Neumora Therapeutics, Inc.

Previous wording

Investing in shares of our common stock involves a high degree of risk. You should carefully consider the following risks and uncertainties, together with all of the other information contained in this Annual Report on Form 10-K, including our audited consolidated financial statements and related notes and the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” before making an investment decision. The risks described below are not the only ones facing us. Many of the following risks and uncertainties are, and will be, exacerbated by any worsening of the global business and economic environment. The occurrence of any of the following risks, or of additional risks and uncertainties not presently known to us or that we currently believe to be immaterial, could materially and adversely affect our business, financial condition, reputation, or results of operations. In such case, the trading price of shares of our common stock could decline, and you may lose all or part of your investment.

Current wording

Investing in shares of our common stock involves a high degree of risk. You should carefully consider the following risks and uncertainties, together with all of the other information contained in this Annual Report on Form 10-K, including our audited consolidated financial statements and related notes and the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” before making an investment decision. The risks described below are not the only ones facing us. Many of the following risks and uncertainties are, and will be, exacerbated by any worsening of the global business and economic environment. The occurrence of any of the following risks, or of additional risks and uncertainties not presently known to us or that we currently believe to be immaterial, could materially and adversely affect our business, financial condition, reputation, or results of operations. In such case, the trading price of shares of our common stock could decline, and you may lose all or part of your investment. These disclosures reflect our beliefs and opinions as to factors that could materially and adversely affect our company and our securities in the future. References to past events are provided by way of example only and are not intended to be a complete listing or a representation as to whether or not such factors have occurred in the past or their likelihood of occurring in the future.

Previous wording

We were founded with a mission to redefine neuroscience drug development, a field that has seen very limited success. The ability to successfully develop drugs in this field is extremely difficult and is subject to a number of unique challenges.

Current wording

We were founded to confront the greatest medical challenges of our generation by taking a fundamentally different approach to the way treatments for brain diseases are developed, fields that have seen very limited success. The ability to successfully develop drugs in these fields is extremely difficult and is subject to a number of unique challenges.

Previous wording

We are a clinical‑stage biopharmaceutical company with a limited operating history. Biopharmaceutical product development is a highly speculative undertaking and involves a substantial degree of risk. We have incurred significant losses since our inception in November 2019, have no products approved for commercial sale, have not generated any revenue from product sales, have financed our operations principally through proceeds from sales of common stock, convertible preferred stock and convertible promissory notes and expect to incur significant losses for the foreseeable future. We expect that it will be several years before we have a commercialized product and generate revenue from product sales, if at all. As of December 31, 2024, we had an accumulated deficit of $947.2 million. Our losses have resulted principally from acquired in-process research and development from our acquisitions of assets, expenses incurred in the research and development of our product candidates, as well as from costs associated with our preclinical studies and clinical trials and management and administrative costs and other expenses that we have incurred while building our business infrastructure.

Current wording

We are a clinical‑stage biopharmaceutical company with a limited operating history. Biopharmaceutical product development is a highly speculative undertaking and involves a substantial degree of risk. We have incurred significant losses since our inception in November 2019, have no products approved for commercial sale, have not generated any revenue from product sales, have financed our operations principally through proceeds from sales of common stock, convertible preferred stock and convertible promissory notes and expect to incur significant losses for the foreseeable future. We expect that it will be several years before we have a commercialized product and generate revenue from product sales, if at all. As of December 31, 2025, we had an accumulated deficit of $1,184.1 million. Our losses have resulted principally from acquired in-process research and development from our acquisitions of assets, expenses incurred in the research and development of our product candidates, as well as from costs associated with our preclinical studies and clinical trials and management and administrative costs and other expenses that we have incurred while building our business infrastructure.

Previous wording

Because of the numerous risks and uncertainties associated with biopharmaceutical and biotechnology products and drug development, we are unable to accurately predict the timing or amount of increased expenses or when, or if, we will be able to achieve profitability. If we are required by the U.S. Food and Drug Administration (FDA) or comparable foreign regulatory authorities to perform studies in addition to those we currently anticipate, or if there are any delays in commencing or completing our clinical trials or the development of any of our product candidates, our expenses could increase and commercial revenue could be further delayed and become more uncertain, which will have a material adverse impact on our business.

Current wording

Because of the numerous risks and uncertainties associated with biopharmaceutical and biotechnology products and drug development, we are unable to accurately predict the timing or amount of increased expenses or when, or if, we will be able to achieve profitability. If we are required by the FDA or comparable foreign regulatory authorities to perform studies in addition to those we currently anticipate, or if there are any delays in commencing or completing our clinical trials or the development of any of our product candidates, our expenses could increase and commercial revenue could be further delayed and become more uncertain, which will have a material adverse impact on our business.

Previous wording

In connection with our acquisitions of assets in late 2020, we entered into arrangements whereby the former stockholders of those companies are entitled to substantial contingent consideration payments upon the occurrence of certain events. For example, in connection with our acquisition of BlackThorn Therapeutics, Inc. (BlackThorn), a privately held company, the former BlackThorn stockholders are entitled to contingent consideration (i) with respect to navacaprant (NMRA‑140), in the form of development and regulatory approval milestones of up to an aggregate amount of $365.0 million, which includes a milestone payment that became due in October 2023 upon dosing the first patient in the Phase 3 clinical trial for navacaprant, which was primarily settled by issuing unregistered shares of our common stock in December 2023, and sales‑based milestones of up to an aggregate amount of $450.0 million and (ii) with respect to NMRA‑511, in the form of development and regulatory approval milestones of up to an aggregate amount of $100.0 million and sales‑based milestones of up to an aggregate amount of $100.0 million (BlackThorn Milestone Payments). With the exception of one development milestone in the amount of $10.0 million that is required to be settled in cash, the remaining BlackThorn Milestone Payments may be settled in cash or shares of our equity, or a combination of both, at our sole discretion. In connection with the BlackThorn acquisition, we also became obligated under its license agreement with TSRI for, among other obligations, development and regulatory milestone payments of up to $1.5 million in aggregate for the first product from each of the TSRI programs and commercial milestone payments of up to $3.5 million in aggregate for each occurrence.

Current wording

In connection with our acquisitions of assets in late 2020, we entered into arrangements whereby the former stockholders of those companies are entitled to substantial contingent consideration payments upon the occurrence of certain events. For example, in connection with our acquisition of BlackThorn Therapeutics, Inc. (“BlackThorn”), a privately held company, the former BlackThorn stockholders are entitled to contingent consideration (i) with respect to navacaprant (NMRA‑140), in the form of development and regulatory approval milestones of up to an aggregate amount of $365.0 million, which includes a milestone payment that became due in October 2023 upon dosing the first patient in the Phase 3 clinical trial for navacaprant, which was primarily settled by issuing unregistered shares of our common stock in December 2023, and sales‑based milestones of up to an aggregate amount of $450.0 million and (ii) with respect to NMRA‑511, in the form of development and regulatory approval milestones of up to an aggregate amount of $100.0 million and sales‑based milestones of up to an aggregate amount of $100.0 million (the “BlackThorn Milestone Payments”). With the exception of one development milestone in the amount of $10.0 million that is required to be settled in cash, the remaining BlackThorn Milestone Payments may be settled in cash or shares of our equity, or a combination of both, at our sole discretion. In connection with the BlackThorn acquisition, we also became obligated under its license agreement with The Scripps Research Institute (“TSRI”) for, among other obligations, development and regulatory milestone payments of up to $1.5 million in aggregate for the first product from each of the TSRI programs and commercial milestone payments of up to $3.5 million in aggregate for each occurrence.

