CORCEPT THERAPEUTICS INC

Previous wording

•the inability of our pharmacy to dispense our Products in a timely manner.

Current wording

•the inability of our pharmacies to dispense our Products in a timely manner.

Previous wording

In January 2024, Teva launched a generic version of Korlym. We have sued Teva in Federal District Court with respect to its generic version of Korlym. On December 29, 2023, the Court issued a ruling in that case finding that Teva’s generic product would not infringe the patents we have asserted against it. We have appealed this adverse decision to the Court of Appeals for the Federal Circuit, but there can be no assurance our appeal will be successful. If Teva’s commercial efforts are successful, they may materially harm our results of operations and financial condition, even if our appeal is successful and Teva is required to withdraw its product and pay us damages. We have made available our own generic version of Korlym.

Current wording

Appeals for the Federal Circuit, but there can be no assurance our appeal will be successful and we cannot predict when the Court will issue its opinion. If Teva’s commercial efforts are successful, they may materially harm our results of operations and financial condition, even if our appeal is successful and Teva is required to withdraw its product and pay us damages. We have made available our own generic version of Korlym.

Previous wording

The active ingredient in our Products, mifepristone, is approved by the FDA in another drug for the termination of early pregnancy. In 2022, the United States Supreme Court published its decision in the case of Dobbs v. Jackson Women’s Health Organization (“Dobbs”), which overturned Roe v. Wade, the 1973 Supreme Court decision that had established a woman’s right to terminate her pregnancy, subject to certain limitations. Dobbs has stimulated many states to enact laws restricting the legality of abortion and mifepristone, including during early pregnancy and under specific conditions of use. More laws banning or heavily restricting termination of pregnancy may be adopted and existing laws may be made more restrictive. On June 13, 2024, in a highly publicized case, the Supreme Court ruled against plaintiffs seeking to restrict access to mifepristone for terminating pregnancy, holding that they lacked standing (i.e., the right to sue), thus preserving current access to mifepristone. Because the Supreme Court’s decision was made solely on procedural grounds, the ruling does not necessarily foreclose other challenges to the continued availability of mifepristone. The timing and outcome of any subsequent cases, as well as additional legislative changes are uncertain. In addition, heightened public awareness of mifepristone as an abortifacient may draw the attention of hostile state government officials or political activists to our Products – as could additional public debate concerning current or proposed restrictions on the distribution of mifepristone. This may be the case even though (i) our Products are not approved for the termination of pregnancy, (ii) we do not promote them for that use and (iii) we have taken measures to minimize the chance that they will accidentally be prescribed to a pregnant woman.

Current wording

The active ingredient in our Products, mifepristone, is approved by the FDA in another drug for the termination of early pregnancy. In 2022, the United States Supreme Court published its decision in the case of Dobbs v. Jackson Women’s Health Organization (“Dobbs”), which overturned Roe v. Wade, the 1973 Supreme Court decision that had established a woman’s right to terminate her pregnancy, subject to certain limitations. Dobbs has stimulated many states to enact laws restricting the legality of abortion and mifepristone, including during early pregnancy and under specific conditions of use. More laws banning or heavily restricting termination of pregnancy may be adopted and existing laws may be made more restrictive. On June 13, 2024, in a highly publicized case, the Supreme Court ruled against plaintiffs seeking to restrict access to mifepristone for terminating pregnancy, holding that they lacked standing (i.e., the right to sue), thus preserving current access to mifepristone. Because the Supreme Court’s decision was made solely on procedural grounds, the ruling does not necessarily foreclose other challenges to the continued availability of mifepristone. The timing and outcome of any subsequent cases, as well as additional legislative changes are uncertain.

