ATOSSA THERAPEUTICS INC

Overview

We are a clinical-stage biopharmaceutical company developing proprietary innovative medicines in areas of significant unmet medical need in oncology with a focus on women’s breast cancer and other breast conditions. Our lead drug candidate under development is oral (Z)-endoxifen, which we are developing for both the prevention and treatment of breast cancer.

Our business strategy is to advance our programs through clinical studies, including potentially with partners, and opportunistically add programs in areas of high unmet medical need through acquisition, minority investment, collaboration or internal development.

(Z)-endoxifen is an active metabolite of tamoxifen, which is an FDA-approved drug to treat and prevent breast cancer. Tamoxifen is a “pro-drug,” in that it must be metabolized into active components (“metabolites”) to be effective. Despite the success of tamoxifen in treating ER+ breast cancer, its systemic side effects have led to generally low acceptance as a therapy to reduce the risk of breast cancer. These systemic side effects relate to estrogen agonist activity on the endometrium and the activation of coagulation pathways, leading to an increased risk of uterine events and thromboembolism. Hot flashes and vaginal symptoms are additional barriers to tamoxifen being accepted in the prevention setting.

Other limiting aspects of tamoxifen are that some people lack liver enzymes to adequately metabolize it and it can take a long time for many patients to reach therapeutic levels. Up to 50% of breast cancer survivors who take tamoxifen do not achieve therapeutic (Z)-endoxifen levels (meaning they are “refractory”) for a number of reasons, including that they, due to their genotype, do not have the requisite liver enzymes. We believe our proprietary oral (Z)-endoxifen, in part because it is not a pro-drug and does not need to be metabolized by the liver, and may overcome some of the shortcomings of tamoxifen.

(Z)-endoxifen is a proprietary, novel Selective Estrogen Receptor Modulator (SERM); which is a class of drugs that blocks estrogen from connecting with breast cancer cells, with the intent of keeping the cells from multiplying. We are developing oral (Z)-endoxifen for the potential prevention and treatment of breast cancer. We have completed four Phase 1 clinical studies (including a study in men) and two Phase 2 clinical studies with our proprietary (Z)-endoxifen (including oral and topical formulations). We have also developed clinical manufacturing capabilities through qualified third parties.

Summary of Leading Programs

(Z)-endoxifen is currently being investigated in four ongoing Phase 2 trials:

EVANGELINE. A Phase 2 randomized study of (Z)-endoxifen as a neoadjuvant treatment for pre-menopausal women with ER+ / Human Epidermal Growth Factor Receptor 2 negative (HER2-) breast cancer. The EVANGELINE study is expected to enroll 180 patients at sites across the U.S.

The EVANGELINE study began enrolling patients in February 2023 as part of a 40mg pharmacokinetic (PK) run-in cohort to assess whether 40mg/day achieved plasma concentrations to optimally target protein kinase C beta (PKC-β) inhibition. The treatment was well tolerated and showed encouraging efficacy but did not reach the desired steady state plasma concentrations. Per the study protocol, an 80mg PK cohort run-in was initiated.

Targeting PKC-β could potentially further enhance (Z)-endoxifen’s antitumor mechanism of action. The opportunity is to induce apoptosis, which is programmed cell death where the malignant cells die. Apoptosis is the cellular equivalent of a self-destruct button and would be expected to lead to increased response rates evidenced by reduction or elimination of tumor lesions.

Karisma-Endoxifen.. A Phase 2 study investigating (Z)-endoxifen in premenopausal women with measurable breast density (MBD). Participants in the study are randomized into one of three cohorts to receive a placebo, or 1mg or 2mg of (Z)-endoxifen daily for six months. Mammograms are conducted to measure reduction in breast density over the treatment period and a final mammogram will be conducted at 24 months to assess the durability of density changes. The study fully enrolled in November 2023, and we expect primary data in the second half of 2024.

Almost half of the women in the world over the age of 40 have dense breasts and there are currently no approved treatments to reduce breast density. Elevated breast density can make a mammogram more difficult to interpret because dense breast tissue and some abnormal breast changes, such as calcifications and tumors, both which appear as white areas in the mammogram. In women with the highest density, approximately 50% of breast cancers are missed on a mammogram and diagnosed in the interval between two screening rounds. These are known as “interval cancers,” which are often larger, more advanced, and more difficult to treat. Additionally, women with the highest density are four to six times more likely to develop breast cancer in their lifetime compared to women with the least dense breasts.

As of September 10, 2024, the U.S. Food and Drug Administration (FDA) will require mammogram providers to notify patients about the density of their breasts. The notification for patients with dense breasts will include a warning that dense tissue makes it harder to find breast cancer on a mammogram and raises their risk of developing breast cancer. It will also encourage women with dense breast tissue to discuss the findings with their healthcare provider.

Based on input received in March 2020 from the FDA and Swedish Medical Products Agency, reduction in MBD may not be an approvable indication unless we can demonstrate that (Z)-endoxifen also reduces the incidence of breast cancer. We may therefore conduct additional studies of (Z)-endoxifen to assess its correlation with the risk of breast cancer and/or reduction in the incidence of new breast cancers.

I-SPY 2. A Phase 2 trial investigating (Z)-endoxifen in the neoadjuvant treatment setting, which is the window of time between a diagnosis and the primary treatment. The intent of neoadjuvant therapy is to slow the growth of the cancer or even shrink the cancer prior to surgery. Doing this helps surgery to be more effective and could alter the surgical approach; meaning some breast cancer patients could have a lumpectomy instead of a mastectomy. Neoadjuvant therapy has also been shown to reduce the likelihood that the cancer returns.

The I-Spy 2 trial is being conducted through a partnership with Quantum Leap Healthcare Collaborative, which was established in 2005 by medical researchers at University of California, San Francisco and Silicon Valley entrepreneurs to speed the development of innovative breast cancer therapies like (Z)-endoxifen. The platform trial is enrolling patients with newly diagnosed estrogen receptor-positive (ER+) invasive breast cancer. Participants in the (Z)-endoxifen arm are treated with 10mg daily for up to 24 weeks prior to surgery. Efficacy measures include reduction in Ki-67, a marker for tumor cell proliferation, and objective response rate as measured by MRI. The (Z)-endoxifen treatment cohort of 20 participants completed full enrollment in the first quarter of 2024 with data expected in the second half of 2024.

RECAST DCIS. A Phase 2 platform study investigating (Z)-endoxifen in women diagnosed with Ductal Carcinoma In Situ (DCIS). The goal of the study, which was initiated in October 2023, is to prevent the progression of DCIS to breast cancer. Participants receive six months of treatment with a 10 mg oral dose of (Z)-endoxifen daily with the intent of determining their suitability for long-term active surveillance without surgery. On February 22, 2024, the first patient was dosed with Atossa's proprietary SERM (Z)-endoxifen.

DCIS is the presence of abnormal cells inside a milk duct in the breast. It is considered to be the earliest form of breast cancer and is noninvasive, meaning it has not spread beyond the milk duct. DCIS is usually found during a mammogram done as part of breast cancer screening or to investigate a breast lump. There are approximately 63,000 DCIS diagnoses made each year in the United States alone.

