Passage BIO Inc

Conclusions Regarding the Effectiveness of Disclosure Controls and Procedures

Under the supervision of and with the participation of our management, including our chief executive officer, who is our principal executive officer, and our chief financial officer, who is our principal financial officer, we conducted an evaluation of the effectiveness of our disclosure controls and procedures as of December 31, 2024, the end of the period covered by this Annual Report. The term “disclosure controls and procedures,” as set forth in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended, or the Exchange Act, means controls and other procedures of a company that are designed to provide reasonable assurance that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the rules and forms promulgated by the SEC. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to the company’s management, including its principal executive and principal financial officers, as appropriate to allow timely decisions regarding required disclosure. Management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving their objectives, and management necessarily applies its judgment in evaluating the cost-benefit relationship of possible controls and procedures. Based on the evaluation of our disclosure controls and procedures as of December 31, 2024, our chief executive officer and chief financial officer concluded that, as of such date, our disclosure controls and procedures were effective at the reasonable assurance level.

Management’s Annual Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting. Internal control over financial reporting is defined in Rules 13a-15(f) and 15d-15(f) promulgated under the Exchange Act as a process designed by, or under the supervision of, our chief executive officer and chief financial officer and effected by our board of directors, management and other personnel to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with U.S. GAAP. Our internal control over financial reporting includes those policies and procedures that:

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Therefore, even those systems determined to be effective can provide only reasonable assurance with respect to financial statement preparation and presentation. Projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate. Additionally, in designing disclosure controls and procedures, our management necessarily was required to apply its judgment in evaluating the cost-benefit relationship of possible disclosure controls and procedures. The design of any disclosure controls and procedures also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions.

Our management, with the participation of our chief executive officer and chief financial officer, assessed the effectiveness of our internal control over financial reporting as of December 31, 2024. In making this assessment, management used the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) in itsInternal Control – Integrated Framework (2013). Based on our assessment, our management has concluded that, as of December 31, 2024, our internal control over financial reporting is effective based on those criteria.

This Annual Report on Form 10-K does not include an attestation report of our independent registered public accounting firm regarding internal control over financial reporting. For as long as we remain an “emerging growth company” as defined in Section 2(a) of the Securities Act of 1933, or the Securities Act, as modified by the Jumpstart Our Business Startups Act of 2012, or a non-accelerated filer as defined in the Exchange Act, we intend to take advantage of the exemption permitting us not to comply with the requirement that our independent registered public accounting firm provide an attestation on the effectiveness of our internal control over financial reporting.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting identified in connection with the evaluation required by Rule 13a-15(d) and 15d-15(d) of the Exchange Act that occurred during the three months ended December 31, 2024, that have materially affected, or are reasonably likely to materially affect, our internal controls over financial reporting.