Skip to main content

Intellia Therapeutics Inc

For the period ended Sep 30, 2024. Filed Nov 7, 2024.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Sep 30, 2024 · Filed Nov 7, 2024

NTLA$11.35+2.3%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2024-06-30; filed 2024-08-08.

0000950170-24-093907

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2024-09-30; filed 2024-11-07.

0000950170-24-123276

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 403 previous paragraphs and 402 current paragraphs.

385 unchanged; 16 reworded; 0 added; 0 removed; 2 previous and 1 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Reworded paragraphs (16)

Previous wording

Successful development of products by us will require solving a number of issues, including developing or obtaining technologies to safely deliver a therapeutic agent into target cells within the human body or engineer human cells while outside of the body such that the modified cells can have a therapeutic effect when delivered to the patient, optimizing the efficacy and specificity of such products, and ensuring and demonstrating the therapeutic selectivity, efficacy, potency, purity and safety of such products. There can be no assurance we will be successful in solving any or all of these issues. With regards to CRISPR/Cas9-based therapies specifically, we are in clinical-stage development for NTLA-2001 and NTLA-2002 and advancing towards clinical testing for our otherin vivo andex vivo product candidates. Although one CRISPR/Cas9-editedex vivo therapy has been recently approved in the United States (“U.S.”) and European Union (“EU”), no genome editingin vivo therapy has been approved in the U.S., EU countries or other key jurisdictions, and the potential to successfully obtain approval for any of our CRISPR/Cas9 product candidates remains unproven.

Current wording

Successful development of products by us will require solving a number of issues, including developing or obtaining technologies to safely deliver a therapeutic agent into target cells within the human body or engineer human cells while outside of the body such that the modified cells can have a therapeutic effect when delivered to the patient, optimizing the efficacy and specificity of such products, and ensuring and demonstrating the therapeutic selectivity, efficacy, potency, purity and safety of such products. There can be no assurance we will be successful in solving any or all of these issues. With regards to CRISPR/Cas9-based therapies specifically, we are in clinical-stage development for NTLA-2001, NTLA-2002 and NTLA-3001, and advancing towards clinical testing for our otherin vivo andex vivo product candidates. Although one CRISPR/Cas9-editedex vivo therapy has been recently approved in the United States (“U.S.”) and European Union (“EU”), no genome editingin vivo therapy has been approved in the U.S., EU countries or other key jurisdictions, and the potential to successfully obtain approval for any of our CRISPR/Cas9 product candidates remains unproven.

Previous wording

To date, most human clinical trials utilizing eitherin vivo orex vivo CRISPR-based therapeutics, including our clinical trials for NTLA-2001 for transthyretin (“ATTR”) amyloidosis and NTLA-2002 for hereditary angioedema (“HAE”), are still at a clinical stage, with only oneex vivo CRISPR-based therapeutic product approved in December 2023 in the U.S. and EU. We have ongoing clinical trials in various countries for NTLA-2001 and NTLA-2002 for patients with ATTR amyloidosis and HAE, respectively. There is no certainty that the FDA or other similar agencies will continue to apply to all our CRISPR/Cas9 product candidates the same regulatory pathway and requirements it is applying to otherin vivo therapies orex vivo engineered therapeutics.

Current wording

To date, most human clinical trials utilizing eitherin vivo orex vivo CRISPR-based therapeutics, including our clinical trials for NTLA-2001 for transthyretin (“ATTR”) amyloidosis, NTLA-2002 for hereditary angioedema (“HAE”) and NTLA-3001 for alpha-1 antitrypsin deficiency (“AATD”)-associated lung disease, are still at a clinical stage, with only oneex vivo CRISPR-based therapeutic product approved in December 2023 in the U.S. and EU. We have ongoing clinical trials in various countries for NTLA-2001 and NTLA-2002 for patients with ATTR amyloidosis and HAE, respectively. There is no certainty that the FDA or other similar agencies will continue to apply to all our CRISPR/Cas9 product candidates the same regulatory pathway and requirements it is applying to otherin vivo therapies orex vivo engineered therapeutics.

