Skip to main content

iRhythm Technologies Inc

For the period ended Sep 30, 2024. Filed Oct 30, 2024.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Sep 30, 2024 · Filed Oct 30, 2024

IRTC$90.22-30.7%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2024-06-30; filed 2024-08-01.

0001388658-24-000143

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2024-09-30; filed 2024-10-30.

0001388658-24-000167

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 322 previous paragraphs and 326 current paragraphs.

305 unchanged; 17 reworded; 2 added; 0 removed; 0 previous and 2 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (2)

Current report

•compliance risks associated with the Japan Pharmaceutical and Medical Device Act (PMD Act);

Current report

Further, three decisions from the U.S. Supreme Court in July 2024 may lead to an increase in litigation against regulatory agencies that could create uncertainty and thus negatively impact our business. The first decision overturned established precedent that required courts to defer to regulatory agencies’ interpretations of ambiguous statutory language. The second decision overturned regulatory agencies’ ability to impose civil penalties in administrative proceedings. The third decision extended the statute of limitations within which entities may challenge agency actions. These cases may result in increased litigation by industry against regulatory agencies and impact how such agencies choose to pursue enforcement and compliance actions. However, the specific, lasting effects of these decisions, which may vary within different judicial districts and circuits, is unknown. We also cannot predict the extent to which FDA and SEC regulations, policies, and decisions may become subject to increasing legal challenges, delays, and changes.
Reworded paragraphs (17)

Previous wording

•Although our current Zio Systems are comprised of medical devices that have received FDA marketing authorization (510(k) clearance) as well as regulatory certifications in the European Union and the United Kingdom, we may regularly engage in product enhancements and in iterative changes to existing products, as well as seek to develop new technology or use of technology for new indications for use. These medical device developments may trigger further regulatory reviews and the results of those reviews are unpredictable.

Current wording

•Although our current Zio Systems are comprised of medical devices that have received FDA marketing authorization (510(k) clearance) as well as regulatory certifications in the European Union, the United Kingdom, and Japan, we may regularly engage in product enhancements and in iterative changes to existing products, as well as seek to develop new technology or use of technology for new indications for use. These medical device developments may trigger further regulatory reviews and the results of those reviews are unpredictable.

Previous wording

During the three and six months ended June 30, 2024, we received approximately 24% of our total revenue from the Medicare program (inclusive of Medicare Advantage). The Medicare program is administered by CMS, which imposes extensive and detailed requirements on diagnostic services providers, including IDTFs. These requirements include, but are not limited to, rules that govern how we structure our relationships with physicians, how we operate our IDTFs and market our Zio Services, when we may perform diagnostic tests, and how and when we submit reimbursement claims. Our failure to comply with the applicable Medicare rules and requirements could result in discontinuation of our reimbursement under the Medicare program, a requirement to return funds already paid to us, civil monetary penalties, criminal penalties, and/or exclusion from the Medicare program, which would have a material adverse impact on our reputation, business, and results of operations.

Current wording

During the three and nine months ended September 30, 2024, we received approximately 24% of our total revenue from the Medicare program (inclusive of Medicare Advantage). The Medicare program is administered by CMS, which imposes extensive and detailed requirements on diagnostic services providers, including IDTFs. These requirements include, but are not limited to, rules that govern how we structure our relationships with physicians, how we operate our IDTFs and market our Zio Services, when we may perform diagnostic tests, and how and when we submit reimbursement claims. Our failure to comply with the applicable Medicare rules and requirements could result in discontinuation of our reimbursement under the Medicare program, a requirement to return funds already paid to us, civil monetary penalties, criminal penalties, and/or exclusion from the Medicare program, which would have a material adverse impact on our reputation, business, and results of operations.

