Allogene Therapeutics Inc

Previous wording

Changes in funding for the FDA, the SEC and other government agencies including comparable foreign regulatory authorities could hinder their ability to hire and retain key leadership and other personnel, prevent new products and services from being developed or commercialized in a timely manner or otherwise prevent those agencies from performing normal functions on which the operation of our business may rely, which could negatively impact our business.*

Current wording

•Disruptions to the operations of the FDA, the SEC and other government agencies, including comparable foreign regulatory authorities, including those caused by funding shortages, in addition to substantial uncertainty regarding the current administration’s initiatives and staffing cuts and how these might impact the FDA, the SEC and other governmental agencies implementation of laws, regulations, policies and guidance, and its personnel, could hinder their ability to hire and retain key leadership and other personnel, prevent new products and services from being developed or commercialized in a timely manner or otherwise prevent those agencies from performing normal functions on which the operation of our business may rely, which could negatively impact our business.

Previous wording

•Our engineered allogeneic T cell product candidates represent a novel approach to cancer treatment that creates significant challenges for us.

Current wording

•Our engineered allogeneic T cell product candidates represent a novel approach to cancer treatment and treatment of autoimmune diseases, which creates significant challenges for us.

Previous wording

We are a clinical-stage biopharmaceutical company and investment in biopharmaceutical product development is highly speculative because it entails substantial upfront capital expenditures and significant risk that any potential product candidate will fail to demonstrate adequate efficacy or an acceptable safety profile, gain regulatory approval and become commercially viable. We are advancing an allogeneic CAR T platform of primarily early-stage product candidates and have no products approved for commercial sale and have not generated any revenue from product sales to date, and we will continue to incur significant research and development and other expenses related to our ongoing operations. To date, we have devoted substantially all of our resources to organizing and staffing our company, business planning, raising capital, securing related intellectual property rights, building our product manufacturing infrastructure, including a dedicated good manufacturing practices (GMP) manufacturing facility, manufacturing our clinical product candidates and conducting discovery, research and development activities for our programs. As a result, we are not profitable and have incurred net losses in each period since our inception. For the year ended December 31, 2023, we reported a net loss of $327.3 million. For the nine months ended September 30, 2024, we reported a net loss of $197.7 million. As of September 30, 2024, we had an accumulated deficit of $1.8 billion.

Current wording

We are a clinical-stage biopharmaceutical company and investment in biopharmaceutical product development is highly speculative because it entails substantial upfront capital expenditures and significant risk that any potential product candidate will fail to demonstrate adequate efficacy or an acceptable safety profile, gain regulatory approval and become commercially viable. We are advancing an allogeneic CAR T platform of primarily early-stage product candidates and have no products approved for commercial sale and have not generated any revenue from product sales to date, and we will continue to incur significant research and development and other expenses related to our ongoing operations. To date, we have devoted substantially all of our resources to organizing and staffing our company, business planning, raising capital, securing related intellectual property rights, building our product manufacturing infrastructure, including a dedicated good manufacturing practices (GMP) manufacturing facility, manufacturing our clinical product candidates and conducting discovery, research and development activities for our programs. As a result, we are not profitable and have incurred net losses in each period since our inception. For the year ended December 31, 2024, we reported a net loss of $257.6 million. For the three months ended March 31, 2025, we reported a net loss of $59.7 million. As of March 31, 2025, we had an accumulated deficit of $1.9 billion.

Previous wording

We expect to incur significant expenditures for the foreseeable future, and we expect these expenditures to increase as we continue our research and development of, and seek regulatory approvals for, product candidates based on our engineered allogeneic T cell platform. Because our allogeneic T cell product candidates are based on new technologies and will require the creation of inventory of mass-produced, off-the-shelf product, they will require extensive research and development and have substantial manufacturing and processing costs. In addition, costs to treat patients with relapsed or refractory cancer and to treat potential side effects that may result from our product candidates can be significant.

Current wording

We expect to incur significant expenditures for the foreseeable future, and we expect these expenditures to increase as we continue our research and development of, and seek regulatory approvals for, product candidates based on our engineered allogeneic CAR T cell platform. Because our allogeneic CAR T cell product candidates are based on new technologies and will require the creation of inventory of mass-produced, off-the-shelf product, they will require extensive research and development and have substantial manufacturing and processing costs. In addition, costs to treat patients with relapsed or refractory cancer and to treat potential side effects that may result from our product candidates can be significant.

Previous wording

As of September 30, 2024, we had $403.4 million in cash and cash equivalents and investments. Changing circumstances may cause us to consume capital significantly faster than we currently anticipate, and we may need to spend more money than currently expected because of circumstances beyond our control. We may also need to raise additional capital sooner than we currently anticipate if we choose to expand more rapidly than we presently plan. In any event, we will require additional capital for the further development and commercialization of our product candidates, including funding our internal manufacturing capabilities.

Current wording

As of March 31, 2025, we had $335.5 million in cash and cash equivalents and investments. Changing circumstances may cause us to consume capital significantly faster than we currently anticipate, and we may need to spend more money than currently expected because of circumstances beyond our control. We may also need to raise additional capital sooner than we currently anticipate if we choose to expand more rapidly than we presently plan. In any event, we will require additional capital for the further development and commercialization of our product candidates, including funding our internal manufacturing capabilities.

Previous wording

Under current law, federal net operating losses incurred in tax years beginning after December 31, 2017, may be carried forward indefinitely, but the deductibility of such federal net operating loss carryforwards in a taxable year is limited to 80% of taxable income in such year. Under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended, and corresponding provisions of state law, if a corporation undergoes an “ownership change” (generally defined as a greater than 50 percentage point change (by value) in the equity ownership of certain stockholders over a rolling three-year period), the corporation’s ability to use its pre-change net operating loss carryforwards and other pre-change tax attributes to offset its post-change income or taxes may be limited. As a result of our initial public offering (IPO) in October 2018 and private placements and other transactions that have occurred since our incorporation, we may have experienced an “ownership change”. We may also experience ownership changes in the future as a result of subsequent shifts in our stock ownership. We anticipate incurring significant additional net losses for the foreseeable future, and our ability to utilize net operating loss carryforwards associated with any such losses to offset future taxable income may be limited to the extent we incur future ownership changes. In addition, at the state level, there may be periods during which the use of net operating loss carryforwards is suspended or otherwise limited, which could accelerate or permanently increase state taxes owed. For example, California imposed limits on the usability of California state net operating losses to offset taxable income in tax years beginning after 2023 and before 2027. As a result, we may be unable to use all or a material portion of our net operating loss carryforwards and other tax attributes, which could adversely affect our future cash flows.

