Skip to main content

LENSAR, Inc.

For the period ended Dec 31, 2025. Filed Mar 31, 2026.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2025 · Filed Mar 31, 2026

LNSR$5.45-0.9%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2024-12-31; filed 2025-02-27.

0000950170-25-029003

Item 1A. Risk Factors

Current report: 10-K

Period ended 2025-12-31; filed 2026-03-31.

0001193125-26-134587

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 364 previous paragraphs and 372 current paragraphs.

263 unchanged; 86 reworded; 20 added; 12 removed; 3 previous and 3 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (20)

Current report

Risks Related to the Terminated Merger Agreement

Current report

The announcement of the termination of the Merger Agreement could negatively impact our business, financial condition, results of operations or our stock price.

Current report

Our announcement of having entered into the Agreement and Plan of Merger, dated as of March 23, 2025, by and among the Company, Alcon Research, LLC, a Delaware limited liability company (“Alcon”), and VMI Option Merger Sub, Inc., a Delaware corporation and a wholly owned subsidiary of Alcon (“Merger Sub”) has caused, and may continue to cause, a material disruption to our business. We also announced that the Merger Agreement has been terminated by us and Alcon, as described below. We are subject to several risks as a result of the announcement and termination of the Merger Agreement, including, but not limited to, the following:

Current report

certain costs related to the Merger Agreement and the transactions contemplated thereunder (collectively, the “Merger”), including the fees and/or expenses of our legal, accounting and financial advisors that must be paid despite the Merger not being completed;

Current report

our inability to retain existing key employees or hire new capable employees, given the uncertainty regarding our future, in order to execute on our continuing business operations;

Current report

the failure to complete the Merger may result in negative publicity and/or a negative impression of us in the investment community or business community generally;

Current report

difficulties maintaining relationships with collaborators, vendors, and other business partners;

Current report

third parties may determine to terminate and/or attempt to renegotiate their relationship with us as a result of the Merger or the termination of the Merger Agreement, whether pursuant to the terms of their existing agreements with us or otherwise; and

Current report

we could be subject to further litigation related to the Merger, including the failure to complete the Merger.

Current report

We may experience shareholder litigation related to the termination of the Merger Agreement, which could result in payment of damages.

Current report

In connection with the Merger, certain purported stockholders of the Company have sent demand letters (the “Demands”) alleging deficiencies and/or omissions regarding the disclosures made in the preliminary proxy statement filed by the Company with the SEC on May 7, 2025 or the definitive proxy statement filed by the Company with the SEC on May 19, 2025. The purported stockholders may not view the Company’s cooperative actions in response to the Demands, such as the Company’s additional disclosure filed with the SEC on June 25, 2025, as sufficient. In addition, we have received a demand from a purported stockholder seeking to inspect certain corporate books and records, in order to investigate, among other things, purported breaches of fiduciary duty by members of the Company’s board of directors in connection with the Merger. The same stockholder filed a verified complaint to compel the inspection of books and records in the Delaware Court of Chancery. These actions could have the effect of increasing the Company’s costs, diverting our management’s attention and resources, delaying or adversely affecting the Merger or resulting in the payment of damages, which could result in a material adverse effect on our business, financial condition and results of operations.

Current report

adoption of our Systems;

Current report

The global data protection landscape is rapidly evolving, and we are or may become subject to numerous state, federal and foreign laws, requirements and regulations governing the collection, use, disclosure, retention, and security of personal information, such as information that we may collect in connection with clinical trials. Implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet

Current report

any of our patents will ultimately be found to be valid and enforceable;

Current report

incur significant legal expenses;

Current report

We also seek to preserve the integrity and confidentiality of our data and other confidential information by maintaining physical security of our premises and physical and electronic security of our information technology systems. While we have confidence in the individuals, organizations and systems which comprise our security measures, agreements and security protections may be breached and detecting the disclosure or misappropriation of confidential information and enforcing a claim that a party illegally disclosed or misappropriated confidential information is difficult, expensive and time-consuming, and the outcome is unpredictable. Further, we may not be able to obtain adequate remedies for any breach.

Current report

We expect that increased investment will be required in the future to continuously improve our use of AI Technologies. As with many technological innovations, there are significant risks involved in developing, maintaining, and deploying these technologies, including that AI-generated content, analyses, or recommendations we utilize could be deficient, that our competitors may more quickly or effectively adopt AI capabilities, or that our use of AI or other emerging technologies increases regulatory, cybersecurity and other significant risks. There can be no assurance that the usage of or our investments in such technologies will always enhance our products or services or be beneficial to our business, including our efficiency or profitability.

Current report

Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have either entered into force in the United States and the EU in 2025 or are expected to enter into force in 2026. U.S. legislation related to AI Technologies has also been introduced at the federal level and has been passed or proposed at the state level. For example, the California Privacy Protection Agency’s new regulations under the CCPA regarding the use of automated decision-making went into effect on January 1, 2026. California also enacted seventeen new laws in 2024 that further regulate the use of AI Technologies and provide consumers with additional protections around companies’ use of AI Technologies, such as requiring companies to disclose certain uses of generative AI. Other states have also passed AI-focused legislation, such as Colorado’s Artificial Intelligence Act, which will require developers and deployers of “high-risk” AI systems to implement certain safeguards against algorithmic discrimination, Utah’s Artificial Intelligence Policy Act, which establishes disclosure requirements and accountability measures for the use of generative AI in certain consumer interactions, and Texas’ Responsible AI Governance Act, which prohibits specified harmful uses of AI, including behavioral manipulation and unlawful discrimination. Such additional regulations, and uncertainty around whether they will survive legal challenges or how they will be enforced, may impact our ability to develop, use, procure and commercialize AI Technologies in the future.

Current report

In the United States, the Trump administration’s approach to investment in and regulation of AI Technologies has and is expected to continue to deviate from that of the previous administration and we will need to adapt to any changes that may result from such approach, including as the result of new or changing executive orders. For instance, the federal government may seek to preempt state laws when they seek to govern certain topics involving AI, as evidenced by the Trump administration’s “Ensuring a National Policy Framework for Artificial Intelligence” Executive Order signed on December 11, 2025. This order calls for federal standards and legislation that would preempt conflicting state AI regulations and create a federal litigation task force focused on challenging state AI laws in court. The Trump administration may continue to implement new or rescind existing federal orders and/or administrative policies relating to AI Technologies. Any such changes at the federal level could require us to expend significant resources to modify our products, services, or operations to ensure compliance or remain competitive.

Current report

We are a “smaller reporting company” as defined in the Exchange Act. We may take advantage of certain of the scaled disclosures available to smaller reporting companies and will be able to take advantage of these scaled disclosures for so long as our voting and non-voting common stock held by non-affiliates is less than $250.0 million measured on the last business day of our second fiscal quarter, or our annual revenue is less than $100.0 million during the most recently completed fiscal year and our voting and non-voting common stock held by non-affiliates is less than $700.0 million measured on the last business day of our second fiscal quarter.
Removed paragraphs (12)

Previous report

Risks Related to Our Business

Previous report

political, social, and economic instability abroad, including the ongoing war between Russia and Ukraine, conflicts in the Middle East, potential conflict between China and Taiwan, terrorist attacks, and security concerns in general;

Previous report

Commission adopted its Adequacy Decision in relation to the new EU-U.S. Data Privacy Framework, or DPF, on July 10, 2023, rendering the DPF effective as a GDPR transfer mechanism to U.S. entities self-certified under the DPF.

Previous report

Risks Related to Government Regulation

Previous report

In September 2019, the FDA issued revised final guidance describing an optional “safety and performance based” premarket review pathway for manufacturers of “certain, well-understood device types” to demonstrate substantial equivalence under the 510(k) clearance pathway by showing that such device meets objective safety and performance criteria established by the FDA, thereby obviating the need for manufacturers to compare the safety and performance of their medical devices to specific predicate devices in the clearance process. The FDA maintains a list device types appropriate for the “safety and performance based” pathway and continues to develop product-specific guidance documents that identify the performance criteria for each such device type, as well as the recommended testing methods where feasible. The FDA may establish performance criteria for classes of devices for which we or our competitors seek or currently have received clearance, and it is unclear the extent to which such performance standards, if established, could impact our ability to obtain new 510(k) clearances or otherwise create competition that may negatively affect our business.

Previous report

Risks Related to Intellectual Property Matters

Previous report

Risks Related to Artificial Intelligence Technologies

Previous report

Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have either entered into force in the United States and the EU in 2024 or are expected to enter into force in 2025. In the United States, the Trump administration has rescinded an executive order relating to AI Technologies that was previously implemented by the Biden administration. The Trump administration may continue to rescind other existing federal orders and/or administrative policies relating to AI Technologies, or may implement new executive orders and/or other rule making relating to AI Technologies in the future. Any such changes at the federal level could require us to expend significant resources to modify our products, services, or operations to ensure compliance or remain competitive. U.S. legislation related to AI Technologies has also been introduced at the federal level and is advancing at the state level. For example, in the United States, the Trump administration has rescinded an executive order relating to AI Technologies that was previously implemented by the Biden administration. The Trump administration may continue to rescind other existing federal orders and/or administrative policies relating to AI Technologies, or may implement new executive orders and/or other rule making relating to AI Technologies in the future. Any such changes at the federal level could require us to expend significant resources to modify our products, services, or operations to ensure compliance or remain competitive. Such additional regulations may impact our ability to develop, use, procure and commercialize AI Technologies in the future.

Previous report

Risks Related to Owning Our Common Stock

Previous report

We are an “emerging growth company,” as defined in the JOBS Act, and we may take advantage of certain exemptions and relief from various reporting requirements that are applicable to other public companies that are not “emerging growth companies.” In particular, while we are an “emerging growth company” (1) we will not be required to comply with the auditor attestation requirements of Section 404(b) of the Sarbanes-Oxley Act, (2) we will be exempt from any rules that may be adopted by the Public Company Accounting Oversight Board requiring mandatory audit firm rotations or a supplement to the auditor’s report on financial statements, (3) we will be subject to reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements and (4) we will not be required to hold non-binding advisory votes on executive compensation or stockholder approval of any golden parachute payments not previously approved.