Previous wording

CMS has acknowledged that the IDTF regulations were designed for “traditional” IDTFs that administer tests to patients in-person, at a single point in time, and from a single location, and only recently has CMS initiated changes to the regulations to address IDTFs like iRhythm that furnish “indirect tests” that do not require in-person interaction and involve technicians performing computer analyses offsite or at another location. The changes, however, do not address all gaps identified by CMS relating to IDTF operations and the Medicare billing requirements. For example, CMS has not addressed billing for remote diagnostic tests that are performed from one or more IDTF or other remote locations. Our failure to comply with the applicable Medicare regulations, or regulators’ disagreement with our interpretation of the regulations as applied to indirect tests, such as the Zio Services, could result in the discontinuation of our reimbursement under the Medicare program, a requirement to return funds already paid to us, civil monetary penalties, criminal penalties, and/or exclusion from the Medicare program.

Current wording

CMS has acknowledged that the IDTF regulations were designed for “traditional” IDTFs that administer tests to patients in-person, at a single point in time, and from a single location, and only recently has CMS initiated changes to the regulations to address IDTFs like ours that furnish “indirect tests” that do not require in-person interaction and involve technicians performing computer analyses offsite or at another location. The changes, however, do not address all gaps identified by CMS relating to IDTF operations and the Medicare billing requirements. For example, CMS has not addressed billing for remote diagnostic tests that are performed from one or more IDTF or other remote locations. Our failure to comply with the applicable Medicare regulations, or regulators’ disagreement with our interpretation of the regulations as applied to indirect tests, such as the Zio Services, could result in the discontinuation of our reimbursement under the Medicare program, a requirement to return funds already paid to us, civil monetary penalties, criminal penalties, and/or exclusion from the Medicare program.

Previous wording

Additionally, for our out-of-network or cash pay patients, we may be subject to state and federal surprise billing laws that impose limits on amounts that can be charged to such patients and/or the amount we can receive for out-of-network services from commercial payors. One such law, the federal No Surprises Act, requires covered providers to provide “good faith estimates” to uninsured and self-pay patients of their out-of-pocket responsibility and establishes a detailed and potentially costly independent dispute resolution process governing fee disputes between our IDTFs and payors. These laws and regulations may change and we anticipate these evolving, highly technical requirements may apply to our business in the future and could necessitate the dedication of additional resources to ensure compliance.

Current wording

Additionally, for our out-of-network or cash pay patients, we may be subject to state and federal surprise billing laws that impose limits on amounts that can be charged to such patients and/or the amount we can receive for out-of-network services from commercial payors as well as penalties for noncompliance. One such law, the federal No Surprises Act, requires covered providers to provide “good faith estimates” to uninsured and self-pay patients of their out-of-pocket responsibility and establishes a detailed and potentially costly independent dispute resolution process governing fee disputes between our IDTFs and payors. These laws and regulations may change and we anticipate these evolving, highly technical requirements may apply to our business in the future and could necessitate the dedication of additional resources to ensure compliance.

Previous wording

Additionally, on May 25, 2023, we received a warning letter from FDA, which alleged non-conformities to regulations for medical devices, including medical device reporting requirements, relating to our Zio AT System and medical device quality system requirements. We submitted a timely response to FDA on June 16, 2023 and are continuing to work with the agency to address the issues outlined in the warning letter. Although our belief based on the dialogue with FDA to date following our warning letter response is that we will be able to work through FDA’s matters of concern relating to our Zio AT System, we cannot give any assurances that FDA will be satisfied with our response, the actions taken to resolve the concerns raised in the warning letter, or the expected date for the resolution of such matters. Until the issues identified in the warning letter are resolved to FDA’s satisfaction, additional legal or regulatory action may be taken with or without further notice. The warning letter is publicly available on FDA’s website and has been the subject of a high degree of media and industry attention, which subjects us to additional scrutiny. We have been providing FDA with updates on our progress on commitments made in the warning letter, and we are in continued dialogue with FDA on key topics and our planned path forward. We completed the submission of two 510(k)s earlier this year. For one 510(k), we recently submitted our response to FDA’s request for Additional Information and we intend to complete the response for the other request for Additional Information in August 2024.