Current wording

U.S. federal net operating losses incurred in tax years beginning after December 31, 2017, may be carried forward indefinitely, but the deductibility of such federal net operating loss carryforwards in a taxable year is limited to 80% of taxable income in such year. Under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended, and corresponding provisions of state law, if a corporation undergoes an “ownership change” (generally defined as a greater than 50 percentage point change (by value) in the equity ownership of certain stockholders over a rolling three-year period), the corporation’s ability to use its pre-change net operating loss carryforwards and other pre-change tax attributes to offset its post-change income or taxes may be limited. As a result of our initial public offering (IPO) in October 2018 and private placements and other transactions that have occurred since our incorporation, we may have experienced an “ownership change”. We may also experience ownership changes in the future as a result of subsequent shifts in our stock ownership. We anticipate incurring significant additional net losses for the foreseeable future, and our ability to utilize net operating loss carryforwards associated with any such losses to offset future taxable income may be limited to the extent we incur future ownership changes. In addition, at the state level, there may be periods during which the use of net operating loss carryforwards is suspended or otherwise limited, which could accelerate or permanently increase state taxes owed. For example, California imposed limits on the usability of California state net operating losses to offset taxable income in tax years beginning after 2023 and before 2027. As a result, we may be unable to use all or a material portion of our net operating loss carryforwards and other tax attributes, which could adversely affect our future cash flows.

Previous wording

We have concentrated our research, development and manufacturing efforts on our engineered allogeneic T cell therapy and our future success depends on the successful development of this therapeutic approach. We are in the early stages of developing our platform and we have experienced significant development challenges, such as with the prior clinical hold by the FDA, and there can be no assurance that any development problems we have now or experience in the future will not cause significant delays or unanticipated costs, or that such development problems can be overcome. We may also experience delays in developing a sustainable, reproducible and scalable manufacturing process or transferring that process to commercial facilities or partners, which may prevent us from completing our clinical studies or commercializing our products on a timely or profitable basis, if at all.

Current wording

We have concentrated our research, development and manufacturing efforts on our engineered allogeneic CAR T cell therapy and our future success depends on the successful development of this therapeutic approach. We are in the early stages of developing our platform and we have experienced significant development challenges, such as with the prior clinical hold by the FDA, and there can be no assurance that any development problems we have now or experience in the future will not cause significant delays or unanticipated costs, or that such development problems can be overcome. We may also experience regulatory, operational, or technical challenges or delays when we seek to transition to commercial manufacturing, which may prevent us from commercializing our products, if approved, on a timely or profitable basis, if at all.

Previous wording

CAR T administration and/or the lymphodepletion that is required before administration of CAR T cells, may increase the risk of prolonged blood cell count suppression (cytopenia) or other adverse events including infections or inflammatory conditions such ascytokine release syndrome (CRS), immune effector cell-associated neurotoxicity syndrome (ICANS), and/or immune effector cell-associated hemophagocytic lymphohistiocytosis-like syndrome (IEC-HS), which can be life-threatening and results in death. These events have been observed in our clinical trials and have resulted in pausing enrollment or requiring protocol amendments. For example, in our ongoing ALLO-316 TRAVERSE trial, we implemented risk mitigation measures for IEC-HS, which delayed and increased the cost of conducting the clinical trial.

Current wording

CAR T administration and/or the lymphodepletion that is required before administration of CAR T cells, may increase the risk of prolonged blood cell count suppression (cytopenia) or other adverse events including infections or inflammatory conditions such as cytokine release syndrome (CRS), immune effector cell-associated neurotoxicity syndrome (ICANS), and/or immune effector cell-associated hemophagocytic lymphohistiocytosis-like syndrome (IEC-HS), which can be life-threatening and results in death. These events have been observed in our clinical trials and have resulted in pausing enrollment or requiring protocol amendments. For example, in our ongoing ALLO-316 TRAVERSE trial, we implemented risk mitigation measures for IEC-HS, which delayed and increased the cost of conducting the clinical trial.

Previous wording

In our ALPHA3 trial, we are advancing cema-cel for the treatment of patients with LBCL who have completed R-CHOP and have attained a remission, but who still test positive for minimal residual disease (MRD). As part of this trial, under Investigational Device Exemption (IDE), we are using an investigational assay developed by Foresight Diagnostics to determine if a patient is MRD positive. There is a risk that the assay may not function as intended and that the assay may not be sufficiently sensitive to detect the presence of low levels of MRD or sufficiently specific to avoid unacceptable rates of false positives. In addition, there are logistical risks with collecting and sending patient samples to Foresight Diagnostics for testing, and there is a risk that the MRD assay will not be timely performed on the patient samples. If the MRD assay does not function as intended or is not timely performed on patient samples, it could negatively impact the rate of enrollment or the clinical results of the ALPHA3 trial. In addition, we are reliant on Foresight Diagnostics to perform MRD testing. A delay or failure by Foresight Diagnostics to perform MRD testing may negatively impact our ability to conduct ALPHA3 trial as planned, or prevent us from conducting ALPHA3 trial.

Current wording

In our ALPHA3 trial, we are advancing cema-cel for the treatment of patients with LBCL who have completed standard first line therapy and have attained a remission, but who still test positive for minimal residual disease (MRD). As part of this trial, under Investigational Device Exemption (IDE), we are using an investigational assay developed by Foresight Diagnostics to determine if a patient is MRD positive. The MRD assay represents a novel approach to detecting the presence of minimal disease and the design of our trial is based on certain assumptions regarding the performance of the MRD assay, including assumptions regarding the anticipated MRD+ rate being consistent with published data. There is a risk that the assay may not function as intended and that the assay may not be sufficiently sensitive to detect the presence of low levels of MRD or sufficiently specific to avoid unacceptable rates of false positives. There is also a risk that the MRD+ rate observed in ALPHA3 may be lower than the previously reported rates as a result of the patient population screened, availability of sufficient patient test material, the performance of the test, and other factors that differ from previously reported rates. In addition, there are logistical risks with collecting and sending patient samples to Foresight Diagnostics for testing, and there is a risk that the MRD assay will not be timely performed on the patient samples. If the MRD assay does not function as intended (e.g., false negatives/positives, or the MRD+ rate is lower than expected), or if the MRD assay is not timely performed on patient samples, it could negatively impact the rate of enrollment, the clinical results of, or the feasibility of the ALPHA3 trial, or negatively impact the market opportunity for cema-cel. In addition, we are reliant on Foresight Diagnostics to perform MRD testing. A delay or failure by Foresight Diagnostics to perform MRD testing may negatively impact our ability to conduct ALPHA3 trial as planned, or prevent us from conducting ALPHA3 trial.

