Coherus Oncology, Inc.

Previous wording

We have generated significant operating losses in all the years since our inception except for certain periods that had gains from divestitures and 2020 and 2019. It is uncertain that we will be profitable in future periods, particularly now that the UDENYCA Sale was consummated, as research and development is expensive and risky. The amount of our future net losses or any future net income will depend, in part, on the amount of our future expenditures offset by the amount of future product sales, including sales of our current product or any other products that may receive regulatory

Current wording

We have generated significant operating losses in all the years since our inception except for certain periods that had gains from divestitures and 2020 and 2019. It is uncertain that we will be profitable in future periods, particularly now that the UDENYCA Sale has been consummated, as research and development is expensive and risky. The amount of our future net losses or any future net income will depend, in part, on the amount of our future expenditures offset by the amount of future product sales, including sales of our current product or any other products that may receive regulatory approval. Innovative oncology product development is a highly speculative undertaking and involves a substantial degree of risk.

Previous wording

We have incurred and anticipate we will continue to incur certain development and commercial expenses for LOQTORZI, the anti-PD-1 antibody we licensed from Junshi Biosciences in 2021, and have agreed to pay up to $90.0 million for the achievement of certain regulatory approvals and up to $290.0 million for the attainment of certain sales thresholds. The launch of this product and future work to advance our other product candidates through clinical development in combination with toripalimab will be expensive and could result in us continuing to experience future net losses.

Current wording

We have incurred and anticipate we will continue to incur certain development and commercial expenses for LOQTORZI, the anti-PD-1 antibody we licensed from Junshi Biosciences in 2021, and we have agreed to pay up to $90.0 million for the achievement of certain regulatory approvals and up to $290.0 million for the attainment of certain sales thresholds. The launch of this product and future work to advance our other product candidates through clinical development in combination with toripalimab will be expensive and could result in us continuing to experience future net losses.

Previous wording

As of March 31, 2026, our cash, cash equivalents and marketable securities were $167.0 million. We expect that our existing cash and cash equivalents, investments, cash collected from our product sales and cash proceeds from the UDENYCA Sale will be sufficient to fund our current operations for the foreseeable future. We have financed our operations primarily through the sale of equity securities, convertible notes, credit facilities, divestitures, license agreements and through recent product sales of our product.

Current wording

As of June 30, 2026, our cash, cash equivalents and marketable securities were $105.3 million. We expect that our existing cash and cash equivalents, investments, cash collected from our product sales and cash proceeds from the UDENYCA Sale will be sufficient to fund our current operations for the foreseeable future. We have financed our operations primarily through the sale of equity securities, convertible notes, credit facilities, divestitures, license agreements and through recent product sales of our product.

Previous wording

Even if one or more of the product candidates that we develop is approved for commercial sale, we anticipate incurring significant costs to commercialize any such product. Our expenses could increase beyond our expectations if we are required by the FDA, the European Medical Agency (the “EMA”), other regulatory agencies, domestic or foreign, or by any unfavorable outcomes in intellectual property litigation filed against us, to change our manufacturing processes or assays or to perform clinical, nonclinical or other types of studies in addition to those that we currently anticipate. In cases where we are successful in obtaining additional regulatory approvals to market one or more of our product candidates, our revenue will be dependent, in part, upon the size of the markets in the territories for which we gain regulatory approval, the number of competitors in such markets, the accepted price for the product, the ability to get reimbursement at any price, the nature and degree of competition from immuno-oncology companies (including competition from large pharmaceutical companies possessing large established positions in the immuno-oncology market that may be able to gain advantages in the sale of immuno-oncology products based on brand recognition or existing relationships with customers and payers) and whether we own (or have partnered with companies owning) the commercial rights for that territory. If the market for our product and product candidates (or our share of that market) is not as significant as we expect, the price of our product is not what we project, the indication approved by regulatory authorities is narrower than we expect or the reasonably accepted population for treatment is narrowed by competition, physician choice or treatment guidelines, we may not generate significant revenue from sales of such products, even if approved. If we are unable to successfully complete development and obtain additional regulatory approval for our product, our business may suffer.

Current wording

Even if one or more of the product candidates that we develop is approved for commercial sale, we anticipate incurring significant costs to commercialize any such product. Our expenses could increase beyond our expectations if we are required by the FDA, the European Medical Agency (the “EMA”), other regulatory agencies, domestic or foreign, or by any unfavorable outcomes in intellectual property litigation filed against us, to change our manufacturing processes or assays or to perform clinical, nonclinical or other types of studies in addition to those that we currently anticipate. In cases where we are successful in obtaining additional regulatory approvals to market one or more of our product candidates, our revenue will be dependent, in part, upon the size of the markets in the territories for which we gain regulatory approval, the number of competitors in such markets, the accepted price for the product, the ability to get reimbursement at any price, the nature and degree of competition from immuno-oncology companies (including competition from large pharmaceutical companies possessing large established positions in the immuno-oncology market that may be able to gain advantages in the sale of immuno-oncology products based on brand recognition or existing relationships with customers and payers) and whether we own (or have partnered with companies owning) the commercial rights for that territory. If the market for our product and product candidates (or our share of that market) is not as significant as we expect, the price of our product is not what we project, the indication approved by regulatory authorities is narrower than we expect or the reasonably accepted population for treatment is narrowed by competition,

Previous wording

The commercial success of our existing product or any future products will depend upon the size of the applicable markets and the degree of market acceptance and adoption by prescribing physicians, healthcare providers and the

Current wording

The commercial success of our existing product or any future products will depend upon the size of the applicable markets and the degree of market acceptance and adoption by prescribing physicians, healthcare providers and the patients to whom our medicines are prescribed. Additionally, obtaining placement on national or local clinical guidelines/pathways, as well as coverage on third-party payor formularies, can impact our short and long-term financial performance.