Previous report

In addition, we are eligible to delay the adoption of new or revised accounting standards applicable to public companies until those standards apply to private companies, and as a result, we may not comply with new or revised accounting standards on the relevant dates on which adoption of such standards is required for non-emerging growth companies. As a result of this election, our financial statements may not be comparable to the financial statements of other public companies.

Previous report

We also currently intend to take advantage of the reduced disclosure requirements regarding executive compensation. We are also entitled to take advantage of other exemptions, including the exemptions from the advisory vote requirements and executive compensation disclosures under the Dodd-Frank Wall Street Reform and Customer Protection Act, and the exemption from the provisions of Section 404(b) of the Sarbanes-Oxley Act. We will remain an “emerging growth company” until December 31, 2025 (the fiscal year-end following the fifth anniversary of the completion of the spin-off).
Reworded paragraphs (86)

Previous wording

Global economic uncertainty, including due to factors such as increased inflation and rising interest rates, have contributed to our business and operational performance. If economic uncertainty continues or increases or if economic conditions deteriorate, these conditions may have a material adverse impact on our revenue, profit margins, cash flow and liquidity in the future. In particular, our business is impacted by inflation, such as the recent inflationary pressures related to global supply chain disruptions that have increased the cost of certain raw materials, labor and transportation used in our business. These broad-based inflationary impacts have negatively impacted our financial condition, results of operations and cash flows since 2020, and we expect these inflationary impacts to continue for the foreseeable future. A high rate of inflation in the future may have an adverse effect on our ability to maintain and increase our gross margin or decrease our operating expenses as a percentage of our revenues if our selling prices of our products do not increase as much or more than our increase in costs.

Current wording

Global economic uncertainty, including due to factors such as increased inflation, rising interest rates, prolonged government shutdowns, and increased tariffs and other trade barriers, have contributed to our business and operational performance. If economic uncertainty continues or increases or if economic conditions deteriorate, these conditions may have a material adverse impact on our revenue, profit margins, cash flow and liquidity in the future. In particular, our business is impacted by inflation, such as the recent inflationary pressures related to global supply chain disruptions that have increased the cost of certain raw materials, labor and transportation used in our business. These broad-based inflationary impacts have negatively impacted our financial condition, results of operations and cash flows, and we expect these inflationary impacts to continue for the foreseeable future. A high rate of inflation in the future may have an adverse effect on our ability to maintain and increase our gross margin or decrease our operating expenses as a percentage of our revenues if our selling prices of our products do not increase as much or more than our increase in costs.

Previous wording

We expect to incur operating losses for the near-term future and we cannot assure you that we will be able to generate sufficient revenue to achieve or sustain profitability.

Current wording

We have experienced and expect to incur operating losses for the near-term future and we cannot assure you that we will be able to generate sufficient revenue to achieve or sustain profitability.

Previous wording

For the years ended December 31, 2024 and 2023, we had net losses of $31.4 million and $14.4 million, respectively. As of December 31, 2024, we had an accumulated deficit of $143.3 million. We expect to continue to incur losses for the near-term future as a result of building our commercial and clinical infrastructure, pursuing further FDA and other regulatory body clearance or certification of and our further commercial launch of our proprietary, next generation cataract treatment system, known as our ALLY System, and investing in research and development. In addition, as a public company, we will incur significant legal, accounting and other expenses. We cannot make assurances that we will ever generate sufficient revenue from our operations to achieve profitability, and even if we achieve profitability, we cannot be sure that we will remain profitable for any substantial period of time. Our failure to achieve or maintain profitability could negatively affect the value of our securities and our ability to raise capital and continue operations.

Current wording

For the years ended December 31, 2025 and 2024, we had net losses of $34.3 million and $31.4 million, respectively. As of December 31, 2025, we had an accumulated deficit of $177.6 million. We expect to continue to incur losses for the near-term future as a result of building our commercial and clinical infrastructure, pursuing further FDA and other regulatory body clearance or certification of and our further commercial launch of our proprietary, next generation cataract treatment system, known as our ALLY System, and investing in research and development. In addition, as a public company, we will incur significant legal, accounting and other expenses. We cannot make assurances that we will ever generate sufficient revenue from our operations to achieve profitability, and even if we achieve profitability, we cannot be sure that we will remain profitable for any substantial period of time. Our failure to achieve or maintain profitability could negatively affect the value of our securities and our ability to raise capital and continue operations.

Previous wording

We have historically derived our revenue from the sale or lease of our Systems and the associated procedure licenses and consumables used in each procedure involving our Systems and expect that this will account for a majority of our revenue in the foreseeable future. Accordingly, our ability to increase revenue is highly dependent on our ability to market and sell or lease our ALLY System and market the associated consumables. In 2022, we transitioned from manufacturing and selling our LLS to focus on our ALLY System. The ALLY System has also received certification in the European Union, or EU, and regulatory approval in India, Taiwan and certain other countries. In addition, we are pursuing additional marketing or certification applications through our distributors in South Korea and China. Our growth, market presence and ability to sell the ALLY System will depend on whether the ALLY System receives additional regulatory clearances or certifications and the timing of these clearances or certifications, among other factors. In addition, our future revenue and cash flows will depend on, among other factors, our installed base of Systems.

Current wording

We have historically derived our revenue from the sale or lease of our Systems and the associated procedure licenses and consumables used in each procedure involving our Systems and expect that this will account for a majority of our revenue in the foreseeable future. Accordingly, our ability to increase revenue is highly dependent on our ability to market and sell or lease our ALLY System and market the associated consumables. The ALLY System has also received certification in the European Union, or EU, and regulatory approval in India, Taiwan, South Korea, and certain other countries. Our growth, market presence and ability to sell the ALLY System will depend on whether the ALLY System receives additional regulatory clearances or certifications and the timing of these clearances or certifications, among other factors. In addition, our future revenue and cash flows will depend on, among other factors, our installed base of Systems.

Previous wording

The ALLY System, which has received clearance from the FDA, enables cataract surgeons to complete the robotic laser-assisted cataract surgery, or LACS, procedure seamlessly in a single, sterile environment. The ALLY System is available to cataract surgeons in all U.S. and EU jurisdictions and has also received regulatory clearance in India, Taiwan, and certain other countries. We are also pursuing additional marketing or certification applications through our distributors in South Korea and China. In addition, our ability to meet production goals can also be impacted by supply chain interruptions. If we experience supply chain constraints, we may be unable to deliver ALLY Systems as planned.

Current wording

The ALLY System, which has received clearance from the FDA, enables cataract surgeons to complete the robotic laser-assisted cataract surgery, or LACS, procedure seamlessly in a single, sterile environment. The ALLY System is available to cataract surgeons in all U.S. and EU jurisdictions and has also received regulatory clearance in India, Taiwan, South Korea, and certain other countries. In addition, our ability to meet production goals can also be impacted by supply chain interruptions. If we experience supply chain constraints, we may be unable to deliver ALLY Systems as planned.

Previous wording

Additionally, we rely exclusively on a network of independent distributors to generate sales and leases of our Systems as well as purchases of our consumables and licensed applications outside of the United States. For the year ended December 31, 2024, one customer accounted for approximately 14% of our revenue. This customer concentration exposes us to a material adverse effect if any of these significant distributors were to significantly reduce purchases for any reason or favor competitors or new market participants. If a dispute arises with a distributor or if a distributor is terminated by us or goes out of business, it may take time to locate an alternative distributor, to seek appropriate regulatory approvals and to train new personnel to market our Systems upon receiving regulatory clearance or certification in the applicable region, as well as our ability to sell those Systems in the region formerly serviced by such terminated distributor could be harmed. In addition, our international distributors may be unable to successfully market and sell our products and may not devote sufficient time and resources to support the marketing, sales, education and training efforts that we believe are necessary to enable the products to develop, achieve or sustain market acceptance. Any of these factors could reduce our revenues from affected markets, increase our costs in those markets or damage our reputation. In addition, if an independent distributor were to depart and be retained by one of our competitors, we may be unable to prevent that distributor from helping competitors solicit business from our existing customers, which could further adversely affect us. As a result of our reliance on third-party distributors, we may be subject to disruptions and increased costs due to factors beyond our control, including labor strikes, third-party error and other issues. If the services of any of these third-party distributors become unsatisfactory, we may experience delays in meeting our customers’ demands and we may be unable to find a suitable replacement on a timely basis or on commercially reasonable terms. Any failure to deliver products in a timely manner may damage our reputation and could cause us to lose potential customers.

Current wording

Additionally, we rely exclusively on a network of independent distributors to generate sales and leases of our Systems as well as purchases of our consumables and licensed applications outside of the United States. For the year ended December 31, 2025, one customer accounted for approximately 13% of our revenue. This customer concentration exposes us to a material adverse effect if any of these significant distributors were to significantly reduce purchases for any reason or favor competitors or new market participants. If a dispute arises with a distributor or if a distributor is terminated by us or goes out of business, it may take time to locate an alternative distributor, to seek appropriate regulatory approvals and to train new personnel to market our Systems upon receiving regulatory clearance or certification in the applicable region, as well as our ability to sell those Systems in the region formerly serviced by such terminated distributor could be harmed. In addition, our international distributors may be unable to successfully market and sell our products and may not devote sufficient time and resources to support the marketing, sales, education and training efforts that we believe are necessary to enable the products to develop, achieve or sustain market acceptance. Any of these factors could reduce our revenues from affected markets, increase our costs in those markets or damage our reputation. In addition, if an independent distributor were to depart and be retained by one of our competitors, we may be unable to prevent that distributor from helping competitors solicit business from our existing customers, which could further adversely affect us. As a result of our reliance on third-party distributors, we may be subject to disruptions and increased costs due to factors beyond our control, including labor strikes, third-party error and other issues. If the services of any of these third-party distributors become unsatisfactory, we may experience delays in meeting our customers’ demands and we may be unable to find a suitable replacement on a timely basis or on commercially reasonable terms. Any failure to deliver products in a timely manner may damage our reputation and could cause us to lose potential customers.