Currently, there is no way to predict which patients diagnosed with DCIS will progress to invasive breast cancer. As a result, aggressive local therapy, identical to the way invasive breast cancer is treated, is the current standard of care. For most patients, this involves mastectomy or lumpectomy, radiation, and hormone therapy for five years. If treatment with (Z)-endoxifen can effectively halt the progression of DCIS, it would potentially spare a significant percentage of patients diagnosed with this disease from aggressive, invasive, or potentially unnecessary treatment.

Other Programs; Immunotherapy/CAR-T Programs

Other Program. On July 6, 2023, Atossa announced a strategic, sponsored research agreement with Weill Cornell Medicine to study the potential of inducing estrogen receptor expression in triple-negative breast cancer (TNBC). The goal of the research is to determine if treating TNBC with extracellular vesicles carrying the estrogen receptor can change the cancer phenotype and turn on the estrogen receptor. Converting the tumor to ER+ would make it sensitive to hormone therapy, including treatment with (Z)-endoxifen. This could potentially fundamentally transform the treatment approach and outlook for patients diagnosed with TNBC.

Investment in CAR-T Company. On December 23, 2022, we closed our investment in DCT, a privately-held, venture-capital backed, developer of CAR-T therapies. DCT is in the pre-clinical phase of developing controllable CAR-T cells to address difficult-to-treat cancers. Its platform technology of dynamic control of engineered T-cells is designed to improve the safety, efficacy, and durability of CAR-T cell therapies. While its initial focus is hematologic malignancies, it's possible that its innovative approach could also have broad applicability in solid tumors and autoimmune diseases.

Much of the recent successes in the field of chimeric antigen receptor therapy, or CAR-T, has relied on the systemic delivery (for example, a needle injection into the blood stream) of the CAR-T which is intended to treat various non-solid tumor cancers, such as blood cancers. One concern with this systemic approach is that it does not target the location of the cancer and it can have adverse effects, including deadly “cytokine storms.” Moreover, CAR-T treatments delivered systemically can be as high as $500,000 per patient.

We have filed patent applications on a novel method to deliver CAR-T cells or other types of immunotherapy into the milk ducts of the breast, the location where most breast cancers originate for the potential targeted treatment of breast cancer. This approach uses targeted intraductal delivery of either T-cells that have been genetically modified to attack breast cancer cells or various other immune-therapies. We believe this intraductal method has several potential advantages, including the reduction of toxicity by limiting systemic exposure of the T-cells or immunotherapy; improved efficacy by placing the T-cells or immunotherapy in direct contact with the target ductal epithelial cells that are undergoing or have undergone malignant transformation; and, lymphatic migration of the

CAR-T cells or immunotherapy potentially extending their cytotoxic actions into the regional lymph system, which could limit tumor cell dissemination or metastasis. Moreover, our approach may be more cost effective if lower doses of therapy can be delivered compared to systemic CAR-T. We have not begun, and may not be successful in completing, pre-clinical and clinical studies of our CAR-T technology.

Markets

Potential Market Opportunities

We believe that, based in part on a study by Defined Health Inc. (now Lumanity), a leading market research firm, the potential U.S. market for our (Z)-endoxifen in the breast cancer treatment and prevention settings is up to $1 billion annually. The American Cancer Society (ACS) estimates that in the U.S. in 2024, 310,720 women will be diagnosed with breast cancer and one in eight women will be diagnosed in their lifetime. Approximately 80% of breast cancers diagnosed are ER+.

Our Capital Resources

We have not yet established an ongoing source of revenue sufficient to cover our operating costs and allow us to continue as a going concern. Our ability to continue as a going concern is dependent on obtaining adequate capital to fund operating losses until we become profitable. We plan to obtain additional capital resources by selling our equity securities and borrowing from stockholders or others when needed. However, we cannot assure you that we will be successful in accomplishing any of these plans and, if we are unable to obtain adequate capital, we could be forced to curtail or suspend our business plans. We do not anticipate any revenue until our pharmaceutical programs are developed, including receipt of all necessary regulatory approvals, and we successfully commercialize these programs.

As of December 31, 2023, we had cash and cash equivalents of approximately $88.5 million.

Potential Uses of Capital Resources

We intend to use our capital resources to execute on our business plan, which may include acquiring or in-licensing additional programs. We may also use our capital resources to invest directly or indirectly in business opportunities in healthcare or other industries including through purchases of equity in other companies. These investments may include investing in special purpose acquisition companies either as a sponsor or as an equity investor. Our business plan may evolve to require more capital resources than currently contemplated either because our existing programs progress more quickly or at a greater cost than currently anticipated or because we may add additional programs.

Research and Development Phase

We are in the research and development phase and are not currently marketing any products or services. We do not anticipate generating revenue unless and until we develop and launch our pharmaceutical programs.

Research and development (R&D) costs are generally expensed as incurred. R&D expenses include, for example, manufacturing expense for our drugs under development, expenses associated with clinical trials and associated salaries and benefits. We have entered into various research and development contracts with research institutions, clinical research organizations, clinical manufacturing organizations and other companies. Payments for these activities are based on the terms of the individual agreements, which may differ from the pattern of costs incurred, and payments made in advance of performance are reflected in the accompanying Consolidated Balance Sheets as prepaid expenses. We accrue for estimated costs incurred for ongoing research and development activities. When evaluating the adequacy of the accrued expenses, we analyze the progress of the services, including the phase or completion of events, invoices received and contracted costs. Significant judgments and estimates may be made in determining the prepaid expense or accrued expense balances at the end of any reporting period. Actual results could differ from our estimates.

R&D expenses also include an allocation of the CEO's salary and related benefits, including bonus and non-cash stock-based compensation expense based on an estimate of total hours expended on research and development activities. Our CEO is involved in the development of the Company's drug candidates and oversight of the related clinical trial activity.

Research and development expenses for the years ended December 31, 2023 and 2022 were approximately $17.3 million and $15.1 million, respectively.

Intellectual Property

Intellectual property is important to our business and our future income streams will depend, in part, on our ability to obtain and maintain patents. We strive to protect our proprietary technology and innovations that we consider commercially valuable with respect to the development of our business, including by pursuing, maintaining, and defending certain of our U.S. and international patent rights that we have identified as material to our business. We also rely on trade secrets, know-how, continuing technological innovation and licensing of intellectual property from third parties as needed to support and strengthen our position in the field.

Our future commercial success depends, in part, on our ability to obtain and maintain patent and other proprietary protection for our commercially relevant technology, inventions, and know-how related to our business as well as our ability to defend and enforce our intellectual property rights, preserve the confidentiality of our trade secrets, and operate without infringing, misappropriating, or violating the valid and enforceable patents, issued patents and other proprietary rights of third parties.

We own patents directed to (Z)-endoxifen and other therapies as well as patent applications directed to (Z)-endoxifen, immunotherapies such as CAR-T therapies, and other therapies. We commonly seek patent claims directed to compositions of matter, including for (Z)-endoxifen, as well as methods of making and using such compositions. For each of our product candidates, we have filed multiple patent applications and expect to file additional patent applications. As of February 2, 2024, based on a review of our patent portfolio, we own and maintain 11 issued patents (four U.S. patents and seven international patents) and are pursuing 68 pending patent applications (22 U.S. patent applications and 46 international patent applications) directed to our (Z)-endoxifen therapies, immunotherapies such as CAR-T therapies, and other therapies. We continue to evaluate our patent portfolio on an ongoing basis and are no longer pursuing or maintaining patents, patent applications, or technologies that we have determined are no longer core to our business as a result of evolving business goals.