Previous wording

Even with the requisite approvals from the FDA and comparable foreign regulatory authorities, the commercial success of our product or product candidates, if approved, will depend in part on the medical community, patients and third-party payers accepting our product and product candidates as medically useful, cost-effective and safe. Any product that we bring to the market may not gain market acceptance by physicians, patients, third-party payers and others in the medical community. The degree of market acceptance of our product LOQTORZI, or any of our product candidates, if approved for commercial sale, will depend on a number of factors, including:

Current wording

Even with the requisite approvals from the FDA and comparable foreign regulatory authorities, the commercial success of our product or product candidates, if approved, will depend in part on the medical community, patients and third-party payers accepting our product and product candidates as medically useful, cost-effective and safe. Any product that we bring to the market may not gain market acceptance by physicians, patients, third-party payers and others in the medical community. The degree of market acceptance of LOQTORZI, or any of our product candidates, if approved for commercial sale, will depend on a number of factors, including:

Previous wording

Market acceptance of any future product candidates, if approved, will not be fully known until after they are launched and may be negatively affected by a potential poor safety experience and the track record of other products and product candidates. Further, continued market acceptance and ability to maintain or grow sales of LOQTORZI, and any future product candidates that may be approved, depend on our efforts to educate the medical community and third-party payers on the benefits of our product and product candidates and will require significant resources from us and we have significantly less resources compared to large, well-funded pharmaceutical companies. Given the resource

Current wording

Market acceptance of any future product candidates, if approved, will not be fully known until after they are launched and may be negatively affected by a potential poor safety experience and the track record of other products and product candidates. Further, continued market acceptance and ability to maintain or grow sales of LOQTORZI, and any future product candidates that may be approved, depend on our efforts to educate the medical community and third-party payers on the benefits of our product and product candidates and will require significant resources from us and we have significantly less resources compared to large, well-funded pharmaceutical companies. Given the resource disparity, our outreach may have little success or may never be successful. If our product or any future product candidates that are approved fail to achieve an adequate level of acceptance by physicians, patients, third-party payers and others in the medical community, we will not be able to generate sufficient revenue to sustain profitability.

Previous wording

Outside of the United States, pharmaceutical businesses are generally subject to extensive governmental price controls and other market regulations. In many countries, the prices of medical products are subject to varying price control mechanisms as part of national health systems. Other countries allow companies to fix their own prices for medical products but monitor and control company profits. Additional foreign price controls or other changes in pricing regulation could restrict the amount that we are able to charge for our product candidates. Accordingly, in markets outside the United States, the reimbursement for our product may be reduced compared with the United States and may be insufficient to generate commercially reasonable revenue and profits.

Current wording

Outside of the United States, pharmaceutical businesses are generally subject to extensive governmental price controls and other market regulations. In many countries, the prices of medical products are subject to varying price control mechanisms as part of national health systems. Other countries allow companies to fix their own prices for medical products but monitor and control company profits. Additional foreign price controls or other changes in pricing regulation could restrict the amount that we are able to charge for our product candidates. Accordingly, in markets

Previous wording

Severe cost containment practices may adversely affect our product sales. Furthermore, the impact of the IRA on our business and the pharmaceutical industry generally is currently unknown. We expect to experience pricing pressures in connection with the sale of our product and any of our product candidates due to the trend toward managed healthcare, the increasing influence of health maintenance organizations and additional legislative changes.

Current wording

Increasing efforts by governmental and third-party payers in the United States and abroad to control healthcare costs may cause such organizations to limit both coverage and the level of reimbursement for new products approved and, as a result, they may not cover or provide adequate payment for our product or any of our product candidates. Severe cost containment practices may adversely affect our product sales. Furthermore, the impact of the IRA on our business and the pharmaceutical industry generally is currently unknown. We expect to experience pricing pressures in connection with the sale of our product and any of our product candidates due to the trend toward managed healthcare, the increasing influence of health maintenance organizations and additional legislative changes.

Previous wording

We operate in highly competitive pharmaceutical markets. Successful competitors in the pharmaceutical market have demonstrated the ability to effectively discover molecules, obtain patents, develop, test and obtain regulatory approvals for products, as well as an ability to effectively commercialize, market and promote approved products. Numerous companies, universities and other research institutions are engaged in developing, patenting, manufacturing and marketing of products competitive with those that we are developing. Many of these potential competitors are

Current wording

We operate in highly competitive pharmaceutical markets. Successful competitors in the pharmaceutical market have demonstrated the ability to effectively discover molecules, obtain patents, develop, test and obtain regulatory approvals for products, as well as an ability to effectively commercialize, market and promote approved products. Numerous companies, universities and other research institutions are engaged in developing, patenting, manufacturing and marketing of products competitive with those that we are developing. Many of these potential competitors are large, experienced multinational pharmaceutical and biotechnology companies that enjoy significant competitive advantages, such as substantially greater financial, research and development, legal, governmental affairs, manufacturing, personnel, and marketing resources, with additional benefits of mergers and acquisitions.

Previous wording

As of March 31, 2026, we had 145 full-time and part-time employees. As our development and commercialization plans and strategies develop and evolve from time to time we may face difficulty managing these changes as we experience changes in our number of employees, including due to divestitures, like the employee transfers to Accord in the UDENYCA Sale effective on the UDENYCA Closing Date, reductions in force and turnover. We may not be able to effectively manage during a period of significant change in our number of employees, which may result in weaknesses in our infrastructure, operational mistakes, loss of business opportunities and reduced productivity and morale among remaining employees. If our management is unable to effectively manage the changes in our number of employees, our expenses may increase more than expected and our ability to generate or grow revenue could be reduced. Our future financial performance and our ability to commercialize product candidates and compete effectively will depend, in part, on our ability to effectively manage changes in our number of employees.