Previous wording

We expect our revenues and expenses to increase in connection with our ongoing activities, particularly as we continue to execute on our growth strategy, including expansion of our sales and customer support teams. The primary factors determining our cash needs are the funding of operations, which we expect to continue to expand as the business grows, and enhancing our product offerings through the research and development, further regulatory clearances and launch of the ALLY System. Our future liquidity needs, and ability to address those needs, will largely be determined by the success of our commercial efforts and those of our distributors; the timing, scope and magnitude of our commercial and development activities; and the timing of further regulatory clearance or certification of our ALLY System. We have also experienced negative effects on our capital requirements from supply chain interruptions, and we expect that supply chain disruptions will negatively affect our capital requirements and the availability of funds to finance those requirements in the future. In addition, market conditions impacting financial institutions could impact our ability to access some or all of our cash, cash equivalents and marketable securities, and we may be unable to obtain alternative funding when and as needed and on acceptable terms, if at all.

Current wording

We expect our revenues and expenses to increase in connection with our ongoing activities, particularly as we continue to execute on our business strategy, including investment in our sales and customer support teams. The primary factors determining our cash needs are the funding of operations, which we expect to continue to expand as the business grows, and enhancing our product offerings through research and development, further regulatory clearances and launches of the ALLY System. Our future liquidity needs, and ability to address those needs, will largely be determined by the success of our commercial efforts and those of our distributors; the timing, scope and magnitude of our commercial and development activities; and the timing of further regulatory clearance or certification of our ALLY System. We have also experienced negative effects on our capital requirements from supply chain interruptions, and we expect that supply chain disruptions will negatively affect our capital requirements and the availability of funds to finance those requirements in the future. Tariffs have resulted in increased costs on various components within the ALLY System and PIDs. As we have not passed on these additional costs to our customers, we have experienced a negative impact on our gross margin, which may continue to the extent we take this approach in future periods. In addition, market conditions impacting financial institutions could impact our ability to access some or all of our cash, cash equivalents and marketable securities, and we may be unable to obtain alternative funding when and as needed and on acceptable terms, if at all.

Previous wording

the costs of commercializing the ALLY System, including increased costs associated with supply chain disruptions and inflationary pressures or other new products or technologies;

Current wording

the costs of commercializing the ALLY System, including increased costs associated with supply chain disruptions, inflationary pressures, the impact of increased tariffs or other trade barriers, sales in regions outside the U.S. or other new products or technologies;

Previous wording

Furthermore, if we issue equity securities to raise additional capital, our existing stockholders may experience dilution, and the new equity securities may have rights, preferences and privileges senior to those of our existing stockholders. For example, in May 2023, we sold to NR-GRI Partners, LP, or NR-GRI, shares of Series A Redeemable Convertible Preferred Stock and warrants to purchase shares of our common stock, or Warrants, that collectively represented approximately 51.4% of our total outstanding shares of common stock based on our shares outstanding as of December 31, 2024, assuming full conversion of the Series A Redeemable Convertible Preferred Stock and full exercise of the Warrants for cash, pursuant to a Securities Purchase Agreement, or the SPA. So long as NR-GRI and its affiliates collectively beneficially own at least twenty percent of the securities issued pursuant to the SPA, including the Series A Redeemable Convertible Preferred Stock, we may not, without the consent of NR-GRI, liquidate, dissolve, or wind up our affairs or effect a merger or sale of the Company or other Fundamental Transaction (as defined in Note 12, Redeemable Convertible Preferred Stock, included elsewhere in this Annual Report); create, authorize, or issue shares of capital stock that are senior or pari passu to the Series A Redeemable Convertible Preferred Stock; complete an acquisition with consideration above $1.0 million; incur debt in excess of $1.0 million; change our line of business; or enter into certain related-party transactions. The Series A Redeemable Convertible Preferred Stock ranks senior to the common stock as to distributions and payments upon the liquidation, dissolution and winding up of the Company, and holders of Series A Redeemable Convertible Preferred Stock will participate with the holders of the common stock on an as-converted basis to the extent any dividends are declared on common stock. Holders of Series A Redeemable Convertible Preferred Stock are also entitled to redemption rights under certain circumstances. The redemption rights and liquidation preferences assigned to holders of the Series A Redeemable Convertible Preferred Stock, and any other repurchase or redemption rights or liquidation preferences we may assign to holders of preferred stock in the future, could affect the residual value of the common stock.

Current wording

Furthermore, if we issue equity securities to raise additional capital, our existing stockholders may experience dilution, and the new equity securities may have rights, preferences and privileges senior to those of our existing stockholders. For example, in May 2023, we sold to NR-GRI Partners, LP, or NR-GRI, shares of Series A Redeemable Convertible Preferred Stock and warrants to purchase shares of our common stock, or Warrants, that collectively represented approximately 50.6% of our total outstanding shares of common stock based on our shares outstanding as of December 31, 2025, assuming full conversion of the Series A Redeemable Convertible Preferred Stock and full exercise of the Warrants for cash, pursuant to a Securities Purchase Agreement, or the SPA. So long as NR-GRI and its affiliates collectively beneficially own at least twenty percent of the securities issued pursuant to the SPA, including the Series A Redeemable Convertible Preferred Stock, we may not, without the consent of NR-GRI, liquidate, dissolve, or wind up our affairs or effect a merger or sale of the Company or other Fundamental Transaction (as defined in Note 12, Redeemable Convertible Preferred Stock, included elsewhere in this Annual Report); create, authorize, or issue shares of capital stock that are senior or pari passu to the Series A Redeemable Convertible Preferred Stock; complete an acquisition with consideration above $1.0 million; incur debt in excess of $1.0 million; change our line of business; or enter into certain related-party transactions. The Series A Redeemable Convertible Preferred Stock ranks senior to the common stock as to distributions and payments upon the liquidation, dissolution and winding up of the Company, and holders of Series A Redeemable Convertible Preferred Stock will participate with the holders of the common stock on an as-converted basis to the extent any dividends are declared on common stock. Holders of Series A Redeemable Convertible Preferred Stock are also entitled to redemption rights under certain circumstances. The redemption rights and liquidation preferences assigned to holders of the Series A Redeemable Convertible Preferred Stock, and any other repurchase or redemption rights or liquidation preferences we may assign to holders of preferred stock in the future, could affect the residual value of the common stock.

Previous wording

We manufacture our Systems and provide the electronic license applications at our corporate headquarters in Orlando, Florida. This is also the location where we currently conduct substantially all of our research and development activities, customer and technical support, and management and administrative functions. If our facility suffers a crippling event, or a force majeure event such as an earthquake, hurricane, fire, flood or temporary shutdown due to a pandemic (including a resurgence of COVID-19 and its variants), epidemic or infectious disease, this could materially impact our ability to operate.

Current wording

We manufacture our Systems and provide the electronic license applications at our corporate headquarters in Orlando, Florida. This is also the location where we currently conduct substantially all of our research and development activities, customer and technical support, and management and administrative functions. If our facility suffers a crippling event, or a force majeure event such as an earthquake, hurricane, fire, flood or temporary shutdown due to a pandemic, epidemic or infectious disease, this could materially impact our ability to operate.

Previous wording

We purchase custom and off-the-shelf components from a number of suppliers and subject them to stringent quality specifications and processes. Some of the components necessary for the assembly of our Systems and associated consumables are currently provided by single-sourced suppliers (the only approved supply source for us among other sources). If one or more of our suppliers cease to provide us with sufficient quantities of materials in a timely manner or on terms acceptable to us, we would have to seek alternative sources of supply. Because of factors such as the proprietary nature of our products, our quality control standards and regulatory requirements, we may experience delays in engaging additional or replacement suppliers for certain components. There may also be disruptions outside our control in the availability and pricing of various component parts needed for our ALLY System.

Current wording

We purchase custom and off-the-shelf components from a number of suppliers and subject them to stringent quality specifications and processes. Some of the components necessary for the assembly of our Systems and associated consumables are currently provided by single-sourced suppliers (the only approved supply source for us among other sources). If one or more of our suppliers cease to provide us with sufficient quantities of materials in a timely manner or on terms acceptable to us, including due to costs associated with increased tariffs or other trade barriers, we would have to seek alternative sources of supply. Because of factors such as the proprietary nature of our products, our quality control standards and regulatory requirements, we may experience delays in engaging additional or replacement suppliers for certain components. There may also be disruptions outside our control in the availability and pricing of various component parts needed for our ALLY System.

Previous wording

We have seen significant disruptions in the supply of, timing of delivery of and fluctuations in pricing for various component parts needed for our products, including the integrated circuits used in our Systems, and expect these trends to continue. Our efforts to maintain an adequate supply of inventory may not be sufficient and we may be unable to source the necessary component parts on commercially acceptable terms to reflect in the price of our system. The long-term loss of these suppliers, or their long-term inability to provide us with an adequate supply of components or products, could potentially cause delay in the manufacture of our products, thereby impairing our ability to meet the demand of our customers and causing significant harm to our business. If it becomes necessary to identify and qualify a suitable second source to replace one of our key suppliers, that replacement supplier would not have access to our previous supplier’s proprietary processes and would therefore be required to develop its own, which could also result in delay. Any disruption of this nature or increased expense could harm our commercialization efforts and could have a material adverse effect on our business, financial condition and results of operations. If these supply chain shortages and disruptions continue or worsen, there is no guarantee that the Company will be able to meet customer demand for the ALLY System. In addition, pricing increases in component parts for our Systems resulting from inflationary pressures and other macroeconomic conditions may necessitate an increase in the overall cost to customers, which in turn may have an adverse impact on customer demand.

Current wording

We have seen significant disruptions in the supply of, timing of delivery of and fluctuations in pricing for various component parts needed for our products, including the integrated circuits used in our Systems, and expect these trends to continue. Our efforts to maintain an adequate supply of inventory may not be sufficient and we may be unable to source the necessary component parts on commercially acceptable terms to reflect in the price of our system. The long-term loss of these suppliers, or their long-term inability to provide us with an adequate supply of components or products on commercially reasonable terms, could potentially cause delay in the manufacture of our products, thereby impairing our ability to meet the demand of our customers and causing significant harm to our business. If it becomes necessary to identify and qualify a suitable second source to replace one of our key suppliers, that replacement supplier would not have access to our previous supplier’s proprietary processes and would therefore be required to develop its own, which could also result in delay. Any disruption of this nature or increased expense could harm our commercialization efforts and could have a material adverse effect on our business, financial condition and results of operations. If these supply chain shortages and disruptions continue or worsen, there is no guarantee that the Company will be able to meet customer demand for the ALLY System. In addition, pricing increases in component parts for our Systems resulting from inflationary pressures, the impact of increased tariffs and other trade barriers, and other macroeconomic conditions may necessitate an increase in the overall cost to customers, which in turn may have an adverse impact on customer demand.

