Personalis Inc
For the period ended Mar 31, 2025. Filed May 6, 2025.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Mar 31, 2025 · Filed May 6, 2025
PSNL$15.79+1.5%Stored close · as of Nov 6, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2024-09-30; filed 2024-11-06.
0000950170-24-122290
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresCurrent report: 10-Q
Period ended 2025-03-31; filed 2025-05-06.
0000950170-25-064512
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 355 previous paragraphs and 327 current paragraphs.
265 unchanged; 50 reworded; 9 added; 14 removed; 26 previous and 3 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (9)
Current report
generation of sufficient reimbursement or coverage by insurance or governmental payors for our products;
Current report
Building our clinical laboratory business is subject to a number of reimbursement challenges and we may not be able to establish the medical necessity of our tests for coverage or reimbursement rates that cover our costs.
Current report
we may choose or our collaborators may request or require us to expand our facilities and/or establish new facilities domestically and/or internationally, which may significantly increase our expenses and divert resources and management’s attention. See “—We may need to continue to invest in our infrastructure in advance of increased demand for our services; our failure to accurately forecast demand would have a negative impact on our business and our ability to achieve and sustain profitability.” and “—Expansion into international markets would subject us to increased regulatory oversight and regulatory, economic, social, health and political uncertainties, which could cause a material adverse effect on our business, financial position, and results of operations.”
Current report
We operate in a global economy, which includes partners and suppliers in certain countries outside the United States. There is inherent risk, based on the complex relationships among the U.S. and the countries in which our partners and suppliers reside, that political, diplomatic, and national security factors can lead to global trade restrictions and changes in trade policies and export regulations that may adversely affect our business and operations. The current international trade and regulatory environment is subject to significant ongoing uncertainty. The U.S. government has recently announced substantial new tariffs affecting a wide range of products and jurisdictions and has indicated an intention to continue developing new trade policies, including with respect to the pharmaceutical industry. In response, certain foreign governments have announced or implemented retaliatory tariffs and other protectionist measures. These developments have created a dynamic and unpredictable trade landscape, which may adversely impact our business, results of operations, financial condition and prospects.
Current report
We do not own or operate, and currently have no plans to establish any manufacturing facilities. We currently rely, and expect to continue to rely, on third parties for the manufacture of the specialized laboratory equipment, raw materials and other supplies we use in our business. Currently, certain of our direct suppliers are located outside of the United States. In addition, our suppliers in the United States source or may source components of the products we purchase from them from sources outside the United States. Current or new tariffs may adversely impact our supply chain.
Current report
Unlike many industries, our ability to pass increased costs to customers is limited by the structure of reimbursement systems and, if the FDA determines our tests are subject to enforcement as medical devices, medical device pricing. The pricing of many of our products and services are, or will be, established through annual or multi-year contracts with commercial, third-party payors, customers, and group purchasing organizations, and reimbursement methodologies established by government programs, such as Medicare. These arrangements typically include fixed pricing terms that may be negotiated prior to the implementation of the recently announced tariffs. As a result, and depending on the timing and scope of the implementation of these tariffs, cost increases due to tariffs may be difficult or impossible to pass through to customers until the next negotiation cycle, which could be years away.
Current report
Current or future tariffs may also result in increased research and development expenses, including with respect to increased costs associated with raw materials, laboratory equipment and research materials and components. Trade restrictions affecting the import of materials necessary for our tests could result in increased costs to process tests and delays to delivery of our services. Increased costs and extended delivery timelines could place us at a competitive disadvantage compared to companies operating in regions with more favorable trade relationships and could reduce investor confidence and negatively impact our business, results of operations, financial condition and growth prospects.
Current report
We employ a shared responsibility model where our customers and partners are responsible for configuring and implementing security measures related to our platform. As part of this model, we make certain security features available to users that can be implemented at their discretion or identify security areas or measures for which they are responsible. For example, users can choose whether to implement and enforce multifactor authentication to access their accounts. In certain cases where users choose not to implement, or incorrectly implement, those features or measures, misuse our services, or otherwise experience their own vulnerabilities, policy violations, credential exposure or security incidents, even if we are not the cause of a resulting customer security issue or incident, our customer and partner relationships, reputation, and revenue may be adversely impacted.
Current report
Even if resolved in our favor, litigation or other legal proceedings relating to intellectual property claims have caused and may continue to cause us to incur significant expenses and could distract our personnel from their normal responsibilities. In addition, there could be public announcements of the results of hearings, motions, or other interim proceedings or developments, and if securities analysts or investors perceive these results to be negative, it could have a substantial adverse effect on the price of our common stock. Such litigation or proceedings could substantially increase our operating losses and reduce the resources available for development activities or any future sales, marketing, or distribution activities. We may not have sufficient financial or other resources to conduct such litigation or proceedings adequately. Some of our competitors may be able to sustain the costs of such litigation or proceedings more effectively than we can because of their greater financial resources and more mature and developed intellectual property portfolios. Uncertainties resulting from the initiation and continuation of patent litigation or other proceedings could have a material adverse effect on our ability to compete in the marketplace.
Removed paragraphs (14)
Previous report
The following is a summary of the principal risks and uncertainties that could materially adversely affect our business, financial condition, or results of operations. You should read this summary together with the more detailed description of risk factors below under the heading “Risk Factors.”
Previous report
When we grow our business by developing in vitro diagnostic tests, we may be subject to reimbursement challenges.
Previous report
The loss of key members of our executive management team or the inability to hire, retain, or motivate highly skilled personnel could adversely affect our business.
Previous report
Our internal information technology systems, or those of our third-party vendors, contractors, or consultants, may fail or suffer security breaches, loss or leakage of data, and other disruptions, which could adversely affect our business.
Previous report
Failure or perceived failure to comply with existing or future laws, regulations, contracts, self-regulatory schemes, standards, and other obligations related to data privacy and security (including security incidents) could harm our business. Compliance or the actual or perceived failure to comply with such obligations could increase the cost of our offerings, limit their use or adoption, and otherwise negatively affect our operating results and business.
Previous report
Litigation or other proceedings or claims of intellectual property infringement, misappropriation, breach of license terms or other violations may require us to spend significant time and money, including damages, and could prevent us from selling our tests.
Previous report
Delaware law and provisions in our amended and restated certificate of incorporation and amended and restated bylaws could make a merger, tender offer, or proxy contest difficult, thereby depressing the trading price of our common stock; our amended and restated certificate of incorporation has an exclusive forum provision, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or employees.
Previous report
When we grow our business by developing in vitro diagnostic tests, we may be subject to reimbursement challenges.
Previous report
On May 6, 2024, the FDA issued final regulations under which it intends to phase out its enforcement discretion approach to LDTs over a period of four years (the "Final Rule"). We anticipate that we may be required to obtain PMA approval for certain of our tests by October 1, 2027. We may also be subject to device registration and listing requirements, medical device reporting requirements and the requirements of the FDA’s Quality System Regulation. We may be required to conduct clinical trials to support any premarket notification or applications to FDA, which would increase the costs to our business and impair our profitability. If the FDA determines that our tests are subject to enforcement as medical devices, we could be subject to enforcement action, including administrative and judicial sanctions, and additional regulatory controls and submissions for our tests, all of which could be burdensome. We and/or our collaborators may also be required to submit one or more of our tests for premarket notification, review, clearance or approval by the FDA as medical devices. See “—Failure to comply with federal, state, and foreign laboratory licensing requirements and the applicable requirements of the FDA or any other regulatory authority, could cause us to lose the ability to perform our tests, experience disruptions to our business or become subject to administrative or judicial sanctions.”
Reworded paragraphs (50)
Previous wording
We have incurred net losses since our inception. For the years ended December 31, 2023, 2022, and 2021 we had net losses of $108 million, $113 million and $65 million, respectively. For the nine months ended September 30, 2024, we had a net loss of $64.9 million. As of September 30, 2024, we had an accumulated deficit of $534 million. To date, we have not generated sufficient revenue to achieve profitability, and we may never achieve or sustain profitability. In addition, we expect to continue to incur net losses for the foreseeable future, and we expect our accumulated deficit to continue to increase as we focus on scaling our business and operations. Our efforts to sustain and grow our business may be more costly than we expect, and we may not be able to increase our revenue sufficiently to offset our higher operating expenses. Our prior losses and expected future losses have had and will continue to have an adverse effect on our stockholders’ equity and working capital. Our failure to achieve and sustain profitability in the future would negatively affect our business, financial condition, results of operations, and cash flows, and could cause the market price of our common stock to decline.
Current wording
We have incurred net losses since our inception. For the year ended December 31, 2024, we had a net loss of $81 million. For the three months ended March 31, 2025, we had a net loss of $16 million. As of March 31, 2025, we had an accumulated deficit of $566 million. To date, we have not generated sufficient revenue to achieve profitability, and we may never achieve or sustain profitability. In addition, we expect to continue to incur net losses for the foreseeable future, and we expect our accumulated deficit to continue to increase as we focus on scaling our business and operations. Our efforts to sustain and grow our business may be more costly than we expect, and we may not be able to increase our revenue sufficiently to offset our higher operating expenses. Our prior losses and expected future losses have had and will continue to have an adverse effect on our stockholders’ equity and working capital. Our failure to achieve and sustain profitability in the future would negatively affect our business, financial condition, results of operations, and cash flows, and could cause the market price of our common stock to decline.
Previous wording
If we are unable to increase sales of our current services or successfully develop and commercialize other services or products, or if we are unable to execute our sales and marketing strategy for our services or unable to gain sufficient acceptance in the market, we may fail to generate sufficient revenue to achieve profitability and sustain our business.
Current wording
If we are unable to increase sales of our current services or successfully develop and commercialize other services or products, or if we are unable to execute our sales and marketing strategy for our services or unable to gain sufficient acceptance in the market, or if we are unable to generate sufficient reimbursement or coverage by insurance or governmental payors for our products, we may fail to generate sufficient revenue to achieve profitability and sustain our business.