Current wording

As of June 30, 2026, we had 144 full-time and part-time employees. As our development and commercialization plans and strategies develop and evolve from time to time we may face difficulty managing these changes as we experience changes in our number of employees, including due to divestitures, like the employee transfers to Accord in the UDENYCA Sale effective on the UDENYCA Closing Date, reductions in force and turnover. We may not be able to effectively manage during a period of significant change in our number of employees, which may result in weaknesses in our infrastructure, operational mistakes, loss of business opportunities and reduced productivity and morale among remaining employees. If our management is unable to effectively manage the changes in our number of employees, our expenses may increase more than expected and our ability to generate or grow revenue could be reduced. Our future financial performance and our ability to commercialize product candidates and compete effectively will depend, in part, on our ability to effectively manage changes in our number of employees.

Previous wording

We have relied upon and plan to continue to rely upon third-party clinical research organizations (“CROs”) to monitor and manage data for our ongoing nonclinical and clinical programs. We rely on these parties for execution of our nonclinical and clinical studies and control only certain aspects of their activities. Nevertheless, we are responsible for ensuring that each of our studies is conducted in accordance with the applicable protocol, legal, regulatory and scientific standards and our reliance on the CROs does not relieve us of our regulatory responsibilities. We and our CROs and other vendors are required to comply with cGMP, GCP, and Good Laboratory Practices, which are regulations and guidelines enforced by the FDA, the Competent Authorities of the Member States of the European Economic Area (the “EEA”) and comparable foreign regulatory authorities for all of our product candidates in clinical development. Regulatory authorities enforce these regulations through periodic inspections or remote regulatory assessments (“RRAs”) of study sponsors, principal investigators, study sites and other contractors. If we, any of our CROs, service providers or investigators fail to comply with applicable regulations or GCPs, the data generated in our nonclinical and clinical studies may be deemed unreliable and the FDA, EMA or comparable foreign regulatory authorities may require us to perform additional nonclinical and clinical studies before approving our marketing applications. There can be no assurance that upon inspection or conclusion of an RRA by a given regulatory authority, such regulatory authority will determine that any of our clinical studies comply with GCP regulations. In addition, our clinical studies must be conducted with product generated under cGMP regulations. Failure to comply by any of the participating parties or ourselves with these regulations may require us to repeat clinical studies, which would delay the regulatory approval process. Moreover, our business may be implicated if our CROs or any other participating parties violate federal or state fraud and abuse or false claims laws and regulations or healthcare or data privacy and security laws.

Current wording

We have relied upon and plan to continue to rely upon third-party contract research organizations (“CROs”) to monitor and manage data for our ongoing nonclinical and clinical programs. We rely on these parties for execution of our nonclinical and clinical studies and control only certain aspects of their activities. Nevertheless, we are responsible for ensuring that each of our studies is conducted in accordance with the applicable protocol, legal, regulatory and scientific standards and our reliance on the CROs does not relieve us of our regulatory responsibilities. We and our CROs and other vendors are required to comply with cGMP, GCP, and Good Laboratory Practices, which are regulations and guidelines enforced by the FDA, the Competent Authorities of the Member States of the European Economic Area (the “EEA”) and comparable foreign regulatory authorities for all of our product candidates in clinical development. Regulatory authorities enforce these regulations through periodic inspections or remote regulatory assessments (“RRAs”) of study sponsors, principal investigators, study sites and other contractors. If we, any of our CROs, service providers or investigators fail to comply with applicable regulations or GCPs, the data generated in our nonclinical and clinical studies may be deemed unreliable and the FDA, EMA or comparable foreign regulatory authorities may require us to perform additional nonclinical and clinical studies before approving our marketing applications. There can be no assurance that upon inspection or conclusion of an RRA by a given regulatory authority, such regulatory authority will determine that any of our clinical studies comply with GCP regulations. In addition, our clinical studies must be conducted with product generated under cGMP regulations. Failure to comply by any of the participating parties or ourselves with these regulations may require us to repeat clinical studies, which would delay the regulatory approval process. Moreover, our business may be implicated if our CROs or any other participating parties violate federal or state fraud and abuse or false claims laws and regulations or healthcare or data privacy and security laws.

Previous wording

Drug-related side effects could affect patient recruitment for clinical trials, the ability of enrolled patients to complete our studies or result in potential product liability claims. We currently carry product liability insurance and we are required to maintain product liability insurance pursuant to certain of our license agreements. We cannot assure that out product liability coverage will cover in full claims to which we are exposed. We may not be able to maintain insurance coverage at a reasonable cost or in sufficient amounts to protect us against losses due to liability. A successful product liability claim or series of claims brought against us could adversely affect our results of operations and business. In addition, regardless of merit or eventual outcome, product liability claims may result in impairment of our business reputation, withdrawal of clinical study participants, costs due to related litigation, distraction of management’s attention from our primary business, initiation of investigations by regulators, substantial monetary awards to patients or other claimants, the inability to commercialize our product candidates and decreased demand for our product candidates, if approved for commercial sale.

Current wording

Drug-related side effects could affect patient recruitment for clinical trials, the ability of enrolled patients to complete our studies or result in potential product liability claims. We currently carry product liability insurance and we are required to maintain product liability insurance pursuant to certain of our license agreements. We cannot assure that our product liability coverage will cover in full claims to which we are exposed. We may not be able to maintain insurance coverage at a reasonable cost or in sufficient amounts to protect us against losses due to liability. A successful product liability claim or series of claims brought against us could adversely affect our results of operations and business. In addition, regardless of merit or eventual outcome, product liability claims may result in impairment of our business reputation, withdrawal of clinical study participants, costs due to related litigation, distraction of management’s attention from our primary business, initiation of investigations by regulators, substantial monetary awards to patients or other claimants, the inability to commercialize our product candidates and decreased demand for our product candidates, if approved for commercial sale.