As of February 2, 2024, the following are the estimated number of patents we own related to our programs that we are currently pursuing.

Each patent application includes at least one claim or disclosure directed to a listed therapeutic/program.

The patent counts in the table above may differ from the total numbers of the patent applications in our portfolio as the patent counts in the table above reflect that a patent application may have claims directed to more than one type of therapeutic/program.

The patent counts and the estimated expiration dates disclosed herein and in our patent estate are subject to change, for example, in the event of changes in the law, post-grant patent challenges, or legal rulings affecting our patents and applications or if we become aware of new information or amend our business goals. The standards that the U.S. Patent and Trademark Office, or USPTO, and foreign patent offices use to grant patents are not always applied predictably or uniformly and can change. Consequently, our pending patent applications may not be allowed and, if allowed, may not contain the type and extent of patent claims that would be adequate to conduct our current or anticipated business. Additionally, any issued patents we currently own or may obtain in the future may have a shorter patent term than expected, may be invalidated or may not contain claims that will permit us to stop competitors from using our technology or methods or similar technology or methods or from copying our products. Finally, if certain patents issued to others are upheld, or if certain patent applications filed by others are issued and upheld, we would likely require additional licenses to continue to develop and commercialize relevant products. Furthermore, there can be no assurance that such licenses, if required, would be available on acceptable or commercially reasonable terms. Our inability to obtain third-party licenses may adversely affect our ability to operate our business and to achieve our revenue goals.

Manufacturing, Clinical Studies and Associated Operations

Our drug development strategy utilizes third-party contractors for the procurement and manufacture, as applicable, of raw materials, active pharmaceutical ingredients and finished drug products, as well as for storage, and distribution of our products and associated supply chain operations. We also rely on third-parties to conduct nonclinical and clinical studies of our drugs under development. As our development programs advance, we expect that our manufacturing, pre-clinical and clinical studies, and related operational requirements will correspondingly increase. We require that each third-party contractor is qualified by Atossa subject matter experts prior to signing any service agreement and initiating any third-party work.

Integral to our development strategy is our quality program, which includes standard operating procedures and specifications with the goal that our work complies with Good Clinical Practices (GCP), Good Laboratory Practices (GLP) and Current Good Manufacturing Practices (cGMP), and other applicable global regulations, when appropriate. We expect and confirm that selected service providers meet or exceed our expectations for compliance with these standards in providing services and products that meet our requirements.

We believe our operational strategy of utilizing qualified contractors and suppliers in the foregoing manner allows us to direct our financial and managerial resources to research and development and commercialization activities, rather than to the establishment and maintenance of manufacturing and clinical infrastructure.

Government Regulation

Drug Regulations

We are subject to extensive regulation by the FDA and other federal, state, and local regulatory agencies. The Federal Food, Drug, and Cosmetic Act, or the FDCA, and its implementing regulations set forth, among other things, regulations for the execution of clinical studies, and the requirements for the testing, development, manufacture, quality control, safety, effectiveness, approval, labeling, storage, record keeping, reporting, distribution, import, export, advertising and promotion of our products. Our activities in other countries will be subject to regulation that is similar in nature and scope as that imposed in the U.S., although there can be important differences. Additionally, some significant aspects of regulation in the E.U. are addressed in a centralized procedure through the Europe Medicines Agency (EMA) and the European Commission, but country-specific regulation by the competent authorities of the E.U. member states remain essential in many respects. Also see the “Non-U.S. Regulation” section below in connection with the position in the United Kingdom (UK).

U.S. Regulations

In the U.S., the FDA regulates drugs under the FDCA and its implementing regulations, through review and ultimately approval of the New Drug Applications (NDAs). NDAs require extensive studies and submission of a large amount of data by the applicant, which is an amalgamation of data obtained under Investigational New Drug Applications (INDs) and other supporting available information. For a discussion of U.S. privacy laws, see “Privacy and Security of Health Information and Personal Information; Standard Transactions” below.

Drug Development

Nonclinical Testing. Before testing any compound in human subjects in the U.S., extensive nonclinical data are required. Nonclinical testing generally consists of safety, toxicology and pharmacology studies in animals. Many of these studies must be performed in compliance with the FDA’s GLP regulations and the U.S. Department of Agriculture’s Animal Welfare Act.

IND Application. In nearly all cases, human clinical trials in the U.S. cannot commence until an IND is submitted to the FDA for review and a “Safe to Proceed” letter has been provided to the sponsor. The sponsor must prepare a dossier of information that includes the results of nonclinical studies; detailed drug manufacturing information and test results; and proposed clinical studies, design and development strategy. The FDA then evaluates if there is an adequate basis for testing the drug in an initial (human) clinical study. Unless the FDA raises concerns, the IND application becomes effective 30 days following its receipt by the FDA at which time written notification is provided. Once human clinical trials have commenced, the sponsor is obligated to report serious side and unexpected effects to the FDA. The FDA may suspend a clinical trial by placing it on “clinical hold” if the FDA has concerns about the safety of the product being tested, subject risks, investigator actions, related product information or for other reasons.

Clinical Trials. Clinical trials involve the administration of the drug to healthy human volunteers or to patients, under the supervision of a qualified investigator according to a vetted and approved protocol.

The conduct of clinical trials is subject to extensive regulation, including compliance with the FDA’s bioresearch monitoring regulations and GCP requirements, which establish standards for conducting, recording data from and reporting the results of, clinical trials, and are intended to assure that the data and reported results are credible and accurate, and that the rights, safety, and well-being of study participants are protected. Clinical trials must be conducted under written and approved protocols that detail the study objectives, parameters for monitoring safety, and the efficacy criteria, if any, to be evaluated. Each protocol is reviewed by the FDA as part of the IND application. In addition, each clinical trial must be reviewed, approved, and conducted under the auspices of an institutional review board, or IRB. Companies sponsoring the clinical trials, investigators, and IRBs also must comply with regulations and guidelines for obtaining informed consent from the study subjects, complying with the protocol and investigational plan, adequately monitoring the clinical trial and timely reporting adverse events. Foreign studies conducted under an IND application must meet the same requirements that apply to studies being conducted in the U.S. Data from a foreign study not conducted under an IND application may be submitted in support of an NDA if the study was conducted in accordance with GCP and the FDA is able to validate the data from the study through an onsite inspection if it deems such inspection necessary.

A study sponsor is required to submit certain details about applicable active clinical trials and clinical trial results to the National Institutes of Health for public posting onhttp://clinicaltrials.gov. Human clinical trials are typically conducted in three sequential phases, although the phases may overlap with one another:

•

Phase 1clinical trials include the initial administration of the investigational drug to humans, typically to a small group of healthy human subjects, but occasionally to a group of patients with the targeted disease or disorder. Phase 1 clinical trials generally are intended to determine the metabolism and pharmacologic actions of the drug, the side effects associated with increasing doses, and, if possible, to gain early evidence of effectiveness.