Previous wording

From time to time, we may disclose interim data from our clinical trials, such as the interim results of our ongoing Phase 1 study of NTLA-2001 or Phase 1/2 study of NTLA-2002 or planned Phase 1 study of NTLA-3001. Interim data from clinical trials that have not been completed are subject to the risk that one or more of the clinical outcomes may materially change as patient enrollment continues and more patient data become available or as patients from our clinical trials continue other treatments for their disease. We also make assumptions, estimations, calculations and conclusions as part of our analyses of data, and we may not have received or had the opportunity to fully and carefully evaluate all data. As a result, results that we report may differ from future results of the same studies, or different conclusions or considerations may qualify such results, once additional data have been received and fully evaluated. Consequently, interim data should be viewed with caution until we make the final data and analysis available.

Current wording

From time to time, we may disclose interim data from our clinical trials, such as the interim results of our ongoing Phase 1 study of NTLA-2001 or Phase 1/2 study of NTLA-2002 or planned Phase 1/2 study of NTLA-3001. Interim data from clinical trials that have not been completed are subject to the risk that one or more of the clinical outcomes may materially change as patient enrollment continues and more patient data become available or as patients from our clinical trials continue other treatments for their disease. We also make assumptions, estimations, calculations and conclusions as part of our analyses of data, and we may not have received or had the opportunity to fully and carefully evaluate all data. As a result, results that we report may differ from future results of the same studies, or different conclusions or considerations may qualify such results, once additional data have been received and fully evaluated. Consequently, interim data should be viewed with caution until we make the final data and analysis available.