Previous wording
Our principal competition comes from commercial and academic organizations using established and new laboratory tests to produce information that is similar to the information that we generate for our customers. These commercial and academic organizations may not utilize our services or may not believe them to be superior to those tests that they currently use or others that are developed. Further, it may be difficult to educate our customers and potential customers on the benefits of our comprehensive tests compared to simpler panels provided by our competitors. For example, the information that we provide may be more challenging or require additional resources for our customers to interpret than the information provided by our competitors’ less comprehensive assays. In addition, our suppliers or competitors may announce the development of new products, services or features that results in our customers’ or potential customers’ decision to reduce, postpone or cancel orders from us while they wait to determine which products, services or features are or will be perceived as technologically superior, more commercially successful or adopted as standards in the industry; such decisions by our customers or potential customers may be influenced by their concerns regarding the potential obsolescence of data generated using our services and features if our services or features are or will not be perceived as technologically superior, commercially successful or adopted as standards in the industry.
Current wording
Our principal competition comes from commercial and academic organizations that employ various approaches to produce information that is similar to the information that we generate for our customers. These commercial and academic organizations may not utilize our services or may not believe them to be superior to those tests that they currently use or others that are developed. Further, it may be difficult to educate our customers and potential customers on the benefits of our comprehensive tests compared to simpler panels provided by our competitors. For example, the information that we provide may be more challenging or require additional resources for our customers to interpret than the information provided by our competitors’ less comprehensive assays. In addition, our suppliers or competitors may announce the development of new products, services or features that results in our customers’ or potential customers’ decision to reduce, postpone or cancel orders from us while they wait to determine which products, services or features are or will be perceived as technologically superior, more commercially successful or adopted as standards in the industry; such decisions by our customers or potential customers may be influenced by their concerns regarding the potential obsolescence of data generated using our services and features if our services or features are or will not be perceived as technologically superior, commercially successful or adopted as standards in the industry.
Previous wording
Some of our present or potential competitors, including Adela, Inc., BostonGene Corporation, Caris Life Sciences, Inc., Foresight Diagnostics Inc. (“Foresight”), Freenome, Inc., Fulgent Genetics, Inc., Geneseeq Technology Inc., GRAIL, Guardant Health, Inc., Haystack Oncology, Inc., which was acquired by Quest Diagnostics Incorporated in June 2023, Invitae Corporation, MedGenome Inc., Myriad Genetics, Inc., Natera, NeoGenomics, Inc., Novogene Corporation, Predicine, Inc., Roche Molecular Systems, Inc., Tempus, and Veracyte, Inc. may have more widespread brand recognition or substantially greater financial or technical resources, development or production capacities, or marketing capabilities than we do. They may be able to devote greater resources to the development, promotion and sale of their products and services than we do or sell their products and services at prices designed to win more significant levels of market share. Also, we have had, and may have in the future, customer or supply relationships with our present or potential competitors. For example, we have an agreement with Natera to provide advanced tumor analysis for use in Natera’s MRD testing offerings. During the nine months ended September 30, 2024, revenue under our agreement accounted for 31% of our total revenue, respectively. See “—We currently derive a substantial portion of our revenue from DNA sequencing and data analysis services that we provide to Natera. We expect our commercial relationship with Natera to wind down by the end of 2024 and, if we are unable to grow our customer base and diversify our revenue concentration, our business, financial condition, revenue and other operating results, and cash flows may be materially harmed.” In addition, our present or potential competitors may be acquired by, receive investments from, or enter into other commercial relationships with larger, more well-established and well-financed companies. Others may develop lower-priced, less complex products and services that pharmaceutical companies could view as functionally equivalent to our current or planned future services, which could force us to lower the price of our services and impact our operating margins and our ability to achieve and maintain profitability. In addition, companies or governments that control access to genetic testing and related services through umbrella contracts or regional preferences could promote our competitors or prevent us from performing certain services. In addition, technological innovations that result in the creation of enhanced products or diagnostic tools that are more sensitive or specific than ours may enable other clinical laboratories, hospitals, physicians, or medical providers to provide specialized products or services similar to ours in a more patient-friendly, efficient, or cost-effective manner than is currently possible. If we cannot compete successfully against current or future competitors, or if we cannot maintain successful custo…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Some of our present or potential competitors, including Adela, Inc., BostonGene Corporation, Caris Life Sciences, Inc., DELFI Diagnostics, Inc., Exact Sciences Corporation, Foresight Diagnostics Inc. (“Foresight”), Foundation Medicine, Inc., Freenome, Inc., Fulgent Genetics, Inc., Geneseeq Technology Inc., GRAIL, Inc., Guardant Health, Inc., Haystack Oncology, Inc., which was acquired by Quest Diagnostics Incorporated in June 2023, Laboratory Corporation of America Holdings, MedGenome Inc., Myriad Genetics, Inc., Natera, NeoGenomics, Inc., Novogene Corporation, Predicine, Inc., Roche Molecular Systems, Inc., SAGA Diagnostics AB, Tempus, and Veracyte, Inc. may have more widespread brand recognition or substantially greater financial or technical resources, development or production capacities, or marketing capabilities than we do. They may be able to devote greater resources to the development, promotion and sale of their products and services than we do or sell their products and services at prices designed to win more significant levels of market share. Also, we have had, and may have in the future, customer or supply relationships with our present or potential competitors. For example, we have an agreement with Natera to provide advanced tumor analysis for use in Natera’s MRD testing offerings. During the year ended December 31, 2024, revenue under our agreement accounted for 30% of our total revenue. See “—We currently derive a substantial portion of our revenue from DNA sequencing and data analysis services that we provide to Natera. We do not expect to have a long-term commercial relationship with Natera beyond 2025 and, if we are unable to grow our customer base and diversify our revenue concentration, our business, financial condition, revenue and other operating results, and cash flows may be materially harmed.” In addition, our present or potential competitors may be acquired by, receive investments from, or enter into other commercial relationships with larger, more well-established and well-financed companies. We may also have disputes with our present or potential competitors. See “—Litigation or other proceedings or third-party claims of intellectual property infringement, misappropriation or other violations may require us to spend significant time and money, and could in the future prevent us from selling our tests or impact our stock price, any of which could have a material adverse effect.”
Previous wording
We have substantial customer concentration, with a limited number of customers accounting for a substantial portion of our revenue and accounts receivable; in particular, we currently derive a substantial portion of our revenue from two of our largest customers, Natera and Moderna, and in the past have derived a substantial portion of our revenue from another of our largest customers, the VA MVP.
Current wording
We have substantial customer concentration, with a limited number of customers accounting for a substantial portion of our revenue and accounts receivable; in particular, we currently derive a substantial portion of our revenue from two of our largest customers, Natera and Moderna, and in the past have derived a substantial portion of our revenue from other large customers.
Previous wording
Like other genomic profiling companies that sell to the pharmaceutical industry, we have substantial customer concentration. We currently derive a significant portion of our revenue from Natera, which accounted for 31% of our revenue for the nine months ended September 30, 2024. We also derive a significant portion of our revenue from Moderna, which accounted for 28% of our revenue for the nine months ended September 30, 2024. We previously derived a significant portion of our revenue from the VA MVP, which more recently accounted for 11% of our revenue for the nine months ended September 30, 2024. Our top five customers, including Natera, Moderna, and the VA MVP, accounted for 84% of our revenue for the nine months ended September 30, 2024. There are inherent risks whenever a large percentage of revenue is concentrated with a limited number of customers. While we have attempted to grow our customer base and diversify our revenue concentration beyond Natera, Moderna, and the VA MVP, we may not be able to successfully do so in the future. Our predictions regarding the future level of demand for our services that will be generated by these customers may be wrong. In addition, revenue from our larger customers have historically fluctuated and may continue to fluctuate based on the commencement and completion of clinical trials or other projects, the timing of which may be affected by market conditions or other factors, some of which may be outside of our control. Some of our customers have in the past suspended or terminated clinical trials or projects, received less funding than expected, experienced declining or delayed sales, or otherwise decided to reduce or eliminate their use of our services, and these and other customers may also do so in the future. As a result, we could be pressured to reduce the prices we charge for our services, which would have an adverse effect on our margins and financial position, and which would likely negatively affect our revenue and results of operations. In particular, if we do not win future VA MVP renewals with a value comparable to that of our historical contracted orders, it may have a material adverse effect on our revenue, cash position, and results of operations. Similarly, if the VA MVP was eliminated, awarded its contract to one of our competitors, further reduced the size of our contract or failed to renew our contract in the future, then our revenue, cash position, and results of operations would be materially adversely impacted. Likewise, if Natera, Moderna or any of our other significant customers were to reduce or cease their use of our services, then our revenue, cash position, and results of operations may be materially adversely impacted. Further, if any of our significant customers were to stop payment for our services, it would have a material adverse effect on our accounts receivable, increasing our credit risk. The failure of these customers to pay their balances, or any customer to pay futur…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Like other genomic profiling companies that sell to the pharmaceutical industry, we have substantial customer concentration. We currently derive a significant portion of our revenue from Natera, which accounted for 30% and 43% of our revenue for the years ended December 31, 2024 and 2023, respectively. We also derive a significant portion of our revenue from Moderna, which accounted for 28% and 5% of our revenue for the years ended December 31, 2024 and 2023, respectively. We previously derived a significant portion of our revenue from the VA MVP, which more recently accounted for 9% and 13% of our revenue for the years ended December 31, 2024 and 2023, respectively. Our top five customers, including Natera, Moderna, and the VA MVP, accounted for 81% and 74% of our revenue for the years ended December 31, 2024 and 2023, respectively. There are inherent risks whenever a large percentage of revenue is concentrated with a limited number of customers. While we have attempted to grow our customer base and diversify our revenue concentration beyond Natera, Moderna, and the VA MVP, we may not be able to successfully do so in the future. Our predictions regarding the future level of demand for our services that will be generated by these customers may be wrong. In addition, revenue from our larger customers have historically fluctuated and may continue to fluctuate based on the commencement and completion of clinical trials or other projects, the timing of which may be affected by market conditions or other factors, some of which may be outside of our control. Some of our customers have in the past suspended or terminated clinical trials or projects, received less funding than expected, experienced declining or delayed sales, or otherwise decided to reduce or eliminate their use of our services, and these and other customers may also do so in the future. As a result, we could be pressured to reduce the prices we charge for our services, which would have an adverse effect on our margins and financial position, and which would likely negatively affect our revenue and results of operations. In particular, if we do not win future VA MVP renewals with a value comparable to that of our historical contracted orders, it may have a material adverse effect on our revenue, cash position, and results of operations. See “—We have derived a substantial portion of our current revenue from DNA sequencing and data analysis services that we provided to one of our largest customers, the VA MVP. If the VA MVP’s demand for and/or funding for our DNA sequencing and data analysis services continues to be substantially reduced, or if our new contract with the VA MVP were to be terminated, our business, financial condition, revenue and other operating results, and cash flows will be materially harmed.” Similarly, if the VA MVP was eliminated, awarded its contract to one of our competitors, further reduced the size of our contract or failed to renew our contract in the future, th…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
We currently derive a substantial portion of our revenue from DNA sequencing and data analysis services that we provide to Natera. We expect our commercial relationship with Natera to wind down by the end of 2024 and, if we are unable to grow our customer base and diversify our revenue concentration, our business, financial condition, revenue and other operating results, and cash flows may be materially harmed.*
Current wording
We currently derive a substantial portion of our revenue from DNA sequencing and data analysis services that we provide to Natera. We do not expect to have a long-term commercial relationship with Natera beyond 2025 and, if we are unable to grow our customer base and diversify our revenue concentration, our business, financial condition, revenue and other operating results, and cash flows may be materially harmed.*
Previous wording
In February 2021, we entered into a partnership in the field of personalized oncology with Natera, pairing our NeXT tumor profiling and diagnostic services and products with Natera’s personalized ctDNA platform Signatera™ for treatment monitoring and MRD assessment. Under this non-exclusive agreement, Natera is responsible for validating the design of, and commercialization of, Signatera personalized ctDNA assays using matched tumor and normal exome sequence data from us. The agreement covers MRD testing for both clinical use and research use. Since that time, Natera’s sample volumes have increased such that we currently derive a significant portion of our revenue from sales of our DNA sequencing and data analysis services to Natera under our agreement. For example, revenue under our agreement accounted for 31% of our total revenue for the nine months ended September 30, 2024. In November 2023, we amended our agreement to extend minimum volume commitments through the end of 2024. Upon expiration of the term of the amended agreement, we expect our commercial relationship with Natera to terminate as we are aware that Natera plans to bring such services in-house in lieu of purchasing such services from us. We are also aware of at least one third party supplier of DNA sequencing and analysis services, such that Natera has elected, and may continue to elect in the future, to send a portion (or all) of its samples to its other supplier(s) instead of us, which it is not contractually prohibited from doing, given the non-exclusive nature of our agreement. Our agreement with Natera requires us to achieve certain quality and turnaround time metrics for Natera samples. Recently, the volumes of samples sent to us by Natera have fluctuated significantly and may continue to do so for the remainder of the term of the agreement, which could cause us to experience difficulty in achieving such metrics from time to time, or to meet our other obligations under our agreement.