Previous wording

In the United States, there have been and continue to be legislative initiatives to contain healthcare costs. The IRA significantly changed the way Medicare pays for prescription drugs. The IRA requires the Secretary of the U.S. Department of Health and Human Services to negotiate Medicare prices for selected drugs and biologicals, including both physician-administered products covered under Medicare’s Part B benefit and self-administered drugs such as our Products that are covered under the Part D benefit. Each year, the Secretary will select for price negotiation a specified number of negotiation-eligible drugs with the highest total Part B or D expenditures over the preceding 12-month period. To be eligible for price negotiation a drug must have been on the market for at least seven years without generic competition. Orphan drugs indicated for only one rare disease or condition and drugs with less than $200 million in annual Medicare expenditures are exempt from the negotiation program. For the first two years of the program, 2026 and 2027, only Part D drugs are eligible. The Secretary will publish the negotiated price, known as the “Maximum Fair Price” (“MFP”), for each of the selected products. Manufacturers of selected drugs would be required to offer the drug for Medicare recipients at the MFP. Manufacturers who fail to negotiate with the Secretary or offer their drug to Medicare recipients at the MFP can face significant civil money penalties or excise tax liability on sales of that drug. If our Products or any drug we commercialize become eligible for Medicare negotiation, the revenue we generate from sales of those drugs may be significantly reduced.

Current wording

Health and Human Services to negotiate Medicare prices for selected drugs and biologicals, including both physician-administered products covered under Medicare’s Part B benefit and self-administered drugs such as our Products that are covered under the Part D benefit. Each year, the Secretary will select for price negotiation a specified number of negotiation-eligible drugs with the highest total Part B or D expenditures over the preceding 12-month period. To be eligible for price negotiation a drug must have been on the market for at least seven years without generic competition. Orphan drugs, such as our Products, that are indicated for only one rare disease or condition and drugs with less than $200 million in annual Medicare expenditures are exempt from the negotiation program. For the first two years of the program, 2026 and 2027, only Part D drugs are eligible. The Secretary will publish the negotiated price, known as the “Maximum Fair Price” (“MFP”), for each of the selected products. Manufacturers of selected drugs would be required to offer the drug for Medicare recipients at the MFP. Manufacturers who fail to negotiate with the Secretary or offer their drug to Medicare recipients at the MFP can face significant civil money penalties or excise tax liability on sales of that drug. If our Products or any drug we commercialize become eligible for Medicare negotiation, the revenue we generate from sales of those drugs may be significantly reduced.

Previous wording

In the event any of our vendors fails to perform its contractual obligations to us or is materially impaired in its performance, we may experience disruptions and delays in our ability to deliver our commercialized products to patients or investigational drugs to patients in our clinical trials, which would adversely affect our business, results of operations and financial position.

Current wording

In the event any of our vendors fail to perform its contractual obligations to us or is materially impaired in its performance, we may experience disruptions and delays in our ability to deliver our commercialized products to patients or investigational drugs to patients in our clinical trials, which would adversely affect our business, results of operations and financial position.

Previous wording

Our single specialty pharmacy, Optime, dispenses our Products and performs related pharmacy and patient support services, including the collection of payments from insurers representing more than 99 percent of our revenue. If Optime does not adhere to its agreements with payers or does not continue to meet regulatory requirements concerning pharmacy operations, it may not be able to collect on our behalf some or all of the payments due to us. In addition, if Optime has operational difficulties or otherwise becomes unable or unwilling to perform its obligations under our agreement, we may not be able to dispense our Products in a timely manner to some or all of our patients and this may adversely affect our business, results of operations and financial position. Effective April 1, 2024, we extended our agreement with Optime through March 31, 2027, with automatic renewal for successive three-year terms. The agreement is subject to customary termination provisions, including the right of Optime to terminate in the event of a material breach by us that we do not cure in a reasonable period of time after receiving written notice. In addition, we may terminate the agreement for convenience.

Current wording

Our specialty pharmacies dispense our Products and perform related pharmacy and patient support services, including the collection of payments from insurers representing more than 99 percent of our revenue. If our pharmacies do not adhere to their agreements with payers or do not continue to meet regulatory requirements concerning pharmacy operations, they may not be able to collect, on our behalf, some or all of the payments due to us. In addition, if a pharmacy has operational difficulties or otherwise becomes unable or unwilling to perform obligations under our agreement, we may not be able to dispense our Products in a timely manner to some or all of our patients, which may adversely affect our business, results of operations and financial position.

Previous wording

Since 2012, Recordati-S.p.A. has marketed the injectable somatostatin analogue pasireotide in the United States and EU as a treatment for adult patients with Cushing’s disease, a subset of hypercortisolism. In 2020, the FDA granted Recordati approval to market the cortisol synthesis inhibitor osilodrostat to treat patients with Cushing’s disease, which approval was broadened in April 2025 to include adult patients with any etiologies of hypercortisolism.