Previous wording

Under the terms of our September 2021 license agreements with Amgen, we are obligated to pay Amgen up to an aggregate of $720.0 million in commercial milestone payments upon the achievement of certain sales thresholds and single digit royalties on potential annual worldwide net sales related to the CK1δ or GCase programs. In addition, under the collaboration agreement with Amgen, we committed to making quarterly payments to Amgen for their collaboration activities over three years totaling $62.5 million.

Current wording

Under the terms of our September 2021 license agreements with Amgen, we are obligated to pay Amgen up to an aggregate of $720.0 million in commercial milestone payments upon the achievement of certain sales thresholds and single digit royalties on potential annual worldwide net sales related to the CK1δ or glucocerebrosidase (“GCase”) programs.

Previous wording

Under the terms of our license agreement, as amended, with Vanderbilt University (Vanderbilt), we are obligated to pay Vanderbilt up to an aggregate of $422.4 million in development and commercial milestone payments upon the achievement of certain development milestones, which includes a milestone payment of $2.0 million that became due in October 2023, and sales thresholds, and mid‑single digit royalties on potential future net sales.

Current wording

Under the terms of our license agreement, as amended, with Vanderbilt University (“Vanderbilt”), we are obligated to pay Vanderbilt up to an aggregate of $422.4 million in development and commercial milestone payments upon the achievement of certain development milestones, which includes a milestone payments of $2.0 million and $5.0 million that became due in October 2023 and July 2025, respectively, and sales thresholds, and mid‑single digit royalties on potential future net sales.

Previous wording

the effect of macroeconomic trends including inflation, tariffs, and interest rates;

Current wording

the effect of macroeconomic trends including inflation, tariffs, trade controls, and interest rates;

Previous wording

Until such time, if ever, as we can generate substantial product revenue, we expect to finance our operations with our existing cash, cash equivalents and marketable securities, the net proceeds from our initial public offering, any future equity or debt financings and upfront and milestone and royalties payments, if any, received under any future licenses or collaborations. If we raise additional capital through the sale of equity or convertible debt securities, or issue any equity or convertible debt securities in connection with a collaboration agreement or other contractual arrangement, your ownership interest will be diluted, and the terms of these securities may include liquidation or other preferences that adversely affect your rights as a holder of our common stock. In addition, the possibility of such issuance may cause the market price of our common stock to decline. For example, in October 2024 we entered into a sales agreement with Leerink Partners LLC (Leerink) to sell shares of our common stock, from time to time, with aggregate gross sales proceeds of up to $300.0 million, through an at-the-market equity offering program (ATM) with Leerink as the sales agent. During the year ended December 31, 2024, we received aggregate net proceeds of $13.7 million through sales of shares of our common stock under the ATM after deducting commissions and offering expenses of $0.8 million. In December 2023, we settled a Phase 3 navacaprant milestone owed to Blackthorn stockholders by primarily issuing shares of our common stock. Debt financing, if available, may result in increased fixed payment obligations and involve agreements that include covenants limiting or restricting our ability to take specific actions, such as incurring additional debt, making capital expenditures, declaring dividends or acquiring, selling or licensing intellectual property rights or assets, which could adversely impact our ability to conduct our business.

Current wording

Until such time, if ever, as we can generate substantial product revenue, we expect to finance our operations with our existing cash, cash equivalents and marketable securities, the net proceeds from our initial public offering, any future equity or debt financings and upfront and milestone and royalties payments, if any, received under any future licenses or collaborations. If we raise additional capital through the sale of equity or convertible debt securities, or issue any equity or convertible debt securities in connection with a collaboration agreement or other contractual arrangement, your ownership interest will be diluted, and the terms of these securities may include liquidation or other preferences that adversely affect your rights as a holder of our common stock. In addition, the possibility of such issuance may cause the market price of our common stock to decline. For example, in October 2024 we entered into a sales agreement with Leerink Partners LLC (“Leerink”) to sell shares of our common stock, from time to time, with aggregate gross sales proceeds of up to $300.0 million, through an ATM with Leerink as the sales agent. During the years ended December 31, 2025 and 2024, we received aggregate net proceeds of $19.7 million and $13.7 million, respectively, through sales of shares of our common stock under the ATM after deducting commissions and offering expenses. In December 2023, we settled a Phase 3 navacaprant milestone owed to BlackThorn stockholders by primarily issuing shares of our common stock. Debt financing, if available, may result in increased fixed payment obligations and involve agreements that include covenants limiting or restricting our ability to take specific actions, such as incurring additional debt, making capital expenditures, declaring dividends or acquiring, selling or licensing intellectual property rights or assets, which could adversely impact our ability to conduct our business. For example, in May 2025, we entered into a loan and security agreement (as amended, the “Loan Agreement”) with K2 HealthVentures LLC (“K2HV”), which includes certain affirmative and restrictive covenants that may, among other things, limit our ability to incur additional debt. Additionally, pursuant to the terms of the Loan Agreement, K2HV has the right to convert up to an aggregate of $12.5 million of the outstanding principal of the term loans into shares of our common stock. As of March 30, 2026, K2HV has the right to convert up to an aggregate of $6.5 million of the remaining outstanding principal into shares of common stock, which right, if exercised, could have a dilutive impact on our stockholders’ ownership interests.

Previous wording

Our ability to generate revenue from sales of any of our approved product candidates, which we do not expect will occur for at least the next several years, depends heavily on the successful identification, development, regulatory approval and eventual commercialization of any product candidates, which may never occur. We have never generated revenue from sales of any products, and we may never be able to develop, obtain regulatory approval for, or commercialize, a marketable product. All of our product candidates will require significant clinical development, regulatory approval, establishment of sufficient manufacturing supply, including commercial manufacturing supply, and may require us to build a commercial organization and make substantial investment and significant marketing efforts before we generate any revenue from product sales. We are not permitted to market or promote any of our product candidates before we receive regulatory approval from the FDA or comparable foreign regulatory authorities, and we may never receive such regulatory approval for any of our product candidates.

Current wording

Our ability to generate revenue from sales of any of our approved product candidates, which we do not expect will occur for at least the next several years, if at all, depends heavily on the successful identification, development, regulatory approval and eventual commercialization of any product candidates, any of which may never occur. We have never generated revenue from sales of any products, and we may never be able to develop, obtain regulatory approval for, or commercialize, a marketable product. All of our product candidates will require significant clinical development, regulatory approval, establishment of sufficient manufacturing supply, including commercial manufacturing supply, and may require us to build a commercial organization and make substantial investment and significant marketing efforts before we generate any revenue from product sales. We are not permitted to market or promote any of our product candidates before we receive regulatory approval from the FDA or comparable foreign regulatory authorities, and we may never receive such regulatory approval for any of our product candidates.

Previous wording

We were founded with a mission to redefine neuroscience drug development, a field that has seen very limited success. The ability to successfully develop drugs in this field is extremely difficult and is subject to a number of unique challenges.

Current wording

We were founded to confront the greatest medical challenges of our generation by taking a fundamentally different approach to the way treatments for brain diseases are developed, fields that have seen very limited success. The ability to successfully develop drugs in these fields is extremely difficult and is subject to a number of unique challenges.

Previous wording

Drug development in the field of brain diseases, and neuropsychiatric disorders and neurodegenerative diseases in particular, has seen very limited success historically. We estimate over $110 billion has been spent on neuroscience research and development since 2019 in the United States alone, representing approximately 33% of all disease‑specific spending. However, only approximately 12% of all new therapies approved during this time period have been for the treatment of brain diseases. From 2011 to 2020, clinical development success rates for new drug candidates that employed patient selection biomarkers were approximately 16% compared to approximately 8% for patients without patient selection biomarkers according to the BIO; however, clinical success depends on a number of factors and employing a patient selection biomarker approach does not guarantee that our product candidates will be approved and commercialized. Developing a product candidate for treatment of these brain diseases is extremely difficult and subjects us to a number of unique challenges, including obtaining regulatory approval from the FDA and other regulatory authorities who have only a limited set of precedents to rely on.