Previous wording

Gene therapy in general, and genome editing in particular, remain novel technologies, with only a limited number of gene therapy products approved to date in the U.S. and EU. Public perception may be influenced by claims that gene therapy or genome editing, including the use of CRISPR/Cas9, is unsafe or unethical, or carries an undue risk of side effects, such as improper modification of a gene sequence in a patient’s chromosome that could lead to cancer, and gene therapy or genome editing may not gain the acceptance of the public or the medical community. In particular, our success will depend upon physicians who specialize in the treatment of diseases targeted by our product candidates prescribing treatments that involve the use of our product candidates in lieu of, or in addition to, existing treatments with which they are more familiar and for which greater clinical data may be available. In addition, responses by the U.S., state or foreign governments to negative public perception or ethical concerns may result in new legislation or regulations that could limit our ability to develop or commercialize any product candidates, obtain or maintain regulatory approval or otherwise achieve profitability. More restrictive statutory regimes, government regulations or negative public opinion could have an adverse effect on our business, financial condition and results of operations and prospects, and may delay or impair the development and commercialization of our product candidates or demand for any products we may develop. For example, certain gene therapy trials led to several well-publicized adverse events, including cases of leukemia and death. Serious adverse events, such as these, in our clinical trials, or other clinical trials involving gene therapy or genome editing products or our competitors’ products, even if not ultimately attributable to the relevant product candidates, and the resulting publicity could result in increased government regulation, unfavorable public perception, potential regulatory delays in the testing or approval of our product candidates, stricter labeling requirements for those product candidates that are approved and a decrease in demand for any such product candidate. In addition, the use of the technology by third parties in areas that are not being pursued by us, such as for targeting and editing of embryonic cells, could adversely impact public and governmental perceptions regarding the ethics and risks of the CRISPR/Cas9 technology and lead to social or legal changes that could limit our ability to apply the technology to develop human therapies addressing disease. For example, reports of the use of CRISPR/Cas9 in China and Russia to edit embryosin utero have generated, and may continue to generate, negative public perception about the use of the technology in humans. Negative public and governmental perception of the technology, or additional governmental regulation of our technologies, could also adversely aff…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Gene therapy in general, and genome editing in particular, remain novel technologies, with only a limited number of gene therapy products, and only oneex vivo genome editing product, approved to date in the U.S. and EU. Public perception may be influenced by claims that gene therapy or genome editing, including the use of CRISPR/Cas9, is unsafe or unethical, or carries an undue risk of side effects, such as improper modification of a gene sequence in a patient’s chromosome that could lead to cancer, and gene therapy or genome editing may not gain the acceptance of the public or the medical community. In particular, our success will depend upon physicians who specialize in the treatment of diseases targeted by our product candidates prescribing treatments that involve the use of our product candidates in lieu of, or in addition to, existing treatments with which they are more familiar and for which greater clinical data may be available. In addition, responses by the U.S., state or foreign governments to negative public perception or ethical concerns may result in new legislation or regulations that could limit our ability to develop or commercialize any product candidates, obtain or maintain regulatory approval or otherwise achieve profitability. More restrictive statutory regimes, government regulations or negative public opinion could have an adverse effect on our business, financial condition and results of operations and prospects, and may delay or impair the development and commercialization of our product candidates or demand for any products we may develop. For example, certain gene therapy trials led to several well-publicized adverse events, including cases of leukemia and death. Serious adverse events, such as these, in our clinical trials, or other clinical trials involving gene therapy or genome editing products or our competitors’ products, even if not ultimately attributable to the relevant product candidates, and the resulting publicity could result in increased government regulation, unfavorable public perception, potential regulatory delays in the testing or approval of our product candidates, stricter labeling requirements for those product candidates that are approved and a decrease in demand for any such product candidate. In addition, the use of the technology by third parties in areas that are not being pursued by us, such as for targeting and editing of embryonic cells, could adversely impact public and governmental perceptions regarding the ethics and risks of the CRISPR/Cas9 technology and lead to social or legal changes that could limit our ability to apply the technology to develop human therapies addressing disease. For example, reports of the use of CRISPR/Cas9 in China and Russia to edit embryosin utero have generated, and may continue to generate, negative public perception about the use of the technology in humans. Negative public and governmental perception of the technology, or additional governmental regulation …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We are at a clinical stage of development and our technology and approach has not yet led, and may never lead, to the approval or commercialization of any of our product candidates, including NTLA-2001 for ATTR amyloidosis or NTLA-2002 for HAE, or for other product candidates, including NTLA-3001 for AATD, being deemed appropriate for clinical development and ultimately approval by a regulatory agency. Even if we are successful in building our pipeline of product candidates, completing clinical development, establishing the necessary manufacturing processes and capabilities, obtaining regulatory approvals and commercializing product candidates will require substantial additional funding and are subject to the risks of failure inherent in therapeutic product development. Investment in biopharmaceutical product development involves significant risk that any potential product candidate will fail to demonstrate acceptable safety and efficacy profiles, gain regulatory approval, or become commercially viable.

Current wording

We are at a clinical stage of development and our technology and approach has not yet led, and may never lead, to the approval or commercialization of any of our product candidates, including NTLA-2001 for ATTR amyloidosis, NTLA-2002 for HAE, or NTLA-3001 for AATD, or to our other product candidates being deemed appropriate for clinical development and ultimately approval by a regulatory agency. Even if we are successful in building our pipeline of product candidates, completing clinical development, establishing the necessary manufacturing processes and capabilities, obtaining regulatory approvals and commercializing product candidates will require substantial additional funding and are subject to the risks of failure inherent in therapeutic product development. Investment in biopharmaceutical product development involves significant risk that any potential product candidate will fail to demonstrate acceptable safety and efficacy profiles, gain regulatory approval, or become commercially viable.