Current wording

Additionally, on May 25, 2023, we received a warning letter from FDA, which alleged non-conformities to regulations for medical devices, including medical device reporting requirements, relating to our Zio AT System and medical device quality system requirements. We submitted a timely response to FDA on June 16, 2023 and are continuing to work with the agency to address the issues outlined in the warning letter. Although our belief based on the dialogue with FDA to date following our warning letter response is that we will be able to work through FDA’s matters of concern relating to our Zio AT System, we cannot give any assurances that FDA will be satisfied with our response, the actions taken to resolve the concerns raised in the warning letter, or the expected date for the resolution of such matters. Until the issues identified in the warning letter are resolved to FDA’s satisfaction, additional legal or regulatory action may be taken with or without further notice. The warning letter is publicly available on FDA’s website and has been the subject of a high degree of media and industry attention, which subjects us to additional scrutiny. We have been providing FDA with updates on our progress on commitments made in the warning letter, and we are in continued dialogue with FDA on key topics and our planned path forward. On October 21, 2024, we were granted FDA clearance for one 510(k) encompassing design updates that had previously been documented through letters to file and on October 30, 2024 we were granted FDA clearance on a second 510(k) submission related to design modifications and labeling updates for the Zio AT device.

Previous wording

On July 15, 2024, FDA initiated inspections of our Cypress and San Francisco FDA-registered facilities. We received Form 483 observations at the close of the inspections of our Cypress and San Francisco facilities. We are in the process of evaluating the observations and we intend to submit a timely response to FDA. These inspections broadly evaluated medical device quality system requirements and other medical device regulatory topics, and the observations generally centered on complaint handling and medical device reporting, risk analysis regarding the involvement of the technicians to prepare the Zio ECG reports, the corrective and preventive action process, process controls and statistical techniques. As we are already subject to an FDA warning letter associated with our Cypress facility, the inspection results may contribute to greater risk of potential escalation, which could involve issuance of additional warning letters, or there is a possibility that FDA could initiate consent decree discussions.

Current wording

On July 15, 2024, FDA initiated inspections of our Cypress and San Francisco FDA-registered facilities. We received Form 483 observations at the close of the inspections of our Cypress and San Francisco facilities. These inspections broadly evaluated medical device quality system requirements and other medical device regulatory topics, and the observations generally centered on complaint handling and medical device reporting, risk analysis regarding the involvement of the technicians to prepare the Zio ECG reports, the corrective and preventive action process, process controls and statistical techniques. We timely submitted our initial responses regarding the July 2024 483 Observations to FDA on August 21, 2024, and provided supplemental information on September 6, 2024. In these responses we committed to a number of follow-up actions, and intend to work with FDA to resolve the issues identified. Executing on our follow-up actions, commitments to FDA, and remediation activities will require significant time, attention, and resources that might otherwise be applied to future product development activities and initiatives, and could result in delays or changes to these plans. Our commitments will also require a high degree of attention to design strategy and compliance going forward.

Previous wording

We have and are continuing to incorporate AI, including machine learning and independent algorithms, in certain of our products, services and internal operations, including in our MCT services with our Zio AT System, which is intended to enhance their operation and effectiveness internally and for physicians and patients. Our research and development of such technology remains ongoing. AI innovation presents risks and challenges that could impact our business. AI algorithms may be flawed or datasets may be insufficient or contain biased information resulting in perceived or actual negative outcomes. Additionally, many countries and regions, including the EU, have proposed new and evolving regulations related to the use of AI and machine learning technologies. The regulations may impose onerous obligations and may require us to unexpectedly rework or reevaluate improvements to be compliant. Use of AI technologies may expose us to an increased risk of regulatory enforcement and litigation. Moreover, some of the AI features involve the processing of personal data and may be subject to laws, policies, legal obligations, and codes of conduct related to privacy and data protection. AI development and deployment practices could subject us to competitive harm, regulatory enforcement, increased cyber risks, reputational harm, and legal liability.

