Skip to main content

Xencor Inc

For the period ended Dec 31, 2024. Filed Feb 27, 2025.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2024 · Filed Feb 27, 2025

XNCR$35.75+5.0%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2023-12-31; filed 2024-02-29.

0001326732-24-000006

Item 1A. Risk Factors

Current report: 10-K

Period ended 2024-12-31; filed 2025-02-27.

0001326732-25-000029

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 230 previous paragraphs and 266 current paragraphs.

200 unchanged; 25 reworded; 39 added; 5 removed; 0 previous and 2 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (39)

Current report

•We have identified material weaknesses in our internal control over financial reporting, and our management has concluded that our disclosure controls and procedures were not effective as of December 31, 2023 and 2024. If we fail to remediate these material weaknesses, or if we identify additional material weaknesses in the future or otherwise fail to maintain an effective system of internal control over financial reporting in the future, we may not be able to accurately or timely report our financial condition or results of operations, investors may lose confidence in the accuracy and completeness of our financial reports and the trading price of our common stock may decline.

Current report

Our business is susceptible to general conditions in the global economy and in the global financial markets. A global financial crisis or a global or regional political disruption could cause extreme volatility in the capital and credit markets. A severe or prolonged economic downturn, including a recession or depression resulting from the political disruption, could result in a variety of risks to our business, including weakened demand for our current or future product candidates, if approved, and our ability to raise additional capital when needed on acceptable terms, if at all. A weak or declining economy or political disruption could also strain our manufacturers or suppliers, possibly resulting in supply disruption, or cause our customers to delay making payments for our potential drugs, if approved. Russia’s invasion of Ukraine and sanctions against Russia are causing disruptions to global economic conditions. The escalation in October 2023 of the conflict between Israel and Hamas also could cause disruptions to global economic conditions and affect the stability of the Middle East region. Further, the global equity markets in general have recently experienced extreme price and volume fluctuations, including as a result of economic uncertainty and increased interest rates, inflation, the government closure of Silicon Valley Bank and Signature Bank, and liquidity concerns at other financial institutions that may be unrelated to our operating performance. Any of the foregoing could materially and adversely affect our business, financial condition, results of operations and prospects, and we cannot anticipate all of the ways in which the political or economic climate and financial market conditions could adversely impact our business.

Current report

Our operations are concentrated in one location, and we or the third parties upon whom we depend may be adversely affected by a wildfire and earthquake or other natural disasters and our business continuity and disaster recovery plans may not adequately protect us from a serious disaster.

Current report

Our current operations are predominantly located in California. Any unplanned event, such as a flood, wildfire, explosion, earthquake, extreme weather condition, epidemic or pandemic, power outage, telecommunications failure or other natural or man-made accidents or incidents that result in us being unable to fully utilize our facilities may have a material and adverse effect on our ability to operate our business, particularly on a daily basis, and have significant negative consequences on our financial and operating conditions. Any similar impacts of natural or man-made disasters on our third-party CMOs and CROs, could cause delays in our clinical trials and may have a material and adverse effect on our ability to operate our business and have significant negative consequences on our financial and operating conditions. If a natural disaster, power outage or other event occurred that prevented us from using our clinical sites, impacted clinical supply or the conduct of our clinical trials, that damaged critical infrastructure, such as the manufacturing facilities of our third-party CMOs, or that otherwise disrupted operations, it may be difficult or, in certain cases, impossible, for us to continue our business for a substantial period of time. The disaster recovery and business continuity plans we and our CMOs and CROs have in place may prove inadequate in the event of a serious disaster or similar event. In the event of an accident or incident at these facilities, we cannot assure you that the amounts of insurance we currently carry will be sufficient to satisfy any damages and losses. If our facilities, or the manufacturing facilities of our CMOs or CROs, are unable to operate because of an accident or incident or for any other reason, even for a short period of time, any or all of our development programs may be harmed. Any business interruption could adversely affect our business, financial condition, results of operations and prospects.

Current report

On February 27, 2023, we filed an automatic universal shelf registration statement on Form S-3 (File No. 333-270030) as a well-known seasoned issuer as defined in Rule 405 under the Securities Act of 1933, as amended, which became effective upon filing (the Shelf Registration Statement). The Shelf Registration Statement allows us to offer an indeterminate amount of securities, including equity securities, debt securities, warrants, rights, units and depositary shares, from time to time as described in the Shelf Registration Statement. The specific terms of any offering under the Shelf

Current report

Registration Statement will be established at the time of such offering. The Shelf Registration Statement will expire on February 27, 2026.

Current report

On February 27, 2023, we entered into a sales agreement (the Sales Agreement) with SVB Securities LLC (the Agent) pursuant to which we may offer and sell, from time to time, through the Agent (the ATM Offering), shares of our common stock having an aggregate offering price of up to $200 million (the ATM Shares). Any ATM Shares offered and sold in the ATM Offering are to be issued pursuant to the Shelf Registration Statement and the 424(b) prospectus supplement relating to the ATM Offering dated February 27, 2023 (the ATM Prospectus). From the date of the ATM Prospectus through December 31, 2024, no shares of our common stock were sold pursuant to the ATM Offering and, as of December 31, 2024, we may sell shares of our common stock for remaining gross proceeds of up to $200 million from time to time pursuant to the ATM Prospectus.

Current report

Our ability to effectively monitor and respond to the rapid and evolving developments and expectations relating to sustainability, including the environmental, social and governance matters, may impose unexpected costs or results in reputational or other harm that could have a material adverse effect on our business.

Current report

Currently, a variety of third-party providers of corporate responsibility and sustainability ratings measure the performance of companies on ESG topics, and the results of these assessments are widely publicized. Investors, particularly institutional investors, use these ratings to benchmark companies against their peers, and major institutional investors have publicly emphasized the importance of ESG measures to their investment decisions. Topics taken into account in such assessments include, among others, companies’ efforts and impacts on climate change, human rights, business ethics and compliance, diversity, equity and inclusion (DEI) and the role of companies’ board of directors in overseeing various sustainability-related issues. In light of investors’ increased focus on sustainability matters, if we are, for example, perceived as lagging in taking steps with respect to ESG initiatives, certain investors may seek to engage with us on improving our ESG disclosures or performance. They may also make voting decisions or take other actions to hold us and our Board of Directors accountable.

Current report

In addition, there are rapidly evolving developments and changing expectations relating to sustainability matters. As a result, the criteria by which our corporate responsibility and sustainability practices are assessed may change, which could cause us to undertake costly initiatives or actions to satisfy new demands. If we elect not to or are unable to adequately recognize and respond to such developments and changing governmental, societal, investor and/or consumer expectations relating to sustainability matters, we may miss corporate opportunities, become subject to additional scrutiny or incur unexpected costs. We may face risk of litigation or reputational damage in the event that our sustainability policies or practices do not meet the standards set by various constituencies.