Previous wording

We are a clinical-stage company. We were founded and commenced operations in mid-2014. All of our product candidates are still in the preclinical development or clinical stage. We have not yet demonstrated our ability to successfully complete any clinical trials, including large-scale, pivotal clinical trials, obtain marketing approvals, manufacture clinical and commercial scale therapeutics, or arrange for a third party to do so on our behalf, or conduct sales and marketing activities necessary for successful commercialization. Our ability to generate product revenue or profits, which we do not expect will occur for many years, if ever, will depend heavily on the successful development and eventual commercialization of our product candidates, which may never occur. We may never be able to develop or commercialize a marketable product.

Current wording

We are a clinical-stage company. We were founded and commenced operations in mid-2014. All of our product candidates are still in preclinical development or clinical trials. We have not yet demonstrated our ability to successfully complete any clinical trials, including large-scale, pivotal clinical trials, obtain marketing approvals, manufacture clinical and commercial scale therapeutics, or arrange for a third party to do so on our behalf, or conduct sales and marketing activities necessary for successful commercialization. Our ability to generate product revenue or profits, which we do not expect will occur for many years, if ever, will depend heavily on the successful development and eventual commercialization of our product candidates, which may never occur. We may never be able to develop or commercialize a marketable product.

Previous wording

We are not profitable and have incurred losses in each period since our inception. Our net loss was $254.4 million for the six months ended June 30, 2024. As of June 30, 2024, we had an accumulated deficit of $1,912.8 million. We expect these losses to increase as we continue to incur significant research and development and other expenses related to our ongoing operations, seek regulatory approvals for our future product candidates, scale-up manufacturing capabilities, maintain, expand and protect our intellectual property portfolio and hire additional personnel to support the development of our product candidates and to enhance our operational, financial and information management systems. We expect to finance our operations through a combination of collaboration revenue, equity or debt financings or other sources, which may include collaborations with third parties.

Current wording

We are not profitable and have incurred losses in each period since our inception. Our net loss was $390.1 million for the nine months ended September 30, 2024. As of September 30, 2024, we had an accumulated deficit of $2,048.5 million. We expect these losses to increase as we continue to incur significant research and development and other expenses related to our ongoing operations, seek regulatory approvals for our future product candidates, scale-up manufacturing capabilities, maintain, expand and protect our intellectual property portfolio and hire additional personnel to support the development of our product candidates and to enhance our operational, financial and information management systems. We expect to finance our operations through a combination of collaboration revenue, equity or debt financings or other sources, which may include collaborations with third parties.

Previous wording

The manufacturing process used to produce CRISPR/Cas9-basedin vivoand engineered cell therapy product candidates may be complex, as they are novel and have not been validated for late phase clinical and commercial production and may require components that are difficult to obtain or manufacture at the necessary quantities and in accordance with regulatory requirements. Several factors could cause production interruptions, including equipment malfunctions; facility unavailability or contamination; raw material cost, shortages or contamination; natural disasters, such as pandemics or other outbreaks or similar public health crises; disruption in utility services; human error; insufficient personnel; inability to meet legal or regulatory requirements; or disruptions in the operations of our suppliers.

Current wording

The manufacturing process used to produce CRISPR/Cas9-basedin vivoand engineered cell therapy product candidates may be complex, as they are novel and have not been validated for late phase clinical and commercial production and may require components that are difficult to obtain or manufacture at the necessary quantities and in accordance with regulatory requirements. Several factors could cause production interruptions, including equipment malfunctions; facility unavailability or contamination;

Previous wording

The Commonwealth of Massachusetts, where most of our employees are based, also has laws that expand on federal laws or create additional rights for employees or obligations for employers. For example, on July 1, 2018, the Massachusetts Equal Pay Act went into effect, which added protections employers must comply with regarding pay equity for “comparable work.” There is currently uncertainty regarding the exact scope of these new legal limits and such uncertainty may remain for the foreseeable future. We may face increased employment and legal costs to ensure we are complying with this law. In addition, on October 1,

Current wording

The Commonwealth of Massachusetts, where most of our employees are based, also has laws that expand on federal laws or create additional rights for employees or obligations for employers. For example, on July 1, 2018, the Massachusetts Equal Pay Act went into effect, which added protections employers must comply with regarding pay equity for “comparable work.” In addition, on July 31, 2024, Massachusetts passed the Frances Perkins Workplace Equity Act, requiring disclosure of the pay range for a particular job under certain circumstances, including job postings, promotions, or when an employee requests. There is currently uncertainty regarding the exact scope of these new legal limits and such uncertainty may remain for the foreseeable future. We may face increased employment and legal costs to ensure we are complying with these laws.