Previous wording

We participate in governmental programs that impose drug price reporting, payment, and other compliance obligations on pharmaceutical manufacturers. Medicaid is a joint federal and state program for low-income and disabled beneficiaries. Medicare is a federal program that is administered by the federal government covering individuals age 65 and over as well as those with certain disabilities. Medicare Part B reimburses physicians who administer our product. Under the MDRP, as a condition of having federal funds available for our covered outpatient drugs under Medicaid and under Medicare Part B, we must enter into, and have entered into, an agreement with the Secretary of HHS to pay a rebate to state Medicaid programs for each unit of our covered outpatient drugs dispensed to a Medicaid beneficiary and paid for by the state Medicaid program. Medicaid rebates are based on pricing data that we are required to report on a monthly and quarterly basis to CMS, the federal agency that administers the MDRP and Medicare programs. For the MDRP, these data include the AMP for each drug and, in the case of innovator products, the Best Price, which represents the lowest price available from us to any wholesaler, retailer, provider, health maintenance organization, nonprofit entity, or governmental entity in the United States in any pricing structure, calculated to include all applicable sales and associated rebates, discounts and other price concessions. In connection with Medicare Part B, we must provide CMS with Average Sales Price (“ASP”) information on a quarterly basis. CMS uses this information to compute Medicare Part B payment rates, which consist of ASP plus a specified percentage. If we become aware that our MDRP submissions for a prior period were incorrect or have changed as a result of recalculation of the pricing data, we must resubmit the corrected data for up to three years after those data originally were due. Pursuant to the IRA, the AMP and ASP figures we report will also be used to compute rebates under Medicare Part D and Medicare Part B triggered by price increases that outpace inflation. If we fail to provide information timely or are found to have knowingly submitted false information to CMS, we may be subject to civil monetary penalties and other sanctions, including termination from the MDRP.

Current wording

and paid for by the state Medicaid program. Medicaid rebates are based on pricing data that we are required to report on a monthly and quarterly basis to CMS, the federal agency that administers the MDRP and Medicare programs. For the MDRP, these data include the AMP for each drug and, in the case of innovator products, the Best Price, which represents the lowest price available from us to any wholesaler, retailer, provider, health maintenance organization, nonprofit entity, or governmental entity in the United States in any pricing structure, calculated to include all applicable sales and associated rebates, discounts and other price concessions. In connection with Medicare Part B, we must provide CMS with Average Sales Price (“ASP”) information on a quarterly basis. CMS uses this information to compute Medicare Part B payment rates, which consist of ASP plus a specified percentage. If we become aware that our MDRP submissions for a prior period were incorrect or have changed as a result of recalculation of the pricing data, we must resubmit the corrected data for up to three years after those data originally were due. Pursuant to the IRA, the AMP and ASP figures we report will also be used to compute rebates under Medicare Part D and Medicare Part B triggered by price increases that outpace inflation. If we fail to provide information timely or are found to have knowingly submitted false information to CMS, we may be subject to civil monetary penalties and other sanctions, including termination from the MDRP.

Previous wording

increases, reporting price increase amounts and factors considered in taking such increases, wholesale acquisition cost information disclosure to prescribers, purchasers, and state agencies, and new product notice and reporting. Such legislation could limit the price or payment for certain drugs, and a number of states are authorized to impose civil monetary penalties or pursue other enforcement mechanisms against manufacturers for the untimely, inaccurate, or incomplete reporting of drug pricing information or for otherwise failing to comply with drug price transparency requirements. If we are found to have violated state law requirements, we may become subject to penalties or other enforcement mechanisms, which could have a material adverse effect on our business.

Current wording

Individual states continue to consider and have enacted legislation to limit the growth of healthcare costs, including the cost of prescription drugs and combination products. A number of states have either implemented or are considering implementation of drug price transparency legislation that may prevent or limit our ability to take price increases at certain rates or frequencies. Requirements under such laws include advance notice of planned price increases, reporting price increase amounts and factors considered in taking such increases, wholesale acquisition cost information disclosure to prescribers, purchasers, and state agencies, and new product notice and reporting. Such legislation could limit the price or payment for certain drugs, and a number of states are authorized to impose civil monetary penalties or pursue other enforcement mechanisms against manufacturers for the untimely, inaccurate, or incomplete reporting of drug pricing information or for otherwise failing to comply with drug price transparency requirements. If we are found to have violated state law requirements, we may become subject to penalties or other enforcement mechanisms, which could have a material adverse effect on our business.

Previous wording

Our cash and cash equivalents are deposited or invested with several banks and other financial institutions. Actual events involving reduced or limited liquidity, defaults, non-performance or other adverse developments that affect financial institutions or other companies in the financial services industry or the financial services industry generally, or concerns or rumors about any events of these kinds, have in the past and may in the future lead to market-wide liquidity problems. For example, in March 2023, Silicon Valley Bank was closed and taken over by the Federal Deposit Insurance Corporation and subsequently had all of its customer deposits and other liabilities and substantially all loans and other assets acquired by First-Citizens Bank & Trust Company. We had approximately $167.0 million of cash, cash equivalents and marketable securities as of March 31, 2026 with the majority held by custodians or in money market mutual funds that are not bank deposits. Our bank deposits are primarily held in accounts at two large banks that we believe to be stable at this time. Actual and perceived stability of banks can change from time to time and adverse perceptions by customers or investors about the banks where we deposit money could result in a material and adverse effect on our ability to access necessary cash. Investor concerns regarding the U.S. or international financial systems could result in less favorable commercial financing terms, including higher interest rates or costs and tighter financial and operating covenants, or systemic limitations on access to credit and liquidity sources, thereby making it more difficult for us to acquire financing on acceptable terms or at all. Any decline in available funding or access to our cash and liquidity resources, could, among other risks, adversely impact our ability to access funds for our basic operating expenses, financial obligations, payroll or fulfill our other important obligations. Any of these impacts, or any other impacts resulting from the factors described above or other related or similar factors not described above, could have material adverse impacts on our liquidity, business operations, financial condition, results of operations and prospects.