Current report

We may also face reputational damage if we are unable to achieve an acceptable sustainability rating from third-party rating services. A low sustainability rating by a third-party rating service could also result in the exclusion of our Common Stock from consideration by certain investors who may elect to invest with our competitors instead. Ongoing focus on corporate responsibility and sustainability matters by investors and other stakeholders as described above may impose additional costs or expose us to new risks. Any failure or perceived failure by us in this regard could have a material adverse effect on our reputation and on our business, financial condition or results of operations, including the sustainability of our business over time, and could cause the market value of our Common Stock to decline.

Current report

Further, our emphasis on sustainability issues may not maximize short-term financial results and may yield financial results that conflict with the market’s expectations. We may in the future make business decisions consistent with our sustainability goals that we believe, based on considered analysis, will create value and improve our financial performance over the long-term. These decisions, however, may not be consistent with the short-term expectations of our stockholders and may not produce the long-term benefits that we expect, in which case our business, financial condition and results of operations could be harmed.

Current report

We have identified material weaknesses in our internal control over financial reporting, and our management has concluded that our disclosure controls and procedures were not effective as of December 31, 2023 and 2024. If we fail to remediate these material weaknesses, or if we identify additional material weaknesses in the future or otherwise fail to maintain an effective system of internal control over financial reporting in the future, we may not be able to accurately or timely report our financial condition or results of operations, investors may lose confidence in the accuracy and completeness of our financial reports and the trading price of our common stock may decline.

Current report

Pursuant to Section 404 of the Sarbanes-Oxley Act, our management is required to report on, and our independent registered public accounting firm is required to audit, the effectiveness of our internal control over financial reporting. The rules governing the standards that must be met for management to determine the adequacy of our internal control over financial reporting are complex and require significant documentation, testing, and possible remediation if a deficiency is identified. Annually, we perform activities that include reviewing, documenting, and testing our internal control over financial reporting. If we fail to maintain the adequacy of our internal control over financial reporting, we will not be able to conclude on an ongoing basis that we have effective internal control over financial reporting in accordance with Section 404 of the Sarbanes-Oxley Act. Any failure to achieve and maintain an effective system of internal control could result in materially misstated consolidated financial statements and a failure to meet our reporting obligations, which would likely cause investors to lose confidence in our reported financial information. This could result in significant expenses to remediate any internal control deficiency and lead to a decline in the price of our common stock.

Current report

We previously concluded that certain periods of our historical financial statements should no longer be relied upon and should be restated to reflect the correct accounting for the sale of future royalties pursuant to the Ultomiris Royalty Sale Agreement and to account for additional tax liabilities. In addition, on February 7, 2025, RSM informed us that disclosure should be made or action should be taken to prevent future reliance on RSM’s audit report filed with the Original Form 10-K for the year ended December 31, 2023 and completed interim review related to previously issued financial statements included in our Quarterly Reports on Form 10-Q for the quarters ended March 31, 2024, June 30, 2024 and September 30, 2024. In connection with this restatement, our management re-evaluated the effectiveness of our disclosure controls and procedures and internal control over financial reporting as of December 31, 2023. Our Chief Executive Officer and Chief Financial Officer concluded that our disclosure controls and procedures were not effective as of December 31, 2023, and our management concluded that our internal control over financial reporting was not effective as of December 31, 2023 due to material weaknesses (a material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis) related to the design of controls related to the review of the accounting treatment of the non-routine transactions and the evaluation of certain tax legislation. These material weaknesses led to the restatement of our audited financial statements for the year ended December 31, 2023 and the unaudited financial statements for the quarterly periods ended March 31, 2024, June 30, 2024 and September 30, 2024. On February 24, 2025, we filed an Annual Report on Form 10-K/A for the year ended December 31, 2023 and Quarterly Reports on Form 10-Q/As for the quarterly periods ended March 31, 2024, June 30, 2024 and September 30, 2024.

Current report

We are in the process of implementing remediation plans to address these material weaknesses. While we believe these efforts will improve our internal controls and address the root causes of the material weaknesses, the material weaknesses cannot be considered completely remediated until applicable controls have been designed, implemented, have operated for a sufficient period of time and management has concluded, through testing, that these controls are operating effectively. We cannot be certain that the steps we are taking will be sufficient to remediate the control deficiencies that led to the material weaknesses in our internal control over financial reporting or prevent future material weaknesses or control deficiencies from occurring. In addition, we cannot be certain that we have identified all material weaknesses in our internal control over financial reporting, or that in the future we will not have additional material weaknesses in our internal control over financial reporting. For more information related to the material weaknesses and their remediation, see Part II, Item 9A Controls and Procedures of this Form 10-K.

Current report

We generally also are subject to all of the same risks with respect to protection of intellectual property that we license, as we are for intellectual property that we own, which are described in this “Risk Factors” section. If we or our licensors fail to adequately protect this intellectual property, our business, results of operations and financial condition could be adversely affected.

Current report

We may also have limited control over the maintenance and prosecution of in-licensed patents and patent applications, activities or any other intellectual property that may be related to our in-licensed intellectual property. For example, such activities by these licensors may not have been or may not be conducted in compliance with applicable laws and regulations or will result in valid and enforceable patents and other intellectual property rights. Our licensors may not successfully prosecute the patent applications to which we are licensed in a manner consistent with the best interests of our business. We have limited control over the manner in which our licensors initiate an infringement proceeding against a third-party infringer of the intellectual property rights, or defend certain of the intellectual property that is licensed to us. It is possible that the licensors’ infringement proceeding or defense activities may be less vigorous than had we conducted them ourselves.

Current report

Treatment-related side effects could also affect subject recruitment or the ability of enrolled subjects to complete the trial or result in potential product liability claims. In addition, these side effects may not be appropriately recognized or managed by the treating medical staff. Furthermore, we may be required to expend time and incur costs to train medical personnel using our product candidates to understand the side effect profiles for our clinical trials and upon any commercialization of any of our product candidates. There can be no assurance that we will resolve any issues related to any product-related adverse events to the satisfaction of the FDA or comparable foreign regulatory authorities in a timely manner or at all. Serious adverse events observed in clinical trials could hinder or prevent market acceptance of the product candidate at issue. Any of these occurrences may harm our business, prospects, financial condition and results of operations significantly.

Current report

Delays in the commencement or completion of clinical trials could result in increased costs to us and delay our ability to establish strategic collaborations.

Current report

Delays in the commencement or completion of clinical trials could significantly impact our drug development costs. We do not know whether planned clinical trials will begin on time or be completed on schedule, if at all. The commencement of clinical trials can be delayed for a variety of reasons, including, but not limited to, delays related to:

Current report

•obtaining regulatory approval to commence one or more clinical trials;

Current report

•reaching agreement on acceptable terms with prospective CROs and clinical trial sites;

Current report

•manufacturing sufficient quantities of a drug candidate or other materials necessary to conduct clinical trials, as well as receiving the supplies and materials needed to conduct our clinical trials, including interruptions in global shipping that may affect the transport of clinical materials;

Current report

•obtaining institutional review Board of Directors approval to conduct one or more clinical trials at a prospective site;

Current report

•recruiting and enrolling patients to participate in one or more clinical trials, especially as patients may be reluctant or unable to visit clinical sites, or may delay seeking treatment for chronic conditions;

Current report

•the failure of our collaborators to adequately resource our drug candidates due to their focus on other programs or as a result of general market conditions;

Current report

•recruiting clinical site investigators, clinical site staff and potential closure or defunding of clinical facilities; and

Current report

•changes in regulations, which may require us to change the ways in which our clinical trials are conducted.

