,000, which is subject to change as judicial challenges and negotiations between us, industry, US government representatives, and the Italian government are ongoing.

Previous wording

In addition, US and foreign governmental authorities have adopted laws and regulations that restrict tissue preservation services. Any of these laws or regulations could change, including becoming more restrictive, or our interpretation of them could be challenged by governmental authorities.

Current wording

In addition, US and foreign governmental authorities have adopted laws and regulations that restrict tissue preservation services and the avenues available to distribute processed tissues. Any of these laws or regulations could change, including becoming more restrictive, or our interpretation of them could be challenged by governmental authorities.

Previous wording

•If acquisition consideration consists of earn-outs, our earnings may be affected by changes in estimates of future contingent consideration; or

Current wording

•If acquisition consideration consists of earnouts, our earnings may be affected by changes in estimates of future contingent consideration; or

Previous wording

As an example of this risk, we fully impaired the value of a securities purchase option agreement with Endospan (“Endospan Option”)and fully wrote-down the value of an agreement for a secured loan from Artivion to Endospan (“Endospan Loan”), primarily driven by a decrease in forecasted operating results. This impairment, and other potential risks like those mentioned above, may adversely affect the market value of our common stock.

Current wording

As an example of this risk, we fully impaired the value of our original securities purchase option agreement with Endospan (“Endospan Option”)and fully wrote-down the value of our original agreement for a secured loan from Artivion to Endospan (“Endospan Loan”), primarily driven by a decrease in forecasted operating results. This impairment, and other potential risks like those mentioned above, may adversely affect the market value of our common stock.

Previous wording

•Our Existing CE Marks: The extended timeline for the MDR transition has resulted in certain MDD-based CE Marks expiring prior to the completion of the transition. Our MDD-based CE Mark for BioGlue expired in December 2021, and for Chord-X in September 2022. Although we were able to successfully renew our BioGlue CE Mark, our renewal for Chord-X remains outstanding;

Current wording

•Our Existing CE Marks: The extended timeline for the MDR transition has resulted in certain MDD-based CE Marks expiring prior to the completion of the transition. Our MDD-based CE Mark for BioGlue expired in December 2021, and for Chord-X in September 2022. Although we were able to successfully gain CE Mark for BioGlue under the MDR, certification for Chord-X remains outstanding;

Previous wording

While we continue to make progress on the MDR transition, the transition to new notified bodies, and the renewal of expired CE Marks, failure to timely complete any transfers or renewals, or to comply with transition to a newly designated UK Approved Body in the UK, or further delays in the MDR transition as a whole, may have a material, adverse effect on our ability to supply product in certain jurisdictions, have a material, adverse impact on our business, and may also impact our Medical Device Single Audit Program (“MDSAP”) certifications. Failure to timely obtain new MDSAP certifications following their expiration may impact our ability to distribute covered products in Australia, Brazil, Canada, and Japan.

Current wording

While we continue to make progress on the MDR transition, the transition to new notified bodies, and the renewal of expired CE Marks, failure to timely complete any transfers or renewals, or to comply with transition to a newly designated UK Approved Body, or further delays in the MDR transition as a whole, may have a material, adverse effect on our ability to supply product in certain jurisdictions, have a material, adverse impact on our business, and may also impact our Medical Device Single Audit Program (“MDSAP”) certifications. Failure to timely obtain new MDSAP certifications following their expiration may impact our ability to distribute covered products in Australia, Brazil, Canada, and Japan.

Previous wording

Our relationships with physicians, hospitals, and other healthcare providers are subject to scrutiny under various US and international bribery, anti-kickback, false claims, privacy, transparency, and similar laws, often referred to collectively as “healthcare compliance laws.” Healthcare compliance laws are broad, sometimes ambiguous, complex, and subject to change and changing interpretations. The ongoing wars in Ukraine and Gaza, and the current and future sanctions imposed on Russia and others as a result may exacerbate these risks. See also Part I, Item 1A, “Risk Factors – Business and Economic Risks - We are subject to a variety of risks due to our international operations and continued global expansion.” Possible sanctions for violation of these healthcare compliance laws include fines, civil and criminal penalties, exclusion from government healthcare programs, and despite our compliance efforts, we face the risk of an enforcement activity or a finding of a violation of these laws.

