Atara Biotherapeutics Inc
For the period ended Sep 30, 2024. Filed Nov 12, 2024.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Sep 30, 2024 · Filed Nov 12, 2024
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2024-06-30; filed 2024-08-12.
0000950170-24-095533
Item 1A. Risk FactorsOther InformationCurrent report: 10-Q
Period ended 2024-09-30; filed 2024-11-12.
0000950170-24-125389
Item 1A. Risk FactorsOther InformationThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 412 previous paragraphs and 414 current paragraphs.
393 unchanged; 17 reworded; 2 added; 0 removed; 2 previous and 2 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (2)
Current report
Furthermore, we are responsible for manufacturing and supplying tab-cel to Pierre Fabre for commercialization in the Territory at cost plus a margin until the transfer of manufacturing responsibility to Pierre Fabre. Pierre Fabre will assume the responsibility and cost for the manufacture and supply of tab-cel in the Territory upon the Manufacturing Transition Date, which is defined as the earlier of i) the date on which all activities relating to the transfer of tab-cel manufacturing, pursuant to the A&R Commercialization Agreement, from Atara to Pierre Fabre have been completed to the reasonable satisfaction of both parties, or ii) December 31, 2025, throughout the remainder of the term of the A&R Commercialization Agreement. Pierre Fabre and we are to use commercially reasonable efforts to achieve this prior to the earlier transfer date from Atara to Pierre Fabre of the first marketing authorization in the Additional Territory or the first BLA. Any delays in completing the manufacturing transfer to Pierre Fabre will increase our costs in order to meet our supply obligations and adversely impact our ability to develop our product candidates.
Current report
Cybersecurity requirements are laid down in various laws in the EU and the UK, the key ones being: (i) the GDPR (as discussed above), which requires controllers and processors to implement appropriate technical and organizational measures to safeguard personal data to a level of security appropriate to the data protection risk; (ii) the UK Network and Information Systems Regulation 2018 (NIS Regulations), and (iii) EU Network and Information Systems Security 2 Directive (NISD2). Under the NISD2, stringent cybersecurity and incident reporting requirements are imposed on ‘essential’ and ‘important’ entities, including, for example, entities carrying out research and development activities of medicinal. NISD2 states that any maximum fine which national implementing law provides for should at least be set at €10 million or 2% of total worldwide turnover, whichever is higher, where essential entities are concerned. Other sanctions may include (i) a temporary suspension to provide services in the EU (by suspending relevant authorizations/certifications); (ii) an order to make public certain elements of the infringement and/or inform customers; and (iii) injunctions to immediately cease infringing conduct. Importantly, NISD2 also provides that senior members of staff can be held personally liable, and face administrative fines or be temporarily suspended from exercising managerial functions at the legal representative or chief executive officer level.
Reworded paragraphs (17)
Previous wording
Investment in biopharmaceutical product development is highly speculative because it entails substantial upfront capital expenditures and significant risk that product candidates will fail to prove effective, gain regulatory approval or become commercially viable. We have one product, Ebvallo, which is approved in the EAA, the UK and Switzerland and have generated limited revenues from commercialization, and have incurred significant research, development and other expenses related to our ongoing operations and expect to continue to incur such expenses. As a result, we have incurred significant operating losses in every annual reporting period since our inception. For the six months ended June 30, 2024, we reported a net loss of $50.8 million.
Current wording
Investment in biopharmaceutical product development is highly speculative because it entails substantial upfront capital expenditures and significant risk that product candidates will fail to prove effective, gain regulatory approval or become commercially viable. We have one product, Ebvallo, which is approved in the EAA, the UK and Switzerland and have generated limited revenues from commercialization, and have incurred significant research, development and other expenses related to our ongoing operations and expect to continue to incur such expenses. As a result, we have incurred significant operating losses in every annual reporting period since our inception. For the nine months ended September 30, 2024, we reported a net loss of $72.7 million.
Previous wording
We expect that our existing cash, cash equivalents and short-term investments, combined with certain anticipated payments from the A&R Commercialization Agreement, as well as cost reductions from completed workforce reductions and operating efficiencies resulting from our planned transition of substantially all activities relating to tab-cel at the time of the BLA transfer to Pierre Fabre, will enable us to fund our planned operations into 2027. Such anticipated payments are estimates based on assumptions and plans that are subject to change and such changes could materially impact our cash runway. These assumptions include the receipt of future payments that are dependent upon the successful acceptance and approval of the tab-cel BLA, as well as the completion of specific development and regulatory activities by us and actions taken by third parties, and are, therefore, uncertain at this time. Our operating plan may change as a result of many factors currently unknown to us, and we may need additional funds sooner than planned. We do not have any committed external source of funds other than milestone and royalty payments that we may receive under the A&R Commercialization Agreement, subject to the terms of the HCRx Agreement. We do not retain any meaningful milestone or royalty payments related to the Initial Territory from Pierre Fabre until the applicable royalty cap under the HCRx Agreement is met, if at all. As of June 30, 2024, we had total cash, cash equivalents and short-term investments of $35.3 million. Our existing cash, cash equivalents and short-term investments as of June 30, 2024 will not be sufficient to fund our planned operations for at least the next twelve months from the date of issuance of these financial statements. These conditions, including the uncertainties surrounding our receipt of certain anticipated payments, raise substantial doubt about our ability to continue as a going concern for at least 12 months after the issuance of the accompanying condensed consolidated financial statements.
Current wording
We expect that our existing cash, cash equivalents and short-term investments, combined with certain anticipated payments from the A&R Commercialization Agreement, as well as cost reductions from completed workforce reductions and operating efficiencies resulting from our planned transition of substantially all activities relating to tab-cel at the time of the BLA transfer to Pierre Fabre, will enable us to fund our planned operations into 2027. Such anticipated payments are estimates based on assumptions and plans that are subject to change and such changes could materially impact our cash runway. These assumptions include the receipt of future payments that are dependent upon the successful acceptance and approval of the tab-cel BLA, as well as the completion of specific development and regulatory activities by us and actions taken by third parties, and are, therefore, uncertain at this time. Our operating plan may change as a result of many factors currently unknown to us, and we may need additional funds sooner than planned. We do not have any committed external source of funds other than milestone and royalty payments that we may receive under the A&R Commercialization Agreement, subject to the terms of the HCRx Agreement. We do not retain any meaningful milestone or royalty payments related to the Initial Territory from Pierre Fabre until the applicable royalty cap under the HCRx Agreement is met, if at all. As of September 30, 2024, we had total cash, cash equivalents and short-term investments of $67.2 million. Our existing cash, cash equivalents and short-term investments as of September 30, 2024 will not be sufficient to fund our planned operations for at least the next twelve months from the date of issuance of these financial statements. These conditions, including the uncertainties surrounding our receipt of certain anticipated payments, raise substantial doubt about our ability to continue as a going concern for at least 12 months after the issuance of the accompanying condensed consolidated financial statements.