Current wording
In February 2021, we entered into a partnership in the field of personalized oncology with Natera, pairing our NeXT tumor profiling and diagnostic services and products with Natera’s personalized ctDNA test Signatera™ for treatment monitoring and MRD assessment. Under this non-exclusive agreement, Natera is responsible for validating the design of, and commercialization of, Signatera personalized ctDNA assays using matched tumor and normal exome sequence data from us. The agreement covers MRD testing for both clinical use and research use. Since that time, Natera’s sample volumes have increased such that we currently derive a significant portion of our revenue from sales of our DNA sequencing and data analysis services to Natera under our agreement. For example, in 2024, revenue under our agreement accounted for 30% of our total revenue. In December 2024, we amended our agreement to extend minimum volume commitments through the second quarter of 2025. We do not expect to have a long-term commercial relationship with Natera beyond 2025, as we are aware that Natera plans to bring such services in-house in lieu of purchasing such services from us. We are also aware of at least one third party supplier of DNA sequencing and analysis services, such that Natera has elected, and may continue to elect in the future, to send a portion (or all) of its samples to its other supplier(s) instead of us, which it is not contractually prohibited from doing, given the non-exclusive nature of our agreement. Our agreement with Natera requires us to achieve certain quality and turnaround time metrics for Natera samples. Recently, the volumes of samples sent to us by Natera have fluctuated significantly and may continue to do so for the remainder of the term of the agreement, which could cause us to experience difficulty in achieving such metrics from time to time, or to meet our other obligations under our agreement.
Previous wording
We have derived a substantial portion of our revenue from sales of our DNA sequencing and data analysis services to the VA MVP. In September 2017, we entered into a one-year contract with three one-year optional renewal periods with the VA for the VA MVP, pursuant to which we received contracted orders from the VA MVP in September 2017, 2018, 2019, 2020, and 2021. In September 2022, we entered into a new contract with the VA MVP to continue providing them WGS services and received an initial task order with a value of up to $10.0 million (the "2022 VA MVP Agreement"). The performance period under the new contract includes a base period of one year, with four one-year renewal option periods that may be exercised upon discretion of the VA MVP. In September 2024, we received a third task order with a value of up to $7.5 million, subject to the receipt of samples from the VA MVP. There is no guarantee that the VA MVP will exercise any subsequent renewal option.
Current wording
We have derived a substantial portion of our revenue from sales of our DNA sequencing and data analysis services to the VA MVP. In September 2017, we entered into a one-year contract with three one-year optional renewal periods with the VA for the VA MVP, pursuant to which we received contracted orders from the VA MVP in September 2017, 2018, 2019, 2020, and 2021. In September 2022, we entered into a new contract with the VA MVP to continue providing them WGS services and received an initial task order with a value of up to $10.0 million (the "2022 VA MVP Agreement"). The performance period under the new contract includes a base period of one year, with four one-year renewal option periods that may be exercised upon discretion of the VA MVP. In September 2024, we received a third task order with a value of up to $7.5 million. There is no guarantee that the VA MVP will exercise any subsequent renewal option.
Previous wording
The VA MVP’s contracted orders for DNA sequencing and data analysis services have fluctuated significantly in value over time and are subject to the availability of funding, enrollment of veterans in the VA MVP study, and the VA MVP’s continued demand, if any, for our services among other factors. For example, the VA MVP contracted order received in September 2020 had a value of $30.9 million, whereas annual orders received in subsequent years had values of $10.0 million or less, which represents a substantial decline. We have no certainty that funding will be made available for our services, or that the VA MVP will award any future contracts, contract renewals or contracted orders to us. The priorities of the VA, the VA MVP, or the U.S. government may change, including in response to a health epidemic or pandemic. For example, funding for our services may be limited or not available, and our business, financial condition, and operating results and cash flows will be materially harmed. Similarly, if we do not win future VA MVP contracts and renewals (whether due to being outbid by a competitor or the VA MVP’s decision not to award a future contract on a timely basis or at all, or to terminate for convenience or failure to renew any contract, for whatever reason) with a value comparable to that of our historical contracted orders, our business, financial condition, revenue and other operating results and cash flows may be materially harmed.
Current wording
The VA MVP’s contracted orders for DNA sequencing and data analysis services have fluctuated significantly in value over time and are subject to the availability of funding, enrollment of veterans in the VA MVP study, and the VA MVP’s continued demand, if any, for our services among other factors. For example, the VA MVP contracted order received in September 2020 had a value of $30.9 million, whereas annual orders received in subsequent years had values of $10.0 million, or less, which represents a substantial decline. We have no certainty that funding will be made available for our services, or that the VA MVP will honor its payment obligations under the current contract and task order, or award any future contracts, contract renewals or contracted orders to us. The priorities of the VA, the VA MVP, or the U.S. government may change, including in response to a health epidemic pandemic or federal cost-cutting initiatives such as those recently announced and enacted by the current administration. Future task orders from the VA MVP for our DNA sequencing and data analysis services may be reduced or eliminated as a result of reductions in government research spending and federal cost-cutting initiatives. For example, funding for our services may be limited or not available, and our business, financial condition, and operating results and cash flows will be materially harmed. Similarly, if we do not win future VA MVP contracts and renewals (whether due to being outbid by a competitor or the VA MVP’s decision not to award a future contract on a timely basis or at all, or to terminate for convenience or failure to renew any contract, for whatever reason) with a value comparable to that of our historical contracted orders, our business, financial condition, revenue and other operating results and cash flows may be materially harmed.
Previous wording
Our customers other than the VA MVP and Natera are primarily biopharmaceutical companies that use our services to support clinical trials. Our future success is substantially dependent on our ability to maintain our customer relationships and to establish new ones. Many factors have the potential to impact our customer relations, including the type of support our customers and potential customers require and our ability to deliver it, our customers’ satisfaction with our services, and other factors that may be beyond our control. Furthermore, our customers may decide to decrease or discontinue their use of our services due to changes in research and product development plans (including as a result of a public health crisis), failures in their clinical trials (which failures are statistically much more likely to occur than not at some point in the clinical development process, notwithstanding any enhanced patient stratification from the use of our proprietary tests and algorithms), financial constraints, or utilization of internal testing resources or tests performed by other parties, or other circumstances outside of our control.
Current wording
Our customers, other than the VA MVP and Natera, are primarily biopharmaceutical companies that use our services to support clinical trials, including Moderna. Our future success is substantially dependent on our ability to maintain our customer relationships and to establish new ones. Many factors have the potential to impact our customer relations, including the type of support our customers and potential customers require and our ability to deliver it, our customers’ satisfaction with our services, and other factors that may be beyond our control. Furthermore, our customers may decide to decrease or discontinue their use of our services due to changes in research and product development plans (including as a result of a public health crisis), failures in their clinical trials (which failures are statistically much more likely to occur than not at some point in the clinical development process, notwithstanding any enhanced patient stratification from the use of our proprietary tests and algorithms), financial constraints, or utilization of internal testing resources or tests performed by other parties, or other circumstances outside of our control.