Current wording

Drug development in the fields of brain diseases, including neuropsychiatric disorders and neurodegenerative diseases in particular, has seen very limited success historically. Clinical success depends on a number of factors, and developing a product candidate for treatment of these and other brain diseases is extremely difficult and subjects us to a number of unique challenges, including obtaining regulatory approval from the FDA and other regulatory authorities who have only a limited set of precedents to rely on.

Previous wording

We intend to work closely with the FDA and comparable foreign regulatory authorities to perform the requisite scientific analyses and evaluation in an effort to obtain regulatory approval for our product candidates; however, the process of developing our product candidates may be more complex and time‑consuming relative to other more well‑known approaches to drug development. We cannot be certain that our approach will lead to the development of product candidates that effectively and safely address the underlying brain diseases.

Current wording

We intend to work closely with the FDA and comparable foreign regulatory authorities to perform the requisite scientific analyses and evaluation in an effort to obtain regulatory approval for our product candidates for brain or centrally mediated diseases; however, the process of developing our product candidates may be more complex and time-consuming relative to other more well-known approaches to drug development. We cannot be certain that our approach will lead to the development of product candidates that effectively and safely address the underlying brain or centrally mediated diseases.

Previous wording

Moreover, given the history of clinical failures in this field, future clinical or regulatory failures by us or others may result in further negative perception of the likelihood of success in this field, which may significantly and adversely affect the market price of our common stock.

Current wording

Moreover, given the history of clinical failures in these fields, future clinical or regulatory failures by us or others may result in further negative perception of the likelihood of success in these fields, which may significantly and adversely affect the market price of our common stock.

Previous wording

As of December 31, 2024, we had 110 full‑time employees. We will continue to implement and improve our managerial, operational, and financial systems, expand our facilities, and continue to recruit and train additional qualified personnel. Due to the complexity in managing a company that has scaled very quickly, we may not be able to scale our headcount and operations effectively to manage the expansion of our product pipeline or recruit and train the necessary additional personnel. Any inability to manage growth could delay the execution of our business plans or disrupt our operations.

Current wording

As of December 31, 2025 we had 96 full‑time employees. We will continue to implement and improve our managerial, operational, and financial systems, expand our facilities, and continue to recruit and train additional qualified personnel. Due to the complexity in managing a company that has scaled very quickly, we may not be able to scale our headcount and operations effectively to manage the expansion of our product pipeline or recruit and train the necessary additional personnel. Any inability to manage growth could delay the execution of our business plans or disrupt our operations.

Previous wording

Our approach represents an aggregation of innovation and assets from multiple companies and academic institutions, including BlackThorn, Amgen, TSRI and Vanderbilt. Further, a key component of our strategy is to acquire and in‑license assets and technologies to support the growth of our product pipeline and to enhance our Precision Toolbox. As such, we actively evaluate various strategic transactions on an ongoing basis. We may acquire other assets, businesses, products or technologies, as well as pursue joint ventures or investments in complementary businesses. The success of our strategic transactions and any future strategic transactions depends on the risks and uncertainties involved including:

Current wording

Our approach represents an aggregation of innovation and assets from multiple companies and academic institutions, including BlackThorn, Amgen, TSRI and Vanderbilt. Further, a key component of our strategy is to acquire and in‑license assets and technologies to support the growth of our product pipeline and to enhance our Precision Toolbox of translational neuroscience tools, methods, and data science capabilities. As such, we actively evaluate various strategic transactions on an ongoing basis. We may acquire other assets, businesses, products or technologies, as well as pursue joint ventures or investments in complementary businesses. The success of our strategic transactions and any future strategic transactions depends on the risks and uncertainties involved including:

Previous wording

If any of these risks or uncertainties occur, we may not realize the anticipated benefit of any acquisition or strategic transaction. For example, less than one year following the acquisition of Propellex, we terminated and are no longer developing the program we acquired from Propellex. Additionally, foreign acquisitions and joint ventures are subject to additional risks, including those related to integration of operations across different cultures and languages, currency risks, potentially adverse tax consequences of overseas operations and the particular economic, political and regulatory risks associated with specific countries.

Current wording

If any of these risks or uncertainties occur, we may not realize the anticipated benefit of any acquisition or strategic transaction. Additionally, foreign acquisitions and joint ventures are subject to additional risks, including those related to integration of operations across different cultures and languages, currency risks, potentially adverse tax consequences of overseas operations and the particular economic, political and regulatory risks associated with specific countries.

Previous wording

Our ability to execute on our drug development strategy depends in part on our ability to enhance and improve our precision neuroscience approach. As part of this approach, we interrogate public, partnered and proprietary datasets across neuropsychiatric and neurodegenerative diseases, currently encompassing genetic, imaging, electroencephalogram (EEG), digital and clinical data. We rely on these datasets and data analytics for identifying or validating some of our biomarker‑target relationships. The success of our precision neuroscience approach and any enhancement to our approach depends on several factors, including access to and generation of additional multimodal patient datasets, whether public, partnered or proprietary, development of more advanced proprietary machine learning capabilities and increased computational storage and processing capacity. If we are unable to access additional datasets or they are not available on acceptable terms, or if we are otherwise unsuccessful in enhancing our approach, we may be limited in our precision neuroscience capabilities and not be able to fully utilize a precision neuroscience drug development strategy.

Current wording

Our ability to execute on our drug development strategy depends in part on our ability to enhance and improve our precision neuroscience approach. As part of this approach, we interrogate public, partnered and proprietary datasets across neuropsychiatric and neurodegenerative diseases, currently encompassing genetic, imaging, electroencephalogram, digital and clinical data. We rely on these datasets and data analytics for identifying or validating some of our biomarker‑target relationships. The success of our precision neuroscience approach and any enhancement to our approach depends on several factors, including access to and generation of additional multimodal patient datasets, whether public, partnered or proprietary, development of more advanced proprietary machine learning capabilities and increased computational storage and processing capacity. If we are unable to access additional datasets or they are not available on acceptable terms, or if we are otherwise unsuccessful in enhancing our approach, we may be limited in our precision neuroscience capabilities and not be able to fully utilize a precision neuroscience drug development strategy.

Previous wording

We outsource substantially all of the technological infrastructure relating to our hosted platform to third‑party hosting services, such as Amazon Web Services. We have no control over any of these third parties, and while we attempt to reduce risk by minimizing reliance on any single third party or its operations, we cannot guarantee that such third‑party providers will not experience system interruptions, outages or delays, or deterioration in their performance. We need to be able to access our computational platform at any time, without interruption or degradation of performance. Our hosted platform depends on protecting the virtual cloud infrastructure hosted by third‑party hosting services by maintaining its configuration, architecture, features, and interconnection specifications, as well as protecting the information stored in these virtual data centers, which is transmitted by third‑party Internet service providers. We have experienced and expect that in the future we may again experience interruptions, delays and outages in service and availability from time to time due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. Any limitation on the capacity of our third‑party hosting services could adversely affect our business, financial condition, and results of operations. In addition, any incident affecting our third‑party hosting services’ infrastructure that may be caused by cyber‑attacks, natural disasters, fire, flood, severe storm, earthquake, power loss, telecommunications failures, terrorist or other attacks, and other disruptive events beyond our control could negatively affect our cloud‑based solutions. A prolonged service disruption affecting our cloud‑based solutions could damage our reputation or otherwise harm our business. We may also incur significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that damage the third‑party hosting services we use.