Current wording

Since 2012, Recordati-S.p.A. has marketed the injectable somatostatin analogue pasireotide in the United States and EU as a treatment for adult patients with Cushing’s disease, a subset of hypercortisolism. In 2020, the FDA granted Recordati approval to market the cortisol synthesis inhibitor osilodrostat to treat patients with Cushing’s disease, which approval was broadened in April 2025 to include adult patients with any etiology of hypercortisolism.

Previous wording

We are also vulnerable to natural disasters, including earthquakes, fires, hurricanes, floods, blizzards and the extended periods of extreme heat, cold and precipitation made more frequent and severe by global warming. For example, our headquarters are in the San Francisco Bay Area, which experiences earthquakes, wildfires and flooding. Our specialty pharmacy, tablet manufacturers and warehouses are in areas subject to hurricanes and tornadoes. All our activities, as well as the activities of our vendors, consultants, clinical investigators, patients, physicians and regulators, are subject to the risks posed by global warming.

Current wording

We are also vulnerable to natural disasters, including earthquakes, fires, hurricanes, floods, blizzards and the extended periods of extreme heat, cold and precipitation made more frequent and severe by global warming. For example, our headquarters are in the San Francisco Bay Area, which experiences earthquakes, wildfires and flooding. Our specialty pharmacies, tablet manufacturers and warehouses are in areas subject to hurricanes and tornadoes. All our activities, as well as the activities of our vendors, consultants, clinical investigators, patients, physicians and regulators, are subject to the risks posed by global warming.

Previous wording

We are subject to oversight by the FDA and other regulatory authorities in the United States and elsewhere with respect to our research, testing, manufacturing, labeling, distribution, adverse event reporting, storage, advertising, promotion, recordkeeping and sales and marketing activities. These requirements include submissions of safety information, annual updates on manufacturing activities and continued compliance with FDA regulations, including cGMPs, good laboratory practices and good clinical practices (“GCPs”), all of which are subject to change without notice and at the regulators’ sole discretion. Foreign regulatory authorities have comparable requirements and enforcement mechanisms, which are also subject to change. The FDA and other regulators enforce these regulations through inspections of us and the laboratories, manufacturers and clinical sites we use. Discovery of previously unknown problems with a product or product candidate, such as adverse events of unanticipated severity or frequency or deficiencies in manufacturing processes or management, as well as failure to comply with current or future FDA or other U.S. or foreign regulatory requirements, may subject us to substantial civil and criminal penalties, injunctions, holds on clinical trials, product seizure, refusal to permit the import or export of products, restrictions on product marketing, withdrawal of the product from the market, product recalls, total or partial suspension of production, refusal to approve pending new drug applications (“NDAs”) or supplemental NDAs, and suspension or revocation of product approvals.

Current wording

The FDA and other regulators enforce these regulations through inspections of us and the laboratories, manufacturers and clinical sites we use. Discovery of previously unknown problems with a product or product candidate, such as adverse events of unanticipated severity or frequency or deficiencies in manufacturing processes or management, as well as failure to comply with current or future FDA or other U.S. or foreign regulatory requirements, may subject us to substantial civil and criminal penalties, injunctions, holds on clinical trials, product seizure, refusal to permit the import or export of products, restrictions on product marketing, withdrawal of the product from the market, product recalls, total or partial suspension of production, refusal to approve pending new drug applications (“NDAs”) or supplemental NDAs, and suspension or revocation of product approvals.