Previous wording

The clinical study requirements of the FDA, European Medicines Agency (EMA) and other comparable foreign regulatory authorities and the criteria these regulators use to determine the safety and efficacy of a product candidate are determined according to the type, complexity, novelty and intended use and market of the potential products. The regulatory approval process for novel product candidates such as ours can be more complex and consequently more expensive and take longer than for other, better known or extensively studied pharmaceutical or other product candidates. For example, the regulatory approval process for cema-cel based on our ALPHA3 trial is more complex because it incorporates a companion diagnostic. We also face additional challenges in obtaining regulatory approval for ALLO-647, which we use as part of our lymphodepletion regimen, and for which we would seek to obtain approval concurrently with approval of a CAR T cell product candidate. Approvals by the European Commission and FDA for existing autologous CAR T therapies, such as Kymriah®and Yescarta®, may not be indicative of what these regulators may require for approval of our therapies. Also, the use of healthy donor material in our allogeneic CAR T product candidates may create product variability challenges for us, and we do not yet fully understand the impact of donor variability on clinical outcomes.

Current wording

The clinical study requirements of the FDA, European Medicines Agency (EMA) and other comparable foreign regulatory authorities and the criteria these regulators use to determine the safety and efficacy of a product candidate are determined according to the type, complexity, novelty and intended use and market of the potential products. The regulatory approval process for novel product candidates such as ours can be more complex and consequently more expensive and take longer than for other, better known or extensively studied pharmaceutical or other product candidates. For example, the regulatory approval process for cema-cel based on our ALPHA3 trial is more complex because the regulatory agencies may require us to pair the approval of cema-cel with a companion diagnostic test. We also face additional challenges in obtaining regulatory approval for ALLO-647, which we use as part of our lymphodepletion regimen, and for which we would seek to obtain approval concurrently with approval of a CAR T cell product candidate. Approvals by the European Commission and FDA for existing autologous CAR T therapies, such as Kymriah® and Yescarta®, may not be indicative of what these regulators may require for approval of our therapies. Also, the use of healthy donor material in our allogeneic CAR T product candidates may create product variability challenges for us, and we do not yet fully understand the impact of donor variability on clinical outcomes.

Previous wording

More generally, approvals by any regulatory agency may not be indicative of what any other regulatory agency may require for approval or what such regulatory agencies may require for approval in connection with new product candidates. Moreover, our product candidates may not perform successfully in clinical trials or may be associated with adverse events that distinguish them from the autologous CAR T therapies that have previously been approved. For instance, allogeneic product candidates may result in graft-versus-host disease (GvHD) or chromosomal abnormalities not experienced with autologous products. Additionally, any Phase 2 trial results, such as in the ALPHA3 trial, may not be representative of Phase 1 results, which were based on limited patients and a patient population in an advanced stage or LBCL, and such Phase 2 trial results may not be accepted by the FDA as pivotal and sufficient for cema-cel approval, and additional trials may be required to establish that cema-cel is safe and effective. Even if we collect promising initial clinical data of our product candidates, longer-term data may reveal new adverse events or responses that are not durable. Unexpected clinical outcomes would significantly impact our business.

Current wording

More generally, approvals by any regulatory agency may not be indicative of what any other regulatory agency may require for approval or what such regulatory agencies may require for approval in connection with new product candidates. Moreover, our product candidates may not perform successfully in clinical trials or may be associated with adverse events that distinguish them from the autologous CAR T therapies that have previously been approved. For instance, allogeneic product candidates may result in graft-versus-host disease (GvHD) or chromosomal abnormalities not experienced with autologous products. Additionally, any Phase 2 trial results, such as in the ALPHA3 trial, may not be representative of Phase 1 results, which were based on limited patients and a patient population in an advanced stage or LBCL, and such Phase 2 trial results may not be accepted by the FDA as pivotal and sufficient for cema-cel approval, requiring us to open additional trials to establish that cema-cel is safe and effective. Even if we collect promising initial clinical data of our product candidates, longer-term data may reveal new adverse events or responses that are not durable. Unexpected clinical outcomes would significantly impact our business.

Previous wording

Our business and future success depends on our ability to advance clinical development, obtain regulatory approval of, and then successfully commercialize, our lead product candidates. Because cema-cel, ALLO-316, ALLO-715 and ALLO-605, products designed for use in patients with cancer, and ALLO-329, designed for use in patients with autoimmune disease, are or will be among the first allogeneic products to be evaluated in the clinic, the failure of any such product candidates, or the failure of other allogeneic T cell therapies, including for reasons due to safety, efficacy or durability, may impede our ability to develop our product candidates, and significantly influence physicians’ and regulators’ opinions in regard to the viability of our entire pipeline of allogeneic T cell therapies. For instance, all of our clinical trials were previously put on clinical hold due to an observation in the phase 1 portion of the ALPHA2 trial. While the clinical hold has been resolved, we could be subject to a clinical hold in the future due to unexpected observations, adverse patient outcomes or other issues.

Current wording

Our business and future success depends on our ability to advance clinical development, obtain regulatory approval of, and then successfully commercialize, our lead product candidates. Because cema-cel, ALLO-316, and ALLO-715, products designed for use in patients with cancer, and ALLO-329, designed for use in patients with autoimmune disease, are or will be among the first allogeneic products to be evaluated in the clinic, the failure of any such product candidates, or the failure of other allogeneic CAR T cell therapies, including for reasons due to safety, efficacy or durability, may impede our ability to develop our product candidates, and significantly influence physicians’ and regulators’ opinions in regard to the viability of our entire pipeline of allogeneic CAR T cell therapies. For instance, all of our clinical trials were previously put on clinical hold due to an observation in the phase 1 portion of the ALPHA2 trial. While the clinical hold has been resolved, we could be subject to a clinical hold in the future due to unexpected observations, adverse patient outcomes or other issues.

Previous wording

In addition, for any trials that may be completed, we cannot guarantee that the FDA or comparable foreign regulatory authorities will interpret the results as we do, and more trials could be required before we submit our product candidates for approval. For example, FDA may determine that results from our Phase 2 ALPHA3 trial are not sufficient to establish that cema-cel is safe and effective, and FDA may require additional trials. To the extent that the results of the trials are not satisfactory to the FDA or comparable foreign regulatory authorities for support of a marketing application, approval of our product candidates may be significantly delayed, or we may be required to expend significant additional resources, which may not be available to us, to conduct additional trials in support of potential approval of our product candidates.

Current wording

In addition, for any trials that may be completed, we cannot guarantee that the FDA or comparable foreign regulatory authorities will interpret the results as we do, and more trials could be required before we submit our product candidates for approval. For example, FDA may determine that results from our Phase 2 ALPHA3 trial are not sufficient to establish that cema-cel is safe and effective, and FDA may require additional trials. Additionally, although the EMA has previously granted Marketing Authorizations for products even when their clinical development programs did not involve any European sites, the regulatory landscape for CAR T products continues to evolve, and the EMA may require us to conduct clinical trials in the EU in order to obtain approval. To the extent that the results of the trials are not satisfactory to the FDA or comparable foreign regulatory authorities for support of a marketing application, approval of our product candidates may be significantly delayed, or we may be required to expend significant additional resources, which may not be available to us, to conduct additional trials in support of potential approval of our product candidates.