Current wording

We outsource substantially all of the technological infrastructure relating to our hosted platforms to third‑party hosting services, such as Amazon Web Services. We have no control over any of these third parties, and while we attempt to reduce risk by minimizing reliance on any single third party or its operations, we cannot guarantee that such third‑party providers will not experience system interruptions, outages or delays, or deterioration in their performance. We need to be able to access our computational platform at any time, without interruption or degradation of performance. Our hosted platform depends on protecting the virtual cloud infrastructure hosted by third‑party hosting services by maintaining its configuration, architecture, features, and interconnection specifications, as well as protecting the information stored in these virtual data centers, which is transmitted by third‑party Internet service providers. We have experienced and expect that in the future we may again experience interruptions, delays and outages in service and availability from time to time due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. Any limitation on the capacity of our third‑party hosting services could adversely affect our business, financial condition, and results of operations. In addition, any incident affecting our third‑party hosting services’ infrastructure that may be caused by cyber‑attacks, natural disasters, fire, flood, severe storm, earthquake, power loss, telecommunications failures, terrorist or other attacks, and other disruptive events beyond our control could negatively affect our hosted platforms. A prolonged service disruption affecting our hosted platforms could damage our reputation or otherwise harm our business. We may also incur significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that damage the third‑party hosting services we use.

Previous wording

In the event that our service agreements with our third‑party hosting services are terminated, or there is a lapse of service, elimination of services or features that we utilize, interruption of internet service provider connectivity, or damage to such facilities, we could experience interruptions in access to our platform as well as significant delays and additional expense in arranging or creating new facilities and services and/or re‑architecting our hosted software solutions for deployment on a different cloud infrastructure service provider, which could adversely affect our business, financial condition, and results of operations.

Current wording

In the event that our service agreements with our third‑party hosting services are terminated, or there is a lapse of service, elimination of services or features that we utilize, interruption of internet service provider connectivity, or damage to such facilities, we could experience interruptions in access to our platforms as well as significant delays and additional expense in arranging or creating new facilities and services and/or re‑architecting our hosted platforms for deployment on a different cloud infrastructure service provider, which could adversely affect our business, financial condition, and results of operations.

Previous wording

Clinical trials must be conducted in accordance with the FDA's and other applicable regulatory authorities’ legal requirements, regulations or guidelines, and are subject to oversight by these governmental agencies and ethics committees or IRBs at the medical institutions where the clinical trials are conducted. We could also encounter delays if a clinical trial is suspended or terminated by us, by the IRBs of the institutions in which such trials are being conducted, by a Data Safety Monitoring Board for such trial or by the FDA or comparable foreign regulatory authorities. Such authorities may impose such a suspension or termination due to a number of factors, including failure to conduct the clinical trial in accordance with regulatory requirements or our clinical protocols, inspection of the clinical trial operations or trial site by the FDA or comparable foreign regulatory authorities resulting in the imposition of a clinical hold, unforeseen safety issues or adverse side effects, failure to demonstrate a benefit from using a drug, changes in governmental regulations or administrative actions or lack of adequate funding to continue the clinical trial. For example, in April 2024, our Phase 1 trial of NMRA-266 was placed on clinical hold by the FDA after data from nonclinical studies showed convulsions in rabbits. Although we are in discussions with the FDA regarding the potential to remove the clinical hold, there is no guarantee that we will be able to successfully resolve the clinical hold issues or resume clinical studies of NMRA-266 in the time and manner that we expect. In addition, changes in regulatory requirements and policies may occur, and we may need to amend clinical trial protocols to comply with these changes. Amendments may require us to resubmit our clinical trial protocols to IRBs for reexamination, which may impact the costs, timing or successful completion of a clinical trial.

Current wording

Clinical trials must be conducted in accordance with the FDA’s and other applicable regulatory authorities’ legal requirements, regulations or guidelines, and are subject to oversight by these governmental agencies and ethics committees or IRBs at the medical institutions where the clinical trials are conducted. We could also encounter delays if a clinical trial is suspended or terminated by us, by the IRBs of the institutions in which such trials are being conducted, by a Data Safety Monitoring Board for such trial or by the FDA or comparable foreign regulatory authorities. Such authorities may impose such a suspension or termination due to a number of factors, including failure to conduct the clinical trial in accordance with regulatory requirements or our clinical protocols, inspection of the clinical trial operations or trial site by the FDA or comparable foreign regulatory authorities resulting in the imposition of a clinical hold, unforeseen safety issues or adverse side effects, failure to demonstrate a benefit from using a drug, changes in governmental regulations or administrative actions or lack of adequate funding to continue the clinical trial. In addition, changes in regulatory requirements and policies may occur, and we may need to amend clinical trial protocols to comply with these changes. Amendments may require us to resubmit our clinical trial protocols to IRBs for reexamination, which may impact the costs, timing or successful completion of a clinical trial.

Previous wording

In addition, the FDA’s and other regulatory authorities’ policies with respect to clinical trials may change and additional government regulations may be enacted. For example the EU Clinical Trials Regulation (CTR) which was adopted in April 2014 and repeals the EU Clinical Trials Directive, became applicable on January 31, 2022. While the Clinical Trials Directive required a separate clinical trial application (CTA), to be submitted in each member state in which the clinical trial takes place, to both the competent national health authority and an independent ethics committee, the CTR introduces a centralized process and only requires the submission of a single application for multi-center trials. The CTR allows sponsors to make a single submission to both the competent authority and an ethics committee in each member state, leading to a single decision per member state. The assessment procedure of the CTA has been harmonized as well, including a joint assessment by all member states concerned, and a separate assessment by each member state with respect to specific requirements related to its own territory, including ethics rules. Each member state’s decision is communicated to the sponsor via the centralized EU portal. Once the CTA is approved, clinical study development may proceed. The CTR transition period ended on January 31, 2025, and all clinical trials (and related applications) are now fully subject to the provisions of the CTR. Compliance with the CTR requirements by us and our third-party service providers, such as Contract research organizations (CRO), may impact our developments plans.

Current wording

In addition, the FDA’s and other regulatory authorities’ policies with respect to clinical trials may change and additional government regulations may be enacted. For example the EU Clinical Trials Regulation (“CTR”) which was adopted in April 2014 and repeals the EU Clinical Trials Directive, became applicable on January 31, 2022. While the Clinical Trials Directive required a separate clinical trial application (“CTA”), to be submitted in each member state in which the clinical trial takes place, to both the competent national health authority and an independent ethics committee, the CTR introduces a centralized process and only requires the submission of a single application for multi-center trials. The CTR allows sponsors to make a single submission to both the competent authority and an ethics committee in each member state, leading to a single decision per member state. The assessment procedure of the CTA has been harmonized as well, including a joint assessment by all member states concerned, and a separate assessment by each member state with respect to specific requirements related to its own territory, including ethics rules. Each member state’s decision is communicated to the sponsor via the centralized EU portal. Once the CTA is approved, clinical study development may proceed. The CTR transition period ended on January 31, 2025, and all clinical trials (and related applications) are now fully subject to the provisions of the CTR. Compliance with the CTR requirements by us and our third-party service providers, such as CROs, may impact our developments plans.

Previous wording

It is currently unclear to what extent the UK will seek to align its regulations with the EU. The UK regulatory framework in relation to clinical trials is derived from existing EU legislation (as implemented into UK law, through secondary legislation).