Previous wording

We cannot sell a product without the approval of the FDA or comparable foreign regulatory authority. Obtaining such approval is difficult, uncertain, lengthy and expensive. Failure can occur at any stage. In order to receive FDA approval for a new drug, we must demonstrate to the FDA’s satisfaction that the new drug is safe and effective for its intended use and that our manufacturing processes comply with cGMPs. Recent disruptions at the FDA and other government agencies caused by changing presidential administrations or funding shortages could hinder their ability to hire, retain or deploy key leadership and other personnel, prevent new or modified product candidates from being developed, reviewed, approved or commercialized in a timely manner or at all, which could negatively impact our business. Our inability or the inability of our vendors to comply with applicable FDA and other regulatory requirements can result in delays in or denials of new product approvals, warning letters, untitled letters, fines, consent decrees restricting or suspending manufacturing operations, injunctions, civil penalties, recall or seizure of products, total or partial suspension of product sales and criminal prosecution. We may seek to commercialize our Products in international markets, which would require us to receive a marketing authorization and, in many cases, pricing approval, from the appropriate regulatory authorities. Approval procedures vary between countries and can require additional pre-clinical or clinical studies. Obtaining approval may take longer than it does in the United States. Although approval by the FDA does not ensure approval by regulatory authorities in other countries, and approval by one foreign regulatory authority does not ensure approval by others, failure or delay in obtaining regulatory approval in one country may have a negative effect on the regulatory process in others. Any of these or other regulatory actions could materially harm our business and financial condition.

Current wording

We cannot sell a product without the approval of the FDA, EMA or comparable regulatory authority. Obtaining such approval is difficult, uncertain, lengthy and expensive. Failure can occur at any stage. In order to receive FDA approval for a new drug, we must demonstrate to the FDA’s satisfaction that the new drug is safe and effective for its intended use and that our manufacturing processes comply with cGMPs. Recent disruptions at the FDA and other government agencies caused by changing presidential administrations or funding shortages could hinder their ability to hire, retain or deploy key leadership and other personnel, prevent new or modified product candidates from being developed, reviewed, approved or commercialized in a timely manner or at all, which could negatively impact our business. Our inability or the inability of our vendors to comply with applicable FDA and other regulatory requirements can result in delays in or denials of new product approvals, warning letters, untitled letters, fines, consent decrees restricting or suspending manufacturing operations, injunctions, civil penalties, recall or seizure of products, total or partial suspension of product sales and criminal prosecution. We may seek to commercialize our Products in international markets, which would require us to receive a marketing authorization and, in many cases, pricing approval, from the appropriate regulatory authorities. Approval procedures vary between countries and can require additional pre-clinical or clinical studies. Obtaining approval may take longer than it does in the United States. Although approval by the FDA does not ensure approval by regulatory authorities in other countries, and approval by one foreign regulatory authority does not ensure approval by others, failure or delay in obtaining regulatory approval in one country may have a negative effect on the regulatory process in others. Any of these or other regulatory actions could materially harm our business and financial condition.

Previous wording

We cannot assure investors that a liquid trading market for our common stock will exist at any particular time. As a result, holders of our common stock may not be able to sell shares quickly or at the current market price. During the 52-week period ended July 24, 2025, our average daily trading volume was approximately 1,183,339 shares and the intra-day sales prices per share of our common stock on the Nasdaq Capital Market ranged from $32.33 to $117.33. As of July 24, 2025, our officers, directors and principal stockholders beneficially owned approximately 21 percent of our common stock.

Current wording

We cannot assure investors that a liquid trading market for our common stock will exist at any particular time. As a result, holders of our common stock may not be able to sell shares quickly or at the current market price. During the 52-week period ended October 23, 2025, our average daily trading volume was approximately 1,179,944 shares and the intra-day sales prices per share of our common stock on the Nasdaq Capital Market ranged from $42.01 to $117.33. As of October 23, 2025, our officers, directors and principal stockholders beneficially owned approximately 21 percent of our common stock.

Previous wording

The federal government of the United States has recently significantly reduced funding for scientific research conducted by the federal government and universities, terminated large numbers of employees at government agencies, including the FDA, Centers for Disease Control and National Institutes of Health, that support health care research and regulation, and has passed laws that will, over the next several years, significantly reduce the number of people covered by Medicaid. In addition, President Trump has imposed new trade tariffs, increased existing tariffs, and abruptly paused or reversed tariff policies in ways that will increase our costs and make planning difficult. The government’s actions have caused economic and regulatory uncertainty and have been adverse to our clinical and commercial efforts.

Current wording

The federal government of the United States has recently significantly reduced funding for scientific research conducted by the federal government and universities, terminated large numbers of employees at government agencies, including the FDA, Centers for Disease Control and National Institutes of Health, that support health care research and regulation, and has passed laws that will, over the next several years, significantly reduce the number of people covered by Medicaid. In addition,

Previous wording

It is likely the administration will adopt new policies or take new actions that make it more difficult and costly to develop our product candidates. Significant cuts or disruptions to the staffing of government agencies and their budgets may delay review of our NDAs for relacorilant as a treatment for patients with hypercortisolism and platinum-resistant ovarian cancer and may hamper our ability to advance our other clinical programs, including the development of dazucorilant for the treatment of patients with ALS. The research programs of our academic collaborators may be canceled or their funding reduced.