Previous wording
The coverage and reimbursement status of newly-approved or cleared laboratory developed tests, including our NeXT Dx and NeXT Personal Dx products, is uncertain. We are seeking reimbursement for our NeXT Dx and NeXT Personal Dx tests, and other in vitro diagnostic tests we may develop, and if such tests are inadequately covered by insurance or ineligible for such reimbursement, this could limit our ability to derive revenue from any such current or future tests. The commercial success of current or future services and products in both domestic and international markets may depend in part on the availability of coverage and adequate reimbursement from third-party payors, including government payors, such as the Medicare and Medicaid programs, or equivalent foreign programs, managed care organizations, and other third-party payors. The government and other third-party payors are increasingly attempting to contain health care costs by limiting both insurance coverage and the level of reimbursement for new diagnostic tests. As a result, they may not cover or provide adequate payment for any current or future in vitro diagnostic tests that we develop. These payors may conclude that our services or products are less safe, less effective, or less cost-effective than existing or later-introduced services or products. These payors may also conclude that the overall cost of using one of our tests exceeds the overall cost of using a competing test, and third-party payors may not approve any current or future in vitro diagnostic tests we develop for insurance coverage and adequate reimbursement.
Current wording
The coverage and reimbursement status of newly-approved or cleared laboratory developed tests, including our NeXT Dx and NeXT Personal Dx products, is uncertain. We are seeking reimbursement for our NeXT Dx and NeXT Personal Dx tests, and other in vitro diagnostic tests we may develop, and if such tests are inadequately covered by insurance or ineligible for such reimbursement, this could limit our ability to derive revenue from any such current or future tests. The commercial success of current or future services and products in both domestic and international markets may depend in part on the availability of coverage and adequate reimbursement from third-party payors, including government payors, such as the Medicare and Medicaid programs, or equivalent foreign programs, managed care organizations, and other third-party payors. The government and other third-party payors are increasingly attempting to contain health care costs by limiting both insurance coverage and the level of reimbursement for new diagnostic tests. As a result, they may not cover or provide adequate payment for any current or future in vitro diagnostic tests that we develop. These payors may conclude that our services or products are not medically necessary, or are less safe, less effective, or less cost-effective than existing or later-introduced services or products. These payors may also conclude that the overall cost of using one of our tests exceeds the overall cost of using a competing test, and third-party payors may not approve any current or future in vitro diagnostic tests we develop for insurance coverage and adequate reimbursement.
Previous wording
Any collaboration arrangements that we have entered into or may enter into in the future may not be successful, which could adversely affect our ability to develop and commercialize our services and products.
Current wording
We are pursuing a partner-centric strategy and have key relationships with Tempus, Myriad, Moderna and Merck, among others. These and any other partnering and/or collaboration arrangements that we have entered into or may enter into in the future may not be successful, or may terminate, which could adversely impact our business or affect our ability to develop and commercialize our services and products.
Previous wording
Any current or future collaborations, including any strategic alliances or any collaborations to develop companion diagnostic tests, that we have entered (for example, our collaborations with Tempus; Myriad; ClearNote Health, Inc.; Cancer Research UK, University College London, and the Francis Crick Institute (the TRACERx study); The Royal Marsden; the Vall d'Hebron Institute of Oncology (VHIO); Duke University; the Dana-Farber Cancer Institute; University Medical Center Hamburg-Eppendorf (also known as UKE); and Criterium and the Academic Breast Cancer Consortium) or may enter into may not be successful. The success of our collaboration arrangements will depend heavily on the efforts and activities of our collaborators. Collaborations are subject to numerous risks, which include that:
Current wording
Any current or future collaborations, including any strategic alliances or any collaborations to develop companion diagnostic tests, that we have entered (for example, our strategic alliances with Moderna and Merck; and our collaborations with Tempus; Myriad; ClearNote Health, Inc.; Cancer Research UK, University College London, and the Francis Crick Institute (the TRACERx study); Institut Curie; The Royal Marsden; the Vall d'Hebron Institute of Oncology (VHIO); the University of California, San Diego; Duke University; Vanderbilt University and Johns Hopkins University (the PREDICT study); the Dana-Farber Cancer Institute; the University of Texas M.D. Anderson Cancer Center; University Medical Center Hamburg-Eppendorf (also known as UKE); and Criterium and the Academic Breast Cancer Consortium) or may enter into may not be successful. The success of our collaboration arrangements will depend heavily on the efforts and activities of our collaborators. Collaborations are subject to numerous risks, which include that.
Previous wording
collaborators’ activities or use of our services or deliverables may create additional regulatory obligations and could lead to side effects or adverse events in patients, exposing us to potential liability or regulatory review; and
Current wording
collaborators’ activities or use of our services or deliverables may create additional regulatory obligations and could lead to side effects or adverse events in patients, exposing us to potential liability or regulatory review;
Previous wording
If our facilities become damaged or inoperable, or we are required to vacate the facilities, our ability to sell and provide our services and pursue our research and development efforts may be jeopardized.
Current wording
We have a single facility and if it becomes damaged or inoperable, or we are required to vacate our facility, our ability to sell and provide our services and pursue research and development efforts may be jeopardized.
Previous wording
We currently derive our revenue from our genomic analysis conducted in our laboratories. Currently, our only clinical reference or research and development laboratory facilities are in Fremont, California. Our facilities and equipment could be harmed or rendered inoperable by natural or man-made disasters, including fires, earthquakes, flooding, and power outages, which may render it difficult or impossible for us to sell or perform our services for some period of time. Northern California continues to experience serious fires and the San Francisco Bay Area is considered to lie in an area with earthquake risk. The inability to sell or to perform our sequencing and analysis services, disruptions in our operations, or the backlog of samples that could develop if our facilities are inoperable for even a short period of time, may result in the loss of customers or harm to our reputation or relationships with scientific or clinical collaborators, and we may be unable to regain those customers or repair our reputation or such relationships in the future. For example, from January 2023 through April 2023, we experienced substantial disruption to our use of the Fremont facility due to a failure of an electrical bus duct serving the facility. Furthermore, our facilities and the equipment we use to perform our services and our research and development work could be costly and time-consuming to repair or replace.
Current wording
We currently derive our revenue from our genomic analysis conducted in our laboratories. Currently, our only clinical reference or research and development laboratory facility is in Fremont, California. Our laboratory facility and equipment could be harmed or rendered inoperable by natural or man-made disasters, including fires, earthquakes, flooding, and power outages, which may render it difficult or impossible for us to sell or perform our services for some period of time. Northern California continues to experience serious fires and the San Francisco Bay Area is considered to lie in an area with earthquake risk. The inability to sell or to perform our sequencing and analysis services, disruptions in our operations, or the backlog of samples that could develop if our laboratory facility is inoperable for even a short period of time, may result in the loss of customers or harm to our reputation or relationships with scientific or clinical collaborators, and we may be unable to regain those customers or repair our reputation or such relationships in the future. For example, from January 2023 through April 2023, we experienced substantial disruption to use of our laboratory facility due to a failure of an electrical bus duct serving that facility. Furthermore, our laboratory facility and the equipment we use to perform our services and our research and development work could be costly and time-consuming to repair or replace.
Previous wording
Additionally, a key component of our research and development process involves using biological samples as the basis for the development of our services, and our services typically involve using biological samples provided by or on behalf of our customers or collaborators. In some cases, these samples are difficult to obtain. If the parts of our laboratory facilities where we store these biological samples were damaged or compromised, or if these biological samples or the resulting data were otherwise lost, damaged or compromised due to equipment malfunction, human error or other causes, our ability to pursue our research and development projects or provide our services, as well as our reputation, could be jeopardized. For example, we have experienced from time to time, and may experience in the future, equipment malfunctions that have resulted in lost, damaged or compromised samples or resulting data. We carry insurance for damage to our property or to our customer's property while in our possession, and we also carry insurance for the disruption of our business, but these types of insurance may not be sufficient to cover all of our potential losses or liabilities and may not continue to be available to us on acceptable terms, if at all.
Current wording
Additionally, a key component of our research and development process involves using biological samples as the basis for the development of our services, and our services typically involve using biological samples provided by or on behalf of our customers or collaborators. In some cases, these samples are difficult to obtain. If the parts of our laboratory facility where we store these biological samples were damaged or compromised, or if these biological samples or the resulting data were otherwise lost, damaged or compromised due to equipment malfunction, human error or other causes, our ability to pursue our research and development projects or provide our services, as well as our reputation, could be jeopardized. For example, we have experienced from time to time, and may experience in the future, equipment malfunctions that have resulted in lost, damaged or compromised samples or resulting data. We carry insurance for damage to our property or to our customer's property while in our possession, and we also carry insurance for the disruption of our business, but these types of insurance may not be sufficient to cover all of our potential losses or liabilities and may not continue to be available to us on acceptable terms, if at all.
Previous wording
Further, if our laboratory facilities became inoperable, we would likely not be able to license or transfer our technology to other facilities with the qualifications, including state licensure and CLIA certification, that would be necessary to cover the scope of our current and our planned future services. Even if we were to find facilities with such qualifications to perform our services, they may not be available to us on commercially reasonable terms.
Current wording
Further, if our laboratory facility becomes inoperable, we would likely not be able to license or transfer our technology to other facilities with the qualifications, including state licensure and CLIA certification, that would be necessary to cover the scope of our current and our planned future services. Even if we were to find facilities with such qualifications to perform our services, they may not be available to us on commercially reasonable terms.
Previous wording
Our expected future growth could create a strain on our organizational, administrative, and operational infrastructure, including facilities, laboratory operations, quality control, customer service, marketing and sales, and management. We may not be able to maintain the quality of or expected turnaround times for our tests, or satisfy customer demand as our test volume grows. Our ability to manage our growth properly will require us to continue to improve our operational, financial, and management controls, as well as our reporting systems and procedures. As a result of our growth, our operating costs may escalate even faster than planned, and some of our internal systems may need to be enhanced or replaced. If we are unable to manage our growth effectively, it may be difficult for us to execute our business strategy and our business could be harmed.
Current wording
Our expected future growth could create a strain on our organizational, administrative, and operational infrastructure, including facilities, information technology systems, laboratory operations, quality control, customer service, marketing and sales, and management. We may not be able to maintain the quality of or expected turnaround times for our tests, or satisfy customer demand as our test volume grows. Our ability to manage our growth properly will require us to continue to improve our operational, financial, and management controls, as well as our reporting systems and procedures. As a result of our growth, our operating costs may escalate even faster than planned, and some of our internal systems may need to be enhanced or replaced. If we are unable to manage our growth effectively, it may be difficult for us to execute our business strategy and our business could be harmed.