Current report

In addition, once a clinical trial has begun, it may be suspended or terminated by us, our collaborators, the institutional review boards or data safety monitoring boards charged with overseeing our clinical trials, the FDA, EMA or comparable foreign authorities due to a number of factors, including:

Current report

•failure to conduct the clinical trial in accordance with regulatory requirements or clinical protocols;

Current report

•inspection of the clinical trial operations or clinical trial site by the FDA, EMA or comparable foreign authorities resulting in the imposition of a clinical hold;

Current report

•unforeseen safety issues; or

Current report

If we experience delays in the completion or termination of any clinical trial of our product candidates, the commercial prospects of our product candidates will be harmed, and our ability to commence product sales and generate product revenues from any of our product candidates will be delayed. In addition, any delays in completing our clinical trials will increase our costs and slow down our product candidate development and approval process. Delays in completing our clinical trials could also allow our competitors to obtain marketing approval before we do or shorten the patent protection period during which we may have the exclusive right to commercialize our product candidates. Any of these occurrences may harm our business, financial condition and prospects significantly. In addition, many of the factors that cause, or lead to, a delay in the commencement or completion of clinical trials may also ultimately lead to the denial of regulatory approval of our product candidates.

Current report

The European Data Protection Board continues to release guidelines for industries and impose fines related to the GDPR, some of which have been very significant. To improve coordination among EU supervisory authorities, the European Commission has proposed a new regulation that would help to streamline enforcement of the GDPR in cross- border cases. Meanwhile, there continues to be persistent uncertainty relating to the transfer of personal data from Europe to the U.S., or other non-adequate countries, following the Schrems II decision. On July 10, 2023, the European Commission adopted its adequacy decision on the EU-U.S. Data Privacy Framework (DPF). The decision, which took effect on the day of its adoption, concludes that the United States ensures an adequate level of protection for personal data transferred from the EEA to companies certified to DPF. However, it remains too soon to tell how the future of DPF will evolve and what impact it will have on our international activities. At least one challenge to the DPF is pending before the Court of Justice of the European Union.

Current report

Further, Brexit has led and could also lead to legislative and regulatory changes that may increase our compliance costs. As of January 1, 2021 and the expiry of transitional arrangements agreed to between the UK and the EU, data processing in the UK is governed by a UK version of the GDPR (combining the GDPR and the Data Protection Act 2018), exposing us to two parallel regimes, each of which authorizes similar fines and other potentially divergent enforcement actions for certain violations. On June 28, 2021, the European Commission adopted an Adequacy Decision for the UK, allowing for the relatively free exchange of personal data between the EU and the UK (as the UK correspondingly allows transfers back to the EU). However, the European Commission may suspend the Adequacy Decision if it considers that the UK no longer provides for an adequate level of data protection. A bill to amend the existing UK framework has been reintroduced (in a different form) by the new UK Government and was announced as a bill which will be introduced into Parliament at the King’s Speech on July 17, 2024. At this time, there is no specific clarity on the provisions of the bill, or the extent to which it will amend the UK framework, beyond general descriptions on its intended purpose.

Current report

Similar actions are either in place or under way in the United States. There are a broad variety of data protection and breach notification laws that are applicable to our activities, and a wide range of enforcement agencies at both the state and federal levels that can review companies for privacy and data security concerns based on general consumer protection laws. Each of these laws is subject to varying interpretations and the legislative landscape is constantly evolving and the Federal Trade Commission (FTC) and state Attorneys General all are aggressive in reviewing privacy and data security protections for consumers. At the federal level, for example, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), which establishes privacy and security standards that limit the use and disclosure of individually identifiable health information, or protected health information, and require the implementation of administrative, physical and technological safeguards to protect the privacy of protected health information and ensure the confidentiality, integrity and availability of electronic protected health information. We may obtain health information from third parties (including research institutions from which we obtain clinical trial data) that are subject to privacy and security requirements under HIPAA. Depending on the facts and circumstances, we could be subject to civil, criminal, and administrative penalties if we knowingly obtain, use, or disclose individually identifiable health information maintained by a HIPAA-covered entity in a manner that is not authorized or permitted by HIPAA. Requirements for compliance under HIPAA are also subject to change, as the U.S. Department of Health and Human Services Office of Civil Rights issued a proposed rule that would amend certain security compliance requirements for covered entities and business associates. Even when HIPAA does not apply, according to the FTC, failing to take appropriate steps to keep consumers’ personal data secure constitutes unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. Individually identifiable health information is considered sensitive data that merits stronger safeguards. In 2024, the FTC finalized updates to the Health Breach Notification Rule that, among other things, clarified its applicability to health apps and other similar technologies and expanded the information the breach notification requirements for entities subject to the rule which may add additional complexity to compliance obligations going forward.

Current report

Additionally, new laws also are being considered at both the state and federal levels and several states have passed comprehensive privacy laws. For example, the California Consumer Privacy Act (CCPA), which went into effect on January 1, 2020, and as was later amended and expanded, is creating similar risks and obligations as those created by the GDPR, though the CCPA does exempt certain clinical trial data. The CCPA may increase our compliance costs and potential liability, and we cannot yet predict the impact of the CCPA on our business. Similar laws passed in various other states such as Virginia, Colorado, Connecticut, New Jersey and Texas, with effective dates through 2026. Some state laws also minimize what data can be collected from consumers and how businesses may use and disclose it. These state privacy laws also require businesses to make disclosures to consumers about data collection, use and sharing practices. In addition, some of these laws (including the CCPA), along with other standalone health privacy laws, subject health-related information to additional safeguards and disclosures and some specifically regulate consumer health data, such as the Washington My Health My Data Act, which became effective in 2023 and 2024, Nevada’s Consumer Health Data Privacy Law, which became effective in 2024, and Connecticut’s amendments to its privacy law to address health data, which became effective in 2023. Additionally, a broad range of legislative measures also have been introduced at the federal level. Accordingly, failure to comply with federal and state laws (both those currently in effect and future legislation) regarding privacy and security of personal data could expose us to fines and penalties under such laws. There also is the threat of consumer class actions related to these laws and the overall protection of personal data.