Current wording

It is likely the administration will adopt new policies or take new actions that make it more difficult and costly to develop our product candidates. Significant cuts or disruptions to the staffing of government agencies and their budgets may delay review of our NDAs for relacorilant as a treatment for patients with hypercortisolism and platinum-resistant ovarian cancer and may hamper our ability to advance our other clinical programs, including the development of dazucorilant for the treatment of patients with ALS. The research programs of our academic collaborators may be canceled or their funding reduced. All of these actions may be taken with little or no advance notice.

Previous wording

In addition, certain state laws govern the privacy and security of health information in certain circumstances, some of which are more stringent than HIPAA and many of which differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts. Failure to comply with these laws, where applicable, can result in the imposition of significant civil and/or criminal penalties and private litigation. For example, the California Confidentiality of Medical Information Act imposes restrictive requirements regulating the use and disclosure of health information and other personally identifiable information. Further, the California Consumer Privacy Act, which took effect on January 1, 2020, and was later revised and expanded by the California Privacy Rights Act, collectively the “CCPA”, created individual privacy rights for California consumers and increased the privacy and security obligations of entities handling certain personal information as well as limitation on data uses, audit requirements for higher risk data, and opt outs for certain uses of sensitive data. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. The CCPA may increase our compliance costs and potential liability. It also created a new California data protection agency authorized to issue substantive regulations and could result in increased privacy and information security enforcement. Similar laws passed in Virginia, Colorado, Connecticut, Montana, Oregon, Texas and Utah have taken effect in 2023 and 2024 and other states, including Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Rhode Island, and Tennessee, have passed similar laws that will take effect in or after 2025. In addition, along with the CPRA, some of these laws, along with other standalone health privacy laws, subject health-related information to additional safeguards and disclosures and some specifically regulate consumer health data, such as the Washington My Health My Data Privacy Law, which became effective in 2024, Nevada’s Consumer Health Data Privacy Law, which became effective in 2024, and Connecticut’s amendments to its privacy law to address health data, which became effective in 2023. As a result, additional compliance investment and potential business process changes may be required. In the event that we are subject to or affected by HIPAA, the CCPA or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition. Additional legislation proposed at the federal level and in other states, along with increased regulatory action, reflect a trend toward more stringent privacy legislation in the United States.