Previous wording
Our Fremont facility expanded our laboratory capacity and, in order to execute our business model, we may need to make additional investments to further scale our infrastructure, including purchases of additional equipment, some of which can take several months or more to procure, setup, and validate, or increases to our software and computing capacity. There is no assurance that any of these increases in scale, equipment, software, and computing capacities, or process enhancements will be successfully implemented.
Current wording
Our Fremont facility expanded our laboratory capacity and, in order to execute our business model, we will need to make additional investments to further scale our infrastructure, including purchases of additional equipment, some of which can take several months or more to procure, setup, and validate, or increases to our software and computing capacity. There is no assurance that any of these increases in scale, equipment, software, and computing capacities, or process enhancements will be successfully implemented. In addition, we have experienced, and expect to continue to experience, significant fluctuations in the timing of receipt and volume of samples from our customers and collaborators. These fluctuations have in the past adversely impacted, and may in the future adversely impact, our ability to process samples timely and in an efficient fashion, particularly when the sample volume at any given time exceeds our then current capacity.
Previous wording
We expanded our laboratory facilities in advance of increased demand for our services. Our current and projected future expense levels are to a large extent fixed and are largely based on our current investment plans and our estimates of future test volume. As a result, if revenue does not meet our expectations we may not be able to promptly adjust or reduce our spending to levels commensurate with our revenue, or at all. If we fail to generate demand commensurate with our infrastructure growth or if we fail to scale our infrastructure sufficiently in advance of demand to successfully meet such demand, our business, prospects, financial condition, and results of operations could be adversely affected.
Current wording
We expanded our laboratory facility in advance of increased demand for our services. Our current and projected future expense levels are to a large extent fixed and are largely based on our current investment plans and our estimates of future test volume. As a result, if revenue does not meet our expectations we may not be able to promptly adjust or reduce our spending to levels commensurate with our revenue, or at all. If we fail to generate demand commensurate with our infrastructure growth or if we fail to scale our infrastructure sufficiently in advance of demand to successfully meet such demand, our business, prospects, financial condition, and results of operations could be adversely affected.
Previous wording
Our business could be adversely impacted by the effects of a health crisis that could cause significant disruption in the operations of our customers and third-party suppliers upon whom we rely. Our laboratory facilities, executive team, and most of our employees are located in the San Francisco Bay Area. In the event of a health crisis that becomes widespread in or around the San Francisco Bay Area, we may proactively, or be ordered by government officials to, take precautionary measures such as suspending our lab operations, implementing alternative work arrangements for our employees, and limiting our employees’ travel activities.
Current wording
Our business could be adversely impacted by the effects of a health crisis that could cause significant disruption in the operations of our customers and third-party suppliers upon whom we rely. Our laboratory facility, executive team, and most of our employees are located in the San Francisco Bay Area. In the event of a health crisis that becomes widespread in or around the San Francisco Bay Area, we may proactively, or be ordered by government officials to, take precautionary measures such as suspending our lab operations, implementing alternative work arrangements for our employees, and limiting our employees’ travel activities.
Previous wording
The implementation of the Final Rule exposes us to additional regulatory controls and submissions for our tests or the possibility of enforcement action, both of which would be burdensome. In addition, we cannot be certain that the FDA will not enact rules or guidance documents that could impact our ability to purchase certain materials necessary for the performance of our tests, such as products labeled for research use only. Should any of the reagents obtained by us from suppliers and used in conducting our tests be affected by future regulatory actions, our business could be adversely affected by those actions, including increasing the cost of testing or delaying, limiting, or prohibiting the purchase of reagents necessary to perform testing.
Current wording
In addition, we cannot be certain that the FDA will not enact rules or guidance documents that could impact our ability to purchase certain materials necessary for the performance of our tests, such as products labeled for research use only. Should any of the reagents obtained by us from suppliers and used in conducting our tests be affected by future regulatory actions, our business could be adversely affected by those actions, including increasing the cost of testing or delaying, limiting, or prohibiting the purchase of reagents necessary to perform testing.
Previous wording
In the EEA, IVDs are governed by the IVDR and must comply with the requirements of the IVDR in order to be placed on the market or put into service in the EEA. The IVDR does not specifically address the regulation of products falling within the description "laboratory-developed tests". Moreover, while the Regulation includes only limited exemptions for devices that are manufactured and used only within health institutions established in the EEA, diagnostic and therapeutic services undertaken outside of the EEA (for example at our facilities in the U.S.) would not fall within the scope of such exemptions. We believe that we do not currently offer tests or services to customers established in the EEA which would fall within the scope of the IVDR. If, in the future, we offer tests or services to customers within the EEA (whether directly or via intermediaries) that fall within the scope of the IVDR, it is unlikely that we will benefit from IVDR exemptions foreseen for health institutions established in the EEA. This means that we will have to comply with the IVDR in full.
Current wording
In the EEA, IVDs are governed by the IVDR and must comply with the requirements of the IVDR in order to be placed on the market or put into service in the EEA. The IVDR does not specifically address the regulation of products falling within the description "laboratory-developed tests". Moreover, while the Regulation includes only limited exemptions for devices that are manufactured and used only within health institutions established in the EEA, diagnostic and therapeutic services undertaken outside of the EEA (for example at our facility in the U.S.) would not fall within the scope of such exemptions. We believe that we do not currently offer tests or services to customers established in the EEA which would fall within the scope of the IVDR. If, in the future, we offer tests or services to customers within the EEA (whether directly or via intermediaries) that fall within the scope of the IVDR, it is unlikely that we will benefit from IVDR exemptions foreseen for health institutions established in the EEA. This means that we will have to comply with the IVDR in full.
Previous wording
If the FDA determines that our tests and associated software do not fall within the definition of an LDT, under the FDA's Final Rule or otherwise, or if we voluntarily submit one or more of our tests for premarket notification, review, clearance or approval by the FDA as medical devices, we may be required to obtain premarket clearance for our tests and associated software under Section 510(k) of the FDC Act or approval of a premarket approval application (“PMA”). We would also be subject to ongoing regulatory requirements such as registration and listing requirements, medical device reporting requirements, and quality control requirements. If our tests are considered medical devices not subject to enforcement discretion, or if we voluntarily submit one or more of our tests for premarket notification, review, clearance or approval by the FDA as medical devices, the regulatory requirements to which our tests are subject would depend on the FDA’s classification of our tests. The FDA has issued regulations classifying generic types of medical devices into one of three regulatory control categories (Class I, Class II, or Class III) depending on the degree of regulation that the FDA finds necessary to provide reasonable assurance of their safety and effectiveness. The class into which a device is placed determines the requirements that a medical device manufacturer must meet both pre- and post-market. On January 31, 2024, FDA announced its intent to initiate a reclassification process for most IVDs that are currently Class III (high risk), the majority of which are infectious disease and companion diagnostic IVDs, into Class II (moderate risk). This reclassification would allow manufacturers of certain types of IVDs to seek marketing clearance through the less burdensome Class II 510(k) premarket notification pathway rather than the Class III premarket approval (PMA) pathway, the most stringent type of FDA medical device review.
Current wording
If the FDA determines that our tests and associated software do not fall within the definition of an LDT, or if we voluntarily submit one or more of our tests for premarket notification, review, clearance or approval by the FDA as medical devices, we may be required to obtain premarket clearance for our tests and associated software under Section 510(k) of the FDC Act or approval of a premarket approval application (“PMA”). We would also be subject to ongoing regulatory requirements such as registration and listing requirements, medical device reporting requirements, and quality control requirements. If our tests are considered medical devices not subject to enforcement discretion, or if we voluntarily submit one or more of our tests for premarket notification, review, clearance or approval by the FDA as medical devices, the regulatory requirements to which our tests are subject would depend on the FDA’s classification of our tests. The FDA has issued regulations classifying generic types of medical devices into one of three regulatory control categories (Class I, Class II, or Class III) depending on the degree of regulation that the FDA finds necessary to provide reasonable assurance of their safety and effectiveness. The class into which a device is placed determines the requirements that a medical device manufacturer must meet both pre- and post-market. On January 31, 2024, FDA announced its intent to initiate a reclassification process for most IVDs that are currently Class III (high risk), the majority of which are infectious disease and companion diagnostic IVDs, into Class II (moderate risk). This reclassification would allow manufacturers of certain types of IVDs to seek marketing clearance through the less burdensome Class II 510(k) premarket notification pathway rather than the Class III premarket approval (PMA) pathway, the most stringent type of FDA medical device review.
Previous wording
Although we market our tests as LDTs that are currently subject to the FDA’s exercise of enforcement discretion, if any of our services or products fail to comply with FDA regulatory requirements as enforced, including the Final Rule, or if we are required or voluntarily submit one or more of our tests for premarket notification, review, clearance or approval by the FDA as medical devices, we would be subject to the applicable requirements of the FDC Act and the FDA’s implementing regulations. The FDA is empowered to impose sanctions for violations of the FDC Act and the FDA’s implementing regulations, including warning letters, civil and criminal penalties, injunctions, product seizure or recall, import bans, restrictions on the conduct of our operations and total or partial suspension of production. Any of the aforementioned sanctions could cause reputational damage, undermine our ability to maintain and increase our revenue, and harm our business, financial condition, and results of operations. In particular, if we or the FDA discover that any of our services or products have defects that call into question the accuracy of their results, we may be required to undertake a retest of all results and analyses provided during the period relevant to the defect, or recall the affected services and products. The direct costs incurred in connection with such a recall in terms of management time, administrative, and legal expenses and lost revenue, together with the indirect costs to our reputation, could harm our business, financial condition, and results of operations, and our ability to execute our business strategy. While we believe that we are currently in material compliance with applicable laws and regulations as currently enforced, the FDA or other regulatory agencies and authorities may not agree, and a determination that we have violated these laws or a public announcement that we are being investigated for possible violations of these laws could adversely affect our business, financial condition, results of operations, and prospects.