Previous wording
The FDA or a comparable foreign regulatory authority may require information beyond what we plan to provide in or expect to be required for a marketing application, including additional CMC information, preclinical or clinical data to support approval. These requirements may delay or prevent approval and our commercialization plans, or we may decide to abandon the development program. For example, at a Type B meeting in February 2022, we were not able to align with the FDA on comparability between tab-cel product versions used in the pivotal ALLELE study and the intended commercial product. The FDA initially recommended we conduct a new clinical trial with the commercial product to address the lack of alignment on comparability and to gain additional clinical experience with the intended commercial product. Throughout 2023, we held a number of meetings with the FDA on clinical and CMC aspects for a potential BLA submission for tab-cel. Ultimately, we reached agreement with the FDA on the comparability of tab-cel product manufactured using a different process version with the intended commercial product and subsequently held a pre-BLA meeting with the FDA that supported our plan to submit the tab-cel BLA in the second quarter of 2024. The BLA was submitted in May 2024, and the FDA accepted the BLA submission in July 2024 and granted priority review with a Prescription Drug User Fee Act target action date of January 15, 2025. Although the FDA has accepted and granted priority review for the submitted tab-cel BLA, a breakthrough designation (BTD) status is not considered in the FDA's decision to approve or not approve a product candidate. Designation as a breakthrough therapy is at the discretion of the FDA, and receipt of a BTD designation may not result in a faster development process, review or approval compared to drugs considered for approval under non-expedited FDA review procedures and does not assure ultimate approval by the FDA. In addition, the FDA may later decide that the product no longer meets the conditions for qualification and rescind the BTD designation or decide that the time period for FDA review or approval will not be shortened. Furthermore, our CMOs for tab-cel will need to be prepared to undergo pre-approval inspection in connection with our tab-cel BLA, and we cannot be certain that we will be able to adequately support them through such inspection nor that they will successfully pass any such inspection. The FDA ultimately may not approve the BLA based on the data provided, including a concern that the current clinical dataset is insufficient. In this case, the conduct of an additional clinical trial or trials in the lead indication or completing the ongoing ALLELE study may be necessary to support a BLA approval for tab-cel. If the FDA determines that the data package included in the original BLA submission is insufficient and issues a Complete Response Letter, this would result in a considerable delay to a subsequent BLA …
Excerpt shortened here; the source contains the full paragraph.
Current wording
The FDA or a comparable foreign regulatory authority may require information beyond what we plan to provide in or expect to be required for a marketing application, including additional CMC information, preclinical or clinical data to support approval. These requirements may delay or prevent approval and our commercialization plans, or we may decide to abandon the development program. For example, at a Type B meeting in February 2022, we were not able to align with the FDA on comparability between tab-cel product versions used in the pivotal ALLELE study and the intended commercial product. The FDA initially recommended we conduct a new clinical trial with the commercial product to address the lack of alignment on comparability and to gain additional clinical experience with the intended commercial product. Throughout 2023, we held a number of meetings with the FDA on clinical and CMC aspects for a potential BLA submission for tab-cel. Ultimately, we reached agreement with the FDA on the comparability of tab-cel product manufactured using a different process version with the intended commercial product and subsequently held a pre-BLA meeting with the FDA that supported our plan to submit the tab-cel BLA in the second quarter of 2024. The BLA was submitted in May 2024, and the FDA accepted the BLA submission in July 2024 and granted priority review with a Prescription Drug User Fee Act target action date of January 15, 2025. Although the FDA designated tabelecleucel as a breakthrough therapy, a breakthrough designation (BTD) status is not considered in the FDA's decision to approve or not approve a product candidate. Designation as a breakthrough therapy is at the discretion of the FDA, and receipt of a BTD designation may not result in a faster development process, review or approval compared to drugs considered for approval under non-expedited FDA review procedures and does not assure ultimate approval by the FDA. In addition, the FDA may later decide that the product no longer meets the conditions for qualification and rescind the BTD designation or decide that the time period for FDA review or approval will not be shortened. Furthermore, our CMOs for tab-cel will undergo pre-approval inspection in connection with our tab-cel BLA, and we cannot be certain that we will be able to adequately support them through such inspection nor that they will successfully pass any such inspection. Some clinical sites that participated in tabelecleucel studies will also undergo inspection, and the FDA may also choose to inspect us as the sponsor of these studies.The FDA ultimately may not approve the BLA based on the data provided, including a concern that the current clinical dataset is insufficient. In this case, the conduct of an additional clinical trial or trials in the lead indication or completing the ongoing ALLELE study may be necessary to support a BLA approval for tab-cel. If the FDA determines that the data package included in the original BLA subm…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
Our development activities and/or commercialization planning with our partners could be harmed or delayed by governmental or regulatory delays due to a variety of factors. These factors include limitations on the availability of governmental and regulatory agency personnel to review regulatory filings or engage with us (caused by global health concerns or otherwise, including the COVID-19 pandemic); changes to governmental regulatory requirements, policies, guidelines or priorities, reallocation, or availability of government resources; or for other reasons, that may significantly delay the FDA’s, or other regulatory agencies', ability to review and process any submissions we have filed or may file or cause other regulatory delays. If global health concerns prevent the FDA or other regulatory authorities from conducting their regular inspections, or impact reviews or other regulatory activities, it could significantly impact the ability of the FDA or other regulatory authorities to review and process our regulatory submissions in a timely fashion, which could have a material adverse effect on our business. For example, in response to the COVID-19 pandemic, on March 10, 2020, the FDA announced its intention to postpone most inspections of foreign manufacturing facilities and products inspections of domestic manufacturing facilities through April 2020. On March 18, 2020, the FDA announced its intention to postpone temporarily routine surveillance inspections of domestic manufacturing facilities and provided guidance regarding the conduct of clinical trials. On July 10, 2020, the FDA announced that it is working toward the goal of restarting on-site inspections it deems to be “mission critical.” In May 2021, the FDA updated its guidance, first published in August 2020, clarifying how it intends to conduct inspections during the COVID-19 pandemic, including how it plans to determine which inspections are “mission critical.” Additionally, on April 14, 2021, the FDA issued a guidance document in which the FDA described its plans to conduct voluntary remote interactive evaluations of certain drug manufacturing facilities and clinical research sites. According to the guidance, the FDA intends to request such remote interactive evaluations in situations where an in-person inspection would not be prioritized, deemed mission-critical, or where direct inspection is otherwise limited by travel restrictions, but where the FDA determines that remote evaluation would still be appropriate. The FDA intends to use this risk-based assessment system to identify the categories of regulatory activity that can occur within a given geographic area, ranging from mission critical inspections to resumption of all regulatory activities. The FDA has since adjusted its inspection activities in response to the COVID-19 pandemic. On December 29, 2021, the FDA implemented temporary changes to its inspection activities to ensure the safety of its employees and regulated firms. On …
Excerpt shortened here; the source contains the full paragraph.