•

Phase 2 clinical trials generally are controlled studies that involve a relatively small sample of the intended patient population and are designed to develop data regarding the product’s effectiveness, to determine dose response and the optimal dose range and to gather additional information relating to safety and potential adverse effects.

•

Phase 3 clinical trials are conducted after preliminary evidence of effectiveness has been obtained and are intended to gather the additional information about safety and effectiveness necessary to evaluate the drug’s overall risk-benefit profile, and to provide a basis for physician labeling. Generally, Phase 3 clinical development programs consist of expanded, large-scale studies of patients with the target disease or disorder to obtain statistical evidence of the efficacy and safety of the drug, or the safety, purity, and potency of a biological product, at the proposed dosing regimen.

The sponsoring company, the FDA or the IRB may suspend or terminate a clinical trial at any time on various grounds, including a finding that the subjects are being exposed to an unacceptable health risk. Further, success in early-stage clinical trials does not assure success in later-stage clinical trials. Data obtained from clinical activities are not always conclusive and may be subject to alternative interpretations that could delay, limit, or prevent regulatory approval.

There are regulatory pathways that can accelerate the speed with which a product can be developed, including a Special Protocol Assessment (SPA), break-through therapy designation, among others. The designations are obtained from the FDA on a case-by-case basis and do not guarantee the ultimate approval of a product for commercialization.

Drug Approval

Assuming successful completion of the required clinical testing, the results of the preclinical studies and of the clinical trials, together with other detailed information, including information on the manufacture and composition of the investigational product, are submitted to the FDA in the form of an NDA requesting approval to market the product for one or more indications. The testing and approval process requires substantial time, effort and financial resources. Submission of an NDA requires payment of a review user fee to the FDA, which will be $4.0 million for fiscal year 2024. The FDA will review the application and may deem it to be inadequate to support commercial marketing, and there can be no assurance that any product approval will be granted on a timely basis, if at all. The FDA may also seek the advice of an advisory committee, typically a panel of clinicians practicing in the field for which the product is intended, for review, evaluation and a recommendation as to whether the application should be approved. The FDA is not bound by the recommendations of the advisory committee.

In addition, the Pediatric Research Equity Act (“PREA”) requires a sponsor to conduct pediatric clinical trials for most drugs, including for a new active ingredient, new indication, new dosage form, new dosing regimen or new route of administration. Under PREA, original NDAs and supplements thereto must contain a pediatric assessment unless the sponsor has received a deferral or waiver. The required assessment must evaluate the safety and effectiveness of the product for the claimed indications in all relevant pediatric subpopulations and support dosing and administration for each pediatric subpopulation for which the product is safe and effective. The sponsor or FDA may request a deferral of pediatric clinical trials for some or all of the pediatric subpopulations. A deferral may be granted for several reasons, including a finding that the drug is ready for approval for use in adults before pediatric clinical trials are complete or that additional safety or effectiveness data needs to be collected before the pediatric clinical trials begin.

The FDA has various programs, including break-through therapy, fast track, priority review and accelerated approval that are intended to expedite or simplify the process for reviewing drugs and/or provide for approval on the basis of surrogate endpoints. Generally, drugs that may be eligible for one or more of these programs are those for serious or life-threatening conditions, those with the potential to address unmet medical needs and those that provide meaningful benefit over existing treatments. We cannot be sure that any of our drugs will qualify for any of these programs, or that, if a drug does qualify, the review time will be reduced, or the product will be approved.

Before approving an NDA, the FDA usually inspects the clinical sites with the greatest accrual to confirm the veracity of the clinical data, execution of the clinical study and protection of patient safety. The FDA will inspect the facility or the facilities where the product is manufactured, tested and distributed. Approval is not granted if these inspections raise concerns about the execution of the clinical studies or there is a lack of cGMP compliance. If the FDA evaluates the NDA and determines the clinical trial execution and manufacturing facilities as acceptable, the FDA may issue an approval letter. If the NDA is not approved, the FDA issues a complete response letter which is only issued for applications that are not approved. The approval letter authorizes commercial marketing of the drug for specific indications. As a condition of approval, the FDA may require post-marketing testing and surveillance to monitor the product’s safety or efficacy or impose other post-approval commitment conditions.

In some circumstances, post-marketing testing may include post-approval clinical trials, sometimes referred to as Phase 4 clinical trials, which are used primarily to gain additional experience from the treatment of patients in the intended population, particularly for long-term safety follow-up. In addition, the FDA may require a Risk Evaluation and Mitigation Strategy, or REMS, to ensure that the benefits outweigh the risks. A REMS can include medication guides, physician communication plans and elements to assure safe use, such as restricted distribution methods, patient registries or other risk mitigation tools.

After approval, certain changes to the approved product, such as adding new indications, making certain manufacturing changes or making certain additional labeling claims, are subject to further FDA review and approval. Obtaining approval for a new indication generally requires that additional clinical trials be conducted.

Post-Approval Requirements

Holders of an approved NDA are required to, among other things: (i) report certain adverse reactions to the FDA; (ii) comply with certain requirements concerning advertising and promotional labeling for their products; and (iii) continue to have cGMP compliance and all aspects of product manufacturing in a “state of control.” The FDA periodically inspects the sponsor’s records related to safety reporting and/or manufacturing and distribution facilities; this latter effort includes assessment of compliance with cGMP. Accordingly, manufacturers must continue to expend time, money and effort in the area of production, quality control and distribution to maintain cGMP compliance. Future FDA inspections may identify compliance issues at manufacturing facilities that may disrupt production or distribution or require substantial resources to correct. In addition, discovery of problems with a product after approval may result in restrictions on a product, manufacturer or holder of an approved NDA, including withdrawal of the product from the market.

Post-approval modifications to the drug product candidate, such as changes in indications, labeling or manufacturing processes or facilities, may require a sponsor to develop additional data or conduct additional preclinical or clinical trials, to be submitted in a new or supplemental NDA, which would require FDA approval.

Marketing of prescription drugs is also subject to significant regulation through federal and state agencies tasked with consumer protection and prevention of medical fraud, waste and abuse. After approval in the U.S., we must comply with FDA’s regulation of drug promotion and advertising, including restrictions on off-label promotion, and comply with federal anti-kickback statutes, limitations on gifts and payments to physicians and reporting of payments to certain third-parties, among other requirements.

Failure to comply with applicable U.S. requirements may subject us to administrative or judicial sanctions, such as clinical holds, FDA refusal to approve pending NDAs or supplemental applications, warning letters, product recalls, product seizures, total or partial suspension of production or distribution, injunctions and/or criminal prosecution.

Non-U.S. Regulation

Before our products can be marketed outside of the U.S., they are subject to regulatory approval similar to that required in the U.S., although the requirements governing the conduct of clinical trials, including additional clinical trials that may be required, product licensing, pricing and reimbursement vary widely from country to country. No action can be taken to market any product in a country until an appropriate application has been approved by the regulatory authorities in that country. The current approval process varies from country to country, and the time spent in gaining approval varies from that required for FDA approval. In certain countries, the sales price of a product must also be approved. The pricing review period often begins after market approval is granted. Even if a product is approved by a regulatory authority, satisfactory prices may not be approved for such product.