Current wording

It is currently unclear to what extent the United Kingdom (“UK”) will seek to align its regulations with the European Union (“EU”). The UK regulatory framework in relation to clinical trials is derived from existing EU legislation (as implemented into UK law, through secondary legislation).

Previous wording

To obtain the requisite regulatory approvals to market and sell any of our product candidates, we or any collaborator for such product candidate must demonstrate through extensive preclinical studies and clinical trials that the product candidate is safe and effective in humans. Before an IND can be submitted to the FDA and become effective, which is a prerequisite for conducting clinical trials on human subjects in the United States, a product candidate must successfully progress through extensive preclinical studies, which include preclinical laboratory testing, animal studies, and formulation studies, certain of which must be conducted in accordance with GLP. We cannot be certain of the timely completion or outcome of any preclinical studies. We also cannot predict if the FDA or comparable regulatory authorities will allow our proposed clinical programs to proceed or if the outcome of our preclinical studies will ultimately support further development of our programs. Additionally, we cannot be sure that we will be able to submit INDs or similar applications with respect to our product candidates on the timelines we expect, if at all, and we cannot be sure that submission of IND or similar applications will result in the FDA or other regulatory authorities allowing clinical trials to begin.

Current wording

To obtain the requisite regulatory approvals to market and sell any of our product candidates, we or any collaborator for such product candidate must demonstrate through extensive preclinical studies and clinical trials that the product candidate is safe and effective in humans. Before an investigational new drug application (“IND”) can be submitted to the FDA and become effective, which is a prerequisite for conducting clinical trials on human subjects in the United States, a product candidate must successfully progress through extensive preclinical studies, which include preclinical laboratory testing, animal studies, and formulation studies, certain of which must be conducted in accordance with GLP. We cannot be certain of the timely completion or outcome of any preclinical studies. We also cannot predict if the FDA or comparable foreign regulatory authorities will allow our proposed clinical programs to proceed or if the outcome of our preclinical studies will ultimately support further development of our programs. Additionally, we cannot be sure that we will be able to submit INDs or similar applications with respect to our product candidates on the timelines we expect, if at all, and we cannot be sure that submission of IND or similar applications will result in the FDA or other regulatory authorities allowing clinical trials to begin.

Previous wording

Although the clinical trial process is designed to identify and assess potential side effects, it is always possible that a drug, even after regulatory approval, may exhibit unforeseen side effects. If any of our product candidates were to cause adverse side effects during clinical trials or after approval of the product candidate, we may be exposed to substantial liabilities. Physicians and patients may not comply with any warnings that identify known potential adverse effects and patients who should not use our product candidates.

Current wording

Although the clinical trial process is designed to identify and assess potential side effects, it is always possible that a drug, even after regulatory approval, may exhibit unforeseen side effects. If any of our product candidates were to cause adverse side effects during clinical trials or after approval of the product candidate, we may be exposed to substantial liabilities. Physicians and patients may not comply with any warnings that identify known potential adverse effects or patients who should not use our product candidates.

Previous wording

Disruptions at the FDA and other government agencies caused by funding shortages, staffing reductions or global health concerns could hinder their ability to hire, retain, or deploy key leadership and other personnel, or otherwise prevent new or modified products from being developed, approved, or commercialized in a timely manner or at all, which could negatively impact our business.

Current wording

Disruptions at the FDA and other government agencies caused by funding shortages, staffing reductions or policy changes could hinder their ability to hire, retain, or deploy key leadership and other personnel, or otherwise prevent new or modified products from being developed, approved, or commercialized in a timely manner or at all, which could negatively impact our business.

Previous wording

The ability of the FDA to review and approve new products can be affected by a variety of factors, including government budget and funding levels, reductions in staffing, statutory, regulatory, and policy changes, the FDA’s ability to hire and retain key personnel and accept the payment of user fees, and other events that may otherwise affect the FDA’s ability to perform routine functions. Average review times at the FDA have fluctuated in recent years as a result. In addition, government funding of other government agencies that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable. Disruptions at the FDA and other agencies may also slow the time necessary for new drugs or modifications to approved drugs to be reviewed and/or approved by necessary government agencies, which would adversely affect our business. For example, in recent years, the U.S. government has shut down several times and certain regulatory agencies, such as the FDA, have had to furlough critical FDA employees and stop critical activities. In addition, during the COVID‑19 pandemic, the FDA postponed most inspections of domestic and foreign manufacturing facilities at various points, and more recently there have been FDA staff cuts under the Trump administration. If a prolonged government shutdown occurs, or if staffing reductions or global health concerns prevent the FDA or other regulatory authorities from conducting their regular activities, it could significantly impact the ability of the FDA or other regulatory authorities to timely review and process our regulatory submissions, which could have a material adverse effect on our business.

Current wording

The ability of the FDA to review and approve new products can be affected by a variety of factors, including government budget and funding levels, reductions in staffing, statutory, regulatory, and policy changes, the FDA’s ability to hire and retain key personnel and accept the payment of user fees, and other events that may otherwise affect the FDA’s ability to perform routine functions. Average review times at the FDA have fluctuated in recent years as a result. In addition, government funding of other government agencies that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable. Disruptions at the FDA and other agencies may also slow the time necessary for new drugs or modifications to approved drugs to be reviewed and/or approved by necessary government agencies, which would adversely affect our business. For example, in recent years, the U.S. government has shut down several times and certain regulatory agencies, such as the FDA, have had to furlough critical FDA employees and stop critical activities. In addition, the current U.S. Presidential administration has issued certain policies and Executive Orders directed towards reducing the employee headcount and costs associated with U.S. administrative agencies, including the FDA, and it remains unclear the degree to which these efforts may limit or otherwise adversely affect the FDA’s ability to conduct routine activities.

Previous wording

the U.S. Physician Payments Sunshine Act and its implementing regulations, which requires, among other things, certain manufacturers of drugs and devices that are reimbursable under Medicare, Medicaid, or the Children’s Health Insurance Program, with specific exceptions, to report annually to the Centers for Medicare and Medicaid Services, or CMS, information related to certain payments and other transfers of value to physicians (defined to include doctors, dentists, optometrists, podiatrists and chiropractors), other healthcare professionals (such as physician assistants and nurse practitioners), and teaching hospitals, as well as ownership and investment interests held by such physicians and their immediate family members;

Current wording

the U.S. Physician Payments Sunshine Act and its implementing regulations, which requires, among other things, certain manufacturers of drugs and devices that are reimbursable under Medicare, Medicaid, or the Children’s Health Insurance Program, with specific exceptions, to report annually to the Centers for Medicare and Medicaid Services (“CMS”), information related to certain payments and other transfers of value to physicians (defined to include doctors, dentists, optometrists, podiatrists and chiropractors), other healthcare professionals (such as physician assistants and nurse practitioners), and teaching hospitals, as well as ownership and investment interests held by such physicians and their immediate family members;

Previous wording

Since its enactment, there have been judicial and Congressional challenges to certain aspects of the ACA. On June 17, 2021, the U.S. Supreme Court dismissed the most recent judicial challenge to the ACA brought by several states without specifically ruling on the constitutionality of the ACA. Thus, the ACA remains in effect in its current form. On August 16, 2022, President Biden signed the Inflation Reduction Act of 2022 (the IRA) into law, which, among other things, extends enhanced subsidies for individuals purchasing health insurance coverage in ACA marketplaces through plan year 2025. It is unclear how other healthcare reform measures of the Trump administration or other efforts, if any, to challenge, repeal or replace the ACA, will impact our business.