Current wording
2020, the FDA announced that it is working toward the goal of restarting on-site inspections it deems to be “mission critical.” In May 2021, the FDA updated its guidance, first published in August 2020, clarifying how it intends to conduct inspections during the COVID-19 pandemic, including how it plans to determine which inspections are “mission critical.” Additionally, on April 14, 2021, the FDA issued a guidance document in which the FDA described its plans to conduct voluntary remote interactive evaluations of certain drug manufacturing facilities and clinical research sites. According to the guidance, the FDA intends to request such remote interactive evaluations in situations where an in-person inspection would not be prioritized, deemed mission-critical, or where direct inspection is otherwise limited by travel restrictions, but where the FDA determines that remote evaluation would still be appropriate. The FDA intends to use this risk-based assessment system to identify the categories of regulatory activity that can occur within a given geographic area, ranging from mission critical inspections to resumption of all regulatory activities. The FDA has since adjusted its inspection activities in response to the COVID-19 pandemic. On December 29, 2021, the FDA implemented temporary changes to its inspection activities to ensure the safety of its employees and regulated firms. On February 2, 2022, FDA announced that it would resume domestic surveillance inspections across all product areas on February 7, 2022. In July 2022, FDA published draft guidance outlining its policies regarding remote regulatory assessments. On May 11, 2023, the COVID-19 Public Health Emergency (PHE) declared under the Public Health Services (PHS) Act expired. It is unclear how FDA’s and other health agencies’ policies and guidance will impact any inspections of our facilities or clinical trial sites involved with our clinical studies.
Previous wording
Furthermore, these third parties may also have relationships with other entities, some of which may be our competitors. Reliance on CROs entails risks to which we would not be subject if we conducted our clinical studies ourselves, including reliance on the CRO for clinical site initiation and monitoring, the possibility that the CRO does not maintain the financial resources to meet its obligations under our agreements, the possibility of breach of these agreements by the CRO because of factors beyond our control, including a failure to properly perform their obligations under these agreements, and the possibility of termination or non-renewal of the agreements by the CROs, based on their own business priorities, at a time that is costly or damaging to us. For example, the CRL MSA expires on August 31, 2024. While we are in active negotiations with CRL for a new commercial manufacturing agreement, there can be no assurance that we will be able to enter into a new commercial drug product supply agreement with CRL on terms favorable or acceptable to us or at all. Any delays in entering into a new commercial manufacturing agreement and/or further extension of the current CRL MSA could delay the development and commercialization of our product and product candidates, if approved. In addition, if we are unable enter into a new commercial manufacturing agreement with CRL on acceptable terms, or at all, we would have to explore other options for the manufacture of our product and product candidates, which could harm our business. Our reliance on these third parties for research and development activities will reduce our control over these activities but will not relieve us of our regulatory responsibilities. For example, we will remain responsible for ensuring that each of our clinical trials is conducted in accordance with the general investigational plan, study protocols for the trial, statistical analysis plan and other study-specific documents (for example, monitoring and blinding plans). Moreover, the FDA requires us to comply with standards, commonly referred to as Good Clinical Practice (GCP), International Council for Harmonization of Technical Requirements for Pharmaceuticals for Human Use, or ICH, guidelines, and regulations regarding the informed consent process, safety reporting requirements, data collection guidelines, and other regulations for conducting, recording and reporting the results of clinical trials to assure that data and reported results are credible and accurate and that the rights, integrity and confidentiality of trial participants are protected. The EMA also requires us to comply with similar standards. Regulatory authorities enforce these GCP requirements through periodic inspections of trial sponsors, principal investigators and trial sites. If we or any of our CROs fail to comply with applicable GCP requirements, the clinical data generated in our clinical trials may be deemed unreliable and the FDA, EMA or comparable fo…
Excerpt shortened here; the source contains the full paragraph.
Current wording
We rely on CROs, other vendors and clinical study sites to ensure the proper and timely conduct of our clinical studies, and while we have agreements governing their committed activities, we have limited influence over their actual performance. Furthermore, these third parties may also have relationships with other entities, some of which may be our competitors. Reliance on CROs entails risks to which we would not be subject if we conducted our clinical studies ourselves, including reliance on the CRO for clinical site initiation and monitoring, the possibility that the CRO does not maintain the financial resources to meet its obligations under our agreements, the possibility of breach of these agreements by the CRO because of factors beyond our control, including a failure to properly perform their obligations under these agreements, and the possibility of termination or non-renewal of the agreements by the CROs, based on their own business priorities, at a time that is costly or damaging to us. For example, the CRL MSA expired on August 31, 2024. While we are in negotiations with CRL for an amendment to further extend the term of the CRL MSA and for a new commercial manufacturing agreement, there can be no assurance that we will be able to further extend the CRL MSA or enter into a new commercial drug product supply agreement with CRL on terms favorable or acceptable to us or at all. Any delays in entering into a new commercial manufacturing agreement and/or further extension of the current CRL MSA could delay the development and commercialization of our product and product candidates, if approved. In addition, if we are unable enter into a new commercial manufacturing agreement with CRL on acceptable terms, or at all, we would have to explore other options for the manufacture of our product and product candidates, which could harm our business. Our reliance on these third parties for research and development activities will reduce our control over these activities but will not relieve us of our regulatory responsibilities. For example, we will remain responsible for ensuring that each of our clinical trials is conducted in accordance with the general investigational plan, study protocols for the trial, statistical analysis plan and other study-specific documents (for example, monitoring and blinding plans). Moreover, the FDA requires us to comply with standards, commonly referred to as Good Clinical Practice (GCP), International Council for Harmonization of Technical Requirements for Pharmaceuticals for Human Use, or ICH, guidelines, and regulations regarding the informed consent process, safety reporting requirements, data collection guidelines, and other regulations for conducting, recording and reporting the results of clinical trials to assure that data and reported results are credible and accurate and that the rights, integrity and confidentiality of trial participants are protected. The EMA also requires us to comply with similar standa…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