Current report

Given the breadth and depth of changes in data protection obligations, preparing for and complying with these requirements is rigorous and time intensive and requires significant resources and a review of our technologies, systems and practices, as well as those of any third-party collaborators, service providers, CROs, contractors or consultants that process or transfer personal data collected in the EU. The GDPR and other changes in laws or regulations associated with the enhanced protection of certain types of sensitive data, such as healthcare data or other personal data from our clinical trials, and access to certain data such as the European Health Data Space Regulation, could require us to change our business practices and put in place additional compliance mechanisms, may interrupt or delay our development, regulatory and commercialization activities and increase our cost of doing business, and could lead to government enforcement actions, private litigation and significant fines and penalties against us and could have a material adverse effect on our business, financial condition or results of operations. Similarly, failure to comply with federal and state laws regarding privacy and security of personal data could expose us to fines and penalties under such laws. Even if we are not determined to have violated these laws, government investigations into these issues typically require the expenditure of significant resources and generate negative publicity, which could harm our reputation and our business.
Removed paragraphs (5)

Previous report

Risks Specifically Related to Our Financial Position, Capital Requirements and Ownership of Our Common Stock

Previous report

The regulatory framework for the collection, use, safeguarding, sharing, transfer and other processing of information worldwide is rapidly evolving and is likely to remain uncertain for the foreseeable future. For example, the EU’s General Data Protection Regulation (GDPR), imposes strict obligations on the processing of personal data, including personal health data, and the free movement of such data. The GDPR applies to any company established in the EU as well as any company outside the EU that processes personal data in connection with the offering of goods or services to individuals in the EU or the monitoring of their behavior.

Previous report

As such, the GDPR will apply to us in connection with any clinical trials we conduct in the EU. The GDPR enhances data protection obligations for processors and controllers of personal data, including, for example, obligations relating to: processing health and other sensitive data; obtaining consent of individuals; providing notice to individuals regarding data processing activities; responding to data subject requests; taking certain measures when engaging third-party processors; notifying data subjects and regulators of data breaches; implementing safeguards to protect the security and confidentiality of personal data; and transferring personal data to countries outside the EU, including the U.S. The GDPR imposes substantial fines for breaches of data protection requirements, which can be up to four percent of global revenue or

Previous report

Transfers of personal information out of the European Union face a constantly shifting set of requirements, as courts in Europe have invalidated intergovernmental agreements and European regulators have required changes to standard contracting terms, which themselves do not fit all situations. As a result, significant uncertainty exists with respect to GDPR compliance and the attendant obligations going forward as the regulatory environment is rapidly developing. In addition, from January 1, 2021, companies have had to comply with both the GDPR and the GDPR as incorporated into United Kingdom national law, the latter regime having the ability to separately fine up to the greater of £17.5 million or 4% of global turnover. The EC has adopted an adequacy decision in favor of the United Kingdom, enabling data transfers from EU member states to the United Kingdom without additional safeguards. However, the UK adequacy decision will automatically expire in June 2025 unless the EC re-assesses and renews/extends that decision. Outside Europe, significant data privacy regulatory regimes exist in major markets including Brazil, India, China, and elsewhere. The ever-shifting landscape of global data privacy regulation requires significant investment and attention to avoid significant noncompliance liabilities. The GDPR and other changes in laws or regulations associated with the enhanced protection of certain types of sensitive data, such as healthcare data or other personal information from our clinical trials, could require us to change our business practices or lead to government enforcement actions, private litigation or significant penalties against us and could have a material adverse effect on our business, financial condition or results of operations.

Previous report

Additionally, the California Consumer Privacy Act (CCPA), which took effect in January 2020, created new individual privacy rights for consumers (as that word is broadly defined in the law) and places increased privacy and security obligations on entities handling personal data of consumers or households and requires covered companies to provide new disclosures to California consumers, and provides such consumers new ways to opt-out of certain sales of personal information. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. Further, the California Privacy Rights Act (CPRA) revised and expanded the CCPA, adding additional data protection obligations on covered businesses, including additional consumer rights processes, limitations on data uses, new audit requirements for higher risk data, and opt outs for certain uses of sensitive data. It also created a new California data protection agency authorized to issue substantive regulations and could result in increased privacy and information security enforcement. The CPRA is in full effect as of January 1, 2023, and similar laws passed in Virginia, Colorado, Connecticut, and Utah took effect in 2023. Additionally, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee and Texas have adopted privacy laws, which take effect from July 1, 2024 through 2026. Further, Washington’s My Health My Data Act, taking effect July 1, 2024, imposes similar requirements specific to consumer health data. As a result, additional compliance investment and potential business process changes may be required. In the event that we are subject to or affected by HIPAA, the CCPA, the CPRA or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition. Additional legislation proposed at the federal level and in other states, along with increased regulatory action, reflect a trend toward more stringent privacy legislation in the United States.
Reworded paragraphs (25)

Previous wording

Risks specifically related to our financial position, capital requirements and ownership of our common stock. These risks include:

Current wording

Risks related to our financial position, capital requirements and ownership of our common stock. These risks include:

Previous wording

From time to time, we may publicly disclose preliminary, interim or topline data from our clinical trials. These updates are based on a preliminary analysis of then-available data, and the results and related findings and conclusions are subject to change following a more comprehensive review of the data related to the particular study or trial. Additionally, interim data from clinical trials that we may complete are subject to the risk that one or more of the clinical outcomes may materially change as patient enrollment continues and more patient data become available. Therefore, positive interim results in any ongoing clinical trial may not be predictive of such results in the completed study or trial. We also make assumptions, estimations, calculations and conclusions as part of our analyses of data, and we may not have received or had the opportunity to fully and carefully evaluate all data. As a result, the preliminary results that we report may differ from future results of the same studies, or different conclusions or considerations may qualify such results, once additional data have been received and fully evaluated. Preliminary data also remain subject to audit and verification procedures that may result in the final data being materially different from the preliminary data we previously published. As a result, preliminary, interim or topline data should be viewed with caution until the final data are available. In addition, we may report interim analyses of only certain endpoints rather than all endpoints. Adverse changes between preliminary or interim data and final data could significantly harm our business and prospects. Further, additional disclosure of interim data by us or by our competitors in the future could result in volatility in the price of our common stock. See the description of risks under the heading “Risks Specifically Related to Our Financial Position, Capital Requirements and Ownership of Our Common Stock” for more disclosure related to the risk of volatility in our stock price.

Current wording

From time to time, we may publicly disclose preliminary, interim or topline data from our clinical trials. These updates are based on a preliminary analysis of then-available data, and the results and related findings and conclusions are subject to change following a more comprehensive review of the data related to the particular study or trial. Additionally, interim data from clinical trials that we may complete are subject to the risk that one or more of the clinical outcomes may materially change as patient enrollment continues and more patient data become available. Therefore, positive interim results in any ongoing clinical trial may not be predictive of such results in the completed study or trial. We also make assumptions, estimations, calculations and conclusions as part of our analyses of data, and we may not have received or had the opportunity to fully and carefully evaluate all data. As a result, the preliminary results that we report may differ from future results of the same studies, or different conclusions or considerations may qualify such results, once additional data have been received and fully evaluated. Preliminary data also remain subject to audit and verification procedures that may result in the final data being materially different from the preliminary data we previously published. As a result, preliminary, interim or topline data should be viewed with caution until the final data are available. In addition, we may report interim analyses of only certain endpoints rather than all endpoints. Adverse changes between preliminary or interim data and final data could significantly harm our business and prospects. Further, additional disclosure of interim data by us or by our competitors in the future could result in volatility in the price of our common stock. See the description of risks under the heading “Risks Related to Our Financial Position, Capital Requirements and Ownership of Our Common Stock” for more disclosure related to the risk of volatility in our stock price.