Drug Marketing Authorization. In the E.U., which includes Sweden where our (Z)-endoxifen breast density study is being conducted, and in Iceland, Norway and Liechtenstein (together, the European Economic Area or EEA), after completion of all required clinical testing, medicinal products may only be placed on the market after obtaining a Marketing Authorization (MA). To obtain a MA of a drug under European Union regulatory systems, an applicant can submit a Marketing Authorization Application (MAA), through, amongst others, a centralized or decentralized procedure.

Centralized Authorization Procedure. In the E.U., marketing authorizations for medicinal products can be obtained through several different procedures founded on the same basic regulatory process. The centralized procedure provides for the grant of a single MA that is issued by the European Commission (the EC) following the scientific assessment of the application by the European Medicines Agency (the EMA) that is valid for all E.U. Member States as well as in the three additional EEA Member States. The centralized procedure is mandatory for certain medicinal products, including for medicines developed by means of certain biotechnological processes, products designated as orphan medicinal products, advanced therapy medicinal products (ATMP), and medicinal products with an active substance authorized in the E.U. after May 20, 2004 which is intended for the treatment of certain diseases (e.g., AIDS, cancer, neurodegenerative disorders, diabetes, auto-immune and viral diseases). For medicinal products containing a new active substance not yet authorized in the EEA on May 20, 2004 and indicated for the treatment of other diseases, medicinal products that constitute significant therapeutic, scientific or technical innovations, or for which the grant of a MA through the centralized procedure would be in the interest of public or animal health at the E.U. level, an applicant may voluntarily submit an application for a marketing authorization through the centralized procedure.

Under the centralized procedure, the Committee for Medicinal Products for Human Use (the CHMP), established at the EMA, is responsible for conducting the initial assessment of a drug. The CHMP is also responsible for several post-authorization and maintenance activities, such as the assessment of modifications or extensions to an existing marketing authorization. Under the centralized procedure, the timeframe for the evaluation of an MAA by the EMA’s CHMP is, in principle, 210 days from receipt of a valid MAA. However, this timeline excludes clock stops, when additional written or oral information is to be provided by the applicant in response to questions asked by the CHMP, so the overall process typically takes a year or more, unless the application is eligible for an accelerated assessment. Accelerated evaluation might be granted by the CHMP in exceptional cases, when a medicinal product is expected to be of a major public health interest, particularly from the point of view of therapeutic innovation. Upon request, the CHMP can reduce the time frame to 150 days if the applicant provides sufficient justification for an accelerated assessment. The CHMP will provide a positive opinion regarding the application only if it meets certain quality, safety and efficacy requirements. This opinion is then transmitted to the EC, which has the ultimate authority for granting MA within 67 days after receipt of the CHMP opinion.

Decentralized Authorization Procedure. Medicines that fall outside the mandatory scope of the centralized procedure have three routes to authorization: (i) they can be authorized under the centralized procedure if they concern a significant therapeutic, scientific or technical innovation, or if their authorization would be in the interest of public health; (ii) they can be authorized under a decentralized procedure where an applicant applies for simultaneous authorization in more than one E.U. member state; or (iii) they can be authorized in an E.U. member state in accordance with that state’s national procedures and then be authorized in other E.U. countries by a procedure whereby the countries concerned agree to recognize the validity of the original, national marketing authorization (mutual recognition procedure).

The decentralized procedure permits companies to file identical MA applications for a medicinal product to the competent authorities in various E.U. Member States simultaneously if such medicinal product has not received marketing approval in any E.U. Member State before. This procedure is available for medicinal products not falling within the mandatory scope of the centralized procedure. The competent authority of a single E.U. Member State, known as the reference E.U. Member State, is appointed to review the application and provide an assessment report. Under this procedure, an applicant submits an application based on identical dossiers and related materials, including a draft summary of product characteristics, and draft labeling and package leaflet, to the reference E.U. Member State and concerned E.U. Member States. The reference E.U. Member State prepares a draft assessment report and drafts of the related materials within 120 days after receipt of a valid application. Subsequently each concerned E.U. Member State must decide whether to approve the assessment report and related materials. If an E.U. Member State cannot approve the assessment report and related materials on the grounds of potential serious risk to public health, the disputed points are subject to a dispute resolution mechanism and may eventually be referred to the EC, whose decision is binding for all E.U. Member States.

Risk Management Plan. All new MAAs must include a Risk Management Plan (RMP), describing the risk management system that the company will put in place and documenting measures to prevent or minimize the risks associated with the product. RMPs are continually modified and updated throughout the lifetime of the medicine as new information becomes available. We need to submit an updated RMP: (i) at the request of EMA or a national competent authority, or (ii) whenever the risk-management system is modified, especially as the result of new information being received that may lead to a significant change to the benefit-risk profile or as a result of an important pharmacovigilance or risk-minimization milestone being reached. The regulatory authorities may also impose specific obligations as a condition of the MA. Since October 20, 2023, all RMPs for centrally authorized products are published by the EMA, subject to only limited redactions.

MA Validity Period. Marketing Authorizations have an initial duration of five years. After these five years, the authorization may subsequently be renewed on the basis of a reevaluation of the risk-benefit balance. Once renewed, the MA is valid for an unlimited period unless the EC or the national competent authority decides, on justified grounds relating to pharmacovigilance, to proceed with only one additional five-year renewal. Applications for renewal must be made to the EMA at least nine months before the five-year period expires.

Exceptional Circumstances/Conditional Approval. Similar to accelerated approval regulations in the U.S., conditional marketing authorizations can be granted in the E.U. by the European Commission in exceptional circumstances. A conditional marketing authorization can be granted for medicinal products where, although comprehensive clinical data referring to the safety and efficacy of the medicinal product have not been supplied, a number of criteria are fulfilled, including: (i) the benefit/risk balance of the product is positive, (ii) it is likely that the applicant will be in a position to provide the comprehensive clinical data, (iii) unmet medical needs will be fulfilled by the grant of the MA and (iv) the benefit to public health of the immediate availability on the market of the medicinal product concerned outweighs the risk inherent in the fact that additional data are still required. A conditional marketing authorization must be renewed annually.

Pricing and Reimbursement Environment. Even if a medicinal product obtains a marketing authorization in the E.U., there can be no assurance that reimbursement for such product will be secured on a timely basis or at all. Individual countries comprising the E.U. member states, rather than the E.U., have jurisdiction across the region over patient reimbursement or pricing matters. Therefore, we will need to expend significant effort and expense to establish and maintain reimbursement arrangements in the various countries comprising the E.U. and may never succeed in obtaining widespread reimbursement arrangements therein.

The national authorities of the individual E.U. Member States are free to restrict the range of medicinal products for which their national health insurance systems provide reimbursement and to control the prices and/or reimbursement of medicinal products for human use. Some E.U. Member States adopt policies according to which a specific price or level of reimbursement is approved for the medicinal product. Other E.U. Member States adopt a system of direct or indirect controls on the profitability of the company placing the medicinal product on the market, including volume-based arrangements, caps and reference pricing mechanisms.