Current wording

Since its enactment, there have been judicial and Congressional challenges to certain aspects of the ACA. On June 17, 2021, the U.S. Supreme Court dismissed the most recent judicial challenge to the ACA brought by several states without specifically ruling on the constitutionality of the ACA. Thus, the ACA remains in effect in its current form. On August 16, 2022, the Inflation Reduction Act of 2022 (the “IRA”) was signed into law, which, among other things, extended enhanced subsidies for individuals purchasing health insurance coverage in ACA marketplaces through plan year 2025. It is unclear how other healthcare reform measures of the Trump administration or other efforts, if any, to challenge, repeal or replace the ACA, will impact our business.

Previous wording

In addition, other legislative changes have been proposed and adopted in the United States since the ACA was enacted. For example, on March 11, 2021, President Biden signed the American Rescue Plan Act of 2021 into law, which eliminated the statutory Medicaid drug rebate cap, beginning January 1, 2024. The rebate was previously capped at 100% of a drug’s average manufacturer price. Further, in August 2011, the Budget Control Act of 2011, among other things, included aggregate reductions of Medicare payments to providers. These reductions went into effect in April 2013 and, due to subsequent legislative amendments to the statute, will remain in effect until 2032, with the exception of a temporary suspension from May 1, 2020 through March 31, 2022, unless additional action is taken by Congress.

Current wording

In addition, other legislative changes have been proposed and adopted in the United States since the ACA was enacted. For example, on March 11, 2021, the American Rescue Plan Act of 2021 was signed into law, which eliminated the statutory Medicaid drug rebate cap, beginning January 1, 2024. The rebate was previously capped at 100% of a drug’s average manufacturer price. Further, in August 2011, the Budget Control Act of 2011, among other things, included aggregate reductions of Medicare payments to providers. These reductions went into effect in April 2013 and, due to subsequent legislative amendments to the statute, will remain in effect until 2032, with the exception of a temporary suspension from May 1, 2020 through March 31, 2022, unless additional action is taken by Congress.

Previous wording

Moreover, heightened governmental scrutiny is likely to continue over the manner in which manufacturers set prices for their marketed products, which already has resulted in several Congressional inquiries, proposed and enacted legislation and executive orders issued by the President designed to, among other things, bring more transparency to product pricing, review the relationship between pricing and manufacturer patient programs, and reform government program reimbursement methodologies for drug products. Most recently, the IRA marks the most significant action by Congress with respect to the biopharmaceutical industry since adoption of the ACA in 2010. Among other things, the IRA requires manufacturers of certain drugs to engage in price negotiations with Medicare (beginning in 2026), imposes rebates under Medicare Part B and Medicare Part D to penalize price increases that outpace inflation (first due in 2023), and replaces the Part D coverage gap discount program with a new discounting program (which began on January 1, 2025). Manufacturers that fail to comply with the IRA may be subject to various penalties, including civil monetary penalties. The IRA permits the Secretary of the Department of Health and Human Services (HHS) to implement many of these provisions through guidance, as opposed to regulation, for the initial years. On August 15, 2024, HHS announced the agreed upon prices for the first ten drugs that are subject to price negotiations, which take effect in January 2026. HHS will select up to fifteen additional products covered under Part D for negotiation in 2025. Each year thereafter, more Part B and Part D products will become subject to the HHS price negotiation program, although the program is currently subject to legal challenges. For that and other reasons, it is currently unclear how the IRA will be effectuated, and while the impact of the IRA on the biopharmaceutical industry cannot yet be fully determined, it is likely to be significant.

Current wording

Moreover, heightened governmental scrutiny is likely to continue over the manner in which manufacturers set prices for their marketed products, which already has resulted in several Congressional inquiries, proposed and enacted legislation and executive orders issued by the President designed to, among other things, bring more transparency to product pricing, review the relationship between pricing and manufacturer patient programs, and reform government program reimbursement methodologies for drug products. Most recently, the IRA marks the most significant action by Congress with respect to the biopharmaceutical industry since adoption of the ACA in 2010. Among other things, the IRA requires manufacturers of certain drugs to engage in price negotiations with Medicare (beginning in 2026), imposes rebates under Medicare Part B and Medicare Part D to penalize price increases that outpace inflation (first due in 2023), and replaces the Part D coverage gap discount program with a new discounting program (which began in 2025). Manufacturers that fail to comply with the IRA may be subject to various penalties, including civil monetary penalties. The IRA permits the Secretary of the Department of Health and Human Services (“HHS”) to implement many of these provisions through guidance, as opposed to regulation, for the initial years. CMS has published the negotiated prices for the initial ten drugs, which went into effect in January 2026, and the subsequent 15 drugs, which will first be effective in 2027, although the program is currently subject to legal challenges. For that and other reasons, it is currently unclear how the IRA will be effectuated, and while the impact of the IRA on the biopharmaceutical industry cannot yet be fully determined, it is likely to be significant.

Previous wording

Additionally, individual states in the United States have passed legislation and implemented regulations designed to control biopharmaceutical product pricing and costs. Similar developments have occurred outside of the United States, including in the European Union where healthcare budgetary constraints have resulted in restrictions on the pricing and reimbursement of medicines by relevant health service providers. To obtain reimbursement or pricing approval in some European Union member states, we may be required to conduct studies that compare the cost‑effectiveness of our product candidates to other therapies that are considered the local standard of care.

Current wording

Additionally, individual states in the United States have passed legislation and implemented regulations designed to control biopharmaceutical product pricing and costs. Similar developments have occurred outside of the United States, including in the EU where healthcare budgetary constraints have resulted in restrictions on the pricing and reimbursement of medicines by relevant health service providers. To obtain reimbursement or pricing approval in some EU member states, we may be required to conduct studies that compare the cost‑effectiveness of our product candidates to other therapies that are considered the local standard of care.

Previous wording

Our ability to commercialize any products successfully also will depend in part on the extent to which coverage and adequate reimbursement for these products and related treatments will be available from third‑party payors, such as government authorities, private health insurers, and other organizations. Even if we succeed in bringing one or more products to the market, these products may not be considered cost‑effective, and the amount reimbursed for any products may be insufficient to allow us to sell our products on a competitive basis. Because our programs are in the relatively early stages of development, we are unable at this time to determine their cost effectiveness or the likely level or method of coverage and reimbursement. Increasingly, the third‑party payors who reimburse patients or healthcare providers are requiring that drug companies provide them with predetermined discounts from list prices, and are seeking to reduce the prices charged or the amounts reimbursed for drug products. If the price we are able to charge for any products we develop, or the coverage and reimbursement provided for such products, is inadequate in light of our development and other costs, our return on investment could be affected adversely.

Current wording

Our ability to commercialize any products successfully also will depend in part on the extent to which coverage and adequate reimbursement for these products and related treatments will be available from third‑party payors, such as government authorities, private health insurers, and other organizations. Even if we succeed in bringing one or more products to the market, these products may not be considered cost‑effective, and the amount reimbursed for any products may be insufficient to allow us to sell our products on a competitive basis. Because our programs are in the relatively early stages of development, we are unable at this time to determine their cost effectiveness or the likely level or method of coverage and reimbursement. Increasingly, the third‑party payors who reimburse patients or healthcare providers are requiring that drug companies provide them with predetermined discounts from list prices, and are seeking to reduce the prices charged or the amounts reimbursed for drug products. If the price we are able to charge for any products we develop, or the coverage and reimbursement provided for such products, is inadequate in light of our development and other costs, our return on investment could be adversely affected.