Current wording
Although we market our tests as LDTs that are currently subject to the FDA’s exercise of enforcement discretion, if any of our services or products fail to comply with FDA regulatory requirements as enforced, or if we are required or voluntarily submit one or more of our tests for premarket notification, review, clearance or approval by the FDA as medical devices, we would be subject to the applicable requirements of the FDC Act and the FDA’s implementing regulations. The FDA is empowered to impose sanctions for violations of the FDC Act and the FDA’s implementing regulations, including warning letters, civil and criminal penalties, injunctions, product seizure or recall, import bans, restrictions on the conduct of our operations and total or partial suspension of production. Any of the aforementioned sanctions could cause reputational damage, undermine our ability to maintain and increase our revenue, and harm our business, financial condition, and results of operations. In particular, if we or the FDA discover that any of our services or products have defects that call into question the accuracy of their results, we may be required to undertake a retest of all results and analyses provided during the period relevant to the defect, or recall the affected services and products. The direct costs incurred in connection with such a recall in terms of management time, administrative, and legal expenses and lost revenue, together with the indirect costs to our reputation, could harm our business, financial condition, and results of operations, and our ability to execute our business strategy. While we believe that we are currently in material compliance with applicable laws and regulations as currently enforced, the FDA or other regulatory agencies and authorities may not agree, and a determination that we have violated these laws or a public announcement that we are being investigated for possible violations of these laws could adversely affect our business, financial condition, results of operations, and prospects.
Previous wording
Cyberattacks, malicious internet-based activity, and online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties with whom we work. Such threats are prevalent and continue to increase, are becoming increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyberattacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, including the war between Russia and Ukraine, the state of war between Israel and Hamas and the risk of a larger regional conflict, we, and the third parties with whom we work, may be vulnerable to a heightened risk of these attacks, including retaliatory cyberattacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell, and distribute our platform, products, and services.
Current wording
Cyberattacks, malicious internet-based activity, and online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties with whom we work. Such threats are prevalent and continue to increase, are becoming increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyberattacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, including the war between Russia and Ukraine, the state of war between Israel and Hamas and the risk of a larger regional conflict, we, and the third parties with whom we work, may be vulnerable to a heightened risk of these attacks, including retaliatory cyberattacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell, and distribute our products and services.
Previous wording
We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, attacks enhanced or facilitated by artificial intelligence ("AI"), software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, natural disasters, terrorism, and other similar threats. In particular, ransomware attacks are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, ability to provide our services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. It may be difficult and/or costly to detect, investigate, mitigate, contain, and remediate a security incident. Our efforts to do so may not be successful. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems. Most of our employees are working remotely at least part of the time and such remote work has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.
Current wording
We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which are increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, attacks enhanced or facilitated by artificial intelligence ("AI"), software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, natural disasters, terrorism, and other similar threats. In particular, ransomware attacks are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, ability to provide our services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. It may be difficult and/or costly to detect, investigate, mitigate, contain, and remediate a security incident. Our efforts to do so may not be successful. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems. Most of our employees are working remotely at least part of the time and such remote work has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.
Previous wording
We rely on third-parties to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation, on-site systems and cloud-based data centers, systems handling human resources, financial reporting and controls, customer relationship management, regulatory compliance, and other infrastructure operations. We also communicate sensitive data, including patient data, electronically, and through relationships with multiple third-party vendors and their subcontractors. These applications and data encompass a wide variety of sensitive information, including research and development information, patient data, commercial information, and business and financial information. Our ability to monitor these third parties’ security practices is limited, and these third parties may not have adequate security measures in place. If the third-parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if the third-parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or that of the third-parties with whom we work supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems or the third-party information technology systems that support us and our services.
Current wording
We rely on third parties to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation, on-site systems and cloud-based data centers, systems handling human resources, financial reporting and controls, customer relationship management, regulatory compliance, and other infrastructure operations. We also communicate sensitive data, including patient data, electronically, and through relationships with multiple third-party vendors and their subcontractors. These applications and data encompass a wide variety of sensitive information, including research and development information, patient data, commercial information, and business and financial information. Our ability to monitor these third parties’ security practices is limited, and these third parties may not have adequate security measures in place. If the third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if the third parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or that of the third parties with whom we work have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems or the third-party information technology systems that support us and our services.
Previous wording
Despite the measures we have taken to prevent unanticipated problems that could affect our information technology and telecommunications systems, failures or significant downtime of our information technology or telecommunications systems or those used by our third-party service providers could prevent us from conducting tests, preparing and providing reports to our customers, billing customers, collecting revenue, handling inquiries from our customers, conducting research and development activities, and managing the administrative aspects of our business. For example, in 2018, we experienced downtime in our information technology systems in connection with the adoption of new information technology, and our results of operations in the first and second quarters of 2018 were adversely affected as a result. In 2024, we experienced downtime in our information technology systems due to human error in connection with an upgrade by one of our third-party vendors to one of our information technology systems. Our results of operations were not materially adversely affected in the case of the latter downtime. Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties upon whom we rely. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our platform, products, and services.
Current wording
Despite the measures we have taken to prevent unanticipated problems that could affect our information technology and telecommunications systems, failures or significant downtime of our information technology or telecommunications systems or those used by our third-party service providers could prevent us from conducting tests, preparing and providing reports to our customers, billing customers, collecting revenue, handling inquiries from our customers, conducting research and development activities, and managing the administrative aspects of our business. For example, in 2018, we experienced downtime in our information technology systems in connection with the adoption of new information technology, and our results of operations in the first and second quarters of 2018 were adversely affected as a result. In 2024, we experienced downtime in our information technology systems due to human error in connection with an upgrade by one of our third-party vendors to one of our information technology systems. Our results of operations were not materially adversely affected in the case of the latter downtime. Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties upon whom we rely. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our products and services.
Previous wording
While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We may not, however, detect and remediate all such vulnerabilities, including on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities, but we may not be able to detect and remediate all vulnerabilities because the threats and techniques used to exploit the vulnerability change frequently and are often sophisticated in nature. Therefore, such vulnerabilities could be exploited but may not be detected until after a security incident has occurred. Further, if the information technology systems of the third parties with whom we work become subject to security incidents, we may have insufficient recourse against such third parties, and we may have to expend significant resources to mitigate the impact of such an event, and to develop and implement protections to prevent future events of this nature from occurring. Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties with whom we work. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our tests and services and otherwise conduct our business in the ordinary course.
Current wording
While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We may not, however, detect and remediate all such vulnerabilities, including on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities, but we may not be able to detect and remediate all vulnerabilities because the threats and techniques used to exploit the vulnerability change frequently and are often sophisticated in nature. Therefore, such vulnerabilities could be exploited but may not be detected until after a security incident has occurred. Further, if the information technology systems of the third parties with whom we work become subject to security incidents, we may have insufficient recourse against such third parties, and we may have to expend significant resources to mitigate the impact of such an event, and to develop and implement protections to prevent future events of this nature from occurring.
Previous wording
Applicable data privacy and security obligations, including applicable federal and/or state breach notification laws and foreign equivalents, as well as public company disclosure obligations, may require us, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, regulatory authorities and our stockholders, of certain security incidents, or to take other actions, such as providing credit monitoring and identity theft protection services. Such disclosures and related actions can be costly, and the disclosure or the failure to comply with such applicable requirements could lead to adverse consequences. If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal information); litigation (including class claims) and mass arbitration; indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may prevent or cause customers or partners to stop using our platform, products, and services, deter new customers or partners from using our platform, products, and services, and negatively impact our ability to grow and operate our business. Whether a cybersecurity incident is reportable to our stockholders may not be straightforward, may take considerable time to determine, and may be subject to change as the investigation of the incident progresses, including changes that may significantly alter any initial disclosure that we provide.
Current wording
Applicable data privacy and security obligations, including applicable federal and/or state breach notification laws and foreign equivalents, as well as public company disclosure obligations, may require us, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, regulatory authorities and our stockholders, of certain security incidents or to take other actions, such as providing credit monitoring and identity theft protection services. Such disclosures and related actions can be costly, and the disclosure or the failure to comply with such applicable requirements could lead to adverse consequences. If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal information); litigation (including class claims) and mass arbitration; indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may prevent or cause customers or partners to stop using our products and services, deter new customers or partners from using our products and services, and negatively impact our ability to grow and operate our business. Whether a cybersecurity incident is reportable to our stockholders may not be straightforward, may take considerable time to determine, and may be subject to change as the investigation of the incident progresses, including changes that may significantly alter any initial disclosure that we provide.
Previous wording
In the United States, federal, state, and local governments have enacted numerous data privacy, and security laws, including data breach notification laws, personal information privacy laws, and consumer protection laws. For example, the Health Insurance Portability and Accountability Act ("HIPAA"), as amended by the Health Information Technology for Economic and Clinical Health Act ("HITECH"), imposes specific requirements relating to the privacy, security, and transmission of individually identifiable health information. Penalties for failure to comply with HIPAA and HITECH include significant civil monetary penalties and criminal penalties in certain circumstances with fines up to $250,000 per violation and/or imprisonment. Further, various states, such as California and Massachusetts, have implemented similar privacy laws and regulations, such as the California Confidentiality of Medical Information Act, that impose restrictive requirements regulating the use and disclosure of health information and other personally identifiable information. These laws and regulations are not necessarily preempted by HIPAA, particularly if a state affords greater protection to individuals than HIPAA. Where state laws are more protective and applicable to us, we may have to comply with the stricter provisions. In addition to fines and penalties imposed upon violators, some of these state laws also afford private rights of action to individuals who believe their personal information has been misused. Similarly, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CPRA”) (collectively, "CCPA") applies to personal information of consumers, business representatives, and employees, and requires businesses to provide specific disclosures in privacy notices and honor requests of California residents to exercise certain privacy rights, including those noted below. The CCPA provides for fines of up to $7,500 per intentional violation and allows private litigants affected by certain data breaches to recover significant statutory damages. Although the CCPA exempts some data processed in the context of clinical trials, the CCPA increases compliance costs and potential liability with respect to other personal information we maintain about California residents. In addition, the CPRA expands the CCPA’s requirements, including by adding a new right for individuals to correct their personal information and establishing a new regulatory agency to implement and enforce the law. Other states, such as Virginia, Colorado, Connecticut and Utah have also enacted comprehensive privacy laws, and similar laws are being considered in several other states, as well as at the federal and local levels. These state laws and the CCPA provide individuals with certain rights concerning their personal information, including the right to access, correct, or delete certain personal information, and opt-out of certain data processing activities, such…
Excerpt shortened here; the source contains the full paragraph.