Previous wording

A pandemic or epidemic may also increase the risk of certain of the events described above and delay our development timelines. Any inability to successfully complete preclinical and clinical development could result in additional costs to us or impair our ability to generate revenue. In addition, as we continue to transition manufacturing of certain of our product candidates from our CDMO to our manufacturing facility, we will be required to meet certain regulatory conditions, such as establishing comparability with the product candidates manufactured at our CDMO, and our inability to meet such conditions would result in investment of additional resources, a delay in using our manufacturing facility for production of such product candidate and an extension of our clinical trial timelines. Similar conditions may apply if we make manufacturing or formulation changes to our product candidates. Clinical study delays could also shorten any periods during which our products have patent protection and may allow our competitors to bring products to market before we do, which could impair our ability to successfully commercialize our product candidates and may harm our business and results of operations.

Current wording

Tariffs and other trade restrictions, as well as a pandemic or epidemic may also increase the risk of certain of the events described above and delay our development timelines. Any inability to successfully complete preclinical and clinical development could result in additional costs to us or impair our ability to generate revenue. In addition, if we make manufacturing or formulation changes to our product candidates, we will be required to meet certain regulatory conditions, such as establishing comparability with the product candidates manufactured prior to such changes, and our inability to meet such conditions would result in investment of additional resources, a delay in our manufacturing of such product candidate and an extension of our clinical trial timelines. Clinical study delays could also shorten any periods during which our products have patent protection and may allow our competitors to bring products to market before we do, which could impair our ability to successfully commercialize our product candidates and may harm our business and results of operations.

Previous wording

We may experience difficulties in patient enrollment in our clinical trials for a variety of reasons. For example, as we progress the ALPHA2 CLL cohort, ALPHA3 and TRAVERSE trials, we may face enrollment challenges, including an unwillingness of sites or patients to participate, the exclusion of patients with certain disease characteristics or the ineligibility of patients that have received prior autologous CAR T therapies, which continue to gain adoption. The timely completion of clinical trials in accordance with their protocols depends, among other things, on our ability to enroll a sufficient number of patients. Because we anticipate a minority of the 1L patients we will test for MRD as part of screening for the ALPHA3 trial will be MRD positive, we will likely experience a very high screen failure rate, which will require screening a large number of patients to complete enrollment in the study. Because of the anticipated high screen failure rate, certain clinical trial sites may decline to participate in ALPHA3 or completion of enrollment may be significantly delayed. Future epidemics or pandemics may result in reduced enrollment and challenges to related clinical trial activities. The enrollment of patients may be more difficult, such as due to the perceptions of the safety of our product candidates, and will depend on many factors, including:

Current wording

We may experience difficulties in patient enrollment in our clinical trials for a variety of reasons. For example, as we progress the ALPHA3, TRAVERSE and RESOLUTION trials, we may face enrollment challenges, including an unwillingness of sites or patients to participate, the exclusion of patients with certain disease characteristics or the ineligibility of patients that have received prior autologous CAR T therapies, which continue to gain adoption. The timely completion of clinical trials in accordance with their protocols depends, among other things, on our ability to enroll a sufficient number of patients. Because we anticipate a minority of the 1L patients we will test for MRD as part of screening for the ALPHA3 trial will be MRD positive, we will likely experience a very high screen failure rate, which will require screening a large number of patients to complete enrollment in the study. Because of the anticipated high screen failure rate, certain clinical trial sites may decline to participate in ALPHA3 or completion of enrollment may be significantly delayed. Future epidemics or pandemics may result in reduced enrollment and challenges to related clinical trial activities. The enrollment of patients may be more difficult, such as due to the perceptions of the safety of our product candidates, and will depend on many factors, including:

Previous wording

Moreover, because our product candidates represent a departure from more commonly used methods for cancer treatment, potential patients and their doctors may be inclined to use conventional therapies, such as chemotherapy, monoclonal antibodies, hematopoietic cell transplantation as well as autologous CAR T cell therapies, rather than enroll patients in our clinical trial, including if our product candidates have or are perceived to have additional safety or efficacy risks or if using our product candidates may affect insurance coverage of conventional therapies. For instance, the development of autologous CAR T cell therapies continues to rapidly advance, including into earlier lines of treatment of LBCL and treatment of relapsed/refractory (R/R) multiple myeloma, as described under the section entitled "Business—Competition" included in our Annual Report. We also may experience risks associated with a new class of therapies, bispecific antibodies, which have been approved for multiple myeloma and LBCL. The compelling results and related approvals may impact our ability to enroll patients in our clinical trials. Moreover, patients eligible for allogeneic CAR T cell therapies but ineligible for autologous CAR T cell therapies due to aggressive cancer and inability to wait for autologous CAR T cell therapies may be at greater risk for complications and death from therapy or may experience a reduction in efficacy as compared to patients who are well enough and whose disease is sufficiently slow growing as to be eligible for autologous CAR T cell therapy.

Current wording

Moreover, because our product candidates represent a departure from more commonly used methods for treating cancer and autoimmune diseases, potential patients and their doctors may be inclined to use conventional therapies, such as chemotherapy, monoclonal antibodies, hematopoietic cell transplantation as well as autologous CAR T cell therapies for treating cancer or hydroxychloroquine, NSAIDs, immunosuppressants, corticosteroids, or other biologics for treating autoimmune diseases, rather than enroll patients in our clinical trial, including if our product candidates have or are perceived to have additional safety or efficacy risks or if using our product candidates may affect insurance coverage of conventional therapies. For instance, the development of autologous CAR T cell therapies continues to rapidly advance, including into earlier lines of treatment of LBCL and treatment of relapsed/refractory (R/R) multiple myeloma, as described under the section entitled "Business—Competition" included in our Annual Report. We also may experience risks associated with a new class of therapies, bispecific antibodies, which have been approved for multiple myeloma and LBCL. The compelling results and related approvals may impact our ability to enroll patients in our clinical trials. Moreover, patients eligible for allogeneic CAR T cell therapies but ineligible for autologous CAR T cell therapies due to aggressive cancer and inability to wait for autologous CAR T cell therapies may be at greater risk for complications and death from therapy or may experience a reduction in efficacy as compared to patients who are well enough and whose disease is sufficiently slow growing as to be eligible for autologous CAR T cell therapy.

Previous wording

Our projections of both the number of patients who have the cancers we are targeting, as well as the subset of patients with these cancers who have the potential to benefit from treatment with our product candidates, are based on our beliefs and estimates. These estimates have been derived from a variety of sources, including scientific literature, surveys of clinics, patient foundations, or market research and may prove to be incorrect. Further, new studies or therapies may change the estimated incidence or prevalence of these cancers. The number of patients may turn out to be lower than expected. Additionally, the potentially addressable patient population for our product candidates may be limited, such as due to the eligibility criteria of our trials, or may not be amenable to treatment with our product candidates.