Previous wording

Furthermore, the Federal Trade Commission (FTC) also has authority to initiate enforcement actions against entities that mislead customers about HIPAA compliance, make deceptive statements about privacy and data sharing in privacy policies, fail to limit third-party use of personal health information, fail to implement policies to protect personal health information or engage in other unfair practices that harm customers or that may violate Section 5 of the FTC Act. Even when HIPAA does not apply, according to the FTC violating consumers’ privacy rights or failing to take appropriate steps to keep consumers’ personal information secure may constitute a violation of the FTC Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. Additionally, federal and state consumer protection laws are increasingly being applied by FTC and states’ attorneys general to regulate the collection, use, storage, and disclosure of personal or personally identifiable information, through websites or otherwise, and to regulate the presentation of website content.

Current wording

Furthermore, the Federal Trade Commission (“FTC”) also has authority to initiate enforcement actions against entities that mislead customers about HIPAA compliance, make deceptive statements about privacy and data sharing in privacy policies, fail to limit third-party use of personal health information, fail to implement policies to protect personal health information or engage in other unfair practices that harm customers or that may violate Section 5 of the Federal Trade Commission Act (“FTC Act”). Even when HIPAA does not apply, according to the FTC violating consumers’ privacy rights or failing to take appropriate steps to keep consumers’ personal information secure may constitute a violation of the FTC Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. Additionally, federal and state consumer protection laws are increasingly being applied by FTC and states’ attorneys general to regulate the collection, use, storage, and disclosure of personal or personally identifiable information, through websites or otherwise, and to regulate the presentation of website content.

Previous wording

We may maintain certain sensitive information about individuals, including health-related information, that we receive throughout the clinical trial process, in the course of our research collaborations, and directly from individuals (or their healthcare providers) who enroll in our patient assistance programs. As such, we may be subject to state laws and regulations governing the privacy and security of personal information or requiring notification of affected individuals and state regulators in the event of a breach of personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the CCPA) requires covered businesses that process the personal information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; (ii) receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt out of certain disclosures of their personal information; and (iii) enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Although there are limited exemptions for health‑related information, including clinical trial data, the CCPA may increase our compliance costs and potential liability. Similar laws have been passed in other states, and are continuing to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the United States. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging.

Current wording

We may maintain certain sensitive information about individuals, including health-related information, that we receive throughout the clinical trial process, in the course of our research collaborations, and directly from individuals (or their healthcare providers) who enroll in our patient assistance programs. As such, we may be subject to state laws and regulations governing the privacy and security of personal information or requiring notification of affected individuals and state regulators in the event of a breach of personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”) requires covered businesses that process the personal information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; (ii) receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt out of certain disclosures of their personal information; and (iii) enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Although there are limited exemptions for health‑related information, including clinical trial data, the CCPA may increase our compliance costs and potential liability. Similar laws have been passed in other states, reflecting a trend toward more stringent privacy legislation in the United States. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging.

Previous wording

We are also or may become subject to rapidly evolving data protection laws, rules and regulations in foreign jurisdictions. Any clinical trial programs and research collaborations that we engage in outside the United States may implicate international data protection laws, including, in the European Economic Area (EEA), the General Data Protection Regulation (GDPR), which became effective in 2018. The GDPR imposes stringent operational requirements for processors and controllers of the personal data of individuals within the EEA. Among other things, the GDPR requires detailed notices for clinical trial subjects and investigators, as well as requirements regarding the security of personal data and notification of data processing obligations or security incidents to appropriate data protection authorities or data subjects. If our privacy or data security measures fail to comply with the GDPR requirements, we may be subject to litigation, regulatory investigations, enforcement notices, enforcement actions requiring us to change the way we use personal data and/or fines. In addition to statutory enforcement, a personal data breach can lead to adverse publicity and a potential loss of business. Further, from January 1, 2021, companies have had to comply with both the GDPR and the United Kingdom GDPR (UK GDPR), which, together with the amended UK Data Protection Act 2018, imposes separate but similar obligations to those under the GDPR. The UK GDPR mirrors the fines under the GDPR, imposing fines up to the greater of €20 million (£17.5 million) or 4% of global turnover.

Current wording

We are also or may become subject to rapidly evolving data protection laws, rules and regulations in foreign jurisdictions. Any clinical trial programs and research collaborations that we engage in outside the United States may implicate international data protection laws, including, in the European Economic Area (“EEA”), the General Data Protection Regulation (“GDPR”), which became effective in 2018. The GDPR imposes stringent operational requirements for processors and controllers of the personal data of individuals within the EEA. Among other things, the GDPR requires detailed information to be given to data subjects regarding our processing of their personal data, including, for example, notices for clinical trial subjects and investigators, as well as requirements regarding the security of personal data and notification of data processing obligations or security incidents to appropriate data protection authorities or data subjects. If our privacy or data security measures fail to comply with the GDPR requirements, we may be subject to litigation, regulatory investigations, enforcement notices, enforcement actions requiring us to change the way we use personal data and/or fines. In addition to statutory enforcement, a personal data breach can lead to adverse publicity and a potential loss of business. Further, from January 1, 2021, companies have had to comply with both the GDPR and the United Kingdom GDPR (“UK GDPR”), which, together with the amended UK Data Protection Act 2018, imposes separate but similar obligations to those under the GDPR. The UK GDPR mirrors the fines under the GDPR, imposing fines up to the greater of €20 million (£17.5 million) or 4% of global turnover. These laws and regulations may apply, not only to us, but also to vendors that store or otherwise process data on our behalf, such as information technology vendors. If such a vendor misuses data we have provided to it, or fails to safeguard such data, we may be subject to litigation, regulatory investigations, enforcement notices, and/or enforcement actions, as well as adverse publicity and a potential loss of business.

Previous wording

Among other requirements, the GDPR regulates transfers of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the United States, and the efficacy and longevity of current transfer mechanisms between the EEA and the United States remains uncertain. Case law from the Court of Justice of the European Union (CJEU) states that reliance on the standard contractual clauses ‑ a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism ‑ alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case‑by‑case basis. On July 10, 2023, the European Commission adopted its Adequacy Decision in relation to the new EU-US Data Privacy Framework (DPF) rendering the DPF effective as an EU GDPR transfer mechanism to U.S. entities self‑certified under the DPF. On October 12, 2023, the UK Extension to the DPF also came into effect (as approved by the UK Government), as data transfer mechanism to U.S. entities self-certified under the DPF. As the regulatory guidance and enforcement landscape in relation to data transfers continue to develop, we could suffer additional costs, complaints, and/or regulatory investigations or fines, and/ or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results. These laws and regulations may apply, not only to us, but also to vendors that store or otherwise process data on our behalf, such as information technology vendors. If such a vendor misuses data we have provided to it, or fails to safeguard such data, we may be subject to litigation, regulatory investigations, enforcement notices, and/or enforcement actions, as well as adverse publicity and a potential loss of business.

Current wording

Among other requirements, the GDPR and UK GDPR regulate transfers of personal data subject to the GDPR or UK GDPR to third countries that have not been found to provide adequate protection to such personal data, including the United States, and the efficacy and longevity of current transfer mechanisms between the EEA or UK and the United States remains uncertain. Case law from the Court of Justice of the European Union (“CJEU”) states that reliance on the standard contractual clauses – a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism – alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case‑by‑case basis. We expect the existing legal complexity and uncertainty regarding international personal data transfers to continue and international transfers to the United States and to other jurisdictions more generally to continue to be subject to enhanced scrutiny by regulators. As the regulatory guidance and enforcement landscape in relation to data transfers continue to develop, we could suffer additional costs, complaints, and/or regulatory investigations or fines, and/ or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we operate our business, the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results.