Previous wording

We are a clinical-stage biopharmaceutical company. To date, we have financed our operations primarily through equity financings and our research and development licensing agreements and have incurred significant operating losses since our inception in 1997. For the year ended December 31, 2023, we incurred a net loss of $126.1 million and as of December 31, 2023, we had an accumulated deficit of $464.4 million. We expect to incur additional net losses in future years as we execute our plan to continue our discovery, research and development activities, including the ongoing and planned clinical development of our antibody product candidates, and incur the additional costs of operating as a public company. We are unable to predict the extent of any future losses or when we will become profitable, if ever. Even if we do achieve profitability, we may not be able to sustain or increase profitability on an ongoing basis which would adversely affect our business, prospects, financial condition, and results of operations.

Current wording

December 31, 2024, we had an accumulated deficit of $704.0 million. We expect to incur additional net losses in future years as we execute our plan to continue our discovery, research and development activities, including the ongoing and planned clinical development of our antibody product candidates, and incur the additional costs of operating as a public company. We are unable to predict the extent of any future losses or when we will become profitable, if ever. Even if we do achieve profitability, we may not be able to sustain or increase profitability on an ongoing basis which would adversely affect our business, prospects, financial condition, and results of operations.

Previous wording

As of December 31, 2023, we had $697.4 million in cash, cash equivalents, and marketable debt securities. We expect our expenses to increase in connection with our ongoing development activities, including the continued development of our pipeline of bispecific antibody drug candidates and other research activities. Identifying potential product candidates and conducting preclinical testing and clinical trials are time-consuming, expensive, and uncertain processes that take years to complete, and we or our partners may never generate the necessary data or results required to obtain regulatory approval and achieve product sales. In addition, our product candidates, if approved, may not achieve commercial success.

Current wording

As of December 31, 2024, we had $706.7 million in cash, cash equivalents, and marketable debt securities. We expect our expenses to increase in connection with our ongoing development activities, including the continued development of our pipeline of bispecific antibody drug candidates and other research activities. Identifying potential product candidates and conducting preclinical testing and clinical trials are time-consuming, expensive, and uncertain processes that take years to complete, and we or our partners may never generate the necessary data or results required to obtain regulatory approval and achieve product sales. In addition, our product candidates, if approved, may not achieve commercial success.

Previous wording

Prior to our initial public offering (IPO), there was no public market for our common stock. The trading price of our common stock is likely to be volatile. Since our IPO, the trading price of our common stock has ranged from a low of approximately $5.75 to a high of approximately $58.345. Our stock price could be subject to wide fluctuations in response to a variety of factors, including the following:

Current wording

Prior to our initial public offering (IPO), there was no public market for our common stock. The trading price of our common stock is likely to be volatile. Since our IPO, the trading price of our common stock has ranged from a low of approximately $5.75 to a high of approximately $58.345. From January 2, 2024 to December 31, 2024, the trading price of our common stock ranged from a low of $15.31 to a high of $27.24. Our stock price could be subject to wide fluctuations in response to a variety of factors, including the following:

Previous wording

Based on information available to us as of December 31, 2023 our executive officers, management, directors, 5% stockholders and their affiliates beneficially owned, as a group, approximately 64.8% of our voting stock.

Current wording

Based on information available to us as of December 31, 2024 our executive officers, directors, 5% stockholders and their affiliates beneficially owned, as a group, approximately 56.8% of our voting stock. The interests of these stockholders may not be the same as or may even conflict with your interests.

Previous wording

Pursuant to our 2023 equity incentive plan (2023 plan), subject to board approval, our management is authorized to grant stock options and other equity-based awards to our employees, directors and consultants. As of December 31, 2023, we had options to purchase 11,142,986 shares outstanding under our equity compensation plans. In addition, we are also authorized to grant equity awards, including stock options, to our employees, directors, and consultants, covering up to 19,434,971 shares of our common stock, pursuant to our equity compensation plans. We plan to register the number of shares available for issuance or subject to outstanding awards under our equity compensation plans.

Current wording

Pursuant to our 2023 Equity Incentive Plan (2023 Plan), subject to the Board of Directors approval, our management is authorized to grant stock options and other equity-based awards to our employees, directors and consultants. As of December 31, 2024, we had options to purchase 12,370,081 shares outstanding under our equity compensation plans. In addition, we are also authorized to grant equity awards, including stock options, to our employees, directors, and consultants, covering up to 18,367,000 shares of our common stock, pursuant to our equity compensation plans. We plan to register the number of shares available for issuance or subject to outstanding awards under our equity compensation plans.

Previous wording

Our net operating loss (NOL) carryforwards generated in tax years ending on or prior to December 31, 2017, are only permitted to be carried forward for 20 years under applicable U.S. tax law. Under the Tax Cuts and Jobs Act of 2017 (TCJA), our federal NOLs generated in tax years ending after December 31, 2017, may be carried forward indefinitely, but the deductibility of such federal NOLs generated in tax years beginning after December 31, 2021, is limited. It is uncertain if and to what extent various states will conform to the TCJA. In addition, under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended, and corresponding provisions of state law, if a corporation undergoes an “ownership change,” which is generally defined as a greater than 50% change, by value, in its equity ownership over a three-year period, the corporation’s ability to use its pre-change NOL carryforwards and other pre-change U.S. tax attributes (such as research tax credits) to offset its post-change income or taxes may be limited. It is also possible that we have in the past undergone, and in the future may undergo, ownership changes that could result in additional limitations on our net operating loss and tax credit carryforwards.

Current wording

Our net operating loss (NOL) carryforwards generated in tax years ending on or prior to December 31, 2017, are only permitted to be carried forward for 20 years under applicable U.S. tax law. Under the Tax Cuts and Jobs Act of 2017 (TCJA), our federal NOLs generated in tax years ending after December 31, 2017, may be carried forward indefinitely, but the deductibility of such federal NOLs generated in tax years beginning after December 31, 2021, is limited. Under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended, and corresponding provisions of state law, if a corporation undergoes an “ownership change,” which is generally defined as a greater than 50% change, by value, in its equity ownership over a three-year period, the corporation’s ability to use its pre-change NOL carryforwards and other pre-change U.S. tax attributes (such as research tax credits) to offset its post-change income or taxes may be limited. It is also possible that we have in the past undergone, and in the future may undergo, ownership changes that could result in additional limitations on our net operating loss and tax credit carryforwards.

Previous wording

The TCJA changed the income tax treatment of research and development expenses which may result in additional federal and state tax liabilities. For tax years ended in December 31, 2022 and subsequent years, research and development costs must be capitalized and amortized over a period of years; this has resulted in additional federal tax expense and liabilities to us in 2022 and 2023. Currently, there is proposed legislation in Congress that would retroactively restore the deduction of research and development expenses, which if enacted, would reduce our 2023 federal tax expense and liabilities by a material amount.

Current wording

The TCJA changed the income tax treatment of research and development expenses which may result in additional federal and state tax liabilities. For tax years beginning after December 31, 2021, research and development costs must be capitalized and amortized over a period of years; this has resulted in additional federal tax expense and liabilities to us in 2022 and 2023.

Previous wording

Provisions in our amended and restated certificate of incorporation and bylaws, as well as provisions of Delaware law, could make it more difficult for a third party to acquire us or increase the cost of acquiring us, even if doing so would benefit our stockholders or remove our current management.