Previous wording

We and some of our suppliers and contract facilities are required to comply with regulatory requirements of the FDA (and other regulatory authorities). In particular, the FDA’s Quality System Regulation, or QSR, which includes FDA’s current Good Manufacturing Practice requirements, or cGMPs, covers the procedures and documentation of the design, testing, production, control, quality assurance, inspection, complaint handling, recordkeeping, management review, labeling, packaging, sterilization, storage and shipping of our device products. The FDA audits compliance with these regulatory requirements through periodic announced and unannounced inspections of manufacturing and other facilities. If our manufacturing facilities or those of any of our suppliers or contract facilities are found to be in violation of applicable laws and regulations, the FDA could take enforcement action. Similar requirements must be complied with in foreign countries and foreign regulatory authorities could also take enforcement action. Additionally, in the event we must obtain a replacement supplier or contract facility, it may be difficult for us to identify and qualify a supplier or contract facility that complies with QSR and cGMPs, which would adversely impact our operations.

Current wording

We and some of our suppliers and contract facilities are required to comply with regulatory requirements of the FDA (and other regulatory authorities). In particular, the FDA’s Quality System Regulation, or QSR, which includes FDA’s current Good Manufacturing Practice requirements, or cGMPs, covers the procedures and documentation of the design, testing, production, control, quality assurance, inspection, complaint handling, recordkeeping, management review, labeling, packaging, sterilization, storage and shipping of our device products. The FDA audits compliance with these regulatory requirements through periodically announced and unannounced inspections of manufacturing and other facilities. If our manufacturing facilities or those of any of our suppliers or contract facilities are found to be in violation of applicable laws and regulations, the FDA could take enforcement action. Similar requirements must be complied with in foreign countries and foreign regulatory authorities could also take enforcement action. Additionally, in the event we must obtain a replacement supplier or contract facility, it may be difficult for us to identify and qualify a supplier or contract facility that complies with QSR and cGMPs, which would adversely impact our operations.

Previous wording

Our primary competitors in providing surgical solutions for cataract patients are Alcon Inc.; Bausch + Lomb Corporation; Johnson & Johnson; Carl Zeiss AG; Zeimer; and KERANOVA S.A. These competitors are focused on bringing new technologies to market and acquiring products and technologies that directly compete with our products or have potential product advantages that could render our products obsolete or noncompetitive.

Current wording

Our primary competitors in providing surgical solutions for cataract patients are Alcon Inc.; Bausch + Lomb Corporation; Johnson & Johnson; Carl Zeiss AG; Zeimer Ophthalmic Systems AG; and KERANOVA S.A. These competitors are focused on bringing new technologies to market and acquiring products and technologies that directly compete with our products or have potential product advantages that could render our products obsolete or noncompetitive. Bausch + Lomb announced, in November 2025, that they anticipate launching a second-generation femtosecond laser in the second half of 2026. The next-gen laser, SeeLyra™ is said to feature live optical coherence tomography guidance and soft docking. Although not all the features are known currently, this will be the first second-generation laser expected to compete with the ALLY System.

Previous wording

We have historically sold and leased a significant portion of our LLS outside of the United States through a network of independent distributors and intend to increase our international presence in Germany, China, India, and South Korea, as well as other international markets, including through sales and leases of our ALLY System once regulatory clearance in these regions has been obtained. Our international business operations are subject to a number of risks, including:

Current wording

We have historically sold our products outside of the United States through a network of independent distributors and intend to increase our international presence in Europe and Asia, as well as other international markets. Our international business operations are subject to a number of risks, including:

Previous wording

export restrictions, trade regulations, and foreign tax laws;

Current wording

tariffs, export restrictions, and other trade barriers, trade regulations, and foreign tax laws;

Previous wording

We generally do not maintain large volumes of finished goods and anticipating demand for our products may be challenging as cataract surgeon demand and adoption rates can be unpredictable. In addition, as use of our Systems is adopted by more cataract surgeons, we anticipate greater fluctuations in demand for our products, which makes demand forecasting more difficult. Our forecasts are based on management’s judgment and assumptions, each of which may introduce error into our estimates. If we underestimate customer demand or if insufficient manufacturing capacity is available, we would miss revenue opportunities and potentially lose market share and damage our customer relationships. In connection with the commercial launch of the ALLY System, we have modified our manufacturing operations from producing the LLS to the ALLY System. We could underestimate the worldwide demand for the ALLY System and be unable to fulfill customer requests. Conversely, if we overestimate customer demand, our excess or obsolete inventory may increase significantly, which would reduce our gross margin and adversely affect our financial results.

Current wording

We generally do not maintain large volumes of finished goods and anticipating demand for our products may be challenging as cataract surgeon demand and adoption rates can be unpredictable. In addition, as use of our Systems is adopted by more cataract surgeons, we anticipate greater fluctuations in demand for our products, which makes demand forecasting more difficult. Our forecasts are based on management’s judgment and assumptions, each of which may introduce error into our estimates. If we underestimate customer demand or if insufficient manufacturing capacity is available, we would miss revenue opportunities and potentially lose market share and damage our customer relationships. We could underestimate the worldwide demand for the ALLY System and be unable to fulfill customer requests. Conversely, if we overestimate customer demand or otherwise experience impacts to our inventory levels, our excess or obsolete inventory may increase. For example, we have experienced reduced activity by our distributors following the announcement of the Merger, which has resulted in a decrease in our production levels, and expect further negative impact in connection with the termination of the Merger Agreement. Our results could be adversely impacted if our distributors do not resume their sales activity to previous levels, and a significant increase in excess or obsolete inventory would reduce our gross margin and adversely affect our financial results.

Previous wording

Our quarterly and annual results of operations may vary significantly in the future, and period-to-period comparisons of our operating results may not be meaningful. Accordingly, the results of any one quarter or period should not be relied upon as an indication of future performance. Our quarterly and annual financial results may fluctuate as a result of a variety of factors, many of which are outside our control and, as a result, may not fully reflect the underlying performance of our business. For example, we have historically experienced seasonal variations in the selling or leasing of our products and procedures involving our products, with our fourth quarter typically being the strongest and the first or third quarter being the slowest. We believe these seasonal changes are consistent across our industry. Other factors that may cause fluctuations in our quarterly and annual results include:

Current wording

Our quarterly and annual results of operations may vary significantly in the future, and period-to-period comparisons of our operating results may not be meaningful. Accordingly, the results of any one quarter or period should not be relied upon as an indication of future performance. Our quarterly and annual financial results may fluctuate as a result of a variety of factors, many of which are outside our control and, as a result, may not fully reflect the underlying performance of our business. For example, we have historically experienced seasonal variations in the selling or leasing of our products and procedures involving our products, with our fourth quarter typically being the strongest and the first quarter being the slowest. We believe these seasonal changes are consistent across our industry. Other factors that may cause fluctuations in our quarterly and annual results include:

Previous wording

We have experienced significant period-to-period growth in our business, with the exception of 2020 due to the impact of the COVID-19 pandemic on our operations, and we must continue to grow in order to meet our business and financial objectives. However, continued growth may create numerous challenges, including:

Current wording

We have experienced significant period-to-period growth in our business and we must continue to grow in order to meet our business and financial objectives. However, continued growth may create numerous challenges, including:

Previous wording

We have benefited substantially from the leadership and performance of our senior management as well as certain key employees. Our success will depend on our ability to retain our current management and key employees, and to attract and retain qualified personnel in the future. Competition for senior management and key employees in our industry is intense, and we cannot guarantee that we will be able to retain our personnel or attract new, qualified personnel, or that we will be able to do so without incurring substantial additional costs. We have begun to experience increases in compensation levels in connection with our recruitment and retention efforts, which may increase further in the future. The loss of services of certain members of our senior management or key employees could prevent or delay the implementation and completion of our strategic objectives, or divert management’s attention to seeking qualified replacements. Each member of senior management as well as our key employees may terminate employment without notice and without cause or good reason. The members of our senior management are not subject to non-competition agreements. Accordingly, the adverse effect resulting from the loss of certain members of senior management could be compounded by our inability to prevent them from competing with us.

Current wording

We have benefited substantially from the leadership and performance of our senior management as well as certain key employees. Our success will depend on our ability to retain our current management and key employees, and to attract and retain qualified personnel in the future. Competition for senior management and key employees in our industry is intense, and we cannot guarantee that we will be able to retain our personnel or attract new, qualified personnel, or that we will be able to do so without incurring substantial additional costs. We have experienced increases in compensation levels in connection with our recruitment and retention efforts, which may increase further in the future. The loss of services of certain members of our senior management or key employees could prevent or delay the implementation and completion of our strategic objectives, or divert management’s attention to seeking qualified replacements. Each member of senior management as well as our key employees may terminate employment without notice and without cause or good reason. The members of our senior management are not subject to non-competition agreements. Accordingly, the adverse effect resulting from the loss of certain members of senior management could be compounded by our inability to prevent them from competing with us.

Previous wording

The efficient operation of our business depends on our information technology systems. We rely on our information technology systems to store and effectively manage sales and marketing data, accounting and financial functions, inventory management, product development tasks, clinical data, customer service and technical support functions, intellectual property, proprietary business information and certain personal information, including of our employees and contractors (collectively, “Confidential Information”). The future operation, success and growth of our business depends on streamlined processes made available through our uninhibited access to information technology systems, global communications, internet activity and other network processes. Like most companies, despite our current security measures, our information technology systems, and those of our third-party service providers, strategic partners and other contractors or consultants are vulnerable to information security breaches, acts of vandalism, computer viruses and malware (such as ransomware), misconfigurations, “bugs” or other vulnerabilities, theft or loss of Confidential Information. Confidential Information might be improperly accessed due to a variety of events beyond our control, including, but not limited to, natural disasters, terrorist attacks, telecommunications failures, computer viruses, hackers and other security issues. In addition, a variety of our software systems are cloud-based data management applications, hosted by third-party service providers whose security and information technology systems are subject to similar risks. We have technology security initiatives in place to mitigate our risk to these vulnerabilities, but there can be no assurance that our or our third-party service providers’ cybersecurity risk management program and processes, including policies, controls or procedures and other security measures will be adequately designed, complied with, implemented or effective to ensure that our or their operations are not disrupted or that data security breaches do not occur.