Current wording

assets acquired by First-Citizens Bank & Trust Company. We had approximately $105.3 million of cash, cash equivalents and marketable securities as of June 30, 2026 with the majority held by custodians or in money market mutual funds that are not bank deposits. Our bank deposits are primarily held in accounts at two large banks that we believe to be stable at this time. Actual and perceived stability of banks can change from time to time and adverse perceptions by customers or investors about the banks where we deposit money could result in a material and adverse effect on our ability to access necessary cash. Investor concerns regarding the U.S. or international financial systems could result in less favorable commercial financing terms, including higher interest rates or costs and tighter financial and operating covenants, or systemic limitations on access to credit and liquidity sources, thereby making it more difficult for us to acquire financing on acceptable terms or at all. Any decline in available funding or access to our cash and liquidity resources, could, among other risks, adversely impact our ability to access funds for our basic operating expenses, financial obligations, payroll or fulfill our other important obligations. Any of these impacts, or any other impacts resulting from the factors described above or other related or similar factors not described above, could have material adverse impacts on our liquidity, business operations, financial condition, results of operations and prospects.

Previous wording

We sell our product to wholesalers and distributors and the wholesalers and distributors then resell to hospitals and clinics pursuant to contracts with us. The majority of our revenue comes from a limited number of wholesalers. In the first quarter of 2026, three wholesalers individually comprised approximately 42%, 37%, and 20%, respectively, of our total gross product revenue from continuing operations. We expect that revenue from a limited number of wholesalers will continue to account for a large portion of our revenue in the future. The loss by us of any of these wholesalers, or a material reduction in their purchases or their market pricing, could harm our business, results of operations, financial condition and prospects. In addition, if any of these wholesalers were to fail to pay us in a timely manner, it could harm our cash flow.

Current wording

We sell our product to wholesalers and distributors and the wholesalers and distributors then resell to hospitals and clinics pursuant to contracts with us. The majority of our revenue comes from a limited number of wholesalers. In the second quarter of 2026, three wholesalers individually comprised approximately 42%, 40%, and 16%, respectively, of our total gross product revenue from continuing operations. We expect that revenue from a limited number of wholesalers will continue to account for a large portion of our revenue in the future. The loss by us of any of these wholesalers, or a material reduction in their purchases or their market pricing, could harm our business, results of operations, financial condition and prospects. In addition, if any of these wholesalers were to fail to pay us in a timely manner, it could harm our cash flow.

Previous wording

to achieve an acceptable ESG or sustainability rating from third-party rating services. A low ESG or sustainability rating by a third-party rating service could also result in the exclusion of our common stock from consideration by certain investors who may elect to invest with our competition instead. Ongoing focus on corporate responsibility matters by investors and other parties as described above may impose additional costs or expose us to new risks. Any failure or perceived failure by us in this regard could have a material adverse effect on our reputation and on our business, share price, financial condition, or results of operations, including the sustainability of our business over time.

Current wording

We may face reputational damage in the event our corporate responsibility initiatives or objectives do not meet the standards set by our investors, stockholders, lawmakers, listing exchange or other constituencies, or if we are unable to achieve an acceptable ESG or sustainability rating from third-party rating services. A low ESG or sustainability rating by a third-party rating service could also result in the exclusion of our common stock from consideration by certain investors who may elect to invest with our competition instead. Ongoing focus on corporate responsibility matters by investors and other parties as described above may impose additional costs or expose us to new risks. Any failure or perceived failure by us in this regard could have a material adverse effect on our reputation and on our business, share price, financial condition, or results of operations, including the sustainability of our business over time.

Previous wording

complex and requires sophisticated legal knowledge in the relevant jurisdiction. It may be impossible to identify all patents in all jurisdictions relevant to a marketed product. Our determination of the expiration date of any patent in the United States or abroad that we consider relevant may be incorrect, which may negatively impact our ability to develop and market our product.

Current wording

Many patents may cover a marketed product, including but not limited to the composition of the product, methods of use, formulations, cell line constructs, vectors, growth media, production processes and purification processes. The identification of all patents and their expiration dates relevant to the production and sale of a product is extraordinarily complex and requires sophisticated legal knowledge in the relevant jurisdiction. It may be impossible to identify all patents in all jurisdictions relevant to a marketed product. Our determination of the expiration date of any patent in the United States or abroad that we consider relevant may be incorrect, which may negatively impact our ability to develop and market our product.

Previous wording

If we are unable to obtain and maintain effective patent rights for our product and product candidates, we may not be able to prevent competitors from using technologies we consider important in our successful development and commercialization of our product candidates, resulting in loss of any potential competitive advantage our patents may have otherwise afforded us.

Current wording

If we are unable to obtain and maintain effective patent rights for our product and product candidates, we may not be able to prevent competitors from using technologies we consider important in our successful development and

Previous wording

applications. Furthermore, for applications filed before March 16, 2013 or patents issuing from such applications, an interference proceeding can be provoked by a third party or instituted by the USPTO to determine who was the first to invent any of the subject matter covered by the patent claims of our applications and patents. As of March 16, 2013, the United States transitioned to a “first-to-file” system for deciding which party should be granted a patent when two or more patent applications claiming the same invention are filed by different parties. A third party that files a patent application in the USPTO before we do, could therefore be awarded a patent covering an invention of ours even if we had made the invention before it was made by the third party. The change to “first-to-file” from “first-to-invent” is one of the changes to the patent laws of the United States resulting from the Leahy-Smith America Invents Act (the “Leahy-Smith Act”), signed into law on September 16, 2011. Among some of the other significant changes to the patent laws are changes that limit where a patentee may file a patent infringement suit and provide opportunities for third parties to challenge any issued patent in the USPTO. It is not yet clear what, if any, impact the Leahy-Smith Act will have on the operation of our business. However, the Leahy-Smith Act and its implementation could increase the uncertainties and costs surrounding the prosecution of our patent applications and the enforcement or defense of our issued patents, all of which could have a material adverse effect on our business and financial condition.