Previous wording

Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies are expected to enter into force in the United States and the EU in 2024. In the United States, the Biden administration issued a broad Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence (2023 AI Order), that sets out principles intended to guide AI design and deployment for the public and private sector and signals the increase in governmental involvement and regulation over AI Technologies. The 2023 AI Order established certain new requirements for the training, testing and cybersecurity of sophisticated AI models and large scale computer centers used to train AI models. The 2023 AI Order also instructed several other federal agencies to promulgate additional regulations within specific timeframes from the date of the 2023 AI Order regarding the use and development of AI Technologies. Agencies such as the Department of Commerce and the Federal Trade Commission have issued proposed rules governing the use and development of AI Technologies. Legislation related to AI Technologies has also been introduced at the federal level and is advancing at the state level. For example, on March 13, 2024, Utah passed the Utah AI Policy Act, which took effect in May 2024, imposing certain disclosure requirements on the use of AI, and on May 17, 2024, Colorado enacted the Colorado AI Act, which will take effect in February 2026. Further, the California Privacy Protection Agency is currently in the process of finalizing regulations under the CCPA regarding the use of automated decision-making. Such additional regulations may impact our ability to develop, use and commercialize AI Technologies in the future.

Current wording

Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have either entered into force in the United States and the EU or are expected to enter into force in 2026. In the United States, the Trump administration has rescinded an executive order relating to the safe and secure development of AI Technologies that was previously implemented by the Biden administration. The Trump administration then issued a new executive order that, among other things, requires certain agencies to develop and submit to the president action plans to “sustain and enhance America’s global AI dominance,” and to specifically review and, if possible, rescind rulemaking taken pursuant to the rescinded Biden executive order. Thus, the Trump administration may continue to rescind other existing federal orders and/or administrative policies relating to AI Technologies, or may implement new executive orders and/or other rule making relating to AI Technologies in the future. Any such changes at the federal level could require us to expend significant resources to modify our products, services, or operations to ensure compliance or remain competitive. U.S. legislation related to AI Technologies has also been introduced at the federal level and is advancing at the state level. For instance, California enacted a number of new laws that further regulate use of AI Technologies and provide consumers with additional protections around companies’ use of AI Technologies, such as requiring companies to disclose certain uses of generative AI. Other states have also passed AI-focused legislation. For example, on March 13, 2024, Utah passed the Utah AI Policy Act, which took effect in May 2024, imposing certain disclosure requirements on the use of AI, and on May 17, 2024, Colorado enacted the Colorado AI Act, which will take effect in February 2026. Further, the California Privacy Protection Agency recently finalized regulations under the CCPA regarding the use of automated decision-making. Such additional regulations may impact our ability to develop, use, procure and commercialize AI Technologies in the future.

Previous wording

In Europe, on May 21, 2024, the European Union legislators approved the EU Artificial Intelligence Act (the “EU AI Act”), which establishes a comprehensive, risk-based governance framework for artificial intelligence in the EU market. The EU AI Act entered into force on August 2, 2024 and the majority of the substantive requirements will apply from August 2, 2026. The EU AI Act will apply to companies that develop, use and/or provide AI in the EU and includes requirements around transparency, conformity assessments and monitoring, risk assessments, human oversight, security, accuracy, general purpose AI and foundation models, and proposes fines for breach of up to 7% of worldwide annual turnover. In addition, on September 28, 2022, the European Commission proposed two Directives seeking to establish a harmonized civil liability regime for AI in the EU in order to facilitate civil claims in respect of harm caused by AI and to include AI-enabled products within the scope of the EU’s existing strict product liability regime. Once fully applicable, the EU AI Act and the Liability Directives will have a material impact on the way AI is regulated in the EU. Recent case law from the CJEU has taken an expansive view of the scope of the GDPR’s requirements around automated decision making and introduced uncertainty in the interpretation of these rules. The EU AI Act, and developing interpretation and application of the GDPR in respect of automated decision making, together with developing guidance and/or decisions in this area, may affect our use of AI Technologies and our ability to provide, improve or commercialize our business, require additional compliance measures and changes to our operations and processes, result in increased compliance costs and potential increases in civil claims against us, and could adversely affect our business, operations and financial condition.

Current wording

In Europe, on May 21, 2024, EU legislators approved the EU Artificial Intelligence Act (the “EU AI Act”), which establishes a comprehensive, risk-based governance framework for artificial intelligence in the EU market. The EU AI Act entered into force on August 1, 2024 and the majority of the substantive requirements will apply from August 2, 2026. The EU AI Act will apply to companies that develop, use and/or provide AI in the EU and includes requirements around transparency, conformity assessments and monitoring, risk assessments, human oversight, security, accuracy, general purpose AI and foundation models, and proposes fines for breach of up to 7% of worldwide annual turnover. In addition, the revised EU Product Liability Directive came into force in December 2024, to be implemented into EU member state national law by December 2026. This directive extends the EU’s existing strict product liability regime to AI Technologies and AI-enabled products, and facilitates civil claims in respect of harm caused by AI. Once fully applicable, the EU AI Act and the EU Product Liability Directive will have a material impact on the way AI is regulated in the EU. Recent case law from the CJEU has taken an expansive view of the scope of the GDPR’s requirements around automated decision making and introduced uncertainty in the interpretation of these rules. The EU AI Act, and developing interpretation and application of the GDPR in respect of automated decision making, together with developing guidance and/or decisions in this area, may affect our use of AI Technologies and our ability to provide, improve or commercialize our business, require additional compliance measures and changes to our operations and processes, result in increased compliance costs and potential increases in civil claims against us, and could adversely affect our business, operations and financial condition.

Previous wording

We do not have complete control over all aspects of the manufacturing process of, and are dependent on, our contract manufacturing partners for compliance with cGMP or similar foreign regulations for manufacturing both active drug substances and finished drug products. Third‑party manufacturers may not be able to comply with cGMP regulations or similar regulatory requirements outside of the United States. If our contract manufacturers cannot successfully manufacture material that conforms to our specifications and the strict regulatory requirements of the FDA or a comparable foreign regulatory authority, they will not be able to secure and/or maintain marketing approval for their manufacturing facilities. In addition, we do not have control over the ability of our contract manufacturers to maintain adequate quality control, quality assurance and qualified personnel. If the FDA or a comparable foreign regulatory authority does not approve these facilities for the manufacture of our product candidates or if it withdraws any such approval in the future, we may need to find alternative manufacturing facilities, which would significantly impact our ability to develop, obtain marketing approval for or market our product candidates, if approved. Our failure, or the failure of our third‑party manufacturers, to comply with applicable regulations could result in sanctions being imposed on us, including fines, injunctions, civil penalties, delays, suspension or withdrawal of approvals, license revocation, seizures or recalls of product candidates or drugs, operating restrictions and criminal prosecutions, any of which could significantly and adversely affect supplies of our product candidates or drugs and harm our business and results of operations.

Current wording

We do not have complete control over all aspects of the manufacturing process of, and are dependent on, our contract manufacturing partners for compliance with cGMP or similar foreign regulations for manufacturing both active drug substances and finished drug products. Third‑party manufacturers may not be able to comply with cGMP regulations or similar regulatory requirements outside of the United States. If our contract manufacturers cannot successfully manufacture material that conforms to our specifications and the strict regulatory requirements of the FDA or a comparable foreign regulatory authority, they will not be able to secure and/or maintain marketing approval for their manufacturing facilities. In addition, we do not have control over the ability of our contract manufacturers to maintain adequate quality control, quality assurance and qualified personnel. If the FDA or a comparable foreign regulatory authority does not approve these facilities for the manufacture of our product candidates or if it withdraws any such approval in the future, we may need to find alternative manufacturing facilities, which would significantly impact our ability to develop, obtain marketing approval