Reference pricing used by various E.U. Member States and parallel distribution, or arbitrage between low-priced and high-priced member states, can further reduce prices. In some countries, we may be required to conduct a clinical study or other studies that compare the cost-effectiveness of our product candidates, if any, to other available therapies in order to obtain or maintain reimbursement or pricing approval. There can be no assurance that any country that has price controls or reimbursement limitations for medicinal products will allow favorable reimbursement and pricing arrangements for any of our products. Historically, medicinal products launched in the E.U. do not follow price structures of the U.S. and generally published and actual prices tend to be significantly lower. Publication of discounts by third party payers or authorities and public tenders may lead to further pressure on the prices or reimbursement levels within the country of publication and other countries.

Health Technology Assessment (HTA) of medicinal products is becoming an increasingly common part of the pricing and reimbursement procedures in some E.U. Member States, including France, Germany, Ireland, Italy and Sweden. The HTA process, which is governed by the national laws of these countries, is the procedure according to which the assessment of the public health impact, therapeutic impact and the economic and societal impact of use of a given medicinal product in the national healthcare systems of the individual country is conducted. The extent to which pricing and reimbursement decisions are influenced by the HTA of the specific medicinal product vary between E.U. Member States. The HTA generally focuses on the clinical efficacy and effectiveness, safety, cost and cost-effectiveness of individual medicinal products as well as their potential implications for the healthcare system. Those elements of medicinal products are compared with other treatment options available on the market. The outcome of HTA regarding specific medicinal products will often influence the pricing and reimbursement status granted to medicinal products by the regulatory authorities of individual E.U. Member States. A negative HTA of one of our products by a leading and recognized HTA body could not only undermine our ability to obtain reimbursement for such product in the E.U. Member State in which such negative assessment was issued, but also in other E.U. Member States. For example, E.U. Member States that have not yet developed HTA mechanisms could rely to some extent on the HTA performed in other countries with a developed HTA framework, when adopting decisions concerning the pricing and reimbursement of a specific medicinal product.

On January 31, 2018, the European Commission adopted a proposal for a regulation on health technology assessment. This legislative proposal is intended to boost E.U. level cooperation among E.U. Member States in assessing health technologies, including new medicinal products, and providing the basis for cooperation at the E.U. level for joint clinical assessments in these areas. The proposal provides that E.U. Member States will be able to use common HTA tools, methodologies and procedures across the European Union, working together in four main areas, including joint clinical assessment of the innovative health technologies with the most potential impact for patients, joint scientific consultations whereby developers can seek advice from HTA authorities, identification of emerging health technologies to identify promising technologies early, and continuing voluntary cooperation in other areas. Individual E.U. Member States will continue to be responsible for assessing non-clinical (e.g., economic, social, ethical) aspects of health technology, and making decisions on pricing and reimbursement. While E.U. Member States could choose to delay participation in the joint work until three years after the rules enter into force, it will become mandatory after six years. The European Commission has stated that the role of the HTA regulation is not to influence pricing and reimbursement decisions in the individual E.U. Member States, but there can be no assurance that the HTA regulation will not have effects on pricing and reimbursement decisions. The HTA entered into force on January 11, 2022 and applies as of January 2025 followed by a further three-year transitional period during which E.U. member states must fully adapt to the new system.

To obtain, reimbursement or pricing approval in some countries, including the E.U. Member States, we may be required to conduct studies that compare the cost-effectiveness of our product candidates to other therapies that are considered the local standard of care. There can be no assurance that any country will allow favorable pricing, reimbursement and market access conditions for any of our products, or that we will be feasible to conduct additional cost-effectiveness studies, if required.

In certain of the E.U. Member States, medicinal products that are designated as orphan medicinal products may be exempted or waived from having to provide certain clinical, cost-effectiveness and other economic data in connection with their filings for pricing/reimbursement approval.

Post-Approval Regulation

Similarly, to the U.S., both marketing authorization holders and manufacturers of medicinal products are subject to comprehensive regulatory oversight by the EMA, the EC and/or the competent regulatory authorities of the individual E.U. Member States. This oversight applies both before and after grant of the manufacturing licenses and marketing authorizations. It includes control of compliance with E.U. good manufacturing practices rules, manufacturing authorizations, pharmacovigilance rules and requirements governing advertising, promotion, sale, and distribution, recordkeeping, importing and exporting of medicinal products.

Failure by us or by any of our third-party partners, including suppliers, manufacturers and distributors to comply with E.U. laws and the related national laws of individual E.U. Member States governing the conduct of clinical trials, manufacturing approval, marketing authorization of medicinal products and marketing of such products, both before and after grant of marketing authorization, statutory health insurance, bribery and anti-corruption or other applicable regulatory requirements may result in administrative, civil or criminal penalties. These penalties could include delays or refusal to authorize the conduct of clinical trials or to grant marketing authorization, product withdrawals and recalls, product seizures, suspension, withdrawal or variation of the marketing authorization, total or partial suspension of production, distribution, manufacturing or clinical trials, operating restrictions, injunctions, suspension of licenses, fines and criminal penalties.

The holder of an E.U. marketing authorization for a medicinal product must also comply with E.U. pharmacovigilance legislation and its related regulations and guidelines, which entail many requirements for conducting pharmacovigilance, or the assessment and monitoring of the safety of medicinal products.

These pharmacovigilance rules can impose on central marketing authorization holders for medicinal products the obligation to conduct a labor-intensive collection of data regarding the risks and benefits of marketed products and to engage in ongoing assessments of those risks and benefits, including the possible requirement to conduct additional clinical studies or post-authorization safety studies to obtain further information on a medicine’s safety, or to measure the effectiveness of risk-management measures, which may be time consuming and expensive and could impact our profitability. MA holders must establish and maintain a pharmacovigilance system and appoint an individual qualified person for pharmacovigilance, who is responsible for oversight of that system. Key obligations include expedited reporting of suspected serious adverse reactions and submission of Periodic Safety Update Reports (PSURs) in relation to medicinal products for which they hold MAs. The EMA reviews PSURs for medicinal products authorized through the centralized procedure. If the EMA has concerns that the risk benefit profile of a product has varied, it can adopt an opinion advising that the existing MA for the product be suspended, withdrawn or varied. The agency can advise that the MA holder be obliged to conduct post-authorization Phase IV safety studies. If the EC agrees with the opinion, it can adopt a decision varying the existing MA. Failure by the MA holder to fulfill the obligations for which the EC’s decision provides can undermine the ongoing validity of the MA.

More generally, non-compliance with pharmacovigilance obligations can lead to the variation, suspension or withdrawal of the marketing authorization for the product or imposition of financial penalties or other enforcement.