Reliance on third party manufacturers entails risks to which we would not be subject if we manufactured product and product candidates ourselves, including reliance on the third party for regulatory compliance and quality assurance, the possibility that the third party manufacturer does not maintain the financial resources to meet its obligations under the manufacturing agreement, the possibility of breach of the manufacturing agreement by the third party because of factors beyond our control, including a failure to manufacture our product candidates or any products we or our partners may eventually commercialize in accordance with our specifications, misappropriation of our proprietary information, including our trade secrets and know-how, the possibility that the third party does not devote sufficient time or resources to our product candidates or any products we or our partners may eventually commercialize based on its own business priorities, the possibility that the third party is acquired by another party and changes its business priorities, and the possibility of termination or nonrenewal of the agreement by the third party, based on its own business priorities, at a time that is costly or damaging to us. For example, the CRL MSA expires on April 30, 2024. While we are in active negotiations with CRL for an amendment to further extend the CRL MSA and a new commercial manufacturing agreement, there can be no assurance that we will be able to further extend the CRL MSA or enter into a new commercial drug product supply agreement with CRL on terms favorable or acceptable to us or at all. Any delays in entering into a new commercial manufacturing agreement and/or further extension of the current CRL MSA could delay the development and commercialization of our product and product candidates, if approved. In addition, if we are unable enter into a new commercial manufacturing agreement with CRL on acceptable terms, or at all, we would have to explore other options for the manufacture of our product and product candidates, which could harm our business. If Fujifilm does not perform its obligations under the Fujifilm MSA adequately or does not devote sufficient time or resources to our product or product candidates, our operations, including the commercialization of our products, may be adversely impacted. Similarly, if CRL does not perform its obligations under the CRL MSA adequately or does not devote sufficient time or resources to our product or product candidates, our operations, including the commercialization of our products, may be adversely impacted. We also have non-cancellable minimum purchase commitments for products and services in certain of our agreements with our CMOs, if we do not fulfill such minimum purchase commitments, we will need to pay such CMOs the difference between the applicable minimum purchase commitment and our actual purchases of products and services for a given period. In addition, the FDA and other regulatory aut…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Reliance on third party manufacturers entails risks to which we would not be subject if we manufactured product and product candidates ourselves, including reliance on the third party for regulatory compliance and quality assurance, the possibility that the third party manufacturer does not maintain the financial resources to meet its obligations under the manufacturing agreement, the possibility of breach of the manufacturing agreement by the third party because of factors beyond our control, including a failure to manufacture our product candidates or any products we or our partners may eventually commercialize in accordance with our specifications, misappropriation of our proprietary information, including our trade secrets and know-how, the possibility that the third party does not devote sufficient time or resources to our product candidates or any products we or our partners may eventually commercialize based on its own business priorities, the possibility that the third party is acquired by another party and changes its business priorities, and the possibility of termination or nonrenewal of the agreement by the third party, based on its own business priorities, at a time that is costly or damaging to us. For example, the CRL MSA expired on August 31, 2024. While we are in negotiations with CRL for an amendment to further extend the CRL MSA and a new commercial manufacturing agreement, there can be no assurance that we will be able to further extend the CRL MSA or enter into a new commercial drug product supply agreement with CRL on terms favorable or acceptable to us or at all. Any delays in entering into a new commercial manufacturing agreement and/or further extension of the current CRL MSA could delay the development and commercialization of our product and product candidates, if approved. In addition, if we are unable enter into a new commercial manufacturing agreement with CRL on acceptable terms, or at all, we would have to explore other options for the manufacture of our product and product candidates, which could harm our business. If Fujifilm does not perform its obligations under the Fujifilm MSA adequately or does not devote sufficient time or resources to our product or product candidates, our operations, including the commercialization of our products, may be adversely impacted. Similarly, if CRL does not perform its obligations under the CRL MSA adequately or does not devote sufficient time or resources to our product or product candidates, our operations, including the commercialization of our products, may be adversely impacted. We also have non-cancellable minimum purchase commitments for products and services in certain of our agreements with our CMOs, if we do not fulfill such minimum purchase commitments, we will need to pay such CMOs the difference between the applicable minimum purchase commitment and our actual purchases of products and services for a given period. In addition, the FDA and other regulatory authoriti…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
We and our partners have filed a number of patent applications covering our product and product candidates or methods of using or making the product and those product candidates. We cannot offer any assurances about which, if any, patents will be issued with respect to these pending patent applications, the breadth of any such patents that are ultimately issued or whether any issued patents will be found invalid and unenforceable or will be threatened by third parties. Because patent applications in the U.S. and most other countries are confidential for a period of time after filing, and some remain so until issued, we cannot be certain that we or our partners were the first to file any patent application related to a product or product candidate. We or our partners may also become involved in proceedings regarding our patents, including patent infringement lawsuits, interference or derivation proceedings, oppositions, andinter partes and post-grant review proceedings before the USPTO the European Patent Office and other non-U.S. patent offices.
Current wording
We and our partners have filed a number of patent applications covering our product and product candidates or methods of using or making the product and those product candidates. We cannot offer any assurances about which, if any, patents will be issued with respect to these pending patent applications, the breadth of any such patents that are ultimately issued or whether any issued patents will be found invalid and unenforceable or will be threatened by third parties. Because patent applications in the U.S. and most other countries are confidential for a period of time after filing, and some remain so until issued, we cannot be certain that we or our partners were the first to file any patent application related to a product or product candidate. We or our partners may also become involved in proceedings regarding our patents, including patent infringement lawsuits, interference or derivation proceedings, oppositions, andinter partes and post-grant review proceedings before the USPTO the European Patent Office and other foreign patent offices.
Previous wording
We hold rights under license agreements with our partners, including MSK and QIMR Berghofer that are important to our business. Our discovery and development platform is built, in part, around patent rights in-licensed from our partners. Under our existing license agreements, we are subject to various obligations, including diligence obligations with respect to development and commercialization activities, payment obligations upon achievement of certain milestones and royalties on product sales. If there is any conflict, dispute, disagreement or issue of nonperformance between us and our counterparties regarding our rights or obligations under these license agreements, including any conflict, dispute or disagreement arising from our failure to satisfy diligence or payment obligations, we may be liable to pay damages and our counterparties may have a right to terminate the affected license. The termination of any license agreement with one of our partners would materially adversely affect our ability to utilize the intellectual property that is subject to that license agreement in our drug discovery and development efforts, our ability to enter into future collaboration, licensing and/or marketing agreements for one or more affected product and product candidates and our, or our partners’ ability to commercialize the affected product and product candidates. Furthermore, a disagreement under any of these license agreements may harm our relationship with the partner, which could have negative impacts on other aspects of our business.