Current wording

In addition, changes to United States patent laws provide additional procedures for third parties to challenge the validity of issued patents based on patent applications filed after March 15, 2013. If the breadth or strength of protection provided by the patents and patent applications we hold or pursue with respect to our current or future product candidates is challenged, then it could threaten our ability to prevent competitive products using our proprietary technology. Further, because patent applications in the United States and most other countries are confidential for a period of time, typically for 18 months after filing, we cannot be certain that we were the first to either (i) file any patent application related to our product candidates or (ii) invent any of the inventions claimed in our patents or patent applications. Furthermore, for applications filed before March 16, 2013 or patents issuing from such applications, an interference proceeding can be provoked by a third party or instituted by the USPTO to determine who was the first to invent any of the subject matter covered by the patent claims of our applications and patents. As of March 16, 2013, the United States transitioned to a “first-to-file” system for deciding which party should be granted a patent when two or more patent applications claiming the same invention are filed by different parties. A third party that files a patent application in the USPTO before we do, could therefore be awarded a patent covering an invention of ours even if we had made the invention before it was made by the third party. The change to “first-to-file” from “first-to-invent” is one of the changes to the patent laws of the United States resulting from the Leahy-Smith America Invents Act (the “Leahy-Smith Act”), signed into law on September 16, 2011. Among some of the other significant changes to the patent laws are changes that limit where a patentee may file a patent infringement suit and provide opportunities for third parties to

Previous wording

While we have filed patent applications to protect certain aspects of our own proprietary formulation and process developments, we also rely on trade secret protection and confidentiality agreements to protect proprietary scientific, business and technical information and know-how that is not or may not be patentable or that we elect not to patent. However, confidential information and trade secrets can be difficult to protect. Moreover, the information embodied in our trade secrets and confidential information may be independently and legitimately developed or discovered by third parties without any improper use of or reference to information or trade secrets. We seek to protect the scientific, technical and business information supporting our operations, as well as the confidential information relating specifically to our product candidates by entering into confidentiality agreements with parties to whom we need to disclose our confidential information, for example, our employees, consultants, scientific advisors, board members, contractors,

Current wording

While we have filed patent applications to protect certain aspects of our own proprietary formulation and process developments, we also rely on trade secret protection and confidentiality agreements to protect proprietary scientific, business and technical information and know-how that is not or may not be patentable or that we elect not to patent. However, confidential information and trade secrets can be difficult to protect. Moreover, the information embodied in our trade secrets and confidential information may be independently and legitimately developed or discovered by third parties without any improper use of or reference to information or trade secrets. We seek to protect the scientific, technical and business information supporting our operations, as well as the confidential information relating specifically to our product candidates by entering into confidentiality agreements with parties to whom we need to disclose our confidential information, for example, our employees, consultants, scientific advisors, board members, contractors, potential collaborators and investors. However, we cannot be certain that such agreements have been entered into with all relevant parties. We also seek to preserve the integrity and confidentiality of our data and trade secrets by maintaining physical security of our premises and physical and electronic security of our information technology systems, but it is possible that these security measures could be breached. While we have confidence in these individuals, organizations and systems, agreements or security measures may be breached, and we may not have adequate remedies for any breach. Our confidential information and trade secrets thus may become known by our competitors in ways we cannot prove or remedy.

Previous wording

Although we expect all of our employees and consultants to assign their inventions to us, and all of our employees, consultants, advisors and any third parties who have access to our proprietary know-how, information or technology to enter into confidentiality agreements, we cannot provide any assurances that all such agreements have been duly executed. We cannot guarantee that our trade secrets and other confidential proprietary information will not be disclosed or that competitors will not otherwise gain access to our trade secrets or independently develop substantially equivalent information and techniques. For example, any of these parties may breach the agreements and disclose our proprietary information, including our trade secrets, and we may not be able to obtain adequate remedies for such breaches. Misappropriation or unauthorized disclosure of our trade secrets could impair our competitive position and may have a material adverse effect on our business. Additionally, if the steps taken to maintain our trade secrets are deemed inadequate, we may have insufficient recourse against third parties for misappropriating the trade secret. We cannot guarantee that our employees, former employees or consultants will not file patent applications claiming our inventions. Because of the “first-to-file” laws in the United States and the E.U., such unauthorized patent application filings may defeat our attempts to obtain patents on our own inventions.

Current wording

equivalent information and techniques. For example, any of these parties may breach the agreements and disclose our proprietary information, including our trade secrets, and we may not be able to obtain adequate remedies for such breaches. Misappropriation or unauthorized disclosure of our trade secrets could impair our competitive position and may have a material adverse effect on our business. Additionally, if the steps taken to maintain our trade secrets are deemed inadequate, we may have insufficient recourse against third parties for misappropriating the trade secret. We cannot guarantee that our employees, former employees or consultants will not file patent applications claiming our inventions. Because of the “first-to-file” laws in the United States and the E.U., such unauthorized patent application filings may defeat our attempts to obtain patents on our own inventions.