Current wording

Provisions in our amended and restated certificate of incorporation and second amended and restated bylaws, as well as provisions of Delaware law, could make it more difficult for a third party to acquire us or increase the cost of acquiring us, even if doing so would benefit our stockholders or remove our current management.

Previous wording

There is an increasing focus from certain investors, employees, regulators and other stakeholders concerning corporate responsibility, specifically related to environmental, social and governance (ESG) factors. Some investors may use these factors to guide investment strategies and decisions. Complying with ESG standards and expectations may impose additional costs and expose us to new risks for not meeting investor and third-party expectations in meeting published ESG guidelines.

Current wording

There is an increasing focus from certain investors, employees, regulators and other stakeholders concerning corporate responsibility and sustainability matters, including with regard to environmental, social and governance (ESG) factors. Some investors and investor groups may use these factors, either positively or negatively, to guide investment strategies and decisions and, in some cases, investors may choose not to invest in us if they believe our policies or practices relating to corporate responsibility and sustainability do not align with their expectations.

Previous wording

If we are unable to obtain, maintain and enforce intellectual property protection covering our products, others may be able to make, use or sell products substantially the same as ours, which could adversely affect our ability to compete in the market.

Current wording

If we are unable to obtain, maintain and enforce intellectual property protection covering our products and any future products we may develop, others may be able to make, use or sell products substantially the same as ours, which could adversely affect our ability to compete in the market.

Previous wording

Our commercial success depends, in part, on our ability to obtain, maintain and enforce patents, trade secrets, trademarks and other intellectual property rights and to operate without having third parties infringe, misappropriate or circumvent the rights that we own or license. The value of many of our partnered licensing arrangements is based on the underlying intellectual property and related patents. If we are unable to obtain, maintain and enforce intellectual property protection covering our products or underlying technologies, others may be able to make, use or sell products that are substantially the same as ours without incurring the sizeable development and licensing costs that we have incurred, which would adversely affect our ability to compete in the market. As of December 31, 2023, we held over 1,500 issued patents and pending patent applications. We file patent applications in the United States, Canada, Japan, Europe and other major markets either directly or via the Patent Cooperation Treaty. Our ability to stop third parties from making, using, selling, offering to sell or importing our product candidates is dependent upon the extent to which we have rights under valid and enforceable patents or trade secrets that cover these activities. However, the patent positions of biopharmaceutical companies, including ours, can be highly uncertain and involve complex legal and factual questions for which important legal principles remain unresolved. No consistent policy regarding the breadth of claims allowed in patents in these fields has emerged to date in the United States. The U.S. patent laws have recently changed, there have been changes regarding how patent laws are interpreted, and the U.S. Patent and Trademark Office (the PTO) has also implemented changes to the patent system. Some of these changes are currently being litigated, and we cannot accurately determine the outcome of any such proceedings or predict future changes in the interpretation of patent laws or changes to patent laws which might be enacted into law. Those changes may materially affect our patents, our ability to obtain patents or the patents and applications of our collaborators and licensors. The patent situation in the biopharmaceutical industry outside the United States is even more uncertain. Therefore, there is no assurance that our pending patent applications will result in the issuance of patents or that we will develop additional proprietary products which are patentable. Moreover, patents issued or to be issued to us may not provide us with any competitive advantage. Our patent position is subject to numerous additional risks, including the following:

Current wording

Our commercial success depends, in part, on our ability to obtain, maintain and enforce patents, trade secrets, trademarks and other intellectual property rights and to operate without having third parties infringe, misappropriate or circumvent the rights that we own or license. The value of many of our partnered licensing arrangements is based on the underlying intellectual property and related patents. If we are unable to obtain, maintain and enforce intellectual property protection covering our products or underlying technologies, others may be able to make, use or sell products that are substantially the same as ours without incurring the sizeable development and licensing costs that we have incurred, which would adversely affect our ability to compete in the market. We file patent applications in the United States, Canada, Japan, Europe and other major markets either directly or via the Patent Cooperation Treaty. Our ability to stop third parties from making, using, selling, offering to sell or importing our product candidates is dependent upon the extent to which we have rights under valid and enforceable patents or trade secrets that cover these activities. However, the patent positions of biopharmaceutical companies, including ours, can be highly uncertain and involve complex legal and factual questions for which important legal principles remain unresolved. No consistent policy regarding the breadth of claims allowed in patents in these fields has emerged to date in the United States. The U.S. patent laws have recently changed, there have been changes regarding how patent laws are interpreted, and the U.S. Patent and Trademark Office (the PTO) has also implemented changes to the patent system. Some of these changes are currently being litigated, and we cannot accurately determine the outcome of any such proceedings or predict future changes in the interpretation of patent laws or changes to patent laws which might be enacted into law. Those changes may materially affect our patents, our ability to obtain patents or the patents and applications of our collaborators and licensors. The patent situation in the biopharmaceutical industry outside the United States is even more uncertain. Therefore, there is no assurance that our pending patent applications will result in the issuance of patents or that we will develop additional proprietary products which are patentable. Moreover, patents issued or to be issued to us may not provide us with any competitive advantage. Our patent position is subject to numerous additional risks, including the following:

Previous wording

Our commercial success depends upon our ability, and the ability of our collaborators, to develop, manufacture, market and sell our product candidates and use our proprietary technologies without infringing the patents and other proprietary rights of third parties. There is considerable intellectual property litigation in the biotechnology and pharmaceutical industries. For example, we are aware of issued patents owned by Merus B.V. (Merus) that may relate to and claim components of our bispecific antibody product candidates and partnered bispecific product candidates, including plamotamab, vudalimab and XmAb819 will putatively expire in 2033. It is possible that the patent terms could be extended, for example, as a result of patent term restoration to compensate for regulatory delays. While we believe that our current development of these candidates currently falls into the “safe harbor” of non-infringement under 35 U.S.C. §271(e)(1), this protection terminates upon commercialization. In addition, there can be no assurance that our interpretation of this statutory exemption would be upheld. We believe there exists reasonable arguments of invalidity for the Merus patents; however, we cannot assure that if challenged in litigation for infringement of these patents that we would prevail. In order to successfully challenge the validity of any issued U.S. patent, we would need to overcome a presumption of validity. This burden is a high one requiring us to present clear and convincing evidence as to the invalidity of such claims. There is no assurance that a court would find these claims to be invalid or not infringed.

Current wording

Our commercial success depends upon our ability, and the ability of our collaborators, to develop, manufacture, market and sell our product candidates and use our proprietary technologies without infringing the patents and other proprietary rights of third parties. There is considerable intellectual property litigation in the biotechnology and pharmaceutical industries. For example, we are aware of issued patents owned by Merus B.V. (Merus) that may relate to and claim components of our bispecific antibody product candidates and partnered bispecific product candidates, including plamotamab, vudalimab and XmAb819 will putatively expire in 2033. In August 2024, Merus filed suit against us in the United States District Court of the District of Delaware alleging that we have infringed three of its patents. We maintain that our development of these candidates currently falls into the “safe harbor” of non-infringement under 35 U.S.C. §271(e)(1). This protection, however, would not be available upon commercialization nor can we give assurances on how the Court would rule on this issue. We also believe we have strong defenses to Merus’s claims, including defenses of invalidity and/or non-infringement for the Merus patents, but there is no guarantee that we will prevail. If we are found to infringe the Merus patents, we may be ordered by a court to cease commercializing the applicable product candidates, which could materially harm our business. In addition, we could be found liable for monetary damages, including treble damages and attorneys’ fees if we are found to have willfully infringed the Merus patents.