Current wording
We hold rights under license agreements with our partners, including MSK and QIMR Berghofer that are important to our business. Our discovery and development platform is built, in part, around patent rights in-licensed from our partners. Under our existing license agreements, we are subject to various obligations, including diligence obligations with respect to development and commercialization activities, payment obligations upon achievement of certain milestones and royalties on product sales. If there is any conflict, dispute, disagreement or issue of nonperformance between us and our counterparties regarding our rights or obligations under these license agreements, including any conflict, dispute or disagreement arising from our failure to satisfy diligence or payment obligations, we may be liable to pay damages and our counterparties may have a right to terminate the affected license. For example, we are in disagreement with MSK on whether we owe a portion of the upfront payments and milestones we received from Pierre Fabre under the A&R Commercialization Agreement to MSK under the terms of our license agreements with MSK. We plan to enter into evaluative non-binding mediation with MSK to potentially resolve this disagreement. There is no guarantee we will reach a favorable outcome in the mediation or on this matter and we may owe a portion of future milestones we receive from Pierre Fabre to MSK. The termination of any license agreement with one of our partners would materially adversely affect our ability to utilize the intellectual property that is subject to that license agreement in our drug discovery and development efforts, our ability to enter into future collaboration, licensing and/or marketing agreements for one or more affected product and product candidates and our, or our partners’ ability to commercialize the affected product and product candidates. Furthermore, a disagreement under any of these license agreements may harm our relationship with the partner, which could have negative impacts on other aspects of our business.
Previous wording
There have been judicial and Congressional challenges to numerous elements of the ACA, as well as efforts by both the executive and legislative branches of the federal government to repeal or replace certain aspects of the ACA. While the U.S. Congress has not passed comprehensive repeal legislation, it has enacted laws that modify certain provisions of the ACA, such as removing penalties, starting January 1, 2019, for not complying with the ACA’s individual mandate to carry health insurance and eliminating the implementation of certain mandated fees. On June 17, 2021, the U.S. Supreme Court dismissed a legal challenge to the law brought by several states arguing that, without the individual mandate, the entire ACA was unconstitutional. The Supreme Court dismissed the lawsuit without ruling on the merits of the states’ constitutionality arguments. Further, the IRA, signed into law in August 2022, extended the provision of enhanced subsidies for individuals purchasing health coverage through the ACA marketplace. The enhanced subsidies, which were originally passed as part of the American Rescue Plan Act are now extended through 2025. In the future, there may be additional challenges and/or amendments to the ACA. It is unclear how future litigation and the healthcare reform measures of the Biden administration will impact the ACA and our business.
Current wording
There have been judicial and Congressional challenges to numerous elements of the ACA, as well as efforts by both the executive and legislative branches of the federal government to repeal or replace certain aspects of the ACA. While the U.S. Congress has not passed comprehensive repeal legislation, it has enacted laws that modify certain provisions of the ACA, such as removing penalties, starting January 1, 2019, for not complying with the ACA’s individual mandate to carry health insurance and eliminating the implementation of certain mandated fees. On June 17, 2021, the U.S. Supreme Court dismissed a legal challenge to the law brought by several states arguing that, without the individual mandate, the entire ACA was unconstitutional. The Supreme Court dismissed the lawsuit without ruling on the merits of the states’ constitutionality arguments. Further, the Inflation Reduction Act (IRA), signed into law in August 2022, extended the provision of enhanced subsidies for individuals purchasing health coverage through the ACA marketplace. The enhanced subsidies, which were originally passed as part of the American Rescue Plan Act are now extended through 2025. In the future, there may be additional challenges and/or amendments to the ACA. It is unclear how future litigation and the healthcare reform measures of future presidential administrations will impact the ACA and our business.
Previous wording
Legislative and regulatory proposals have been made to expand post-approval requirements and restrict sales and promotional activities for pharmaceutical products. We cannot be sure whether additional legislative changes will be enacted, or whether the U.S. or foreign regulations, guidance or interpretations will be changed, or what the impact of these changes on the regulatory approvals of our product and product candidates, if any, may be. In the U.S., the EU and other potentially significant markets for our product and product candidates, government authorities and third party payors are increasingly attempting to limit or regulate the price of medical products and services, particularly for new and innovative products and therapies, which has resulted in lower average selling prices for certain products in certain markets. In the U.S., there have been several Congressional inquiries and proposed and enacted federal and state legislation designed to, among other things, bring more transparency to drug pricing, review the relationship between pricing and manufacturer patient programs, and reform government program reimbursement methodologies for drugs. For example, the Consolidated Appropriations Act of 2021 included several drug price reporting and transparency measures, such as a new requirement for certain Medicare plans to develop tools to display Medicare Part D prescription drug benefit information in real time and for group and health insurance issuers to report information on pharmacy benefit and drug costs to the Secretaries of Health and Human Services, Labor, and the Treasury. Additionally, the IRA allows Medicare to: beginning in 2026, establish a “maximum fair price” for certain pharmaceutical and biological products covered under Medicare Parts B and D; beginning in 2023, penalize drug companies that raise prices for products covered under Medicare Parts B and D faster than inflation; and beginning in 2025 impose new discount obligations on pharmaceutical and biological manufacturers for products covered under Medicare Part D. CMS continues to take steps to implement the IRA, including, most notably: on June 30, 2023, issuing guidance detailing the requirements and parameters of the first round of price negotiations, to take place during 2023 and 2024, for products subject to the “maximum fair price” provision that would become effective in 2026; on August 29, 2023, releasing the initial list of ten drugs subject to price negotiations; and on June 26, 2024, releasing a list of 64 Medicare Part B products that had an adjusted coinsurance rate based on the inflationary rebate provisions of the IRA for the time period of July 1, 2024 to September 30, 2024. While it remains to be seen how the drug pricing provisions imposed by the IRA will affect the broader pharmaceutical industry, several pharmaceutical manufacturers and other industry stakeholders have challenged the law, including through lawsuits brought against the U.S. Departme…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Legislative and regulatory proposals have been made to expand post-approval requirements and restrict sales and promotional activities for pharmaceutical products. We cannot be sure whether additional legislative changes will be enacted, or whether the U.S. or foreign regulations, guidance or interpretations will be changed, or what the impact of these changes on the regulatory approvals of our product and product candidates, if any, may be. In the U.S., the EU and other potentially significant markets for our product and product candidates, government authorities and third party payors are increasingly attempting to limit or regulate