Previous wording

Our corporate headquarters and laboratory are located in the San Francisco Bay Area and in Southern California (Camarillo), respectively. These locations have in the past experienced severe earthquakes, floods, wildfires and other natural disasters. Wildfires have been increasing in intensity and frequency in recent years. We do not carry earthquake insurance. Earthquakes, wildfires or other natural disasters could severely disrupt our operations or those of our collaboration partners and have a material adverse effect on our business, results of operations, financial condition and prospects. If a natural disaster, power outage or other event occurred that prevented us from using all or a significant portion of our headquarters, that damaged critical infrastructure (such as the manufacturing facilities of our third-party contract manufacturers) or that otherwise disrupted operations, it may be difficult or, in certain cases, impossible for us to continue our business for a substantial period of time. The disaster recovery and business continuity plans we have in place currently are limited and are unlikely to prove adequate in the event of a serious disaster or similar event. We may incur substantial expenses as a result of the limited nature of our disaster recovery and business continuity plans, which,

Current wording

Our corporate headquarters and laboratory are located in the San Francisco Bay Area and in Southern California (Camarillo), respectively. These locations have in the past experienced severe earthquakes, floods, wildfires and other natural disasters. Wildfires have been increasing in intensity and frequency in recent years. We do not carry earthquake insurance. Earthquakes, wildfires or other natural disasters could severely disrupt our operations or those of our collaboration partners and have a material adverse effect on our business, results of operations, financial condition and prospects. If a natural disaster, power outage or other event occurred that prevented us from using all or a significant portion of our headquarters, that damaged critical infrastructure (such as the manufacturing facilities of our third-party contract manufacturers) or that otherwise disrupted operations, it may be difficult or, in certain cases, impossible for us to continue our business for a substantial period of time. The disaster recovery and business continuity plans we have in place currently are limited and are unlikely to prove adequate in the event of a serious disaster or similar event. We may incur substantial expenses as a result of the limited nature of our disaster recovery and business continuity plans, which, particularly when taken together with our lack of earthquake insurance, could have a material adverse effect on our business.

Previous wording

The war between Russia and Ukraine and the global response, including the imposition of sanctions by the United States and other countries, could create or exacerbate risks facing our business. Conflicts in the Middle East may also increase the risks facing our business. We have evaluated our operations and partner contracts, and we currently do not expect either conflict to directly have a significant effect on our financial condition or results of operations. However, if the war between Russia and Ukraine or conflicts in the Middle East escalate or expand, risks that we have identified in this Quarterly Report on Form 10-Q may be materially increased. For example, if our supply arrangements or clinical operations are disrupted due to expanded sanctions or involvement of, and adverse impacts on, countries where we have operations or relationships, our business could be materially disrupted. Further, the use of cyberattacks could expand as part of the ongoing conflicts, which could adversely affect our ability to maintain or enhance our cybersecurity measures. These and other risks are described more fully in this “Risk Factors” section.

Current wording

The war between Russia and Ukraine and the global response, including the imposition of sanctions by the United States and other countries, could create or exacerbate risks facing our business. Conflicts in the Middle East may also increase the risks facing our business. We have evaluated our operations and partner contracts, and we currently do not expect either conflict to directly have a significant effect on our financial condition or results of operations. However, if the war between Russia and Ukraine or conflicts in the Middle East escalate or expand, risks that we have identified in this Quarterly Report on Form 10-Q may be materially increased. For example, if our supply arrangements or clinical operations are disrupted due to expanded sanctions or involvement of, and adverse impacts on, countries where we have operations or relationships, our business could be materially disrupted. Further, the use of cyberattacks could

Previous wording

surface available to criminals, as more companies and individuals work online and work remotely, and as such, the risk of a cybersecurity incident potentially occurring, and our investment in risk mitigations against such incidents, is increasing. Because the techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence.

Current wording

Attacks upon information technology systems are increasing in their frequency, levels of persistence, sophistication and intensity, and are being conducted by sophisticated and organized groups and individuals with a wide range of motives and expertise. Further, the continued hybrid working environment has generally increased the attack surface available to criminals, as more companies and individuals work online and work remotely, and as such, the risk of a cybersecurity incident potentially occurring, and our investment in risk mitigations against such incidents, is increasing. Because the techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence.

Previous wording

To the extent that any disruption or security breach were to result in a loss of, or damage to, our data or systems, or inappropriate or unauthorized access to or disclosure or use of Confidential Information, we could incur liability and suffer reputational harm, and the development and commercialization of our product and product candidates could be delayed. Federal, state and international laws and regulations can expose us to enforcement actions and investigations by regulatory authorities, and potentially result in regulatory penalties, fines and significant legal liability, if our information technology security efforts fail. We may also be exposed to a risk of loss or litigation and potential liability, which could materially and adversely affect our business, results of operations or financial condition. Our insurance policies may not be adequate to compensate us for the potential losses arising from such disruptions, failure, or security breach. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, our insurance may not cover all claims made against us and defending a suit, regardless of its merit, could be costly, divert management attention, and harm our reputation.

Current wording

by regulatory authorities, and potentially result in regulatory penalties, fines and significant legal liability, if our information technology security efforts fail. We may also be exposed to a risk of loss or litigation and potential liability, which could materially and adversely affect our business, results of operations or financial condition. Our insurance policies may not be adequate to compensate us for the potential losses arising from such disruptions, failure, or security breach. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, our insurance may not cover all claims made against us and defending a suit, regardless of its merit, could be costly, divert management attention, and harm our reputation.

Previous wording

violation of Section 5(a) of the Federal Trade Commission Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. The FTC has authority to initiate enforcement actions against entities that make deceptive statements about privacy and data sharing in privacy policies, fail to limit third-party use of personal health information, fail to implement policies to protect personal health information or engage in other unfair practices that harm customers or that may violate Section 5(a) of the FTC Act. Additionally, federal and state consumer protection laws are increasingly being applied by the FTC and states’ attorneys general to regulate the collection, use, storage, and disclosure of personal information, through websites or otherwise, and to regulate the presentation of website content.