Current wording

The efficient operation of our business depends on our information technology systems. We rely on our information technology systems to store and effectively manage sales and marketing data, accounting and financial functions, inventory management, product development tasks, clinical data, customer service and technical support functions, intellectual property, proprietary business information and personal information (collectively, Confidential Information). The future operation, success and growth of our business depends on streamlined processes made available through our uninhibited access to information technology systems, global communications, internet activity and other network processes. Like most companies, despite our current security measures, our information technology systems, and those of our third-party service providers, strategic partners and other contractors or consultants are vulnerable to information security breaches, acts of vandalism, social engineering/phishing, computer viruses and malware (such as ransomware), misconfigurations, “bugs” or other vulnerabilities, theft or loss of Confidential Information. Confidential Information might be improperly accessed due to a variety of events beyond our control, including, but not limited to, natural disasters, terrorist attacks, telecommunications failures, computer viruses, hackers and other security issues. In addition, a variety of our software systems are cloud-based data management applications, hosted by third-party service providers whose security and information technology systems are subject to similar risks. We have technology security initiatives in place to mitigate our risk to these vulnerabilities, but there can be no assurance that our or our third-party service providers’ cybersecurity risk management program and processes, including policies, controls or procedures, and other security measures, will be adequately designed, complied with, implemented or effective to ensure that our or their operations are not disrupted or that data security breaches do not occur. Furthermore, given the nature of complex systems, software and services like ours, and the scanning tools that we deploy across our networks and products, we regularly identify and track security vulnerabilities. We are unable to comprehensively apply patches or confirm that measures are in place to mitigate all such vulnerabilities, or that patches will be applied before vulnerabilities are exploited by a threat actor.

Previous wording

Hackers and data thieves are increasingly sophisticated and operate large-scale and complex automated attacks which may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence. We and certain of our service providers are from time to time subject to cyberattacks and security incidents. Any significant information technology system failure, accident or security breach could cause interruptions in our operations, result in damage to our reputation, the loss or misappropriation of Confidential Information, result in key personnel being unable to perform duties or communicate throughout the organization, significant costs associated with the investigation, data restoration and remediation, and potential notification of the breach to third-parties, including counter-parties and data subjects, and have other adverse impacts on our business. Ransomware attacks, including those from organized criminal threat actors, nation-states, and nation-state supported actors, are becoming increasingly prevalent and severe, and if made against us could lead to significant interruptions in our operations, loss of Confidential Information and income, reputational loss, diversion of funds, and may also result in fines, litigation and unwanted media attention. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting payments. Despite our existing security procedures and controls, if our network were compromised, it could give rise to unwanted media attention, materially damage our customer relationships, decrease sales and leases of our products, increase overhead costs, harm our business, reputation, results of operations, cash flows and financial condition, result in regulatory investigations and enforcement actions, result in fines or litigation, and may increase the costs we incur to protect against such information security breaches, such as increased investment in technology, the costs of compliance with consumer protection laws and costs resulting from consumer fraud.

Current wording

Hackers and data thieves are increasingly sophisticated and operate large-scale and complex automated attacks which may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate, remediate or recover from incidents or breaches due to attackers increasingly using tools and techniques – including artificial intelligence – that are designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence. We and certain of our service providers and customers are from time to time subject to cyberattacks, social engineering/phishing, and other security incidents. While to date no incidents have had a material impact on our operations or financial results, we cannot guarantee that material incidents will not occur in the future. Any information technology system failure, accident or security breach affecting us or third-party systems or Confidential Information could result in interruptions in our operations, damage to our reputation, the loss or misappropriation of Confidential Information, result in key personnel being unable to perform duties or communicate throughout the organization, significant costs associated with the investigation, data restoration and remediation, legal claims or proceedings (such as class actions), and potential notification of the breach to third-parties, including counterparties, governmental authorities, and data subjects, and have other adverse impacts on our business. For example, laws in the EU and the UK may require businesses to provide notice to individuals whose personal information has been disclosed as a result of a data security breach. We may also be contractually required to notify customers or other counterparties of a security incident, including a data security breach. Ransomware attacks, including those from organized criminal threat actors, nation-states, and nation-state supported actors, are becoming increasingly prevalent and severe, and if made against us could lead to significant interruptions in our operations, loss of Confidential Information and income, reputational loss, diversion of funds, and may also result in fines, litigation and unwanted media attention. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting payments. Despite our existing security procedures and controls, compromises to our network could give rise to unwanted media attention, materially damage our customer relationships, decrease sales and leases of our products, increase overhead costs, harm our business, reputation, results of operations, cash flows and financial condition, result in regulatory investigations and enforcement actions, result in fines or litigation, and may increase the costs we incur to protect against such information security breaches, such as increased investment in technology, the costs of co…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We may be subject to state, federal and foreign laws relating to data privacy and security in the conduct of our business, including state breach notification laws, the Health Insurance Portability and Accountability Act, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, or, collectively, HIPAA, the EU’s General Data Protection Regulation 2016/679 and applicable national supplementing laws, or GDPR, and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, or, collectively, CCPA. In the United States, HIPAA imposes, among other things, certain standards relating to the privacy, security, transmission and breach reporting of individually identifiable health information on covered entities, including healthcare providers and research institutions, from which we obtain clinical trial data, as well as their business associates that perform certain services that involve creating, receiving, maintaining or transmitting such information for or on behalf of such covered entities, and their covered subcontractors. Depending on the facts and circumstances, we could be subject to regulatory investigation and enforcement action, including significant penalties, if we violate HIPAA. Certain states have also adopted comparable privacy and security laws and regulations, which govern the privacy, processing and protection of health-related and other personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. For example, the CCPA requires covered businesses that process personal information of California residents to, among other things: provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt-out of certain disclosures of their personal information; and enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Similar laws have been passed in other states, and continue to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the United States. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging. In the event that we are subject to or affected by HIPAA, the CCPA or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition.

Current wording

We may be subject to state, federal and foreign laws relating to data privacy and security in the conduct of our business, including state breach notification laws, the Health Insurance Portability and Accountability Act, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009 (collectively, HIPAA), the EU General Data Protection Regulation 2016/679 and applicable national supplementing laws, or EU GDPR, and the UK General Data Protection Regulation and Data Protection Act 2018, or UK GDPR, (collectively, GDPR), and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, CCPA). In the United States, HIPAA imposes, among other things, certain standards relating to the privacy, security, transmission and breach reporting of individually identifiable health information on covered entities, including healthcare providers and research institutions, from which we obtain clinical trial data, as well as their business associates that perform certain services that involve creating, receiving, maintaining or transmitting such information for or on behalf of such covered entities, and their covered subcontractors. Depending on the facts and circumstances, we could be subject to regulatory investigation and enforcement action, including significant penalties, if we violate HIPAA. Certain states have also adopted comparable privacy and security laws and regulations, which govern the privacy, processing and protection of health-related and other personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. For example, the CCPA requires covered businesses that process personal information of California residents to, among other things: provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt-out of certain disclosures of their personal information; and enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Similar laws have been passed in other states, and continue to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the United States. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging. In the event that we are subject to or affected by HIPAA, the CCPA or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition.

Previous wording

Furthermore, the Federal Trade Commission, or FTC, and many state Attorneys General continue to enforce federal and state consumer protection laws against companies for online collection, use, dissemination and security practices that appear to be unfair or deceptive. The FTC has authority to initiate enforcement actions against entities that make deceptive statements about privacy and data sharing in privacy policies, fail to limit third-party use of personal health information, fail to implement policies to protect personal health information or engage in other unfair practices that harm customers. For example, according to the FTC, failing to take appropriate steps to keep consumers’ personal information secure can constitute unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. Additionally, federal and state consumer protection laws are increasingly being applied by FTC and state Attorneys General to regulate the collection, use, storage, and disclosure of personal or personally identifiable information, through websites or otherwise, and to regulate the presentation of website content.

Current wording

Furthermore, the FTC and many state Attorneys General continue to enforce federal and state consumer protection laws against companies for online collection, use, dissemination and security practices that appear to be unfair or deceptive. The FTC has authority to initiate enforcement actions against entities that make deceptive statements about privacy and data sharing in privacy policies, fail to limit third-party use of personal information, fail to implement policies to protect health information or engage in other unfair practices that harm customers. For example, according to the FTC, failing to take appropriate steps to keep consumers’ personal information secure can constitute unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. Additionally, federal and state consumer protection laws are increasingly being applied by FTC and state Attorneys General to regulate the collection, use, storage, and disclosure of personal health-related and other information, through websites or otherwise, and to regulate the presentation of website content.

Previous wording

The GDPR imposes comprehensive compliance obligations regarding our processing of personal data of individuals within the European Economic Area, or EEA, or in the context of our activities within the EEA, including a principle of accountability and the obligation to demonstrate that appropriate legal bases are in place to justify data processing activities. Additionally, we are subject to laws and regulations regarding cross-border transfers of personal data, including laws relating to transfer of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the United States, and the efficacy and longevity of current transfer mechanisms between the EEA and the United States remains uncertain. Case law from the Court of Justice of the European Union, states that reliance on the standard contractual clauses, or SSCs a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism - alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case-by-case basis. The European

Current wording

The GDPR comprehensively regulates our use of personal data of individuals from the European Economic Area, or EEA and/or the UK, or in the context of our activities within the EEA and/or the UK, including a principle of accountability and the obligation to demonstrate that appropriate legal bases are in place to justify data processing activities. Additionally, we are subject to laws and regulations regarding cross-border transfers of personal data out of the EEA and the UK. In addition, some of the personal data we process in respect of clinical trial participants is special category or sensitive personal data under the GDPR, and subject to additional compliance obligations and local law derogations. We may be subject to diverging requirements under EU Member State laws and UK law, such as whether consent can be used as the legal basis for processing and the roles, responsibilities, and liabilities as between CROs and sponsors. As these laws develop, we may need to make operational changes to adapt to these diverging rules, which could increase our costs and adversely affect our business, including laws relating to transfer of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the United States, and the efficacy and longevity of current transfer mechanisms between the EEA and the United States remains uncertain. Case law from the Court of Justice of the European Union, states that reliance on the standard contractual clauses, or SCCs, a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism, alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case-by-case basis.