Current wording

Our projections of both the number of patients who have the cancers or autoimmune diseases we are targeting, as well as the subset of patients with these cancers or autoimmune diseases who have the potential to benefit from treatment with our product candidates, are based on our beliefs and estimates. These estimates have been derived from a variety of sources, including scientific literature, surveys of clinics, patient foundations, or market research and may prove to be incorrect. Further, new studies or therapies may change the estimated incidence or prevalence of these cancers and autoimmune diseases. The number of patients may turn out to be lower than expected. Additionally, the potentially addressable patient population for our product candidates may be limited, such as due to the eligibility criteria of our trials (e.g., MRD+ rates lower than expected), or may not be amenable to treatment with our product candidates, all of which may negatively impact the potential market opportunity for our other product candidates, if approved.

Previous wording

•We may fail to successfully manufacture our product candidates, operate our own manufacturing facility, or obtain regulatory approval to utilize or commercialize from our manufacturing facility or at a contract development and manufacturing organization (CDMO), which could adversely affect our clinical trials and the commercial viability of our product candidates.

Current wording

We may fail to successfully manufacture our product candidates, operate our own manufacturing facility, or obtain regulatory approval to utilize or commercialize from our manufacturing facility or at a CDMO, which could adversely affect our clinical trials and the commercial viability of our product candidates.

Previous wording

We may not be able to achieve clinical or commercial manufacturing of our products on our own or at a CDMO, including the inability to satisfy demands for any of our product candidates. We have limited experience in managing the allogeneic T cell engineering process, and our allogeneic processes may be more difficult or more expensive than the approaches taken by our competitors. Until we complete our clinical trials, we cannot be sure that the manufacturing processes employed by us or the technologies that we incorporate for manufacturing will result in consistent T cell production that will be safe and effective.

Current wording

We may not be able to achieve clinical or commercial manufacturing of our products on our own or at a CDMO, including the inability to satisfy demands for any of our product candidates. We have limited experience in managing the allogeneic CAR T cell engineering process, and our allogeneic processes may be more difficult or more expensive than the approaches taken by our competitors. Until we complete our clinical trials, we cannot be sure that the manufacturing processes employed by us or the technologies that we incorporate for manufacturing will result in consistent T cell production that will be safe and effective.

Previous wording

We operate a manufacturing facility located in Newark, California that is designed to support our clinical trials and potential commercial production and worldwide distribution of allogeneic CAR T cell products for blood cancers, solid tumors and autoimmune diseases. Introducing any product manufactured at our manufacturing facility into an ongoing clinical trial would be subject to FDA review, and may result in increased costs and delays in conducting such trial, submitting a biologics license application (BLA) and/or gaining FDA or other comparable foreign regulatory authority approval. Similar conditions may apply if we make process changes to our product candidates, as we plan to do for our BCMA program. In addition, any process or raw material change could introduce unacceptable product variability and impact our ability to manufacture on a consistent and reproducible basis. Ultimately, any failure or delays in manufacturing and qualification of our product candidates at our CDMO or at our own manufacturing facility could delay our clinical trials.

Current wording

We operate CF1, a manufacturing facility located in Newark, California, that is designed to support our clinical trials and potential commercial production and worldwide distribution of allogeneic CAR T cell products for blood cancers, solid tumors and autoimmune diseases. Introducing any product manufactured at our manufacturing facility into an ongoing clinical trial would be subject to FDA review, and may result in increased costs and delays in conducting such trial, submitting a biologics license application (BLA) and/or gaining FDA or other comparable foreign regulatory authority approval. Similar conditions may apply if we make process changes to our product candidates, as we plan to do for our BCMA program. In addition, any process or raw material change could introduce unacceptable product variability and impact our ability to manufacture on a consistent and reproducible basis. Ultimately, any failure or delays in manufacturing and qualification of our product candidates at our CDMO or at our own manufacturing facility could delay our clinical trials.

Previous wording

Our ability to compete in the highly competitive biotechnology and pharmaceutical industries depends upon our ability to attract and retain highly qualified managerial, scientific, medical and other personnel. We are highly dependent on our management, including our Executive Chair, our President and Chief Executive Officer, our Executive Vice President, Research & Development and Chief Medical Officer, our Executive Vice President, Chief Technical Officer, our Chief Financial Officer, and our General Counsel. The loss of the services of any of our executive officers, other key employees, and other scientific and medical advisors, and our inability to find suitable replacements could result in delays in product development and harm our business.

Current wording

Our ability to compete in the highly competitive biotechnology and pharmaceutical industries depends upon our ability to attract and retain highly qualified managerial, scientific, medical and other personnel. We are highly dependent on our management, including our Executive Chair, our President and Chief Executive Officer, our Executive Vice President, Research & Development and Chief Medical Officer, our Senior Vice President and Chief Technical Officer, our Chief Financial Officer, and our General Counsel. The loss of the services of any of our executive officers, other key employees, and other scientific and medical advisors, and our inability to find suitable replacements could result in delays in product development and harm our business.

Previous wording

In January 2024, our board of directors approved a reduction in force affecting approximately 22% of our workforce, in order to preserve cash and prioritize investment in our core clinical programs. The reduction in force may result in unintended consequences and costs, such as the loss of institutional knowledge and expertise, attrition beyond the intended number of employees, decreased morale among our remaining employees, and the risk that we may not achieve the anticipated benefits of the reduction in force. In addition, while positions have been eliminated, certain functions necessary to our operations remain, and we might not successfully distribute the duties and obligations of our terminated employees among our remaining employees. The reduction in workforce could also make it difficult for us to pursue, or prevent us from pursuing, new opportunities and initiatives due to insufficient personnel, or require us to incur additional and unanticipated costs to hire new personnel to pursue such opportunities or initiatives. If we are unable to realize the anticipated benefits from the reduction in force, or if we experience significant adverse consequences from the reduction in force, our business, financial condition and results of operations may be materially adversely affected.

Current wording

In May 2025, our board of directors approved an approximately 28% reduction in our employee workforce in connection with a reduction in manufacturing operations and a reprioritization of resources to focus on our clinical programs. The reduction in force may result in unintended consequences and costs, such as the loss of institutional knowledge and expertise, attrition beyond the intended number of employees, decreased morale among our remaining employees, and the risk that we may not achieve the anticipated benefits of the reduction in force. In addition, while positions have been eliminated, certain functions necessary to our operations remain, and, to the extent required, we might not successfully distribute the duties and obligations of our terminated employees among our remaining employees. The reduction in workforce could also make it difficult for us to pursue, or prevent us from pursuing, new opportunities and initiatives due to insufficient personnel, or require us to incur additional and unanticipated costs to hire new personnel to pursue such opportunities or initiatives. If we are unable to realize the anticipated benefits from the reduction in force, or if we experience significant adverse consequences from the reduction in force, our business, financial condition and results of operations may be materially adversely affected.