Current wording
In the United States, federal, state, and local governments have enacted numerous data privacy, and security laws, including data breach notification laws, personal information privacy laws, and consumer protection laws. For example, the Health Insurance Portability and Accountability Act ("HIPAA"), as amended by the Health Information Technology for Economic and Clinical Health Act ("HITECH"), imposes specific requirements relating to the privacy, security, and transmission of individually identifiable health information. Penalties for failure to comply with HIPAA and HITECH include significant civil monetary penalties and criminal penalties in certain circumstances with fines up to $250,000 per violation and/or imprisonment. Further, various states, such as California and Massachusetts, have implemented similar privacy laws and regulations, such as the California Confidentiality of Medical Information Act, that impose restrictive requirements regulating the use and disclosure of health information and other personally identifiable information. These laws and regulations are not necessarily preempted by HIPAA, particularly if a state affords greater protection to individuals than HIPAA. Where state laws are more protective and applicable to us, we may have to comply with the stricter provisions. In addition to fines and penalties imposed upon violators, some of these state laws also afford private rights of action to individuals who believe their personal information has been misused. Similarly, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CPRA”) (collectively, "CCPA") applies to personal information of consumers, business representatives, and employees, and requires businesses to provide specific disclosures in privacy notices and honor requests of California residents to exercise certain privacy rights, including those noted below. The CCPA provides for fines and allows private litigants affected by certain data breaches to recover significant statutory damages. Although the CCPA exempts some data processed in the context of clinical trials, the CCPA increases compliance costs and potential liability with respect to other personal information we maintain about California residents. In addition, the CPRA expands the CCPA’s requirements, including by adding a new right for individuals to correct their personal information and establishing a new regulatory agency to implement and enforce the law. Other states, such as Virginia, Colorado, Connecticut and Utah have also enacted comprehensive privacy laws, and similar laws are being considered in several other states, as well as at the federal and local levels. These state laws and the CCPA provide individuals with certain rights concerning their personal information, including the right to access, correct, or delete certain personal information, and opt-out of certain data processing activities, such as targeted advertising, profiling, and a…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
extension thereto) (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in such framework), these mechanisms are susceptible to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal information to the U.S. If there is no lawful manner for us to transfer personal information from the EEA, the U.K. or other jurisdictions to the U.S., or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal information necessary to operate our business. Additionally, companies that transfer personal information out of the EEA and U.K. to other jurisdictions, particularly to the U.S., are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations. EEA countries may also introduce national legislation further limiting the processing of personal genetic, biometric, or health data, which could limit our ability to collect, use and share data originating from the EEA, or could cause our compliance costs to increase, require us to change our practices, adversely impact our business, and harm our financial condition. The U.S. is also increasingly scrutinizing certain personal data transfers and may impose data localization requirements, for example, the Biden Administration’s executive order Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.
Current wording
In the ordinary course of business, we may transfer personal information from Europe and other jurisdictions to the U.S. or other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. In particular, the EEA and the U.K. have significantly restricted the transfer of personal information to the U.S. and other countries whose data privacy and security laws they generally believe are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal information from the EEA and U.K. to the U.S. in compliance with law, such as the EEA’s standard contractual clauses, the U.K.'s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework (and U.K. extension thereto) (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in such framework), these mechanisms are susceptible to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal information to the U.S. If there is no lawful manner for us to transfer personal information from the EEA, the U.K. or other jurisdictions to the U.S., or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal information necessary to operate our business. Additionally, companies that transfer personal information out of the EEA and U.K. to other jurisdictions, particularly to the U.S., are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations. EEA countries may also introduce national legislation further limiting the processing of personal genetic, biometric, or health data, which could limit our ability to collect, use and share data originating from the EEA, or could cause our compliance costs to increase, require us to change our practices, adversely impact our business, and harm our financial condition. The U.S. is also increasingly scrutinizing certain personal data transfers and may impose data localization requirements, for example, the Biden Administration’s executive order Preventing Access to Americans’ Bulk Se…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
In addition to data privacy and security laws, because we process some credit card payments through a third-party payment processing partner, we are contractually subject to industry standards adopted by industry groups and may become subject to such obligations in the future. For example, we may also be subject to the Payment Card Industry Data Security Standard (“PCI DSS”). The PCI DSS requires companies to adopt certain measures to ensure the security of cardholder information, including using and maintaining firewalls, adopting proper password protections for certain devices and software, and restricting data access. Noncompliance with PCI-DSS can result in penalties ranging from $5,000 to $100,000 per month by credit card companies, litigation, damage to our reputation, and revenue losses.
Current wording
In addition to data privacy and security laws, because we process some credit card payments through a third-party payment processing partner, we are contractually subject to industry standards adopted by industry groups and may become subject to such obligations in the future. For example, we also are subject to the Payment Card Industry Data Security Standard (“PCI DSS”). The PCI DSS requires companies to adopt certain measures to ensure the security of cardholder information, including using and maintaining firewalls, adopting proper password protections for certain devices and software, and restricting data access. Noncompliance with PCI-DSS can result in penalties ranging from $5,000 to $100,000 per month by credit card companies, litigation, damage to our reputation, and revenue losses.
Previous wording
(e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans or restrictions on processing personal information; orders to destroy or not use personal information; and imprisonment of company officials. In particular, plaintiffs have become increasingly more active in bringing data privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in our business operations (including, clinical trials); interruptions or stoppages of data collection needed to train our algorithms; inability to process personal information or to operate in certain jurisdictions; limited ability to develop or commercialize our platform, products, and services; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.
Current wording
If we or the third parties with whom we work fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans or restrictions on processing personal information; orders to destroy or not use personal information; and imprisonment of company officials. In particular, plaintiffs have become increasingly more active in bringing data privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in our business operations (including, clinical trials); interruptions or stoppages of data collection needed to train our algorithms; inability to process personal information or to operate in certain jurisdictions; limited ability to develop or commercialize our products and services; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.
Previous wording
As a clinical laboratory, our business practices may face additional scrutiny from government regulatory agencies and authorities such as the Department of Justice, the HHS Office of Inspector General (the “OIG”), and CMS. Certain arrangements between clinical laboratories and referring physicians have been identified in fraud alerts issued by the OIG as implicating the Anti-Kickback Statute. The OIG has stated that it is particularly concerned about these types of arrangements because the choice of laboratory, as well as the decision to order laboratory tests, typically are made or strongly influenced by the physician, with little or no input from patients. Moreover, the provision of payments or other items of value by a clinical laboratory to a referral source could be prohibited under the Stark Law unless the arrangement meets all criteria of an applicable exception. The government has been active in enforcement of these laws as they apply to clinical laboratories.
Current wording
As a clinical laboratory, our business practices may face additional scrutiny from government regulatory agencies and authorities such as the Department of Justice, the U.S. Department of Health and Human Services Office of Inspector General (the “OIG”), and CMS. Certain arrangements between clinical laboratories and referring physicians have been identified in fraud alerts issued by the OIG as implicating the Anti-Kickback Statute. The OIG has stated that it is particularly concerned about these types of arrangements because the choice of laboratory, as well as the decision to order laboratory tests, typically are made or strongly influenced by the physician, with little or no input from patients. Moreover, the provision of payments or other items of value by a clinical laboratory to a referral source could be prohibited under the Stark Law unless the arrangement meets all criteria of an applicable exception. The government has been active in enforcement of these laws as they apply to clinical laboratories.
Previous wording
There have been executive, judicial and Congressional challenges to certain aspects of the ACA, as well as efforts by the former Trump administration to repeal or replace certain aspects of the ACA. Since January 2017, former President Trump signed several Executive Orders and other directives to delay the implementation of certain requirements of the ACA. Concurrently, Congress considered legislation that would repeal, or repeal and replace, all or part of the ACA. While Congress has not passed comprehensive repeal legislation, it has enacted laws that modify certain provisions of the ACA such as removing penalties, starting January 1, 2019, for not complying with the ACA’s “individual mandate” to carry health insurance and eliminating the implementation of certain ACA-mandated fees. On June 17, 2021 the U.S. Supreme Court dismissed a challenge on procedural grounds that argued the ACA is unconstitutional in its entirety because the “individual mandate” was repealed by Congress. Further, prior to the U.S. Supreme Court ruling, on January 28, 2021, President Biden issued an executive order that initiated a special enrollment period for purposes of obtaining health insurance coverage through the ACA marketplace The executive order also instructed certain governmental agencies to review and reconsider their existing policies and rules that limit access to healthcare, including among others, reexamining Medicaid demonstration projects and waiver programs that include work requirements, and policies that create unnecessary barriers to obtaining access to health insurance coverage through Medicaid or the ACA. Further, on August 16, 2022, President Biden signed the Inflation Reduction Act of 2022 (the “IRA 2022”) into law, which among other things, extends enhanced subsidies for individuals purchasing health insurance coverage in ACA marketplaces through plan year 2025. The IRA 2022 also eliminates the “donut hole” under the Medicare Part D program beginning in 2025 by significantly lowering the beneficiary maximum out-of-pocket cost and through a newly established manufacturer discount program. It is possible that the ACA will be subject to judicial or Congressional challenges in the future. Efforts to repeal, substantially modify or invalidate some or all of the provisions of the ACA create considerable uncertainties for all businesses involved in healthcare, including our own. It is unclear how such future efforts to repeal and replace the ACA will impact the ACA and our business. Additional legislation may be enacted that further amends, or repeals, the ACA, which could result in lower numbers of insured individuals, reduced coverage for insured individuals and adversely affect our and our customers’ business.