Previous wording

We currently rely on the SCCs to transfer personal data outside the EEA and the UK, including to the United States, with respect to both intragroup and third-party transfers. We expect the existing legal complexity and uncertainty regarding international personal data transfers to continue. In particular, we expect the DPF Adequacy Decision to be challenged and international transfers to the United States and to other jurisdictions more generally to continue to be subject to enhanced scrutiny by regulators. If we cannot rely on existing mechanisms for transferring personal data from the EEA, or other jurisdictions, we could be prevented from transferring personal data of individuals in those regions; we could suffer additional costs, complaints and/or regulatory investigations or fines; we may have to stop using certain tools and vendors and make other operational changes; we will have to implement revised SSCs for existing arrangements within required time frame; and/or it could otherwise adversely affect the manner in which we provide our services and thus materially affect our operations and financial results. Failure to comply with the GDPR could result in penalties for certain breaches of up to the greater of EUR 20 million or 4% of our global annual turnover. In addition to fines, a breach of the GDPR may result in regulatory investigations, reputational damage, orders to cease/change our data processing activities, enforcement notices, assessment notices (for a compulsory audit) and/ or civil claims (including class actions).

Current wording

We currently rely on the SCCs to transfer personal data outside the EEA and the UK, including to the United States, with respect to both intragroup and third-party transfers. We expect the existing legal complexity and uncertainty regarding international personal data transfers to continue. As the regulatory guidance and enforcement landscape in relation to data transfers continue to develop, we could suffer additional costs, complaints and/or regulatory investigations or fines; we may have to stop using certain tools and vendors and make other operational changes; we may have to implement alternative data transfer mechanisms under the GDPR and/ or take additional compliance and operational measures; and/or it could otherwise adversely affect the manner in which we operate our business and could adversely affect our business, operations, and financial condition.

Previous wording

We are also subject to the United Kingdom General Data Protection Regulation and Data Protection Act 2018, which collectively impose separate but similar obligations to those under the GDPR and comparable penalties, including fines of up to £17.5 million or 4% of a noncompliant undertaking’s global annual revenue for the preceding financial year, whichever is greater. On October 12, 2023, the UK Extension to the DPF came into effect (as approved by the UK Government), as a data transfer mechanism from the UK to U.S. entities self-certified under the DPF. As we continue to expand into other foreign countries and jurisdictions, we may be subject to additional laws and regulations that may affect how we conduct business. We expect that there will continue to be new laws, regulations and industry standards concerning privacy, data protection and information security proposed and enacted in various jurisdictions. For example, Washington State enacted a broadly applicable law to protect the privacy of personal health information known as the “My Health My Data Act,” which generally requires affirmative consent for the collection, use, or sharing of any “consumer health data.” Consumer health data is defined to include personal information that is linked or reasonably linkable to a consumer and that identifies a consumer’s past, present, or future physical or mental health status; consumer health data also includes information that is derived or extrapolated from non-health information, such as algorithms and machine learning. Other states, including Connecticut and Nevada, have also passed consumer health data laws, and given the increased focus on the use of health data by entities that are not subject to HIPAA, additional states are expected to pass consumer health privacy laws.

Current wording

As we continue to expand into other foreign countries and jurisdictions, we may be subject to additional laws and regulations that may affect how we conduct business. We expect that there will continue to be new laws, regulations and industry standards concerning privacy, data protection and information security proposed and enacted in various jurisdictions. For example, Washington State enacted the “My Health My Data Act,” which broadly defines “consumer health data”, creates a private right of action to allow individuals to sue for violations of the law, imposes stringent consent requirements and grants consumers certain rights with respect to their health data, including to request deletion of their information. Consumer health data is defined to include personal information that is linked or reasonably linkable to a consumer and that identifies a consumer’s past, present, or future physical or mental health status; consumer health data also includes information that is derived or extrapolated from non-health information, such as algorithms and machine learning. Other states, including Connecticut and Nevada, have also passed consumer health data laws, and given the increased focus on the use of health data by entities that are not subject to HIPAA, additional states are expected to pass consumer health privacy laws.

Previous wording

Furthermore, these laws impose substantial requirements that require the expenditure of significant funds and employee time to comply, and additional states and countries are enacting new data privacy and security laws, which will require future expansion of our compliance efforts. We also rely on third parties to host or otherwise process some of this data. In some instances, these third parties have experienced immaterial failures to protect data privacy. There can be no assurances that the privacy and security-related measures and safeguards we have put in place in relation to these third parties will be effective to protect us and/ or the relevant personal information from the risks associated with the third-party processing of such data. Any failure by a third party to prevent security breaches could have adverse consequences for us, result in applicable fines and penalties, damage our reputation, and/ or result in civil claims. We will need to expend additional resources and make significant investments to comply with data privacy and security laws. Our failure to comply with our posted privacy policies or with any federal, state, or international privacy and security laws, regulations, industry standards or other legal obligations relating to data privacy and information security or any failure to prevent security breaches of such data could result in significant liability under applicable laws, cause disruption to our business, harm our reputation, have a material adverse effect on our business, and may result in claims, complaints, liabilities, proceedings or actions against us by governmental entities or others, or may require us to change our operations. Any such claims, complaints, proceedings or actions could force us to incur significant expenses in defense of such proceedings or actions, distract our management, increase our costs of doing business, and result in the imposition of monetary penalties.

Current wording

Furthermore, these laws impose substantial requirements that require the expenditure of significant funds and employee time to comply, and additional states and countries are enacting new data privacy and security laws, which will require future expansion of our compliance efforts. We also rely on third parties in relation to the operation of our business, a number of which host or otherwise process personal data on our behalf. In some instances, these third parties have experienced immaterial failures to protect data privacy. There can be no assurances that the privacy and security-related measures and safeguards we have put in place in relation to these third parties will be effective to protect us and/or the relevant personal information from the risks associated with the third-party processing, storage, and transmission of such data. Any violation of data or security laws, or of our relevant measures and safeguards, by our third-party processors could have a material adverse effect on our business, result in applicable fines and penalties, damage our reputation, and/ or result in civil claims. We will need to expend additional resources and make significant investments to comply with data privacy and security laws. Our failure to comply with our posted privacy policies or with any federal, state, or international privacy and security laws, regulations, industry standards or other legal obligations relating to data privacy and information security or any failure to prevent security breaches of such data could result in significant liability under applicable laws, cause disruption to our business, harm our reputation, have a material adverse effect on our business, and may result in claims, complaints, liabilities, proceedings or actions against us by governmental entities or others, or may require us to change our operations. Any such claims, complaints, proceedings or actions could force us to incur significant expenses in defense of such proceedings or actions, distract our management, increase our costs of doing business, and result in the imposition of monetary penalties.

Previous wording

Reliable shipping is essential to our operations. We rely on providers of transport services for reliable and secure point-to-point transport of our products to our customers and for tracking of these shipments. Should a carrier encounter delivery performance issues such as loss, damage or destruction of any of our products, it would be costly to replace such products in a timely manner and such occurrences may damage our reputation and lead to decreased demand for our products and increased cost and expense to our business. In addition, any significant increase in shipping rates could adversely affect our operating margins and results of operations. Similarly, strikes, severe weather, natural disasters or other service interruptions affecting delivery services we use would adversely affect our ability to deliver our products (or any other products we commercialize in the future) on a timely basis.

Current wording

Reliable shipping is essential to our operations. We rely on providers of transport services for reliable and secure point-to-point transport of our products to our customers and for tracking of these shipments. Should a carrier encounter delivery performance issues such as loss, damage or destruction of any of our products, it could be costly to replace such products in a timely manner and such occurrences may damage our reputation and lead to decreased demand for our products and increased cost and expense to our business. In addition, any significant increase in shipping rates could adversely affect our operating margins and results of operations. Similarly, strikes, severe weather, natural disasters or other service interruptions affecting delivery services we use would adversely affect our ability to deliver our products (or any other products we commercialize in the future) on a timely basis.

Previous wording

The regulations to which we are subject are complex and have tended to become more stringent over time. Regulatory changes could result in restrictions on our ability to carry on or expand our operations, higher than anticipated costs or lower than anticipated sales. In addition, the FDA or other regulatory agencies may change their policies, adopt additional regulations, revise existing regulations, or take other actions that may prevent or delay approval or clearance of our products under development or impact our ability to modify our currently approved or cleared products on a timely basis. We may be found non-compliant as a result of future changes in. or interpretations of, regulations by the FDA or other regulatory agencies. For example, on February 23, 2022, the FDA issued a proposed rule to amend the Quality System Regulation, or QSR, which establishes current good manufacturing practice requirements for medical device manufacturers, to align more closely with the International Organization for Standardization, or ISO, standards. This proposal has not yet been finalized or adopted. Accordingly, it is unclear the extent to which this or any other proposals, if adopted, could impose additional or different regulatory requirements on us that could increase the costs of compliance or otherwise create competition that may negatively affect our business.

Current wording

The regulations to which we are subject are complex and have tended to become more stringent over time. Regulatory changes could result in restrictions on our ability to carry on or expand our operations, higher than anticipated costs or lower than anticipated sales. In addition, the FDA or other regulatory agencies may change their policies, adopt additional regulations, revise existing regulations, or take other actions that may prevent or delay approval or clearance of our products under development or impact our ability to modify our currently approved or cleared products on a timely basis. We may be found non-compliant as a result of future changes in. or interpretations of, regulations by the FDA or other regulatory agencies.