Previous wording

2018, a new Massachusetts non-compete law went into effect, placing additional restrictions on employers seeking to enter into non-competition agreements with employees. Further, other jurisdictions in which our employees may work limit enforcement of non-competition agreements. For example, in California non-competition agreements with employees are generally unenforceable after termination of employment and Illinois contains strict laws affecting the enforcement of non-competition agreements. These non-compete laws may negatively impact our ability to prevent employees from working with direct or indirect competitors in the future and may affect our ability to retain key talent in a competitive market.

Current wording

On October 1, 2018, a new Massachusetts non-compete law went into effect, placing additional restrictions on employers seeking to enter into non-competition agreements with employees. Further, other jurisdictions in which our employees may work limit enforcement of non-competition agreements. For example, in California non-competition agreements with employees are generally unenforceable after termination of employment and Illinois contains strict laws affecting the enforcement of non-competition agreements. These non-compete laws may negatively impact our ability to prevent employees from working with direct or indirect competitors in the future and may affect our ability to retain key talent in a competitive market.

Previous wording

If any of our relationships with these third party CROs, clinical sites or other third parties terminate, we may not be able to enter into arrangements with alternative CROs, clinical sites or other third parties or to do so on commercially reasonable terms. Switching or adding additional CROs, clinical sites or other providers involves additional cost and requires management time and focus. In addition, the transition to a new CRO may result in delays, which can materially impact our ability to meet our desired clinical development timelines. Though we carefully manage our relationships with these parties, there can be no

Current wording

If any of our relationships with these third party CROs, clinical sites or other third parties terminate, we may not be able to enter into arrangements with alternative CROs, clinical sites or other third parties or to do so on commercially reasonable terms. Switching or adding additional CROs, clinical sites or other providers involves additional cost and requires management time and focus. In addition, the transition to a new CRO may result in delays, which can materially impact our ability to meet our desired clinical development timelines. Though we carefully manage our relationships with these parties, there can be no assurance that we will not encounter similar challenges or delays in the future or that these delays or challenges will not have a material adverse impact on our business, financial condition and prospects.

Previous wording

Our internal computer systems, or those of our collaborators or other contractors or consultants, may fail or suffer security breaches, which could result in a material disruption of our operations and development efforts.

Current wording

Our internal computer systems, or those of our collaborators or other contractors or consultants, may fail or suffer security breaches or compromises, which could result in a material disruption of our operations and development efforts.

Previous wording

We are increasingly dependent upon information technology systems, infrastructure, and data to operate our business. In the ordinary course of business, we collect, store, and transmit large amounts of confidential information (including but not limited to intellectual property, such as trade secrets, proprietary business information, and personal information). It is critical that we do so in a secure manner to maintain the confidentiality and integrity of such confidential information. We have also outsourced elements of our operations to third parties, and as a result we manage a number of third party vendors who may or could have access to our confidential information. Our third party collaborators, vendors and service providers (including our CMOs and CROs) also have access to large amounts of confidential information relating to our operations, including our research and development efforts. The size and complexity of our information technology systems, and those of third party vendors, service providers and collaborators, and the large amounts of confidential information stored on those systems, make such systems potentially vulnerable to service interruptions or systems failures, or to cybersecurity incidents or breaches from inadvertent or intentional actions by our employees, third party vendors, service providers, collaborators, and/or business partners, or from cyber-attacks by malicious third parties.