Current wording

We have and are continuing to incorporate AI, including machine learning and independent algorithms, in certain of our products, services and internal operations, including in our MCT services with our Zio AT System, which is intended to enhance their operation and effectiveness internally and for physicians and patients. Our research and development of such technology remains ongoing. AI innovation presents risks and challenges that could impact our business. AI algorithms may be flawed or datasets may be insufficient or contain biased information resulting in perceived or actual negative outcomes. Additionally, many countries and regions, including the EU, have proposed or passed new and evolving regulations related to the use of AI and machine learning technologies. The regulations may impose onerous obligations and may require us to unexpectedly rework or reevaluate improvements to be compliant. In particular, the EU Artificial Intelligence Act will have a material impact on the way AI is regulated in the EU, may affect our use of AI technologies, and may require additional compliance measures and changes to our operations and processes. Use of AI technologies may expose us to an increased risk of regulatory enforcement and litigation. Moreover, some of the AI features involve the processing of personal data and may be subject to laws, policies, legal obligations, and codes of conduct related to privacy and data protection. AI development and deployment practices could subject us to competitive harm, regulatory enforcement, increased cyber risks, reputational harm, and legal liability.

Previous wording

•obtaining and sustaining regulatory approvals, certifications, and regulatory compliance where required for the sale of our Zio Services in various countries;

Current wording

•obtaining and sustaining regulatory approvals, certifications, and regulatory compliance where required for the sale of our Zio Services in various countries or regions;

Previous wording

•requirements to maintain data and the processing of that data on servers located within such countries, which requirements that may be subject to change;

Current wording

•requirements to maintain data and the processing of that data on servers located within such countries or regions, which requirements may be subject to change;

Previous wording

Our operations in the UK account for approximately 1% of our revenue for the three and six months ended June 30, 2024, and we intend to continue to pursue growth opportunities in the UK. There are still a number of areas of uncertainty in connection with the future of the UK and its relationship with the EU following the UK’s exit from the EU in 2020 (commonly referred to as “Brexit”), including the application and interpretation of the UK-EU trade agreement (the “Trade and Cooperation Agreement”), which went into force in May 2021. For example, because a significant proportion of the regulatory framework in the UK is currently derived from EU directives and regulations, Brexit could result in material changes to the regulatory regime applicable to many of our current operations. The UK government and the MHRA began undertaking public consultations on the future regulation of medical devices in 2022 and plan to introduce the new regulatory system from July 2025 onwards, subject to appropriate transitional arrangements. The consultation indicated that the MHRA will publish guidance in relation to the changes to the regulatory framework and may rely more heavily on guidance to add flexibility to the regime. Although the Trade and Cooperation Agreement offers UK and EU companies preferential access to each other’s markets, ensuring imported goods will be free of tariffs and quotas, economic relations between the UK and the EU are on more restricted terms than existed previously. Therefore, at this time, we cannot predict the impact that the Trade and Cooperation Agreement and any future agreements contemplated under the terms of the Trade and Cooperation Agreement will have on our future business efforts to commercialize our Zio Services in the UK and the EU. Accordingly, it is possible that the Trade and Cooperation Agreement may adversely affect our operations and financial results.

Current wording

Our operations in the UK account for approximately 1% of our revenue for the three and nine months ended September 30, 2024, and we intend to continue to pursue growth opportunities in the UK. There are still a number of areas of uncertainty in connection with the future of the UK and its relationship with the EU following the UK’s exit from the EU in 2020 (commonly referred to as “Brexit”), including the application and interpretation of the UK-EU trade agreement (the “Trade and Cooperation Agreement”), which went into force in May 2021. For example, because a significant proportion of the regulatory framework in the UK is currently derived from EU directives and regulations, Brexit could result in material changes to the regulatory regime applicable to many of our current operations. The UK government and the MHRA began undertaking public consultations on the future regulation of medical devices in 2022 and plan to introduce the new regulatory system from July 2025 onwards, subject to appropriate transitional arrangements. The consultation indicated that the MHRA will publish guidance in relation to the changes to the regulatory framework and may rely more heavily on guidance to add flexibility to the regime. Although the Trade and Cooperation Agreement offers UK and EU companies preferential access to each other’s markets, ensuring imported goods will be free of tariffs and quotas, economic relations between the UK and the EU are on more restricted terms than existed previously. Therefore, at this time, we cannot predict the impact that the Trade and Cooperation Agreement and any future agreements contemplated under the terms of the Trade and Cooperation Agreement will have on our future business efforts to commercialize our Zio Services in the UK and the EU. Accordingly, it is possible that the Trade and Cooperation Agreement may adversely affect our operations and financial results.