Previous wording

As our development, manufacturing and commercialization plans and strategies develop, we have grown our employee base and allocated resources to multiple new functions, but in January 2024 we implemented a 22% reduction in force, and we will need to continue to manage the size of our organization to ensure that we can successfully execute our strategic plans. As our product candidates advance toward commercialization, we expect to hire employees in areas that include sales and marketing. Future growth imposes significant added responsibilities on members of management, including:

Current wording

As our development, manufacturing and commercialization plans and strategies develop, we have grown our employee base and allocated resources to multiple new functions, but in January 2024 and May 2025 we implemented a 22% and 28% reductions in force, respectively, and we will need to continue to manage the size of our organization to ensure that we can successfully execute our strategic plans. As our product candidates advance toward commercialization, we expect to hire employees in areas that include sales and marketing. Future growth imposes significant added responsibilities on members of management, including:

Previous wording

In particular, severe ransomware attacks are becoming increasingly prevalent and severe and can lead to significant interruptions, delays, or outages in our operations, disruptions to our clinical trials, loss of data (including data related to clinical trials), significant expense to restore data or systems, reputational loss and the diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. In addition, our reliance on third-party service providers could introduce new cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations. Such supply chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach to our information technology systems or the third-party information technology systems that support us and our services. Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.

Current wording

In particular, severe ransomware attacks are becoming increasingly prevalent and severe and can lead to significant interruptions, delays, or outages in our operations, disruptions to our clinical trials, loss of data (including data related to clinical trials), significant expense to restore data or systems, reputational loss and the diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. In addition, our reliance on third parties could introduce new cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations. Such supply chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach to our information technology systems or those of the third parties with whom we work. Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.

Previous wording

In the ordinary course of our business, we and the third parties with whom we work collect, process, receive, store, use, generate, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, process) proprietary, confidential and sensitive information, including personal data (including health information), intellectual property, trade secrets, information we collect about patients in connection with clinical trials, and proprietary business information owned or controlled by ourselves or other parties (collectively, sensitive information). We work with certain third parties, such as CROs and CDMOs, to process our proprietary, confidential and sensitive information. We may also share or receive sensitive information with our partners, CROs, CDMOs, or other third parties. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may also experience adverse consequences.

Current wording

We work with certain third parties, such as CROs and CDMOs, to operate critical business systems and process our proprietary, confidential and sensitive information. We also share or receive sensitive information with our CROs, CDMOs, or other third parties. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If the third parties with whom we work experience a security incident or are perceived to have experienced a security incident, we could experience adverse consequences. While we may be entitled to damages if the third parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award.

Previous wording

Although we have implemented security measures designed to protect against, mitigate, and remediate security incidents, there can be no assurance that these measures will be effective. We have experienced attempts to compromise our information technology systems or otherwise cause a security incident, but, to our knowledge, such attempts have been unsuccessful. In addition, from time to time, our vendors inform us of security incidents. To date, we have not determined that such incidents as reported to us were material. However, we may not have all information related to such incidents and future incidents could have an adverse impact on our business.

Current wording

Although we have implemented security measures designed to protect against, mitigate, and remediate security incidents, there can be no assurance that these measures will be effective.

Previous wording

We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We may, however, be unable to detect and remediate vulnerabilities in our information technology systems because such threats and techniques change frequently, are often sophisticated in nature, and may not be detected until after a security incident has occurred, meaning that such vulnerabilities could be exploited. Unremediated high risk or critical vulnerabilities pose material risks to our business that may be exploited and could result in a security incident. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. We may also face heightened physical and information technology risks due to our sharing office space with other tenants at certain of our sites. Any failure to prevent or mitigate security incidents or improper access to, use of, or disclosure of our clinical data or patients’ personal data could result in significant liability under state, federal, and international law and may cause a material adverse impact to our reputation, affect our ability to conduct our clinical trials and potentially disrupt our business. In addition, as many of our employees work from home at least part of the time and utilize network connections outside our premises, including while at home, or in transit, this poses increased risks to our information technology systems and data.

Current wording

We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We have not and may not in the future, however, detect and remediate all such vulnerabilities in our information technology systems, including on a timely basis, because such threats and techniques change frequently, are often sophisticated in nature, and may not be detected until after a security incident has occurred. Unremediated high risk or critical vulnerabilities pose material risks to our business that may be exploited and could result in a security incident. Further, we have experienced and may in the future experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. We also face heightened physical and information technology risks due to our sharing office space with other tenants at certain of our sites. Any failure to prevent or mitigate security incidents or improper access to, use of, or disclosure of our clinical data or patients’ personal data could result in significant liability under state, federal, and international law and may cause a material adverse impact to our reputation, affect our ability to conduct our clinical trials and potentially disrupt our business. In addition, as many of our employees work from home at least part of the time and utilize network connections outside our premises, including while at home, or in transit, this poses increased risks to our information technology systems and data.

Previous wording

Any of the previously identified or similar threats could cause a security incident or other interruption. A security incident or other interruption could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to manufacture or deliver our product candidates.

Current wording

Certain of the previously identified or similar threats have in the past, and any of the identified or similar threats may in the future, cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information. For example, we have been the target of unsuccessful phishing attempts in the past, and expect such attempts will continue in the future. In addition, from time to time, our vendors inform us of security incidents. For example, in November 2024, one of our vendors notified us that they had detected suspicious activity on their network that compromised several email accounts the vendor used to communicate with us. We took appropriate remedial measures, and based on our investigation, we concluded that the incident did not compromise our systems. To date, we have not determined that such incidents as reported to us were material. However, we may not have all information related to such incidents and future incidents could have an adverse impact on our business. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to manufacture or deliver our product candidates.

Previous wording

Applicable data protection laws, privacy policies, data protection obligations and public company disclosure obligations may require us, or we may choose, to notify relevant stakeholders, including affected individuals, regulators and investors, of certain security incidents, or to implement other requirements, such as providing credit monitoring. Such disclosures and compliance with such requirements are costly, and the disclosures or the failure to comply with such requirements could lead to adverse consequences. A security incident, whether perceived or actual, experienced by us or a third party with whom we work, may cause us to experience adverse consequences. These consequences may include: government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal data); litigation (including class claims) and mass arbitration; indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Whether a cybersecurity incident is reportable to our investors may not be straightforward, may take considerable time to determine, and may be subject to change as the investigation of the incident progresses, including changes that may significantly alter any initial disclosure that we provide. Moreover, experiencing a material cybersecurity incident and any mandatory disclosures could lead to negative publicity, loss of investor or partner confidence in the effectiveness of our cybersecurity measures, diversion of management’s attention, governmental investigations, lawsuits, and the expenditure of significant capital and other resources.