The manufacturing process for medicinal products in the E.U. is highly regulated: regulators may shut down manufacturing facilities that they believe do not comply with regulations. Manufacturing requires a manufacturing authorization, and the manufacturing authorization holder must comply with various requirements set out in the applicable E.U. laws, regulations and guidance, including Directive 2001/83/EC, Directive 2003/94/EC, Regulation (EC) No 726/2004 and the European Commission Guidelines for Good Manufacturing Practice (GMP). These requirements include compliance with E.U. GMP standards when manufacturing medicinal products and active pharmaceutical ingredients, including the manufacture of active pharmaceutical ingredients outside of the E.U. with the intention to import the active pharmaceutical ingredients into the E.U. Similarly, the distribution of medicinal products into and within the E.U. is subject to compliance with the applicable E.U. laws, regulations and guidelines, including the requirement to hold appropriate authorizations for distribution granted by the competent authorities of the E.U. Member States. The manufacturer or importer must have a qualified person who is responsible for certifying that each batch of product has been manufactured in accordance with GMP, before releasing the product for commercial distribution in the E.U. or for use in a clinical trial. Manufacturing facilities are subject to periodic inspections by the competent authorities for compliance with GMP.

Sales and Marketing Regulations

In the E.U., the advertising and promotion of our products are subject to E.U. and E.U. Member States’ laws governing promotion of medicinal products, interactions with physicians, misleading and comparative advertising and unfair commercial practices. In addition, other legislation adopted by individual E.U. Member States may apply to the advertising and promotion of medicinal products and may differ from one country to another. These laws require that promotional materials and advertising in relation to medicinal products comply with the product’s Summary of Product Characteristics (SmPC) as approved by the competent authorities. The SmPC is the document that provides information to physicians concerning the safe and effective use of the medicinal product. It forms an intrinsic and integral part of the marketing authorization granted for the medicinal product. Promotion of a medicinal product that does not comply with the SmPC is considered to constitute off-label promotion. All advertising and promotional activities for the product must be consistent with the approved SmPC and therefore all off-label promotion of medicinal products is prohibited. Direct-to-consumer advertising of prescription-only medicinal products is also prohibited in the E.U. Violations of the rules governing the promotion of medicinal products in the E.U. could be penalized by administrative measures, fines and imprisonment. These laws may further limit or restrict the advertising and promotion of our products to the general public and may also impose limitations on our promotional activities with health care professionals.

Anti-Corruption Legislation

Our business activities outside of the U.S. are subject to anti-bribery or anti-corruption laws, regulations, industry self-regulation codes of conduct, and physicians’ codes of professional conduct or rules of other countries in which we operate, including the U.K. Bribery Act of 2010.

Interactions between pharmaceutical companies and physicians are also governed by strict laws, regulations, industry self-regulation codes of conduct and physicians’ codes of professional conduct developed at both the E.U. level and in the individual E.U. Member States. The provision of benefits or advantages to physicians to induce or encourage the prescription, recommendation, endorsement, purchase, supply, order or use of medicinal products is prohibited in the E.U. The provision of benefits or advantages to physicians is also governed by the national anti-bribery laws of the E.U. Member States. Violation of these laws could result in substantial fines and imprisonment. Payments made to physicians in certain E.U. Member States also must be publicly disclosed. Moreover, agreements with physicians must often be the subject of prior notification and approval by the physician’s employer, his/her competent professional organization, and/or the competent authorities of the individual E.U. Member States. These requirements are provided in the national laws, industry codes or professional codes of conduct, applicable in the individual E.U.

Member States. Failure to comply with these requirements could result in reputational risk, public reprimands, administrative penalties, fines or imprisonment.

Data Privacy and Protection

Data protection laws and regulations have been adopted at the E.U. level, with related implementing laws in individual E.U. Member States which impose significant compliance obligations. The E.U. has adopted a comprehensive overhaul of its data protection regime from an E.U. Data Protection Directive with national legislative approaches to a single European Economic Area Privacy Regulation, the General Data Protection Regulation 2016/679/E.U. (GDPR), which came into effect on May 25, 2018. The GDPR extends the scope of the E.U. data protection law to the processing of personal data carried out by companies not established in the E.U., where such processing relates to (a) the offering of goods or services to data subjects who are in the E.U., or (b) the monitoring of the behavior of data subjects who are in the E.U. It imposes a strict data protection compliance regime with severe penalties of up to the greater of 4% of total worldwide annual turnover of the preceding financial year and €20 million, and it provides for new rights (such as the “right to be forgotten” and “portability” of personal data), obligations related to the implementation of appropriate security measures, personal data breach notification requirements, as well as restrictions on the processing of health data. E.U. Member States may also impose additional requirements in relation to health, genetic and biometric data through their national implementing legislation.

Furthermore, there is a growth towards the public disclosure of clinical trial data in the E.U. which also adds to the complexity of processing health data from clinical trials. Such public disclosure obligations are provided in the new E.U. Clinical Trials Regulation, EMA disclosure initiatives, and voluntary commitments by industry. Data protection authorities from the different E.U. Member States may interpret the GDPR differently, which adds to the complexity of processing personal data in the E.U., and guidance on implementation and compliance practices are often updated or otherwise revised.

In addition, the GDPR imposes specific restrictions on transfer of personal data to countries outside of the EEA that are not considered by the European Commission to provide an adequate level of data protection. Appropriate safeguards are required to enable such transfers. Among the appropriate safeguards that can be used, the data exporter may use standard contractual clauses (SCCs). When relying on SCCs, the data exporters are also required to conduct a transfer risk assessment to verify if anything in the law and/or practices of the third country may impinge on the effectiveness of the SCCs in the context of the transfer at stake and, if so, to identify and adopt supplementary measures that are necessary to bring the level of protection of the data transferred to the E.U. standard of essential equivalence. Where no supplementary measure is suitable, the data exporter should avoid, suspend or terminate the transfer. With respect to transfers to the U.S., on July 10, 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework. This decision concludes that the U.S. provides an adequate level of protection for personal data transferred from the EEA to U.S. entities which have self-certified their compliance with the new EU-U.S. Data Privacy Framework. On the basis of the new adequacy decision, personal data can flow from the EEA to U.S. companies participating in the framework.

United Kingdom (UK)

The UK formally left the E.U. on January 31, 2020 (Brexit). E.U. laws now only apply to the UK with respect to Northern Ireland as laid out in the Protocol on Ireland and Northern Ireland, as amended by the Windsor Framework, agreed to by the UK and the E.U. on February 27, 2023.

The E.U. and the UK have also agreed to a trade and cooperation agreement (TCA), which includes provisions affecting the life sciences industry (including regarding customs and tariffs). It includes certain provisions concerning pharmaceuticals, including the mutual recognition of GMP, inspections of manufacturing facilities for medicinal products and issued GMP documents. The TCA does not, however, contain wholesale mutual recognition of UK and E.U. pharmaceutical regulations and product standards.

Medicines are approved and licensed in the UK (excluding Northern Ireland) by the UK’s Medicines and Healthcare products Regulatory Agency (MHRA). Under the Windsor Framework, from January 1, 2025, the EMA will no longer have a role in approving or licensing new drugs for provision in Northern Ireland; medicines will need to be approved and licensed on a UK-wide basis by the MHRA, with medicines using the same packaging and labelling across the UK.

The UK government has adopted the Medicines and Medical Devices Act 2021 (MMDA) to enable the UK’s regulatory frameworks to be updated following the UK’s departure from the E.U. The MMDA introduces regulation-making, delegated powers covering the fields of human medicines, clinical trials of human medicines, veterinary medicines and medical devices. The MHRA has since been consulting on future regulations for medicines and medical devices in the UK.