Previous wording

We have recently experienced significant changes in our executive leadership, including the appointment of Quentin S. Blackford as our President and Chief Executive Officer in October 2021 following the resignation of our prior President and Chief Executive Officer, Kevin King, in January 2021. Douglas Devine, our former Chief Operating Officer, and Michael Coyle served as Chief Executive Officer from June 2021 to October 2021 and January 2021 to June 2021, respectively, before Mr. Blackford’s appointment. We have had additional executive officer positions changes recently (including the March 2023 resignation of Douglas Devine as Chief Operating Officer) and may experience further changes in executive leadership in the future.

Current wording

We have recently experienced significant changes in our executive leadership, including the appointment of Quentin S. Blackford as our President and Chief Executive Officer in October 2021 following the resignation of our prior President and Chief Executive Officer, Kevin King, in January 2021. Douglas Devine, our former Chief Operating Officer, and Michael Coyle served as Chief Executive Officer from June 2021 to October 2021 and January 2021 to June 2021, respectively, before Mr. Blackford’s appointment. We have had additional executive officer positions changes recently (including the March 2023 resignation of Douglas Devine as Chief Operating Officer and the August 2024 resignation of Brice Bobzien as Chief Financial Officer) and may experience further changes in executive leadership in the future.

Previous wording

If we are presented with appropriate opportunities, we could acquire or make other investments in complementary companies, products, or technologies. We may not realize the anticipated benefit of our acquisitions, or the realization of the anticipated benefits may require greater expenditures than anticipated by us. We will likely face risks, uncertainties, and disruptions associated with the integration process, including difficulties in the integration of the operations and services of any acquired company, integration of acquired technology with our Zio Services, including our Zio Systems, diversion of our management’s attention from other business concerns, the potential loss of key employees or suppliers of the acquired businesses, and impairment charges if future acquisitions are not as successful as we originally anticipated. If we fail to successfully integrate other companies, products, or technologies that we acquire, our business could be harmed. Furthermore, we may have to incur debt or issue equity or equity-linked securities to pay for any future acquisitions or investments, the issuance of which could be dilutive to our existing stockholders. In addition, our operating results may suffer because of acquisition-related costs, amortization expenses, investment required to address risks associated with the acquisition, or charges relating to acquired intangible assets.

Current wording

In addition, we will likely face risks, uncertainties, and disruptions associated with the integration process, including difficulties in the integration of the operations and services of any acquired company, integration of acquired technology with our Zio Services, including our Zio Systems, diversion of our management’s attention from other business concerns, the potential loss of key employees or suppliers of the acquired businesses, and impairment charges if future acquisitions are not as successful as we originally anticipated. If we fail to successfully integrate other companies, products, or technologies that we acquire, our business could be harmed. Furthermore, we may have to incur debt or issue equity or equity-linked securities to pay for any future acquisitions or investments, the issuance of which could be dilutive to our existing stockholders. In addition, our operating results may suffer because of acquisition-related costs, amortization expenses, investment required to address risks associated with the acquisition, or charges relating to acquired intangible assets.

Previous wording

Our sales and marketing efforts and initiatives, as well as other communications with HCPs, may subject us to a high degree of scrutiny for compliance with applicable laws and regulations and our practices of effective communication of risk information, benefits, or claims will be subject to oversight by FDA, the Federal Trade Commission (“FTC”) and others.

Current wording

Our sales and marketing efforts and initiatives, as well as other communications with healthcare professionals ("HCPs"), may subject us to a high degree of scrutiny for compliance with applicable laws and regulations and our practices of effective communication of risk information, benefits, or claims will be subject to oversight by FDA, the Federal Trade Commission (“FTC”) and others.