the price of medical products and services, particularly for new and innovative products and therapies, which has resulted in lower average selling prices for certain products in certain markets. In the U.S., there have been several Congressional inquiries and proposed and enacted federal and state legislation designed to, among other things, bring more transparency to drug pricing, review the relationship between pricing and manufacturer patient programs, and reform government program reimbursement methodologies for drugs. For example, the Consolidated Appropriations Act of 2021 included several drug price reporting and transparency measures, such as a new requirement for certain Medicare plans to develop tools to display Medicare Part D prescription drug benefit information in real time and for group and health insurance issuers to report information on pharmacy benefit and drug costs to the Secretaries of Health and Human Services, Labor, and the Treasury. Additionally, the IRA allows Medicare to: beginning in 2026, establish a “maximum fair price” for certain pharmaceutical and biological products covered under Medicare Parts B and D; beginning in 2023, penalize drug companies that raise prices for products covered under Medicare Parts B and D faster than inflation; and beginning in 2025 impose new discount obligations on pharmaceutical and biological manufacturers for products covered under Medicare Part D. CMS continues to take steps to implement the IRA, including, most notably: on August 29, 2023, releasing the initial list of ten drugs subject to price negotiations; and on September 30, 2024, releasing a list of 54 Medicare Part B products that had an adjusted coinsurance rate based on the inflationary rebate provisions of the IRA for the time period of October 1, 2024 to Decemer 31, 2024; and most recently, on October 2, 2024, releasing final guidance outlining the process for the second round of price negotiations for products subject to the "maximum fair price" provision. While it remains to be seen how the drug pricing provisions imposed by the IRA will affect the broader pharmaceutical industry, several pharmaceutical manufacturers and other industry stakeholders have challenged the law, including through lawsuits brought against the U.S. Department of Health and Human Services, the Secretary of the U.…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
There have also been administrative developments in the U.S. related to drug pricing. For example, on February 2, 2022, the Biden Administration signaled its continued commitment to the Cancer Moonshot initiative, which was initially launched in 2016. In its announcement, the administration noted that its new goals under the initiative include addressing inequities in order to ensure broader access to cutting-edge cancer therapeutics and investing in a robust pipeline for new treatments. In alignment with President Biden's Cancer Moonshot initiative, on June 27, 2023, the Center for Medicare Innovation at CMS announced a new model, the Enhancing Oncology Model, that is designed to make high-quality cancer care more affordable to both patients and Medicare. On September 12, 2022, President Biden issued an Executive Order to promote biotechnology and biomanufacturing innovation that included methods through which the Biden Administration would support the advancement of biotechnology and biomanufacturing in healthcare. On October 14, 2022 President Biden issued an Executive Order on Lowering Prescription Drug Costs for Americans, which instructed the Secretary of the Department of Health and Human Services to consider whether to select for testing by the CMS Innovation Center new health care payment and delivery models that would lower drug costs and promote access to innovative drug therapies for beneficiaries enrolled in the Medicare and Medicaid programs. On February 14, 2023, the Department of Health and Human Services issued a report in response to the October 14, 2022 Executive Order, which, among other things, selects three potential drug affordability and accessibility models to be tested by the CMS Innovation Center. Specifically, the report addresses: (1) a model that would allow Part D Sponsors to establish a “high-value drug list” setting the maximum out-of-pocket costs for certain common generic drugs at $2 per month per drug; (2) a Medicaid-focused model that would establish a partnership between CMS, manufacturers, and state
Current wording
There have also been administrative developments in the U.S. related to drug pricing. For example, on February 2, 2022, the Biden Administration signaled its continued commitment to the Cancer Moonshot initiative, which was initially launched in 2016. In its announcement, the administration noted that its new goals under the initiative include addressing inequities in order to ensure broader access to cutting-edge cancer therapeutics and investing in a robust pipeline for new treatments. In alignment with President Biden's Cancer Moonshot initiative, on June 27, 2023, the Center for Medicare Innovation at CMS announced a new model, the Enhancing Oncology Model, that is designed to make high-quality cancer care more affordable to both patients and Medicare. On October 14, 2022 President Biden issued an Executive Order on Lowering Prescription Drug Costs for Americans, which instructed the Secretary of the Department of Health and Human Services to consider whether to select for testing by the CMS Innovation Center new health care payment and delivery models that would lower drug costs and promote access to innovative drug therapies for beneficiaries enrolled in the Medicare and Medicaid programs. On February 14, 2023, the Department of Health and Human Services issued a report in response to the October 14, 2022 Executive Order, which, among other things, selects three potential drug affordability and accessibility models to be tested by the CMS Innovation Center. Specifically, the report addresses: (1) a model that would allow Part D Sponsors to establish a “high-value drug list” setting the maximum out-of-pocket costs for certain common generic drugs at $2 per month per drug; (2) a Medicaid-focused model that would establish a partnership between CMS, manufacturers, and state Medicaid agencies that would result in multi-state outcomes-based agreements for certain cell and gene therapy drugs; and (3) a model that would adjust Medicare Part B payment amounts for Accelerated Approval Program drugs to advance the developments of novel treatments.
Previous wording
Other proposed administrative actions may affect our government pricing responsibilities. For example, CMS has issued proposals to amend the existing Medicaid Drug Rebate Program regulations. In addition, there are pending legal and legislative developments relating to the 340B drug pricing program, including ongoing litigation challenging federal enforcement actions against manufacturers and recently introduced and enacted state legislation. It remains to be seen how these drug pricing initiatives will affect the broader pharmaceutical industry.
Current wording
Other recent administrative actions may affect our upcoming government pricing responsibilities stemming from our anticipated participation in government pricing programs. For example, in September 2024, CMS published a final rule that included significant revisions to certain Medicaid Drug Rebate Program provisions, including, but not limited to: (i) new definitions for key terms under the Medicaid Drug Rebate Program, such as "covered outpatient drug" and "market date"; (ii) revised processes for identifying drug misclassifications, as well as additional penalties that can be imposed against manufacturers in connection with such misclassifications; and (iii) a new 12-quarter time limit for manufacturers to initiate disputes, hearing requests, and audits for state-invoiced rebate amounts. In addition, there are pending legal and legislative developments relating to the 340B drug pricing program, including ongoing litigation challenging federal enforcement actions against manufacturers and recently introduced and enacted state legislation. In March 2024, the US Court of Appeals for the Eighth Circuit upheld the Arkansas law prohibiting drug makers for restricting 340B drug discounts for providers using contract pharmacies, and plaintiffs have filed a writ of certiorari with the Supreme Court, which is pending. It remains to be seen how these drug pricing initiatives will affect the broader pharmaceutical industry.