Previous wording

•We rely on third-party manufacturers to manufacture our product candidates and provide supplies for our preclinical candidates. If any of our third-party manufacturers encounter problems or loss of drug material during production or otherwise fail to comply with their contractual obligations, the development of our product candidates could be delayed or stopped.

Current wording

We rely on third-party manufacturers to manufacture our product candidates and provide supplies for our studies. If any of our third-party manufacturers, encounter problems or loss of drug material during production or otherwise fail to comply with their contractual obligations, the development of our product candidates could be delayed or stopped.

Previous wording

Certain of our third-party manufactures are located outside the United States, and our ability to continue to receive drug material for our development candidates would be at-risk in the event of instability or geopolitical problems between the United States and the country's where these manufacturers are located.

Current wording

Certain of our third-party manufacturers are located outside the United States, and our ability to continue to receive drug material for our development candidates would be at-risk in the event of instability or geopolitical problems between the United States and the country's where these manufacturers are located. During the last few years, there have also been significant changes to U.S. and other countries’ trade policies, export control laws, sanctions, legislation, treaties and tariffs. There is currently significant uncertainty about the future of trade relationships around the world, including potential changes to trade laws and regulations, trade policies, and tariffs. We cannot predict what additional actions may ultimately be taken by the United States or other governments with respect to tariffs or trade relations, what products may be subject to such actions (including subject to U.S. export control restrictions), or what actions may be taken by the other countries in retaliation. As a result of these dynamics, we cannot predict the impact to our relationships with third-party manufacturers or our business of any future changes to the United States’ or other countries’ trading relationships or the impact of new laws or regulations adopted by the United States or other countries.

Previous wording

•Our existing partnerships are important to our business. If we are unable to maintain any of these partnerships, or if these partnerships are not successful, our business could be adversely affected.

Current wording

Our existing partnerships are important to our business, and future partnerships may also be important to us. If we are unable to maintain any of these partnerships, or if these partnerships are not successful, our business could be adversely affected.

Previous wording

our Janssen Agreement provides for cost-sharing on development costs for the bispecific candidate, plamotamab. Such an arrangement may require us to incur substantial costs in excess of our available resources;

Current wording

such arrangements may include cost-sharing obligations that require us to incur substantial costs in excess of our available resources;

Previous wording

Clinical trials are expensive and take years to conduct and the outcome of such clinical trials is uncertain. Clinical trials may fail to prove our product candidates are safe and effective.

Current wording

Clinical trials are expensive and take years to conduct, the outcome of such clinical trials is uncertain and results of earlier studies and trials may not be predictive of future trial results. Clinical trials may fail to prove our product candidates are safe and effective.

Previous wording

Each product candidate must receive regulatory approval and therefore must undergo rigorous and extensive preclinical studies and clinical trials to demonstrate safety and efficacy in patients. Clinical trials at any stage in development may fail to demonstrate the safety, efficacy or pharmacologic properties needed to be a viable product candidate in patients. Early clinical trials may fail to demonstrate the safety and pharmacokinetic characteristics needed to invest in larger later stage clinical studies. Later clinical studies that are larger may not demonstrate the desired safety and efficacy profile needed to be of benefit to patients. Additionally, regulatory authorities may determine that the data provided is not sufficient to grant marketing approval for our product candidates and may request additional data including additional clinical trials or reject product approval.

Current wording

Each product candidate must receive regulatory approval and therefore must undergo rigorous and extensive preclinical studies and clinical trials to demonstrate safety and efficacy in patients. Clinical trials at any stage in development may fail to demonstrate the safety, efficacy or pharmacologic properties needed to be a viable product candidate in patients. Early clinical trials are expensive and can take many years to complete and may fail to demonstrate the safety and pharmacokinetic characteristics needed to invest in larger later stage clinical studies. Alternatively, success in preclinical testing and early clinical trials does not ensure that later clinical trials will generate the same results or otherwise provide adequate data to demonstrate the safety and effectiveness of a product candidate . Later clinical studies that are larger may not demonstrate the desired safety and efficacy profile needed to be of benefit to patients. Additionally, regulatory authorities may determine that the data provided is not sufficient to grant marketing approval for our product candidates and may request additional data including additional clinical trials or reject product approval.

Previous wording

Conducting early clinical trials is complex and the outcomes are uncertain. Preclinical studies are performed to help inform human clinical trials, but human and animal studies are not comparable. Expected or unexpected undesirable side effects caused by our product candidates could result in the delay, suspension or termination of clinical trials by us, our collaborators, the FDA or other regulatory authorities for a number of reasons. If we elect or are required to delay, suspend or terminate any clinical trial of any product candidates that we develop, the commercial prospects of such product candidates will be harmed and our ability to generate product revenues from any of these product candidates will be delayed or eliminated. Serious adverse events observed in clinical trials could hinder or prevent market acceptance of the product candidate at issue. Any of these occurrences may harm our business, prospects, financial condition and results of operations significantly.

Current wording

Conducting early clinical trials is complex and the outcomes are uncertain. Preclinical studies are performed to help inform human clinical trials, but human and animal studies are not comparable. Expected or unexpected undesirable side effects caused by our product candidates could result in the delay, suspension or termination of clinical trials by us, our collaborators, the FDA or other regulatory authorities for a number of reasons. If we elect or are required to delay, suspend or terminate any clinical trial of any product candidates that we develop, the commercial prospects of such product candidates will be harmed and our ability to generate product revenues from any of these product candidates will be delayed or eliminated. If our product candidates are associated with adverse events in clinical trials or have side effects or other characteristics that are serious or unexpected, we may need to abandon their development or limit development to more narrow uses in which the adverse events, side effects or other characteristics are less prevalent, less severe or more acceptable from a risk-benefit perspective. We may also be required to modify our trial plans based on findings in our ongoing clinical trials. The FDA may also require that we conduct additional studies regarding the safety and efficacy of our product candidates which we have not planned or anticipated. Such findings could further result in regulatory authorities failing to provide marketing authorization for our product candidates or limiting the scope of the approved indication, if approved. Many product candidates that initially showed promise in early stage testing have later been found to cause side effects that prevented further development of such product candidates.

Previous wording

The clinical development, manufacturing, labeling, packaging, storage, recordkeeping, advertising, promotion, export, import, marketing and distribution and other possible activities relating to our current lead antibody product candidates, as well as any other antibody product candidate that we may develop in the future, are subject to extensive regulation in the United States and outside the US as biologics.