Previous wording

Further, we recognize a portion of our revenue from non-contracted third-party commercial payors. For example, during the three and six months ended June 30, 2024, revenue from non-contracted third-party commercial payors accounted for approximately 7% of our total revenue. We have limited visibility as to when we will receive payment for our Zio Services with non-contracted payors and we, XIFIN, or Omega must appeal any negative payment decisions, which often delays collections further. Additionally, a portion of the revenue from non-contracted payors is received from patient co-pays, which we may not receive for several months following delivery of service or may not receive at all. For revenue related to non-contracted payors, we estimate an average collection rate based on factors including historical cash collections. Subsequent adjustments, if applicable, are recorded as an adjustment to revenue. Fluctuations in revenue may make it difficult for us, research analysts, and investors to accurately forecast our revenue and operating results or to assess our actual performance. If our revenue or operating results fall below expectations, the price of our common stock would likely decline.

Current wording

Further, we recognize a portion of our revenue from non-contracted third-party commercial payors. For example, during the three and nine months ended September 30, 2024, revenue from non-contracted third-party commercial payors accounted for approximately 7% of our total revenue. We have limited visibility as to when we will receive payment for our Zio Services with non-contracted payors and we, XIFIN, or Omega must appeal any negative payment decisions, which often delays collections further. Additionally, a portion of the revenue from non-contracted payors is received from patient co-pays, which we may not receive for several months following delivery of service or may not receive at all. For revenue related to non-contracted payors, we estimate an average collection rate based on factors including historical cash collections. Subsequent adjustments, if applicable, are recorded as an adjustment to revenue. Fluctuations in revenue may make it difficult for us, research analysts, and investors to accurately forecast our revenue and operating results or to assess our actual performance. If our revenue or operating results fall below expectations, the price of our common stock would likely decline.

Previous wording

We have incurred net losses since our inception in September 2006. We generated net losses of $20.1 million and $18.5 million during the three months ended June 30, 2024 and 2023, respectively, and $65.8 million and $57.6 million during the six months ended June 30, 2024 and 2023, respectively. As of June 30, 2024, we had an accumulated deficit of $711.4 million. We have financed our operations to date primarily through private and public offerings of equity securities and revenue generated by prescriptions of our Zio Services. We have and expect to continue to incur significant research and development, sales and marketing, regulatory, and other expenses as we expand our marketing efforts to increase the prescription of our Zio Services, expand existing relationships with physicians, obtain regulatory clearances or approvals for our current or future services and related devices, conduct clinical trials on our existing and future services, and develop new services or add new features to our existing Zio Services. We also expect that our general and administrative expenses will continue to increase due to, among other things, the operational and regulatory burdens applicable to medical service providers that are public companies. As a result, we expect to continue to incur operating losses in the future. These losses, among other things, may have an adverse effect on our stockholders’ equity and the value of our common stock.

Current wording

We have incurred net losses since our inception in September 2006. We generated net losses of $46.2 million and $27.1 million during the three months ended September 30, 2024 and 2023, respectively, and $112.0 million and $84.7 million during the nine months ended September 30, 2024 and 2023, respectively. As of September 30, 2024, we had an accumulated deficit of $757.6 million. We have financed our operations to date primarily through private and public offerings of equity securities and revenue generated by prescriptions of our Zio Services. We have and expect to continue to incur significant research and development, sales and marketing, regulatory, and other expenses as we expand our marketing efforts to increase the prescription of our Zio Services, expand existing relationships with physicians, obtain regulatory clearances or approvals for our current or future services and related devices, conduct clinical trials on our existing and future services, and develop new services or add new features to our existing Zio Services. We also expect that our general and administrative expenses will continue to increase due to, among other things, the operational and regulatory burdens applicable to medical service providers that are public companies. As a result, we expect to continue to incur operating losses in the future. These losses, among other things, may have an adverse effect on our stockholders’ equity and the value of our common stock.

Previous wording

In the EU, a number of interlocking rules regulate cybersecurity for medical devices. For example, the new Cybersecurity Directive (EU) 2022/2555 (also known as the NIS 2 Directive (Network and Information Security)) entered into force in January 2023 and EU Member States have until October 17, 2024 to transpose the measures into national law. The EU NIS 2 Directive affects Critical National Infrastructure (CNI) providers, which includes the health sector and the manufacturers of medical devices considered to be critical during a public health emergency, as well as other covered entities. The requirements in the NIS 2 Directive will sit alongside the cybersecurity requirements addressed in the EU MDR, which are supplemented by specific guidance issued by the EU’s Medical Device Coordination Group. In addition, at this time, we cannot predict the impact on cybersecurity compliance that forthcoming EU legislation such as the proposed Artificial Intelligence Act and the European Health Data Space Regulation, may have. In the UK, the government announced as part of its consultations on the future regulation of medical devices, that it intends to develop legislation to impose cybersecurity requirements for software as a medical device, including for AI.