Current wording

In addition, certain state laws govern the privacy and security of health-related and other personal information in certain circumstances, some of which may be more stringent, broader in scope or offer greater individual rights with respect to protected health information than HIPAA and many of which may differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts. Failure to comply with these laws, where applicable, can result in the imposition of significant civil and/or criminal penalties and private litigation. For example, the California Confidentiality of Medical Information Act imposes restrictive requirements regulating the use and disclosure of health information and other personally identifiable information. Further, the California Consumer Privacy Act, which took effect on January 1, 2020, and was later revised and expanded by the California Privacy Rights Act (the “CPRA” and collectively, the “CCPA”), created individual privacy rights for California consumers and increased the privacy and security obligations of entities handling certain personal information as well as limitation on data uses, audit requirements for higher risk data, and opt outs for certain uses of sensitive data. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. The CCPA may increase our compliance costs and potential liability. It also created a new California data protection agency authorized to issue substantive regulations and could result in increased privacy and information security enforcement. Similar laws passed in Virginia, Colorado, Connecticut, Montana, Oregon, Texas and Utah have taken effect in 2023 and 2024 and other states, including Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Rhode Island, and Tennessee, have passed similar laws that took effect in or will take effect or after 2025. In addition, along with the CPRA, some of these laws, along with other standalone health privacy laws, subject health-related information to additional safeguards and disclosures and some specifically regulate consumer health data, such as the Washington My Health My Data Act, which became effective in 2024, Nevada’s Consumer Health Data Privacy Law, which became effective in 2024, and Connecticut’s amendments to its privacy law to address health data, which became effective in 2023. As a result, additional compliance investment and potential business process changes may be required. In the event that we are subject to or affected by HIPAA, the CCPA or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition. Additional legislation proposed at the federal level and in other states, along with increased regulatory action, reflect a trend toward more st…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Outside the United States, many jurisdictions have or are in the process of enacting sweeping data privacy regulatory regimes. In Europe, the GDPR took effect in 2018, and is imposing stringent requirements for controllers and processors of personal data of individuals within the EEA, particularly with respect to clinical trials. The GDPR provides that EEA member states may make their own further laws and regulations limiting the processing of health data, which could limit our ability to use and share personal data or could cause our costs to increase and harm our business and financial condition. In addition, the GDPR increases the scrutiny that clinical trial sites located in the EEA should apply to transfers of personal data from such sites to countries that are considered to lack an adequate level of data protection, such as the United States. Legal developments have added complexity and compliance uncertainty regarding certain transfers of information from the EEA to the United States. Following EU court decisions, updated standard contractual clauses (“SCCs”) were adopted to account for these judicial decisions, imposing new requirements on data transfers. The revised SCCs must be used for relevant new data transfers from September 27, 2021, and existing SCC arrangements were required to be migrated by December 27, 2022. As supervisory authorities issue further guidance on personal data export mechanisms, and/or start taking enforcement action, we could suffer additional costs, complaints and/or regulatory investigations or fines, and/or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results. Further, on July 10, 2023, the European Commission adopted its adequacy decision on the E.U.-U.S. Data Privacy Framework (“DPF”). The decision, which took effect on the day of its adoption, concludes that the United States ensures an adequate level of protection for personal data transferred from the EEA to companies certified to the DPF. It is currently unclear how the future of DPF will evolve and what impact it will have on our international activities. The GDPR imposes substantial fines for breaches of data protection requirements, which can be up to four percent of global revenue for the preceding financial year or €20 million, whichever is greater, and it also confers a private right of action on data subjects for breaches of data protection requirements. Compliance with European data protection laws is a rigorous and time intensive process that may increase our cost of doing business, and despite those efforts, there is a risk that we may be subject to fines and penalties, litigation and reputational harm in connection with our European activities. From January 1, 2021, we have had to comply with th…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Outside the United States, many jurisdictions have or are in the process of enacting extensive data privacy regulations. In Europe, the GDPR took effect in 2018, and is imposing stringent data protection requirements for controllers and processors of personal data of individuals within the EEA, particularly with respect to clinical trials. The GDPR provides that EEA member states may make further laws and regulations limiting the processing of health data, which could limit our ability to use and share personal data or could cause our costs to increase and harm our business and financial condition. In addition, the GDPR increases the scrutiny that clinical trial sites located in the EEA should apply to transfers of personal data from such sites to countries that are considered to lack an adequate level of data protection, such as the United States. Legal developments have added complexity and compliance uncertainty regarding certain transfers of information from the EEA to the United States. Following EU court decisions, updated standard contractual clauses (“SCCs”) were adopted to account for these judicial decisions, imposing new requirements on data transfers. The revised SCCs must be used for relevant new data transfers from September 27, 2021, and existing SCC arrangements were required to be retired by December 27, 2022. As supervisory authorities issue further guidance on personal data export mechanisms, and/or start taking enforcement action, we could suffer additional costs, complaints and/or regulatory investigations or fines, and/or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results. Further, on July 10, 2023, the European Commission adopted its adequacy decision on the E.U.-U.S. Data Privacy Framework (“DPF”). The decision, which took effect on the day of its adoption, concludes that the United States ensures an adequate level of protection for personal data transferred from the EEA to companies certified to the DPF. It is currently unclear how the future of DPF will evolve and what impact it will have on our international activities. The GDPR imposes substantial fines for breaches of data protection requirements, which can be up to four percent of global revenue for the preceding financial year or €20 million, whichever is greater, and it also confers a private right of action on data subjects for breaches of data protection requirements. Compliance with European data protection laws is a rigorous and time intensive process that may increase our cost of doing business, and despite those efforts, there is a risk that we may be subject to fines and penalties, litigation and reputational harm in connection with our European activities. From January 1, 2021, we have had to comply with the…

Excerpt shortened here; the source contains the full paragraph.