Current wording

Our relationships with physicians, hospitals, government officials, healthcare providers, and others are subject to scrutiny under various US and international bribery, anti-kickback, false claims, privacy, transparency, and similar laws, often referred to collectively as “healthcare compliance laws.” Healthcare compliance laws are broad, sometimes ambiguous, counterintuitive, complex, and subject to change and changing interpretations. Our global expansion into higher-risk regions and the ongoing wars in Ukraine and Gaza, and the current and future sanctions imposed on Russia and others as a result may exacerbate these risks. See also Part I, Item 1A, “Risk Factors – Business and Economic Risks - We are subject to a variety of risks due to our international operations and continued global expansion.” Possible sanctions for violation of these healthcare compliance laws include fines, civil and criminal penalties, exclusion from government healthcare programs, and despite our compliance efforts, we face the risk of an enforcement activity or a finding of a violation of these laws.

Previous wording

We have entered into consulting and product development agreements with healthcare professionals and healthcare organizations, including some who may order our products or make decisions to use them. We have also adopted the AdvaMed Code of Conduct, the MedTech Europe Code of Ethical Business Practice, and the APACMed Code of Ethical Conduct which govern our relationships with healthcare professionals to bolster our compliance with healthcare compliance laws. While our relationships with healthcare professionals and organizations are structured to comply with such laws and we conduct training sessions on these laws and codes, it is possible that enforcement authorities may view our relationships as prohibited arrangements that must be restructured or for which we would be subject to other significant civil or criminal penalties or debarment. In any event, any enforcement review of or action against us as a result of such review, regardless of outcome, could be costly and time consuming. Additionally, we cannot predict the impact of any changes in or interpretations of these laws, whether these changes will be retroactive or will have effect on a going-forward basis only.

Current wording

We have entered into consulting and product development agreements with healthcare professionals and healthcare organizations, including some who may order our products or make decisions to use them. We have also adopted the AdvaMed Code of Conduct, the MedTech Europe Code of Ethical Business Practice, and the APACMed Code of Ethical Conduct which govern our relationships with healthcare professionals to bolster our compliance with healthcare compliance laws. While our relationships with healthcare professionals, government officials, and organizations are structured to comply with such laws and we conduct training sessions on these laws and codes, it is possible that enforcement authorities may view our relationships as prohibited arrangements that must be restructured or for which we would be subject to other significant civil or criminal penalties or debarment. In any event, any enforcement review of or action against us as a result of such review, regardless of outcome, could be costly and time consuming. Additionally, we cannot predict the impact of any changes in or interpretations of these laws, whether these changes will be retroactive or will have effect on a going-forward basis only.

Previous wording

An increasing number of federal, state, and foreign laws and regulations and regulations are being promulgated to address topics relating to data privacy, sustainability, and artificial intelligence. These regulations some of which can be enforced by private parties or governmental entities, have been or are being promulgated and are constantly evolving. These laws and regulations may include new compliance or disclosure requirements for companies which increases our operating costs and requires significant management time and energy. Many of these laws and regulations, including the European Union’s General Data Protection Regulation (“GDPR”) also include significant penalties for noncompliance. Although our practices, policies, and procedures are intended to comply with relevant laws and regulations, there can be no assurance that regulatory or enforcement authorities will view our arrangements as being in compliance with all applicable laws, or that one or more of our employees or agents will not disregard aspects of our compliance programs. Any resulting government enforcement activities may be costly, result in negative publicity, or subject us to significant penalties.

Current wording

An increasing number of federal, state, and foreign laws and regulations are being promulgated to address topics relating to data privacy, sustainability, and artificial intelligence. These regulations some of which can be enforced by private parties or governmental entities, have been or are being promulgated and are constantly evolving. These laws and regulations may include new compliance or disclosure requirements for companies which increases our operating costs and requires significant management time and energy. Many of these laws and regulations, including the European Union’s General Data Protection Regulation (“GDPR”) also include significant penalties for noncompliance. Although our practices, policies, and procedures are intended to comply with relevant laws and regulations, there can be no assurance that regulatory or enforcement authorities will view our arrangements as being in compliance with all applicable laws, or that one or more of our employees or agents will not disregard aspects of our compliance programs. Any resulting government enforcement activities may be costly, result in negative publicity, or subject us to significant penalties.