Current wording
Further, on August 16, 2022, the Inflation Reduction Act (“IRA 2022") was signed into law, which among other things, extends enhanced subsidies for individuals purchasing health insurance coverage in ACA marketplaces through plan year 2025. The IRA 2022 also eliminates the “donut hole” under the Medicare Part D program beginning in 2025 by significantly lowering the beneficiary maximum out-of-pocket cost and through a newly established manufacturer discount program. It is possible that the ACA will be subject to judicial or Congressional challenges in the future. Efforts to repeal, substantially modify or invalidate some or all of the provisions of the ACA create considerable uncertainties for all businesses involved in healthcare, including our own. It is unclear how such future efforts to repeal and replace the ACA will impact the ACA and our business. Additional legislation may be enacted that further amends, or repeals, the ACA, which could result in lower numbers of insured individuals, reduced coverage for insured individuals and adversely affect our and our customers’ business. The current administration is also pursuing policies to reduce regulations and expenditures across government including at HHS, the FDA, CMS and related agencies. These actions, presently directed by executive orders or memoranda from the Office of Management and Budget, may propose policy changes that create additional uncertainty for our business and our customers.
Previous wording
On December 22, 2017, former President Trump signed into law comprehensive tax legislation (the “Tax Cuts and Jobs Act”) that significantly revised the Internal Revenue Code of 1986, as amended (the “Code”). Future guidance from the U.S. Internal Revenue Service and other tax authorities with respect to the Tax Cuts and Jobs Act may affect us, and certain aspects of the Tax Cuts and Jobs Act could be repealed or modified in future legislation. For example, on March 27, 2020, the CARES Act was enacted, which includes changes to the tax provisions that benefit business entities and makes certain technical corrections to the Tax Cuts and Jobs Act. On December 27, 2020, the Consolidated Appropriations Act, a coronavirus relief package that extended and expanded various tax provisions, was signed into law. The IRA 2022 includes provisions that will impact the U.S. federal income taxation of corporations, including imposing a minimum tax on the book income of certain large corporations and an excise tax on certain corporate stock repurchases that would be imposed on the corporation repurchasing such stock. Changes in corporate tax rates, the realization of net deferred tax assets relating to our U.S. operations, the taxation of foreign earnings, and the deductibility of expenses under the Tax Cuts and Jobs Act, the CARES Act, or future tax reform legislation could have a material impact on the value of our deferred tax assets, could result in significant one-time charges in the current or future taxable years, and could increase our future U.S. tax expense. The foregoing items, as well as any other future changes in tax laws, could have a material adverse effect on our business, cash flow, financial condition, or results of operations. In addition, it is uncertain if and to what extent various states will conform to the Tax Cuts and Jobs Act, the CARES Act, IRA 2022, or any newly enacted federal tax legislation.
Current wording
On December 22, 2017, comprehensive tax legislation (the “Tax Cuts and Jobs Act”) was signed into law that significantly revised the Internal Revenue Code of 1986, as amended (the “Code”). Future guidance from the U.S. Internal Revenue Service and other tax authorities with respect to the Tax Cuts and Jobs Act may affect us, and certain aspects of the Tax Cuts and Jobs Act could be repealed or modified in future legislation. For example, on March 27, 2020, the CARES Act was enacted, which includes changes to the tax provisions that benefit business entities and makes certain technical corrections to the Tax Cuts and Jobs Act. On December 27, 2020, the Consolidated Appropriations Act, a coronavirus relief package that extended and expanded various tax provisions, was signed into law. The IRA 2022 includes provisions that will impact the U.S. federal income taxation of corporations, including imposing a minimum tax on the book income of certain large corporations and an excise tax on certain corporate stock repurchases that would be imposed on the corporation repurchasing such stock. Changes in corporate tax rates, the realization of net deferred tax assets relating to our U.S. operations, the taxation of foreign earnings, and the deductibility of expenses under the Tax Cuts and Jobs Act, the CARES Act, or future tax reform legislation could have a material impact on the value of our deferred tax assets, could result in significant one-time charges in the current or future taxable years, and could increase our future U.S. tax expense. The foregoing items, as well as any other future changes in tax laws, could have a material adverse effect on our business, cash flow, financial condition, or results of operations. In addition, it is uncertain if and to what extent various states will conform to the Tax Cuts and Jobs Act, the CARES Act, IRA 2022, or any newly enacted federal tax legislation.
Showing the first 40 of 50 pairs. Open the source sections for the rest.
Rearranged current paragraphs (3)
Current report — wording carried from elsewhere
Others may develop lower-priced, less complex products and services that pharmaceutical companies could view as functionally equivalent to our current or planned future services, which could force us to lower the price of our services and impact our operating margins and our ability to achieve and maintain profitability. In addition, companies or governments that control access to genetic testing and related services through umbrella contracts or regional preferences could promote our competitors or prevent us from performing certain services. In addition, technological innovations that result in the creation of enhanced products or diagnostic tools that are more sensitive or specific than ours may enable other clinical laboratories, hospitals, physicians, or medical providers to provide specialized products or services similar to ours in a more patient-friendly, efficient, or cost-effective manner than is currently possible. If we cannot compete successfully against current or future competitors, or if we cannot maintain successful customer or supply relationships with Natera, Illumina or other present or potential competitors, we may be unable to ensure or increase market acceptance and sales of our current or planned future services, which could prevent us from increasing or sustaining our revenue or achieving or sustaining profitability.
Current report — wording carried from elsewhere
Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties with whom we work. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our tests and services and otherwise conduct our business in the ordinary course.
Current report — wording carried from elsewhere
Corporation (“FDIC”) as receiver. Similarly, on March 12, 2023, Signature Bank and Silvergate Capital Corp. were each swept into receivership. In addition, on May 1, 2023, the FDIC seized First Republic Bank and sold its assets to JPMorgan Chase & Co.
Rearranged previous paragraphs (26)
Previous report — wording carried elsewhere
We rely on a limited number of suppliers, or in some cases, a sole supplier, for some laboratory instruments and materials, and we may not be able to replace or immediately transition to alternative suppliers should we need to do so.
Previous report — wording carried elsewhere
If we cannot develop services and products to keep pace with rapid advances in technology, medicine, and science our operating results and competitive position could be harmed.
Previous report — wording carried elsewhere
We may acquire businesses or assets, form joint ventures, or make investments in other companies or technologies that could harm our operating results, dilute stockholders’ ownership, or cause us to incur debt or significant expense.
Previous report — wording carried elsewhere
Complying with numerous statutes and regulations pertaining to our business is an expensive and time-consuming process, and we may be subject to regulatory action if we or our service or product offerings do not comply with applicable requirements.
Previous report — wording carried elsewhere
Our employees may engage in misconduct or other improper activities, such as noncompliance with regulatory standards and requirements, including the Foreign Corrupt Practices Act of 1977 and other anti-bribery laws, which could cause significant liability for us and harm our reputation.
Previous report — wording carried elsewhere
Changes in health care policy could increase our costs, decrease our revenue, and impact sales of and reimbursement for our tests. When we grow our business by developing in vitro diagnostic tests, we may be subject to reimbursement challenges.
Previous report — wording carried elsewhere
If we cannot license rights to use necessary technologies on reasonable terms, we may not be able to commercialize new services and products.
Previous report — wording carried elsewhere
If we are not able to obtain, maintain and enforce patent protection for our products, services or technologies, our competitors and other third parties could develop and commercialize products, services and technologies similar or identical to ours, and our ability to successfully commercialize our products, services, and technologies may be adversely affected.
Previous report — wording carried elsewhere
If we are unable to protect the confidentiality of our trade secrets and know-how, our business would be harmed.
Previous report — wording carried elsewhere
Our quarterly results may fluctuate significantly, which could adversely impact our common stock’s value.
Previous report — wording carried elsewhere
Future sales of shares by existing stockholders, or the perception that such sales could occur, could cause the stock price of our common stock to decline.
Previous report — wording carried elsewhere
We have a history of losses and we expect to incur significant losses for the foreseeable future and may not be able to generate sufficient revenue to achieve or sustain profitability.
Previous report — wording carried elsewhere
If we are unable to increase sales of our current services or successfully develop and commercialize other services or products, or if we are unable to execute our sales and marketing strategy for our services or unable to gain sufficient acceptance in the market, we may fail to generate sufficient revenue to achieve profitability and sustain our business.
Previous report — wording carried elsewhere
We have substantial customer concentration, with a limited number of customers accounting for a substantial portion of our revenue and accounts receivable; in particular, we currently derive a substantial portion of our revenue from two of our largest customers, Natera and Moderna, and in the past have derived a substantial portion of our revenue from another of our largest customers, the VA MVP.*
Previous report — wording carried elsewhere
If our facilities become damaged or inoperable, or we are required to vacate the facilities, our ability to sell and provide our services and pursue our research and development efforts may be jeopardized.
Previous report — wording carried elsewhere
Personalized cancer therapies represent new therapeutic approaches that could result in heightened regulatory scrutiny, delays in clinical development, or delays in or inability to achieve regulatory approval, commercialization, or payor coverage, any of which could adversely affect our business.
Previous report — wording carried elsewhere
We may not be able to manage our future growth effectively, which could make it difficult to execute our business strategy.
Previous report — wording carried elsewhere
In the ordinary course of business, we may transfer personal information from Europe and other jurisdictions to the U.S. or other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. In particular, the EEA and the U.K. have significantly restricted the transfer of personal information to the U.S. and other countries whose data privacy and security laws they generally believe are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal information from the EEA and U.K. to the U.S. in compliance with law, such as the EEA’s standard contractual clauses, the U.K.'s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework (and U.K.
Previous report — wording carried elsewhere
If we or the third parties with whom we work fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions
Previous report — wording carried elsewhere
Our use of “open source” software could subject our proprietary software to general release, adversely affect our ability to sell our products and services, and subject us to possible litigation.
Previous report — wording carried elsewhere
Financial and Market Risks and Risks Related to Owning Our Common Stock
Previous report — wording carried elsewhere
Our inability to raise additional capital on acceptable terms in the future may limit our ability to continue to operate our business and further expand our operations.
Previous report — wording carried elsewhere
The market price of our common stock may be volatile or may decline steeply or suddenly regardless of our operating performance, we may not be able to meet investor or analyst expectations, and you may lose all or part of your investment.*
Previous report — wording carried elsewhere
Insiders may exercise significant control over our company and will be able to influence corporate matters.*
Previous report — wording carried elsewhere
We do not currently intend to pay dividends on our common stock and, consequently, your ability to achieve a return on your investment will depend on appreciation of the value of our common stock.
Previous report — wording carried elsewhere
If securities or industry analysts do not publish research or reports about our business, or publish inaccurate or unfavorable research about our business, our stock price and trading volume could decline.