Current wording

Applicable data protection laws, privacy policies, data protection obligations and public company disclosure obligations may require us, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, regulators and investors, of certain security incidents, or to implement other requirements, such as providing credit monitoring. Such disclosures and compliance with such requirements are costly, and the disclosures or the failure to comply with such applicable requirements could lead to adverse consequences. A security incident, whether perceived or actual, experienced by us or a third party with whom we work, may cause us to experience adverse consequences. These consequences may include: government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal data); litigation (including class claims) and mass arbitration; indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Whether a cybersecurity incident is reportable to our investors may not be straightforward, may take considerable time to determine, and may be subject to change as the investigation of the incident progresses, including changes that may significantly alter any initial disclosure that we provide. Moreover, experiencing a material cybersecurity incident and any mandatory disclosures could lead to negative publicity, loss of investor or partner confidence in the effectiveness of our cybersecurity measures, diversion of management’s attention, governmental investigations, lawsuits, and the expenditure of significant capital and other resources.

Previous wording

The ability of the FDA or other comparable foreign regulatory authorities to review and approve new products can be affected by a variety of factors, including government budget and funding levels, ability to hire and retain key personnel and accept payment of user fees, statutory, regulatory and policy changes, and business disruptions, such as those caused by the COVID-19 pandemic. Average review times at the agency and comparable foreign regulatory authorities have fluctuated in recent years as a result. In addition, government funding of the SEC and other government agencies on which our operations may rely, including those that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable.

Current wording

The ability of the FDA or other comparable foreign regulatory authorities to review and approve new products or take action with respect to other regulatory matters can be affected by a variety of factors, including government budget and funding levels, the ability to hire and retain key personnel and accept payment of user fees, the availability of personnel and other resources, statutory, regulatory and policy changes that may otherwise affect the FDA’s or comparable foreign regulatory authorities’ ability to perform routine functions, and business disruptions, such as those caused by the COVID-19 pandemic. Average review times at the agency and comparable foreign regulatory authorities have fluctuated in recent years as a result. In addition, government funding of the SEC and other government agencies on which our operations may rely, including those that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable.

Previous wording

Disruptions at the FDA and other agencies or other comparable foreign regulatory authorities may also slow the time necessary for new drugs to be reviewed and/or approved by necessary government agencies, which would adversely affect our business. For example, over the last several years, the U.S. government has shut down several times and certain regulatory agencies, such as the FDA and the SEC, have had to furlough critical FDA, SEC and other government employees and stop critical activities. If a prolonged government shutdown occurs, it could significantly impact the ability of the FDA to timely review and process our regulatory submissions, which could have a material adverse effect on our business. Further, future government shutdowns could impact our ability to access the public markets and obtain necessary capital in order to properly capitalize and continue our operations.

Current wording

Disruptions at the FDA and other agencies or other comparable foreign regulatory authorities, including substantial leadership departures, personnel cuts, and policy changes, may also slow the time necessary for new drugs to be reviewed and/or approved by necessary government agencies, which would adversely affect our business. For example, over the last several years, the U.S. government has shut down several times and certain regulatory agencies, such as the FDA and the SEC, have had to furlough critical FDA, SEC and other government employees and stop critical activities. In addition, there have recently been terminations of large numbers of federal employees at various federal agencies, including the FDA. Changes and cuts in FDA staffing could result in delays in the FDA’s responsiveness or in its ability to review IND submissions or applications, issue regulations or guidance, or implement or enforce regulatory requirements in a timely fashion or at all. If a prolonged government shutdown occurs, it and/or employee terminations or resignations could significantly impact the ability of the FDA or other federal agencies to timely review and process our regulatory submissions, which could have a material adverse effect on our business. Further, future government shutdowns and/or employee terminations or resignations or could impact our ability to access the public markets and obtain necessary capital in order to properly capitalize and continue our operations, or to timely obtain patent protection in the U.S. to protect our technology.

Previous wording

We and the third parties with whom we work are subject to stringent and evolving privacy laws, regulations and standards as well as policies, contracts and other obligations related to data privacy and security. Our (or the third parties with whom we work) actual or perceived failure to comply with such obligations could lead to enforcement or litigation (including class claims) and mass arbitration demands, fines or penalties, a disruption of clinical trials or commercialization of products, reputational harm, or other adverse business effects.*

Current wording

We and the third parties with whom we work are subject to stringent and evolving U.S. and foreign laws, regulations, rules, and industry standards, as well as policies, contracts and other obligations related to data privacy and security. Our (or the third parties with whom we work) actual or perceived failure to comply with such obligations could lead to enforcement or litigation (including class claims) and mass arbitration demands, fines or penalties, a disruption of clinical trials or commercialization of products, reputational harm, or other adverse business effects.*

Previous wording

In the ordinary course of business, we process sensitive information. Accordingly, we are, or may become, subject to numerous data privacy and security obligations, such as various federal, state, local and foreign data privacy and security laws, regulations, guidance, and industry standards as well as external and internal privacy and security policies, contracts and other obligations that apply to data privacy and security and our processing of personal data and the processing of personal data on our behalf.

Current wording

In the ordinary course of business, we process sensitive information. Accordingly, we are, and may in the future become, subject to numerous data privacy and security obligations, such as various federal, state, local and foreign data privacy and security laws, regulations, guidance, and industry standards as well as external and internal privacy and security policies, contracts and other obligations that apply to data privacy and security and our processing of personal data and the processing of personal data on our behalf.

Previous wording

In the past few years, numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018 (CCPA), applies to personal data of consumers, business representatives, and employees who are California residents, and requires covered companies to provide specific disclosures in privacy notices and honor requests of such individuals to exercise certain privacy rights. The CCPA provides for fines of up to $7,500 per intentional violation and allows private litigants affected by certain data breaches to recover significant statutory damages. The CCPA and other comprehensive U.S. state privacy laws exempt some data processed in the context of clinical trials, but these developments may further complicate compliance efforts, and increase legal risk and compliance costs for us, the third parties with whom we work. Such laws may significantly impact our business activities, exemplifying the vulnerability of our business to evolving regulatory environment related to personal data and protected health information. Similar laws are being considered in other states, as well as at the federal and local levels, and we expect more states to pass similar laws in the future.

Current wording

In the past few years, numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018 (CCPA), applies to personal data of consumers, business representatives, and employees who are California residents, and requires covered companies to provide specific disclosures in privacy notices and honor requests of such individuals to exercise certain privacy rights. The CCPA provides for fines and allows private litigants affected by certain data breaches to recover significant statutory damages. The CCPA and other comprehensive U.S. state privacy laws exempt some data processed in the context of clinical trials, but these developments may further complicate compliance efforts, and increase legal risk and compliance costs for us and the third parties with whom we work. Such laws, if they become applicable to us in the future, may significantly impact our business activities, exemplifying the vulnerability of our business to evolving regulatory environment related to personal data and protected health information. Similar laws are being considered in other states, as well as at the federal and local levels, and we expect more states to pass similar laws in the future.