Previous wording

The FDA, foreign regulatory authorities and notified bodies enforce their regulatory requirements through, among other means, periodic unannounced inspections and audits. We do not know whether we will be found compliant in connection with any future FDA (or foreign regulatory authorities) inspections or notified bodies’ audits. Failure to comply with applicable regulations could jeopardize our ability to sell our products and result in enforcement actions such as: warning letters; fines; injunctions; civil penalties; termination of distribution; recalls or seizures of products;

Current wording

The FDA, foreign regulatory authorities and notified bodies enforce their regulatory requirements through, among other means, periodic unannounced inspections and audits. We do not know whether we will be found compliant in connection with any future FDA (or foreign regulatory authorities) inspections or notified bodies’ audits. Failure to comply with applicable regulations could jeopardize our ability to sell our products and result in enforcement actions such as: warning letters; fines; injunctions; civil penalties; termination of distribution; recalls or seizures of products; delays in the introduction of products into the market; total or partial suspension of production; refusal to grant future clearances, certifications or approvals; withdrawals or suspensions of current approvals or certifications, resulting in prohibitions on sales of our products; and in the most serious cases, criminal penalties.

Previous wording

The ALLY System, which has received clearance from the FDA and certification in the EU, enables cataract surgeons to complete the laser-assisted procedure seamlessly in a single, sterile environment. The ALLY System is available to all cataract surgeons in the U.S. and EU jurisdictions and has also received regulatory clearance in India, Taiwan, as well as certain other countries. In addition, we are pursuing additional marketing or certification applications through our distributors in South Korea and China.

Current wording

The ALLY System, which has received clearance from the FDA and certification in the EU, enables cataract surgeons to complete the laser-assisted procedure seamlessly in a single, sterile environment. The ALLY System is available to all cataract surgeons in the U.S. and EU jurisdictions and has also received regulatory clearance in India, Taiwan, South Korea, as well as certain other countries.

Previous wording

In the UK, on December 16, 2024, the UK government published an amendment to the UK Medical Devices Regulations to clarify and strengthen the post-market surveillance requirements for medical devices in Great Britain. This amendment will come into force on June 16, 2025. In addition, the MHRA launched a consultation from November 14, 2024 to January 5, 2025 on proposals to update the pre-market requirements for medical devices in Great Britain. The MHRA has stated that it will incorporate feedback to this consultation into new UK legislation on pre-market requirements for medical devices in Great Britain. The new legislation is expected to come into force in 2026. Under the UK Medical Devices Regulations, in order to be lawfully placed on the Great Britain market, class I (non-sterile, non-measuring or non-re-useable) medical devices need to be “UKCA” self-certified, and other medical devices need to be “UKCA” certified by a UK approved body. However, certain medical devices in compliance with: (1) the EU Medical Devices Directive can continue to be placed on the Great Britain market until the sooner of certificate expiration or June 30, 2028; or (2) the EU Medical Devices Regulation can continue to be placed on the Great Britain market until the sooner of certificate expiration or June 30, 2030. Medical devices also need to bear a physical UKCA mark in order to be lawfully placed on the Great Britain market. However, one of the key topics in the MHRA’s recent consultation was to obtain feedback on whether to remove the requirement for a medical device and its labelling (for example packaging and instructions for use) in Great Britain to bear a physical UKCA mark. Instead of requiring a medical device and its labelling to bear a UKCA mark, manufacturers would be required to assign a unique design identification, or UDI, to medical devices before they are placed on the Great Britain market. If this change is implemented, we may no longer be required to affix the physical UKCA mark to our devices, but we may need to assign and affix a UDI.

Current wording

On June 16, 2025, an amendment to the Medical Devices Regulations 2002, or UK Medical Devices Regulations, became applicable which is intended to clarify and strengthen the post-market surveillance requirements for medical devices in Great Britain. It also intends to bring the UK regulatory framework for medical devices, which is based on the EU Medical Devices Directive, into closer alignment with the EU Medical Devices Regulation. In addition, the MHRA launched a consultation from November 14, 2024 to January 5, 2025 on proposals to update the pre-market requirements for medical devices in Great Britain. On July 22, 2025, the MHRA published a response to the consultation confirming that it will incorporate the results of this consultation into new UK legislation on pre-market requirements for medical devices in Great Britain. A draft of the new legislation is expected this year. Under the UK Medical Devices Regulations, in order to be lawfully placed on the Great Britain market, class I (non-sterile, non-measuring or non-re-useable) medical devices need to be “UKCA” self-certified, and other medical devices need to be “UKCA” certified by a UK approved body. However, certain medical devices in compliance with: (1) the EU Medical Devices Directive can continue to be placed on the Great Britain market until the sooner of certificate expiration or June 30, 2028; or (2) the EU Medical Devices Regulation can continue to be placed on the Great Britain market until June 30, 2030. The MHRA has confirmed that it intends to launch a consultation regarding the indefinite recognition of such medical devices in Great Britain which is expected this year. Medical devices also need to bear a physical UKCA mark in order to be lawfully placed on the Great Britain market. However, the MHRA has confirmed in its response to the consultation on pre-market requirements for medical devices in Great Britain that it intends to remove the requirement for a medical device and its labeling (for example packaging and instructions for use) in Great Britain to bear a physical UKCA mark. Instead of requiring a medical device and its labeling to bear a UKCA mark, manufacturers would be required to assign a unique design identification, (“UDI”), to a medical device and register the UDI in a publicly accessible database before the medical device is placed on the Great Britain market. If this change is implemented, we may no longer be required to affix the physical UKCA mark to our medical devices, but we may need to assign and affix a UDI, and register the UDI in a publicly accessible database.

Previous wording

The methods used in, and the facilities used for, the manufacture of our products must comply with the FDA’s QSR, which is a complex regulatory scheme that covers the procedures and documentation of the design, testing, production, process controls, quality assurance, labeling, packaging, handling, storage, distribution, installation, servicing and shipping of medical devices. Furthermore, we are required to verify that our suppliers maintain facilities, procedures and operations that comply with our quality standards and applicable regulatory requirements. The FDA enforces the QSR through periodic announced or unannounced inspections of medical device manufacturing facilities, which may include the facilities of subcontractors. Our products are also subject to similar state regulations and various laws and regulations of foreign countries governing manufacturing.

Current wording

The methods used in, and the facilities used for, the manufacture of our products must comply with the FDA’s QMSR, which is a complex regulatory scheme that covers the procedures and documentation of the design, testing, production, process controls, quality assurance, labeling, packaging, handling, storage, distribution, installation, servicing and shipping of medical devices. Furthermore, we are required to verify that our suppliers maintain facilities, procedures and operations that comply with our quality standards and applicable regulatory requirements. The FDA enforces the QMSR through periodic announced or unannounced inspections of medical device manufacturing facilities, which may include the facilities of subcontractors. Our products are also subject to similar state regulations and various laws and regulations of foreign countries governing manufacturing.

Previous wording

Any of these occurrences may significantly harm our business, financial condition and prospects. In addition, any further disruptions related to public health crises, such as a resurgence of COVID-19, may increase the likelihood that we encounter such difficulties or delays in initiating, enrolling, conducting or completing our planned and ongoing clinical trials. Many of the factors that cause, or lead to, a delay in the commencement or completion of clinical trials may also ultimately lead to the denial of regulatory approval or certification of our product candidates.

Current wording

Any of these occurrences may significantly harm our business, financial condition and prospects. In addition, disruptions related to public health crises may increase the likelihood that we encounter such difficulties or delays in initiating, enrolling, conducting or completing our planned and ongoing clinical trials. Many of the factors that cause, or lead to, a delay in the commencement or completion of clinical trials may also ultimately lead to the denial of regulatory approval or certification of our product candidates.

Previous wording

From time to time, legislation is drafted and introduced in Congress that could significantly change the statutory provisions governing the regulation of medical devices. The FDA may change its clearance and approval policies, adopt additional regulations or revise existing regulations, or take other actions, which may prevent or delay approval or clearance of our future products under development or impact our ability to modify our currently cleared products on a timely basis. For example, in November 2018, FDA officials announced steps that the FDA intended to take to modernize the premarket notification pathway under Section 510(k) of the Federal Food, Drug, and Cosmetic Act. Among other things, the FDA announced that it planned to develop proposals to drive manufacturers utilizing the 510(k) pathway toward the use of newer predicates. These proposals included plans to potentially sunset certain older devices that were used as predicates under the 510(k) clearance pathway, and to potentially publish a list of devices that have been cleared on the basis of demonstrated substantial equivalence to predicate devices that are more than 10 years old. These proposals have not yet been finalized or adopted, and the FDA may work with Congress to implement such proposals through legislation. Accordingly, it is unclear the extent to which any proposals, if adopted, could impose additional regulatory requirements on us that could delay our ability to obtain new 510(k) clearances, increase the costs of compliance, or restrict our ability to maintain our current clearances, or otherwise create competition that may negatively affect our business.

Current wording

From time to time, legislation is drafted and introduced in Congress that could significantly change the statutory provisions governing the regulation of medical devices. The FDA may change its clearance and approval policies, adopt additional regulations or revise existing regulations, or take other actions, which may prevent or delay approval or clearance of our future products under development or impact our ability to modify our currently cleared products on a timely basis.

Previous wording

In addition, FDA regulations and guidance are often revised or reinterpreted by the FDA in ways that may significantly affect our business and our products. Any new statutes, regulations or revisions or reinterpretations of existing regulations may impose additional costs or lengthen review times of any future products or make it more difficult to obtain approval for, manufacture, market or distribute our products. We cannot determine what effect changes in regulations, statutes, legal interpretation or policies, when and if promulgated, enacted or adopted may have on our business in the future. Such changes could, among other things, require additional testing prior to obtaining clearance or approval; changes to manufacturing methods; recall, replacement or discontinuance of our products; or additional record keeping. The FDA’s and other regulatory authorities’ policies may change and additional government regulations may be enacted that could prevent, limit or delay regulatory clearance or approval of our product candidates. We cannot predict the likelihood, nature or extent of government regulation that may arise from future legislation or administrative action, either in the United States or abroad. If we are slow or unable to adapt to changes in existing requirements or the adoption of new requirements or policies, or if we are not able to maintain regulatory compliance, we may be subject to enforcement action and we may not achieve or sustain profitability.