Additionally, following Brexit, companies also have to comply with the UK’s data protection laws, including the UK GDPR, which is based on the GDPR.

Privacy and Security of Health Information and Personal Information; Standard Transactions

We are subject to state and federal laws and implementing regulations relating to the privacy and security of the medical information of the patients we treat. The principal federal legislation is the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009 (collectively, HIPAA).

Pursuant to HIPAA, the Secretary of the Department of Health and Human Services (HHS), has issued final regulations designed to improve the efficiency and effectiveness of the healthcare system by facilitating the electronic exchange of information in certain financial and administrative transactions, while protecting the privacy and security of the patient information exchanged.

State statutes and regulations also regulate the privacy and security of patients’ medical and health information, that is not regulated by HIPAA. These laws vary from state to state, and impose a range of obligations. For instance, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), applies to personal data of consumers, business representatives, and employees, and imposes obligations on certain businesses that do business in California, including to provide specific disclosures in privacy notices, rights to California residents in relation to their personal information. Health information falls under the CCPA/CPRA’s definition of personal information where it identifies, relates to, describes, or is reasonably capable of being associated with or could reasonably be linked with a particular consumer or household—unless it is subject to HIPAA—and is included under a new category of personal information, “sensitive personal information,” which is offered greater protection. A similar law in Virginia went into effect on January 1, 2023 and in Colorado and Connecticut on July 1, 2023, and similar laws also have passed in other states, including in Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas and Utah. Comprehensive privacy laws also have been proposed in other states and at the federal level, reflecting a trend toward more stringent privacy legislation in the U.S. Some of these laws and regulations impose different, and in certain instances, more stringent requirements than HIPAA.

International regulations (such as the GDPR and UK GDPR) also provide privacy protection to clinical trial participants of their personal health care information. We intend to take appropriate steps to protect the privacy of our clinical study participants. However, the documentation and process requirements of applicable privacy and security regulations are complex and subject to interpretation. Failure to comply with applicable privacy and security regulations could subject us to sanctions or penalties, loss of business and negative publicity.

Federal and State Fraud and Abuse Laws

The federal healthcare Anti-Kickback Statute prohibits, among other things, knowingly and willfully offering, paying, soliciting, or receiving remuneration to induce referrals or in return for purchasing, leasing, ordering, or arranging for the purchase, lease, or order of any healthcare item or service reimbursable under a governmental payor program. The definition of “remuneration” has been broadly interpreted to include anything of value, including gifts, discounts, the furnishing of supplies or equipment, credit arrangements, payments of cash, waivers of payments, ownership interests, opportunity to earn income, and providing anything at less than its fair market value. The Anti-Kickback Statute is broad, and it prohibits many arrangements and practices that are lawful in businesses outside of the healthcare industry. Recognizing that the Anti-Kickback Statute is broad and may technically prohibit many innocuous or beneficial arrangements within the healthcare industry, HHS has issued a series of regulatory “safe harbors.” These safe harbor regulations set forth certain provisions that, if met, will provide healthcare providers and other parties with an affirmative defense against prosecution under the federal Anti-Kickback Statute. Although full compliance with these provisions provides a defense against prosecution under the federal Anti-Kickback Statute, the failure of a transaction or arrangement to fit within a specific safe harbor does not necessarily mean that the transaction or arrangement is illegal or that prosecution under the federal Anti-Kickback Statute will be pursued.

Other Healthcare Laws

Our products are subject to various other healthcare-related laws regulating fraud and abuse, R&D, pricing, sales and marketing practices, and the privacy and security of health information. Among other things, these laws and others generally (a) prohibit the provision of anything of value in exchange for the referral of patients or for the purchase, order, or recommendation of any item or service reimbursed by a federal healthcare program, including Medicare and Medicaid; (b) require that claims for payment submitted to federal healthcare programs be truthful; and (c) require the maintenance of certain government licenses and permits. Specific health-care laws and regulations that we are subject to include:

•

the federal Physician Self-Referral Law, which prohibits a physician from making referrals for certain designated health services payable by Medicare to an entity with which he or she (or an immediate family member) has a financial relationship, and prohibits the entity from presenting or causing to be presented claims to Medicare for those referred services;

•

the federal civil and criminal false claims laws, including the False Claims Act (“FCA”), which prohibits, among other things, individuals or entities from knowingly presenting, or causing to be presented, claims for payment from Medicare, Medicaid or other federal healthcare programs that are false or fraudulent. Moreover, the government may assert that a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the FCA;

•

the federal Civil Monetary Penalties Law, which prohibits, among other things, offering or transferring remuneration to a federal healthcare beneficiary that a person knows or should know is likely to influence the beneficiary’s decision to order or receive items or services reimbursable by the government from a particular provider or supplier;

•

the federal Physician Payments Sunshine Act which requires certain applicable manufacturers of drugs, devices, biologics and medical supplies for which payment is available under certain federal healthcare programs, to monitor and report to CMS, certain payments and other transfers of value to physicians (defined to include doctors, dentists, optometrists, podiatrists and chiropractors); certain other healthcare providers, including physician assistants, nurse practitioners, clinical nurse specialists, certified nurse anesthetists, certified nurse-midwives, and teaching hospitals; as well as ownership and investment interests held by physicians and their immediate family members;

•

U.S. federal consumer protection and unfair competition laws, which broadly regulate marketplace activities that potentially harm customers; and

•

state law equivalents of each of the above federal laws, such as anti-kickback and false claims laws, which may apply to item or services reimbursed by any third-party payor, including commercial insurers; state laws requiring device companies to comply with specific compliance standards, restrict payments made to healthcare providers and other potential referral sources, and report information related to payments and other transfers of value to healthcare providers or marketing expenditures and state laws related to insurance fraud in the case of claims involving private insurers.

Compliance

Compliance with government rules and regulations is a significant concern throughout the industry, in part due to evolving interpretations of these rules and regulations. We seek to conduct our business in compliance with all statutes and regulations applicable to our operations. Failure to comply with applicable requirements may subject us to administrative or judicial sanctions, such as clinical holds, refusal of regulatory authorities to approve or authorize pending product applications, warning letters, product recalls, product seizures, total or partial suspension of production or distribution, monetary penalties, injunctions and/or criminal prosecution.

Employees

As of the date of filing this Annual Report, we employ two executive officers and ten full-time employees. We expect that we will hire more employees as we develop our current and future programs.

Our human capital resources objectives include, as applicable, identifying, recruiting, retaining, and incentivizing our management team and our clinical, scientific and other employees and consultants. The principal purposes of our equity and bonus plans are to attract, retain and motivate personnel through the granting of stock-based and cash-based compensation awards, to align our interests and the interests of our stockholders with those of our employees. The Compensation Committee of our Board of Directors approves associated merit increases and annual incentive bonus payments to our executives during the first quarter annually.

When needed, we augment our employee base with outside consultants who specialize in various fields.

Insurance

We currently maintain director’s and officer’s insurance, commercial general and office premises liability insurance, insurance on our clinical studies, and product errors and omissions liability insurance for our products.