Current wording

In the EU, a number of interlocking rules regulate cybersecurity for medical devices. For example, the new Cybersecurity Directive (EU) 2022/2555 (also known as the NIS 2 Directive (Network and Information Security)) entered into force in January 2023 and EU Member States have until October 17, 2024 to transpose the measures into national law. The EU NIS 2 Directive affects Critical National Infrastructure (CNI) providers, which includes the health sector and the manufacturers of medical devices considered to be critical during a public health emergency, as well as other covered entities. The requirements in the NIS 2 Directive will sit alongside the cybersecurity requirements addressed in the EU MDR, which are supplemented by specific guidance issued by the EU’s Medical Device Coordination Group. In addition, at this time, we cannot predict the impact on cybersecurity compliance that forthcoming EU legislation such as the Artificial Intelligence Act and the European Health Data Space Regulation, may have. In the UK, the government announced as part of its consultations on the future regulation of medical devices, that it intends to develop legislation to impose cybersecurity requirements for software as a medical device, including for AI.

Previous wording

Our ability to make repay the principal of, to pay interest on or to refinance our indebtedness, including the 2029 Notes, or to make cash payments in connection with any conversions of 2029 Notes, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. Our business may not generate cash flow from operations in the future sufficient to service our existing indebtedness and any future indebtedness we may incur and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as reducing or delaying investments or capital expenditures, selling assets, restructuring debt or obtaining additional debt financing or equity capital on terms that may be onerous or highly dilutive. Our ability to refinance any current or future indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms or at all, which could result in a default on our debt obligations. In addition, any of our future current or future debt agreements may contain restrictive covenants that may prohibit us from adopting any of these alternatives. Our failure to comply with these covenants could result in an event of default which, if not cured or waived, could result in the acceleration of our debt.

Current wording

Our ability to repay the principal of, to pay interest on or to refinance our indebtedness, including the 2029 Notes, or to make cash payments in connection with any conversions of 2029 Notes, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. Our business may not generate cash flow from operations in the future sufficient to service our existing indebtedness and any future indebtedness we may incur and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as reducing or delaying investments or capital expenditures, selling assets, restructuring debt or obtaining additional debt financing or equity capital on terms that may be onerous or highly dilutive. Our ability to refinance any current or future indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms or at all, which could result in a default on our debt obligations. In addition, any of our future current or future debt agreements may contain restrictive covenants that may prohibit us from adopting any of these alternatives. Our failure to comply with these covenants could result in an event of default which, if not cured or waived, could result in the acceleration of our debt.
Rearranged current paragraphs (2)

Current report — wording carried from elsewhere

As we are already subject to an FDA warning letter associated with our Cypress facility, and in light of the 2024 inspection results, if we are unable to successfully execute follow-up actions consistent with our commitments to FDA, or if FDA determines that our follow-up commitments are insufficient or are not completed with sufficient promptness, we may face a greater risk of potential escalation, which could involve issuance of additional warning letters, or there is a possibility that FDA could initiate consent decree discussions.

Current report — wording carried from elsewhere

If we are presented with appropriate opportunities, we could acquire or make other investments in complementary companies, products, or technologies. We may not realize the anticipated benefit of our acquisitions, or the realization of the anticipated benefits may require greater expenditures than anticipated by us. For example, the License Agreement that we entered into with BioIS may not result in the development of commercially viable products or services or the generation of significant future revenues. The success of our efforts is highly dependent on the efforts and skill sets of our employees, and support of these efforts requires significant resources, including research and development, manufacturing, quality assurance, and clinical and regulatory personnel. Even if and when launched, the developed devices may also not be accepted in the marketplace, and there is no assurance that adequate coverage or reimbursement would be available, or that an alternative payment model can be developed.