Current wording

We are increasingly dependent upon information technology systems, infrastructure, and data to operate our business. In the ordinary course of business, we collect, store, and transmit large amounts of confidential information (including but not limited to intellectual property, such as trade secrets, proprietary business information, and personal information). It is critical that we do so in a secure manner to maintain the confidentiality and integrity of such confidential information. We have also outsourced elements of our operations to third parties, and as a result we manage a number of third party vendors who may or could have access to our confidential information. Our third party collaborators, vendors and service providers (including our CMOs and CROs) also have access to large amounts of confidential information relating to our operations, including our research and development efforts. The size and complexity of our information technology systems, and those of third party vendors, service providers and collaborators, and the large amounts of confidential information stored on those systems, make such systems potentially vulnerable to service interruptions or systems failures, or to cybersecurity incidents, breaches or compromises from inadvertent or intentional actions by our employees, third party vendors, service providers, collaborators, and/or business partners, or from cyber-attacks by malicious third parties.

Previous wording

the California Consumer Privacy Act (“CCPA”) requires covered companies to provide disclosures to California consumers and afford such consumers rights with respect to their personal information, including the rights to request deletion of their information, receive the information on record for them, know what categories of information are being maintained about them, and opt-out of certain sales of their information. The CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal information, which may increase the likelihood of, and risks associated with, data breach litigation. The CCPA was amended by the California Privacy Rights Act (“CPRA”), which as of January 1, 2023 has substantially modified the CCPA, including by expanding consumers’ rights with respect to certain sensitive personal information, establishing a state agency vested with the authority to enforce the CCPA and by creating additional obligations with respect to the processing of personal information, including regulating personal information collected about employees, applicants and retirees as well as that which is collected in a business to business capacity. We anticipate additional costs associated with CCPA and other U.S. state privacy law compliance and we cannot yet fully determine the impact that such laws, regulations and standards may have on our business;

Current wording

the California Consumer Privacy Act (“CCPA”) requires covered companies to provide disclosures to California consumers and afford such consumers rights with respect to their personal information, including the rights to request deletion of their information, receive the information on record for them, know what categories of information are being maintained about them, and opt-out of certain sales of their information. The CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal information, which may increase the likelihood of, and risks associated with, data breach litigation. The CCPA was amended by the California Privacy Rights Act (“CPRA”), which went into effect on January 1, 2023, and substantially modified the CCPA, including by expanding consumers’ rights with respect to certain sensitive personal information, establishing a state agency vested with the authority to enforce the CCPA and by creating additional obligations with respect to the processing of personal information, including regulating personal information collected about employees, applicants and retirees as well as that which is collected in a business to business capacity. We anticipate additional costs associated with CCPA and other U.S. state privacy law compliance and we cannot yet fully determine the impact that such laws, regulations and standards may have on our business;

Previous wording

U.S.-based organizations who self-certify compliance and participate in the framework) and the U.K. International Data Transfer Agreement/Addendum) has been put in place and a transfer impact assessment has been carried out. Our compliance with international data transfer obligations under the GDPR, where applicable, may require significant effort and cost, and may limit our ability to transfer such personal data to other jurisdictions or to work with certain service providers that process personal data, and may require us to make strategic considerations around where such personal data is stored. Further, although the EC has acknowledged that the U.K. currently has adequate protections for international data transfers, there may be post-Brexit developments in the future that result in additional costs and operational challenges in complying with the U.K. GDPR and any other developments regulating the transfer of personal data between the U.K. and EU. For example, the U.K. government has now introduced a Data Protection and Digital Information Bill (the “U.K. Bill”) into the U.K. legislative process. The aim of the U.K. Bill is to reform the U.K.’s data protection regime following Brexit. If passed, the final version of the U.K. Bill may have the effect of further altering the similarities between the U.K. and EEA data protection regime and threaten the U.K. adequacy decision from the EC. Failure to comply with the requirements of the GDPR may result in warning letters, mandatory audits, orders to cease/change the use of data, and financial penalties, including fines of up to 4% of global revenues, or 20.0 million Euros (17.5 million GBP in the U.K.), whichever is greater. Moreover, data subjects can seek damages for violations, and non-profit organizations can bring claims on behalf of data subjects.