Current wording

The clinical development, manufacturing, labeling, packaging, storage, recordkeeping, advertising, promotion, export, import, marketing and distribution and other possible activities relating to our current lead antibody product candidates, as well as any other antibody product candidate that we may develop in the future, are subject to extensive regulation in the United States and outside the U.S. as biologics.

Previous wording

We are increasingly dependent on information technology systems and infrastructure, including mobile technologies, to operate our business. In the ordinary course of our business, we use our data centers and our networks to store and access confidential and proprietary business information. The information includes, among other things, our intellectual property and proprietary information, the confidential information of our collaborators and licensees and the personally identifiable information of our employees, and the individually identified health information of patients participating in our clinical trials. It is important to our operations and business strategy that this electronic information remains secure and is perceived to be secure. The size and complexity of our information technology systems, and those of our partners and third-party vendors with whom we contract together with the volume of data we retain, make such systems potentially vulnerable to breakdown, malicious intrusion, security breaches and other cybersecurity attacks.

Current wording

We and our third-party vendors and suppliers are increasingly dependent on information technology systems and infrastructure, including mobile technologies, to operate our business. In the ordinary course of our business, we use our data centers and our networks to store and access confidential and proprietary business information. The information includes, among other things, our intellectual property and proprietary information, the confidential information of our collaborators and licensees and the personal data of our employees, and the individually identified health information of patients participating in our clinical trials. It is important to our operations and business strategy that this electronic information remains secure and is perceived to be secure. The size and complexity of our information technology systems, and those of our partners and third-party vendors with whom we contract together with the volume of data we retain, make such systems potentially vulnerable to breakdown, malicious intrusion, security breaches and other cybersecurity attacks.

Previous wording

Information security risks have significantly increased in recent years in part due to the proliferation of new technologies and the increased sophistication and activities of organized crime, hackers, terrorists and other external parties, including foreign state actors. We face various cybersecurity threats, including cybersecurity attacks to our information technology infrastructure and attempts by others to gain access to our proprietary or sensitive information. A security breach or privacy violation that leads to disclosure or modification of or prevents access to personally identifiable information or other protected information could harm our reputation, compel us to comply with federal and/or state breach notification laws and foreign law equivalents, subject us to mandatory corrective action, require us to verify the correctness of database contents and otherwise subject us to liability under laws and regulations that protect personal data, resulting in increased costs or loss of revenue. Similarly, the loss of clinical trial data from completed or ongoing or planned clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Moreover, a security breach that exposes our confidential intellectual property could compromise our patent portfolio. Additionally, theft of our intellectual property or proprietary business information could require substantial expenditures to remedy. If we are unable to prevent such security breaches or privacy violations or implement satisfactory remedial measures, our operations could be disrupted, and we may suffer loss of reputation, financial loss and other regulatory penalties because of lost or misappropriated information. In addition, these breaches and other inappropriate access can be difficult to detect, and any delay in identifying them may lead to increased harm of the type described above. Moreover, the prevalent use of mobile devices that access confidential information increases the risk of data security breaches, which could lead to the loss of confidential information, trade secrets or other intellectual property. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities.

Current wording

Information security risks have significantly increased in recent years in part due to the proliferation of new technologies and the increased sophistication and activities of organized crime, hackers, terrorists and other external parties, including foreign state actors. We face various cybersecurity threats, including cybersecurity attacks to our information technology infrastructure and attempts by others to gain access to our proprietary or sensitive information. Our technology systems and those of our current partners and third-party vendors are vulnerable to attack, damage and interruption from computer viruses and malware (e.g. ransomware), malicious code, cybersecurity threats (such as denial or degradation-of-service attacks, cyber-attacks or cyber-intrusions over the Internet, hacking, phishing and other social engineering attacks), unauthorized access or use, natural disasters, terrorism, war and telecommunication and electrical failures, employee theft or misuse, human error, fraud, and sophisticated nation-state and nation-state-supported actors. A security breach or privacy violation that leads to disclosure or modification of or prevents access to personal data or other protected information could harm our reputation, compel us to comply with federal and/or state breach notification laws and foreign law equivalents, subject us to mandatory corrective action, require us to verify the correctness of database contents and otherwise subject us to liability under laws and regulations that protect personal data, resulting in increased costs or loss of revenue. Similarly, the loss of clinical trial data from completed or ongoing or planned clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Moreover, a security breach that exposes our confidential intellectual property could compromise our patent portfolio. Additionally, theft of our intellectual property or proprietary business information could require substantial expenditures to remedy. If we are unable to prevent such security breaches or privacy violations or implement satisfactory remedial measures, our operations could be disrupted, and we may suffer loss of reputation, financial loss and other regulatory penalties because of lost or misappropriated information. In addition, these breaches and other inappropriate access can be difficult to detect, and any delay in identifying them may lead to increased harm of the type described above. Moreover, the prevalent use of mobile devices that access confidential information increases the risk of data security breaches, which could lead to the loss of confidential information, trade secrets or other intellectual property. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities.

Previous wording

20 million euros, whichever is greater, and it also confers a private right of action on data subjects for breaches of data protection requirements.

Current wording

The regulatory framework for the collection, use, safeguarding, sharing, transfer and other processing of information worldwide is rapidly evolving and is likely to remain uncertain for the foreseeable future. Globally, virtually every jurisdiction in which we operate has established its own data security and privacy frameworks with which we must comply. Depending on our activities and operations we may be subject to privacy laws in other jurisdictions. For example, the collection, use, disclosure, transfer, or other processing of personal data regarding individuals in the European Union (the EU) including personal health data, is subject to the EU General Data Protection Regulation (GDPR) which took effect across all member states of the European Economic Area (EEA) in May 2018. The GDPR is wide-ranging in scope and imposes numerous requirements on companies that process personal data, including requirements relating to processing health and other sensitive data, obtaining consent of the individuals to whom the personal data relates, providing information to individuals regarding data processing activities, implementing safeguards to protect the security and confidentiality of personal data, providing notification of data breaches, and taking certain measures when engaging third-party processors. In addition, the GDPR imposes strict rules on the transfer of personal data to countries outside the EU, which includes the United States and, as a result, increases the scrutiny that clinical trial sites located in the EEA should apply to transfers of personal data from such sites to countries that are considered to lack an adequate level of data protection, such as the United States. The GDPR also permits data protection authorities to require destruction of improperly gathered or used personal data and/or impose substantial fines for violations of the GDPR, which can be up to 4% of global revenues or €20 million, whichever is greater, and it also confers a private right of action on data subjects and consumer associations to lodge complaints with supervisory authorities, seek judicial remedies, and obtain compensation for damages resulting from violations of the GDPR. In addition, the GDPR provides that EU member states may make their own additional laws and regulations limiting the processing of personal data, including genetic, biometric or health data.
Rearranged current paragraphs (2)

Current report — wording carried from elsewhere

Risks Related to Our Financial Position, Capital Requirements and Ownership of Our Common Stock

Current report — wording carried from elsewhere

We are a clinical-stage biopharmaceutical company. To date, we have financed our operations primarily through equity financings and our research and development licensing agreements and have incurred significant operating losses since our inception in 1997. For the year ended December 31, 2024, we incurred a net loss of $232.6 million and as of