Previous wording
As of June 30, 2024, we had 165 employees. We may encounter difficulties in managing the size of our operations to support our continuing development activities and the commercialization of our product and potential commercialization of our product candidates by our partners. As our development and commercialization plans and strategies continue to evolve, or as a result of any future acquisitions, we must continue to improve our managerial, operational, financial and other procedures and processes to manage the size our of operations. Our management, personnel and systems currently in place may not be adequate to support any future growth. Future growth would impose significant added responsibilities on members of management, including:
Current wording
As of September 30, 2024, we had 159 employees. We may encounter difficulties in managing the size of our operations to support our continuing development activities and the commercialization of our product and potential commercialization of our product candidates by our partners. As our development and commercialization plans and strategies continue to evolve, or as a result of any future acquisitions, we must continue to improve our managerial, operational, financial and other procedures and processes to manage the size our of operations. Our management, personnel and systems currently in place may not be adequate to support any future growth. Future growth would impose significant added responsibilities on members of management, including:
Previous wording
Regulation of privacy, data protection and data security has also become more stringent in the United States. HIPAA imposes requirements to protect the privacy and security of protected health information (PHI) and to provide notification in the event of a breach of PHI. Violations of HIPAA are punishable by civil money penalties and, in some cases, criminal penalties and imprisonment. HHS’ Office for Civil Rights (OCR), which is responsible for enforcing HIPAA, also may enter into resolution agreements requiring the payment of a civil money penalty and/or the establishment of a corrective action plan to address violations of HIPAA. Pursuant to HIPAA, HHS has adopted privacy regulations, known as the privacy rule, to govern the use and disclosure of PHI (the Privacy Rule). HHS has also adopted data security regulations that require Covered Entities (including health care providers) and Business Associates to implement administrative, physical and technical safeguards to protect the integrity, confidentiality and availability of PHI that is electronically created, received, maintained or transmitted (such as between us and our affiliated practices).
Current wording
Regulation of privacy, data protection and data security has also become more stringent in the United States. HIPAA imposes requirements to protect the privacy and security of protected health information (PHI) and to provide notification in the event of a breach of PHI. Violations of HIPAA are punishable by civil money penalties and, in some cases, criminal penalties and imprisonment. HHS’ Office for Civil Rights (OCR), which is responsible for enforcing HIPAA, also may enter into resolution agreements requiring the payment of a civil money penalty and/or the establishment of a corrective action plan to address violations of HIPAA. Pursuant to HIPAA, HHS has adopted privacy regulations, known as the privacy rule, to govern the use and disclosure of PHI (the Privacy Rule). HHS has also adopted data security regulations that require Covered Entities and Business Associates to implement administrative, physical and technical safeguards to protect the integrity, confidentiality and availability of PHI that is electronically created, received, maintained or transmitted (such as between us and our affiliated practices).
Previous wording
Numerous state and certain other federal laws protect the confidentiality of health information and other personal information, including but not limited to state medical privacy laws, state laws protecting personal information, state data breach notification laws, state genetic privacy laws, human subjects research laws and federal and state consumer protection laws. For example, the California Consumer Privacy Act (CCPA), which took effect on January 1, 2020, give California residents expanded rights to access and delete their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information is used. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. The CCPA may increase our compliance costs and potential liability. The CCPA was substantially expanded on January 1, 2023, when the CPRA amendments to the CCPA became fully operative. The California Privacy Rights Act amendments, among other things, give California residents the ability to limit use of certain sensitive personal information, further restrict the use of cross-contextual advertising, establish restrictions on the retention of personal information, expand the types of data breaches subject to the CCPA’s private right of action, provide for increased penalties for CCPA violations concerning California residents under the age of 16, and establish a new California Privacy Protection Agency to implement and enforce the new law. Regulation of privacy, data protection and data security has also become more stringent in the United States, with several new laws following the CCPA and being enacted at the state level. While these new laws generally include exemptions for HIPAA-covered data, they add layers of complexity to compliance in the U.S. market, and could increase our compliance costs and adversely affect our business. While these laws generally include exemptions for HIPAA-covered and clinical trial data, they impact the overall privacy landscape. Multiple other states and the federal government are considering enacting similar legislation, demonstrating a strong trend towards more stringent state privacy, data protection and data security legislation in the U.S., which could increase our potential liability and adversely affect our business. Other states have passed or amended existing state privacy laws to impose enhanced privacy and cybersecurity obligations for consumer health data, such as, the Washington My Health My Data Act and Nevada’s Consumer Health Data Privacy Law. For instance, Washington State passed the “My Health My Data Act” with respect to “consumer health data” which is defined as “personal information that is linked or reasonably linkable to a consumer and that identifies a consumer’s past, present, or future physical or mental health” and which will go into effect in 2024 with ad…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Regulation of privacy, data protection and data security has also become more stringent in the United States, with several new laws following the CCPA and being enacted at the state level, including several comprehensive privacy laws. While these new laws and proposals generally include exemptions for HIPAA-covered data and clinical trial data, they add layers of complexity to compliance in the U.S. market, and could increase our compliance costs and adversely affect our business. While these laws generally include exemptions for HIPAA-covered and clinical trial data, they impact the overall privacy landscape. Multiple other states and the federal government are considering enacting similar legislation, demonstrating a strong trend towards more stringent state privacy, data protection and data security legislation in the U.S., which could increase our potential liability and adversely affect our business. Other states have passed or amended existing state privacy laws to impose enhanced privacy and cybersecurity obligations for consumer health data, such as, the Washington My Health My Data Act and Nevada’s Consumer Health Data Privacy Law. For instance, Washington State passed the “My Health My Data Act” with respect to “consumer health data” which is defined as “personal information that is linked or reasonably linkable to a consumer and that identifies a consumer’s past, present, or future physical or mental health” and which will go into effect in 2024 with additional privacy rights and compliance obligations.
Previous wording
Lawmakers and regulatory bodies at the federal level have been considering more detailed regulation regarding these subjects and the privacy and security of personal information. For example, the FTC recently published an advance notice of proposed rulemaking on “commercial surveillance” and data security, and is seeking comment on whether it should implement new trade regulation rules or other regulatory alternatives concerning the ways in which companies (1) collect, aggregate, protect, use, analyze, and retain consumer data, as well as (2) transfer, share, sell, or otherwise monetize that data in ways that are unfair or deceptive. The FTC’s rulemaking may create change throughout the economy and broader data ecosystem. The FTC has also been active with respect to enforcement of its Health Breach Notification Rule and in scrutinizing the use and disclosure of sensitive personal information. Additionally, in 2021, the OCR has issued a Notice of Proposed Rulemaking, which propose a number of changes to the HIPAA Privacy Rule, with updates to the HIPAA Privacy Rule expected in the near future.
Current wording
Lawmakers and regulatory bodies at the federal level have been considering more detailed regulation regarding these subjects and the privacy and security of personal information. For example, the FTC published an advance notice of proposed rulemaking on “commercial surveillance” and data security, and is seeking comment on whether it should implement new trade regulation rules or other regulatory alternatives concerning the ways in which companies (1) collect, aggregate, protect, use, analyze, and retain consumer data, as well as (2) transfer, share, sell, or otherwise monetize that data in ways that are unfair or deceptive. The FTC’s rulemaking may create change throughout the economy and broader data ecosystem. The FTC has also been active with respect to enforcement of its Health Breach Notification Rule and in scrutinizing the use and disclosure of sensitive personal information. Additionally, in 2021, the OCR has issued a Notice of Proposed Rulemaking, which propose a number of changes to the HIPAA Privacy Rule, with updates to the HIPAA Privacy Rule expected in the near future. The FTC also finalized changes to the Health Breach Notification Rule in April 2024.