Current wording

around the world, many countries have enacted laws that regulate data protection. In the EEA, the collection and use of personal data is regulated by the GDPR and the member states’ related data protection and privacy laws. As the GDPR applies not only to businesses that are established within the EEA or the U.K. but also to any business that offers goods or services to individuals in those territories, it could apply to us. The GDPR imposes strict requirements, including requirements to ensure an appropriate legal basis or condition applies to the processing of personal data, special protections for “sensitive” personal data which includes health and genetic information of individuals in the EEA or the U.K.; expanded disclosures about the personal data use; information retention limitations; mandatory data breach notification requirements; and additional oversight obligations relating to third parties retained to process the personal data. The GDPR grants or enhances the rights of individuals with respect to their personal data, including the rights to object to the processing of the data and request deletion of the same. In addition, the GDPR includes strict requirements on, and prohibits, the transfer of personal data subject to GDPR to jurisdictions that have not been deemed by competent authorities to offer “adequate” privacy protections (“third countries”), unless a derogation exists or a valid GDPR transfer mechanism (for example, the EC approved Standard Contractual Clauses, certification to the EU-U.S. Data Privacy Framework (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in the framework) and the U.K. International Data Transfer Agreement/Addendum) has been put in place and a transfer impact assessment has been carried out. Our compliance with international data transfer obligations under the GDPR, where applicable, may require significant effort and cost, and may limit our ability to transfer such personal data to other jurisdictions or to work with certain service providers that process personal data, and may require us to make strategic considerations around where such personal data is stored. Further, although the EC has acknowledged that the U.K. currently has adequate protections for international data transfers, there may be post-Brexit developments in the future that result in additional costs and operational challenges in complying with the U.K. GDPR and any other developments regulating the transfer of personal data between the U.K. and EU. For example, the U.K. government has now introduced a Data Protection and Digital Information Bill (the “U.K. Bill”) into the U.K. legislative process. The aim of the U.K. Bill is to reform the U.K.’s data protection regime following Brexit. If passed, the final version of the U.K. Bill may have the effect of further altering the similarities between the U.K. and EEA data protection regime and threaten the U.K. adequacy decision …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Corporation (“FDIC”) took control of First Republic Bank and JP Morgan Chase & Co. has since acquired a substantial amount of assets and certain liabilities of First Republic. Although the U.S. Department of Treasury, FDIC and Federal Reserve Board have announced a program to provide up to $25.0 billion of loans to financial institutions secured by certain government securities held by financial institutions to mitigate the risk of potential losses on the sale of such instruments, there is no guarantee that such loans will fully mitigate the risk of potential losses or that the U.S. Department of Treasury, FDIC and Federal Reserve Board will provide access to uninsured funds in the future in the event of the closure of other banks or financial institutions, or that they would do so in a timely fashion. We assess our banking relationships as we believe necessary or appropriate, but uncertainty remains over liquidity concerns in the broader financial services industry, and our business, our business partners, or industry as a whole may be adversely impacted in ways that we cannot predict at this time, including our ability to access cash in amounts adequate to finance or capitalize our current and/or projected business operations could be significantly impaired by factors that affect the financial institutions with which we have banking relationships, and in turn, us. These factors could include, among others, events such as liquidity constraints or failures, the ability to perform obligations under various types of financial, credit or liquidity agreements or arrangements (including cash management arrangements), disruptions or instability in the financial services industry or financial markets, or concerns or negative expectations about the prospects for companies in the financial services industry. In addition, our vendors, such as our CMOs, CROs or business partners, may be susceptible to the foregoing liquidity or other financial risks and factors, which could, in turn, have a material adverse effect on our current and/or projected business operations and results of operations and financial condition.