Previous wording

Outside the United States, there are an increasing number of laws, regulations and industry standards concerning governing privacy, data protection, information security and cross-border personal data transfers. For example, the European Union’s General Data Protection Regulation (EU GDPR), the United Kingdom’s GDPR (UK GDPR) (collectively, GDPR), and Australia’s Privacy Act, China’s Personal Information Protection Law (PIPL), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) (and various related provincial laws) and Anti-Spam Legislation (CASL) may apply to our operations and impose strict requirements for processing personal data.

Current wording

Outside the United States, an increasing number of laws, regulations and industry standards govern privacy, data protection, information security and cross-border personal data transfers. For example, the European Union’s General Data Protection Regulation (EU GDPR), the United Kingdom’s GDPR (UK GDPR) (collectively, GDPR), and Australia’s Privacy Act, China’s Personal Information Protection Law (PIPL), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) (and various related provincial laws) and Anti-Spam Legislation (CASL) impose strict requirements for processing personal data.

Previous wording

In the ordinary course of business, we may transfer personal data from Europe and other jurisdictions to the United States or other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal data to other countries. In particular, the European Economic Area (EEA) and the United Kingdom (UK) have significantly restricted the transfer of personal data to the United States and other countries whose privacy laws it generally believes are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA and UK’s standard contractual clauses, the UK’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. If there is no lawful manner for us to transfer personal data from the EEA, UK, or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we may face significant adverse consequences, including the interruption or degradation of our operations (such as by limiting our ability to conduct clinical trial activities in Europe and elsewhere), the need to relocate part of or all of our business or data processing activities to other jurisdictions (such as Europe) at significant expense, the inability to transfer data and work with partners, vendors and other third parties, increased exposure to regulatory actions, substantial fines, and injunctions against processing personal data necessary to operate our business. Additionally, companies that transfer personal data out of the EEA and UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have also ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations. The United States is also increasingly scrutinizing certain data transfers and may also impose certain data localization requirements, particularly if we transfer personal data to, or process personal data of residents of, high risk or sanctioned jurisdictions.

Current wording

In the ordinary course of business, we transfer personal data from Europe and other jurisdictions to the United States or other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal data to other countries. In particular, the European Economic Area (EEA) and the United Kingdom (UK) have significantly restricted the transfer of personal data to the United States and other countries whose privacy laws it generally believes are inadequate. Some jurisdictions have adopted, and others may in the future adopt, similarly stringent data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA and UK’s standard contractual clauses, the UK’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. If there is no lawful manner for us to transfer personal data from the EEA, UK, or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we may face significant adverse consequences, including the interruption or degradation of our operations (such as by limiting our ability to conduct clinical trial activities in Europe and elsewhere), the need to relocate part of or all of our business or data processing activities to other jurisdictions (such as Europe) at significant expense, the inability to transfer data and work with partners, vendors and other third parties, increased exposure to regulatory actions, substantial fines, and injunctions against processing personal data necessary to operate our business. Additionally, companies that transfer personal data out of the EEA and UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have also ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations. Additionally, the U.S. Department of Justice issued a rule entitled the Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons, which places additional restriction on certain data transactions involving countries of concern (e.g., China, Russia, Iran) and covered individuals (i.e., individuals and entities located in or controlled by individuals or entities located in those jurisdictions) that may impact certain busines…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

In addition, privacy advocates and industry groups have proposed, and may propose, standards with which we are legally or contractually bound to comply. We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. We publish privacy notices and other statements regarding data privacy and security. If any of our privacy notices or related materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences. Furthermore, our employees and personnel may use generative artificial intelligence technologies to perform their work, and the disclosure and use of personal data in such technologies is subject to various privacy laws and other privacy obligations.

Current wording

In addition, privacy advocates and industry groups have proposed, and may in the future propose, standards with which we are legally or contractually bound to comply. We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. We publish privacy notices and other statements regarding data privacy and security. Regulators in the United States are increasingly scrutinizing these statements, and if any of our privacy notices or related materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences. Furthermore, our employees and personnel may use generative artificial intelligence technologies to perform their work, and the disclosure and use of personal data in such technologies is subject to various privacy laws and other privacy obligations. Governments have passed and are likely to pass additional laws regulating generative AI. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and lawsuits.

Previous wording

Our obligations related to data privacy and security are quickly changing, becoming increasingly stringent fashion, and creating uncertainty. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. As a result, preparing for and complying with these obligations requires significant resources and may necessitate changes to our information technologies, systems and practices, as well as those of any third-party collaborators, service providers, contractors, consultants or other third parties that process personal data on our behalf.

Current wording

Obligations related to data privacy and security (including consumers’ data privacy expectations) are quickly changing, becoming increasingly stringent, and creating uncertainty. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. As a result, preparing for and complying with these obligations requires significant resources and may necessitate changes to our information technologies, systems and practices, as well as those of any third parties that process personal data on our behalf.

Previous wording

Although we endeavor to comply with our applicable privacy and security obligations, we may at times fail (or be perceived to have failed) to do so. Moreover, despite our efforts, we may not be successful in achieving compliance if our employees, third-party collaborators, service providers, contractors or consultants fail to comply with such obligations, which could negatively impact our business operations and compliance posture. If we or the third parties with whom we work fail, or are perceived to have failed, to address or comply with obligations related to data privacy and security obligations, we could face significant consequences including, but not limited to, government enforcement actions (e.g., investigations, fines, penalties, audits and inspections, and similar); litigation (including class-related claims) and mass arbitration demands; additional reporting requirements and/or oversight; temporary or permanent bans or restrictions on all or some processing of personal data; orders to destroy or not use personal data; and imprisonment of company officials. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: interruptions or stoppages in our business operations (including clinical trials); inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Current wording

Although we endeavor to comply with our applicable privacy and security obligations, we may at times fail (or be perceived to have failed) to do so. Moreover, despite our efforts, we may not be successful in achieving compliance if our employees, third-party collaborators, service providers, contractors or consultants fail to comply with such obligations, which could negatively impact our business operations and compliance posture. If we or the third parties with whom we work fail, or are perceived to have failed, to address or comply with applicable obligations related to data privacy and security, we could face significant consequences including, but not limited to, government enforcement actions (e.g., investigations, fines, penalties, audits and inspections, and similar); litigation (including class-related claims) and mass arbitration demands; additional reporting requirements and/or oversight; temporary or permanent bans or restrictions on all or some processing of personal data; orders to destroy or not use personal data; and imprisonment of company officials. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: interruptions or stoppages in our business operations (including clinical trials); inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Previous wording

Our engineered allogeneic T cell product candidates represent a novel approach to cancer treatment that creates significant challenges for us.*

Current wording

Our engineered allogeneic T cell product candidates represent a novel approach to cancer treatment and treatment of autoimmune diseases, which creates significant challenges for us.