Previous wording
We, our partners, our CROs, our CMOs, and other business vendors on which we rely depend on information technology and telecommunication systems for significant elements of our operations, including, for example, systems handling human resources, financial reporting and controls, regulatory compliance and other infrastructure operations. Notwithstanding the implementation of security measures, given the size and complexity of our information technology systems and those of our third party vendors and other contractors and consultants, and the increasing amounts of proprietary, confidential and sensitive information that they maintain, such information technology systems have been subject to and remain vulnerable to breakdown, service interruptions, system malfunction, natural disasters, terrorism, war and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our personnel, third party vendors, contractors, consultants, business partners, and/or other third parties, or from cyber-attacks by malicious third parties (including the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering, and other means to affect service reliability and threaten the confidentiality, integrity, and availability of information), which may compromise our system infrastructure, or that of our third party vendors and other contractors and consultants, or lead to data leakage. The risk of a security breach or disruption, particularly through accidental actions or omissions by trusted insiders, cyber attacks or cyber intrusions, including by computer hackers, viruses, foreign governments, and cyber terrorists, has generally increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. Additionally, the increased usage of computers operated on home networks due to the shelter-in-place or similar restrictions related to the COVID-19 pandemic may make our systems more susceptible to security breaches. For example, in March 2021, MSK provided notice that MSK was one of many customers impacted by a data breach at Accellion, Inc., which provides a document-sharing system. MSK subsequently notified us that certain documents related to one of our discontinued programs were subject to the breach, which compromise we deemed immaterial. Although we take measures to protect sensitive data from unauthorized access, use or disclosure, we and our third party service providers frequently defend against and respond to cyberattacks, and our information technology and infrastructure may be vulnerable to attacks by hackers or viruses or breached due to personnel error, malfeasance, or other malicious or inadvertent disruptions. Any such breach or interruption could compromise our networks and the information stored there could be accessed by unauthorized parties, manipulated, publicly disclosed, lost, or stolen.
Current wording
We, our partners, our CROs, our CMOs, and other business vendors on which we rely depend on information technology and telecommunication systems for significant elements of our operations, including, for example, systems handling human resources, financial reporting and controls, regulatory compliance and other infrastructure operations. Notwithstanding the implementation of security measures, given the size and complexity of our information technology systems and those of our third party vendors and other contractors and consultants, and the increasing amounts of proprietary, confidential and sensitive information that they maintain, such information technology systems have been subject to and remain vulnerable to breakdown, service interruptions, system malfunction, natural disasters, terrorism, war and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our personnel, third party vendors, contractors, consultants, business partners, and/or other third parties, or from cyber-attacks by malicious third parties (including the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering, and other means to affect service reliability and threaten the confidentiality, integrity, and availability of information), which may compromise our system infrastructure, or that of our third party vendors and other contractors and consultants, or lead to data leakage. The risk of a security breach or disruption, particularly through accidental actions or omissions by trusted insiders, cyber-attacks or cyber intrusions, including by computer hackers, viruses, foreign governments, and cyber terrorists, has generally increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. Additionally, the increased usage of computers operated on home networks due to the shelter-in-place or similar restrictions related to the COVID-19 pandemic may make our systems more susceptible to security breaches. For example, in March 2021, MSK provided notice that MSK was one of many customers impacted by a data breach at Accellion, Inc., which provides a document-sharing system. MSK subsequently notified us that certain documents related to one of our discontinued programs were subject to the breach, which compromise we deemed immaterial. Although we take measures to protect sensitive data from unauthorized access, use or disclosure, we and our third party service providers frequently defend against and respond to cyber-attacks, and our information technology and infrastructure may be vulnerable to attacks by hackers or viruses or breached due to personnel error, malfeasance, or other malicious or inadvertent disruptions. Any such breach or interruption could compromise our networks and the information stored there could be accessed by unauthorized parties, manipulated, publicly disclosed, lost, or stolen.
Rearranged current paragraphs (2)
Current report — wording carried from elsewhere
Our development activities and/or commercialization planning with our partners could be harmed or delayed by governmental or regulatory delays due to a variety of factors. These factors include limitations on the availability of governmental and regulatory agency personnel to review regulatory filings or engage with us (caused by global health concerns or otherwise, including the COVID-19 pandemic); changes to governmental regulatory requirements, policies, guidelines or priorities, reallocation, or availability of government resources; or for other reasons, that may significantly delay the FDA’s, or other regulatory agencies', ability to review and process any submissions we have filed or may file or cause other regulatory delays. If global health concerns prevent the FDA or other regulatory authorities from conducting their regular inspections, or impact reviews or other regulatory activities, it could significantly impact the ability of the FDA or other regulatory authorities to review and process our regulatory submissions in a timely fashion, which could have a material adverse effect on our business. For example, in response to the COVID-19 pandemic, on March 10, 2020, the FDA announced its intention to postpone most inspections of foreign manufacturing facilities and products inspections of domestic manufacturing facilities through April 2020. On March 18, 2020, the FDA announced its intention to postpone temporarily routine surveillance inspections of domestic manufacturing facilities and provided guidance regarding the conduct of clinical trials. On July 10,
Current report — wording carried from elsewhere
Numerous state laws are also designed to address privacy and information security issues, including but not limited to state medical privacy laws, state laws protecting personal information, state data breach notification laws, state genetic privacy laws, human subjects research laws and federal and state consumer protection laws. For example, the California Consumer Privacy Act (CCPA), which took effect on January 1, 2020, give California residents expanded rights to access and delete their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information is used. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. The CCPA may increase our compliance costs and potential liability. The CCPA was substantially expanded on January 1, 2023, when the California Privacy Rights Act (CPRA) amendments to the CCPA became fully operative. The CPRA amendments, among other things, give California residents the ability to limit use of certain sensitive personal information, further restrict the use of cross-contextual advertising, establish restrictions on the retention of personal information, expand the types of data breaches subject to the CCPA’s private right of action, provide for increased penalties for CCPA violations concerning California residents under the age of 16, and establish a new California Privacy Protection Agency to implement and enforce the new law.
Rearranged previous paragraphs (2)
Previous report — wording carried elsewhere
We rely on CROs, other vendors and clinical study sites to ensure the proper and timely conduct of our clinical studies, and while we have agreements governing their committed activities, we have limited influence over their actual performance.
Previous report — wording carried elsewhere
Medicaid agencies that would result in multi-state outcomes-based agreements for certain cell and gene therapy drugs; and (3) a model that would adjust Medicare Part B payment amounts for Accelerated Approval Program drugs to advance the developments of novel treatments.