Current wording

A portion of our cash may be held by financial institutions that may have been, or could in the future become, exposed to liquidity issues, bank failures or other systemic financial risks. Our uninsured cash deposits with such financial institutions may be at risk in the event they experience liquidity problems or other financial losses. For example, in May 2023, the Federal Deposit Insurance Corporation (“FDIC”) took control of First Republic Bank and JP Morgan Chase & Co. has since acquired a substantial amount of assets and certain liabilities of First Republic. Although the U.S. Department of Treasury, FDIC and Federal Reserve Board have announced a program to provide up to $25.0 billion of loans to financial institutions secured by certain government securities held by financial institutions to mitigate the risk of potential losses on the sale of such instruments, there is no guarantee that such loans will fully mitigate the risk of potential losses or that the U.S. Department of Treasury, FDIC and Federal Reserve Board will provide access to uninsured funds in the future in the event of the closure of other banks or financial institutions, or that they would do so in a timely fashion. We assess our banking relationships as we believe necessary or appropriate, but uncertainty remains over liquidity concerns in the broader financial services industry, and our business, our business partners, or industry as a whole may be adversely impacted in ways that we cannot predict at this time, including our ability to access cash in amounts adequate to finance or capitalize our current and/or projected business operations could be significantly impaired by factors that affect the financial institutions with which we have banking relationships, and in turn, us. These factors could include, among others, events such as liquidity constraints or failures, the ability to perform obligations under various types of financial, credit or liquidity agreements or arrangements (including cash management arrangements), disruptions or instability in the financial services industry or financial markets, or concerns or negative expectations about the prospects for companies in the financial services industry. In addition, our vendors, such as our CMOs, CROs or business partners, may be susceptible to the foregoing liquidity or other financial risks and factors, which could, in turn, have a material adverse effect on our current and/or projected business operations and results of operations and financial condition.
Rearranged current paragraphs (1)

Current report — wording carried from elsewhere

raw material cost, shortages or contamination; natural disasters, such as pandemics or other outbreaks or similar public health crises; disruption in utility services; human error; insufficient personnel; inability to meet legal or regulatory requirements; or disruptions in the operations of our suppliers.
Rearranged previous paragraphs (2)

Previous report — wording carried elsewhere

around the world, many countries have enacted laws that regulate data protection. In the EEA, the collection and use of personal data is regulated by the GDPR and the member states’ related data protection and privacy laws. As the GDPR applies not only to businesses that are established within the EEA or the U.K. but also to any business that offers goods or services to individuals in those territories, it could apply to us. The GDPR imposes strict requirements, including requirements to ensure an appropriate legal basis or condition applies to the processing of personal data, special protections for “sensitive” personal data which includes health and genetic information of individuals in the EEA or the U.K.; expanded disclosures about the personal data use; information retention limitations; mandatory data breach notification requirements; and additional oversight obligations relating to third parties retained to process the personal data. The GDPR grants or enhances the rights of individuals with respect to their personal data, including the rights to object to the processing of the data and request deletion of the same. In addition, the GDPR includes strict requirements on, and prohibits, the transfer of personal data subject to GDPR to jurisdictions that have not been deemed by competent authorities to offer “adequate” privacy protections (“third countries”), unless a derogation exists or a valid GDPR transfer mechanism (for example, the EC approved Standard Contractual Clauses, certification to the EU-U.S. Data Privacy Framework (which allows for transfers for relevant

Previous report — wording carried elsewhere

A portion of our cash may be held by financial institutions that may have been, or could in the future become, exposed to liquidity issues, bank failures or other systemic financial risks. Our uninsured cash deposits with such financial institutions may be at risk in the event they experience liquidity problems or other financial losses. For example, in May 2023, the Federal Deposit Insurance