Current wording

Even when HIPAA does not apply, according to the Federal Trade Commission (“FTC”), failing to take appropriate steps to keep consumers’ personal information secure constitutes unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. The FTC has authority to initiate enforcement actions against entities that make deceptive statements about privacy and data sharing in privacy policies, fail to limit third-party use of personal health information, fail to implement policies to protect personal health information or engage in other unfair practices that harm customers or that may violate Section 5(a) of the FTC Act. Additionally, federal and state consumer protection laws are increasingly being applied by the FTC and states’ attorneys general to regulate the collection, use, storage, and disclosure of personal information, through websites or otherwise, and to regulate the presentation of website content.

Previous wording

In addition, state laws govern the privacy and security of personal information in certain circumstances, many of which differ from each other in significant ways and may not have the same requirements, thus complicating compliance efforts. By way of example, California enacted the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, the “CCPA”), which requires covered businesses that process the personal information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; (ii) receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt out of certain disclosures of their personal information; and (iii) enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Similar laws have passed in other states and are continuing to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the United States. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging. In the event that we are subject to or affected by HIPAA, the CCPA or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our business and financial condition.

Current wording

Rights Act (collectively, the “CCPA”), which requires covered businesses that process the personal information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; (ii) receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt out of certain disclosures of their personal information; and (iii) enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Similar laws have passed in other states and are continuing to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the United States. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging. In the event that we are subject to or affected by HIPAA, the CCPA or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our business and financial condition.

Previous wording

In addition, the regulatory framework for the receipt, collection, processing, use, safeguarding, sharing and transfer of personal data is rapidly evolving and is likely to remain uncertain for the foreseeable future as new global privacy rules are being enacted and existing ones are being updated and strengthened. For example, on May 25, 2018, the General Data Protection Regulation (“GDPR”) took effect. The GDPR is applicable in each EEA member state and applies to companies established in the EEA as well as companies that collect and use personal data to offer goods or services to, or monitor the behavior of, individuals in the EEA, including, for example, through the conduct of clinical trials. GDPR introduces more stringent data protection obligations for processors and controllers of personal data. Among other things, the GDPR requires the establishment of a lawful basis for the processing of data, includes requirements relating to the consent of the individuals to whom the personal data relates, including detailed notices for clinical trial subjects and investigators, as well as requirements regarding the security of personal data and notification of data processing obligations or security incidents to appropriate data protection authorities or data subjects. The GDPR regulates transfers of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the United States; and the efficacy and longevity of current transfer mechanisms between the EEA and the United States remains uncertain. Case law from the Court of Justice of the European Union states that reliance on the standard contractual clauses - a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism - alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case-by-case basis. On July 10, 2023, the European Commission adopted its Adequacy Decision in relation to the new EU-US Data Privacy Framework (“DPF”) rendering the DPF effective as a GDPR transfer mechanism to U.S. entities self-certified under the DPF. We expect the existing legal complexity and uncertainty regarding international personal data transfers to continue. In particular, we expect the DPF Adequacy Decision to be challenged and international transfers to the United States and to other jurisdictions more generally to continue to be subject to enhanced scrutiny by regulators. As a result, we may have to make certain operational changes and we will have to implement revised standard contractual clauses and other relevant documentation for existing data transfers within required time frames. Penalties and fines for failure to comply with GDPR are significant, including fines of up to €20 million or 4% of the total worldwide annual turnover of a non-compliant undertaking, whichever is higher. In addition to fines, a breach of the GDPR may result …

Excerpt shortened here; the source contains the full paragraph.

Current wording

In addition, the regulatory framework for the receipt, collection, processing, use, safeguarding, sharing and transfer of personal data is rapidly evolving and is likely to remain uncertain for the foreseeable future as new global privacy rules are being enacted and existing ones are being updated and strengthened. For example, on May 25, 2018, the General Data Protection Regulation (“GDPR”) took effect. The GDPR is applicable in each EEA member state and applies to companies established in the EEA as well as companies that collect and use personal data to offer goods or services to, or monitor the behavior of, individuals in the EEA, including, for example, through the conduct of clinical trials. GDPR introduces more stringent data protection obligations for processors and controllers of personal data. Among other things, the GDPR requires the establishment of a lawful basis for the processing of data, includes requirements relating to the consent of the individuals to whom the personal data relates, including detailed notices for clinical trial subjects and investigators, as well as requirements regarding the security of personal data and notification of data processing obligations or security incidents to appropriate data protection authorities or data subjects. The GDPR regulates transfers of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the United States; and the efficacy and longevity of current transfer mechanisms between the EEA and the United States remains uncertain. Case law from the Court of Justice of the European Union states that reliance on the standard contractual clauses - a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism - alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case-by-case basis. On July 10, 2023, the European Commission adopted its Adequacy Decision in relation to the new EU-US Data Privacy Framework (“DPF”) rendering the DPF effective as a GDPR transfer mechanism to U.S. entities self-certified under the DPF. We expect the existing legal complexity and uncertainty regarding international personal data transfers to continue. In particular, we expect the DPF Adequacy Decision to be challenged and international transfers to the United States and to other jurisdictions more generally to continue to be subject to enhanced scrutiny by regulators. As a result, we may have to make certain operational changes and we will have to implement revised standard contractual clauses and other relevant documentation for existing data transfers within required time frames. Penalties and fines for failure to comply with GDPR are significant, including fines of up to €20 million or 4% of the total worldwide annual turnover of a non-compliant undertaking, whichever is higher. In addition to fines, a breach of the GDPR may result …

Excerpt shortened here; the source contains the full paragraph.