Current wording

In addition, FDA regulations and guidance are often revised or reinterpreted by the FDA in ways that may significantly affect our business and our products. For example, on February 2, 2026, the FDA’s final rule implementing the FDA’s Quality Management System Regulation, or QMSR, became effective. The QMSR, which replaced the FDA’s former Quality System Regulation, or QSR, sets forth the FDA’s cGMP requirements for medical devices, and among other things, incorporates by reference certain elements of the quality management system requirements of ISO 13485:2016. Although the FDA has stated that the standards contained in ISO 13485:2016 are substantially similar to those set forth in the QSR, and although our quality management system is designed to comply with ISO:13485, the FDA has indicated that ISO:13485 certification alone will not ensure compliance under the QMSR, nor will ISO certification exempt manufacturers from FDA inspection. The QMSR also includes certain compliance obligations, such as those relating to unique device identification, product traceability, and maintenance of complaint and service records, that align more closely with the FDA’s existing medical device requirements than with ISO standards. Accordingly, it remains unclear the extent to which the QMSR may impose additional or different regulatory requirements on us that could increase the costs of compliance or otherwise negatively affect our business. Any new statutes, regulations or revisions or reinterpretations of existing regulations may impose additional costs or lengthen review times of any future products or make it more difficult to obtain approval for, manufacture, market or distribute our products. We cannot determine what effect changes in regulations, statutes, legal interpretation or policies, when and if promulgated, enacted or adopted may have on our business in the future. Such changes could, among other things, require additional testing prior to obtaining clearance or approval; changes to manufacturing methods; recall, replacement or discontinuance of our products; or additional record keeping. The FDA’s and other regulatory authorities’ policies may change and additional government regulations may be enacted that could prevent, limit or delay regulatory clearance or approval of our product candidates. We cannot predict the likelihood, nature or extent of government regulation that may arise from future legislation or administrative action, either in the United States or abroad. If we are slow or unable to adapt to changes in existing requirements or the adoption of new requirements or policies, or if we are not able to maintain regulatory compliance, we may be subject to enforcement action and we may not achieve or sustain profitability.

Previous wording

In addition, the regulatory landscape related to medical devices in the EU recently evolved. On May 26, 2021, the EU Medical Devices Regulation became applicable, and repealed and replaced the EU Medical Devices Directive and the Active Implantable Medical Devices Directive. Unlike directives, which must be implemented into the national laws of the EU member states, regulations are directly applicable (i.e., without the need for adoption of EU member state laws implementing them) in all EU member states and are intended to eliminate current differences in the regulation of medical devices among EU member states. The EU Medical Devices Regulation, among other things, is intended to establish a uniform, transparent, predictable and sustainable regulatory framework across the EU for medical devices and ensure a high level of safety and health while supporting innovation.

Current wording

In addition, the regulatory landscape related to medical devices in the EU recently evolved and continues to undergo legislative changes. On May 26, 2021, the EU Medical Devices Regulation became applicable, and repealed and replaced the EU Medical Devices Directive and the Active Implantable Medical Devices Directive. Unlike directives, which must be implemented into the national laws of the EU member states, regulations are directly applicable (i.e., without the need for adoption of EU member state laws implementing them) in all EU member states and are intended to eliminate current differences in the regulation of medical devices among EU member states. The EU Medical Devices Regulation, among other things, is intended to establish a uniform, transparent, predictable and sustainable regulatory framework across the EU for medical devices and ensure a high level of safety and health while supporting innovation. These requirements are in active implementation and may change as the European Commission adopts additional implementing acts and considers targeted revisions to related medical device rules. In addition, on December 16, 2025, the European Commission published a targeted revision proposal of the MDR to address structural issues, certification delays, and burdens on Small and medium-sized enterprises (“SMEs”). The proposal will enter the ordinary legislative procedure and is not expected to be adopted before 2027.

Previous wording

Disruptions at the FDA and other government agencies and notified bodies caused by funding shortages or global health concerns could hinder their ability to hire, retain or deploy key leadership and other personnel, or otherwise prevent new or modified products from being developed, cleared or approved or commercialized in a timely manner or at all, which could negatively impact our business.

Current wording

Disruptions at the FDA and other government agencies and notified bodies caused by funding shortages, staffing limitations, or global health concerns could hinder their ability to hire, retain or deploy key leadership and other personnel, or otherwise prevent new or modified products from being developed, cleared or approved or commercialized in a timely manner or at all, which could negatively impact our business.

Previous wording

The ability of the FDA, foreign regulatory agencies and notified bodies to review and clear, certify or approve new products can be affected by a variety of factors, including government budget and funding levels, statutory, regulatory, and policy changes, the FDA’s, foreign regulatory agencies’ and notified bodies’ ability to hire and retain key personnel and accept the payment of user fees, and other events that may otherwise affect the FDA’s, foreign regulatory agencies’ and notified bodies’ ability to perform routine functions. Average review times at the FDA, foreign regulatory agencies and notified bodies have fluctuated in recent years as a result. In addition, government funding of other government agencies that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable. Disruptions at the FDA, foreign regulatory agencies and notified bodies may also slow the time necessary for new medical devices or modifications to cleared, certified or approved medical devices to be reviewed and cleared, certified or approved by necessary government agencies (or other notified bodies), which would adversely affect our business. For example, over the last several years, the U.S. government has shut down several times and certain regulatory agencies, such as the FDA, have had to furlough critical FDA employees and stop critical activities.

Current wording

The ability of the FDA, foreign regulatory agencies and notified bodies to review and clear, certify or approve new products can be affected by a variety of factors, including government budget and funding levels, statutory, regulatory, and policy changes, the FDA’s, foreign regulatory agencies’ and notified bodies’ ability to hire and retain key personnel and accept the payment of user fees, and other events that may otherwise affect the FDA’s, foreign regulatory agencies’ and notified bodies’ ability to perform routine functions. Average review times at the FDA, foreign regulatory agencies and notified bodies have fluctuated in recent years as a result. In addition, government funding of other government agencies that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable. Disruptions at the FDA, foreign regulatory agencies and notified bodies may also slow the time necessary for new medical devices or modifications to cleared, certified or approved medical devices to be reviewed and cleared, certified or approved by necessary government agencies (or other notified bodies), which would adversely affect our business. For example, over the last several years, the U.S. government has shut down several times and certain regulatory agencies, such as the FDA, have had to furlough critical FDA employees and stop critical activities. In addition, the current U.S. Presidential administration has issued certain policies and Executive Orders directed towards reducing the employee headcount and costs associated with U.S. administrative agencies, including the FDA, and it remains unclear the degree to which these efforts may limit or otherwise adversely affect the FDA’s ability to conduct their activities.

Showing the first 40 of 86 pairs. Open the source sections for the rest.

Rearranged current paragraphs (3)

Current report — wording carried from elsewhere

Failure to comply with the GDPR could result in penalties for noncompliance. Penalties for certain breaches are up to the greater of EUR 20 million/GBP 17.5 million or 4% of our global annual turnover. Since we are subject to the supervision of relevant data protection authorities under multiple legal regimes (including under both the EU GDPR and the UK GDPR), we could be fined under those regimes independently in respect of the same breach. In addition to fines, a breach of the GDPR may result in regulatory investigations, reputational damage, orders to cease/change our data processing activities, enforcement notices, assessment notices (for a compulsory audit) and/ or civil claims (including class actions).

Current report — wording carried from elsewhere

We expect that additional U.S. federal healthcare reform measures will be adopted in the future, any of which could limit the amounts that the U.S. federal government will pay for healthcare products and services, which could result in reduced demand for our products or additional pricing pressures and could seriously harm our business.

Current report — wording carried from elsewhere

In addition to patent protection, we also rely on protection of trade secrets, know-how, and other proprietary information that is not patentable or that we elect not to patent. However, trade secrets can be difficult to protect and some courts are less willing to protect trade secrets to the extent we deem necessary to adequately enforce our rights. To maintain the confidentiality of our trade secrets and proprietary information, we rely heavily on confidentiality provisions contained in the contracts executed by our employees, consultants, collaborators, and others upon the commencement of their relationship with us. We cannot guarantee that we have entered into such agreements with each party that may have or have had access to our trade secrets or proprietary technology and processes. Also, despite the existence of these confidentiality restrictions or our efforts to monitor how our trade secrets are used or disclosed, we may not be able to prevent the unauthorized disclosure or use of our technical knowledge or other trade secrets by such third parties. These contracts may not provide meaningful protection for our trade secrets, know-how, or other proprietary information in the event the unauthorized use, misappropriation, or disclosure of such trade secrets, know-how, or other proprietary information is outside the scope of the provisions of the contracts. There can be no assurance that such third parties will not breach their agreements with us, that we will become aware of such breaches, that we will have adequate remedies for any breach, or that our trade secrets will not otherwise become known or independently developed by competitors.
Rearranged previous paragraphs (3)

Previous report — wording carried elsewhere

adoption of our LLS and ALLY Systems;

Previous report — wording carried elsewhere

delays in the introduction of products into the market; total or partial suspension of production; refusal to grant future clearances, certifications or approvals; withdrawals or suspensions of current approvals or certifications, resulting in prohibitions on sales of our products; and in the most serious cases, criminal penalties.

Previous report — wording carried elsewhere

Filing, prosecuting and defending patents or trademarks on our current and future products in all countries throughout the world would be prohibitively expensive. The requirements for patentability and trademarking may differ in certain countries, particularly developing countries. The laws of some foreign countries do not protect intellectual property rights including the protection of surgical and medical methods, to the same extent as laws in the United States. Consequently, we may not be able to prevent third parties from utilizing our inventions and trademarks in all countries outside the United States. Competitors may use our technologies or trademarks in jurisdictions where we have not obtained patent or trademark protection to develop or market their own products and further, may export otherwise infringing products to territories where we have patent and trademark protection, but enforcement on infringing activities is inadequate. These products or trademarks may compete with our products or trademarks, and our patents, trademarks or other intellectual property rights may not be effective or sufficient to prevent them from competing.