Mineralys Therapeutics Inc

Previous wording

We have incurred significant operating losses since our inception and expect to incur significant losses for the foreseeable future. We do not have any products approved for sale and have not generated any revenue since our inception. If lorundrostat is not successfully developed, approved, and commercialized, we may never generate significant revenue, if we generate any revenue at all. Our net losses were $71.9 million and $29.8 million for the years ended December 31, 2023 and 2022, respectively. As of December 31, 2023, we had an accumulated deficit of $124.7 million. Substantially all of our losses have resulted from expenses incurred in connection with in-licensing intellectual property related to, and developing, lorundrostat and from general and administrative costs associated with our operations. Lorundrostat and any future product candidates will require substantial additional development time and resources before we would be able to apply for or receive regulatory approvals and begin generating revenue from product sales. We expect to continue to incur losses for the foreseeable future, and we anticipate these losses will increase substantially as we continue our development of, seek regulatory approval for, and potentially commercialize lorundrostat, seek to identify, assess, acquire, in-license intellectual property related to or develop additional product candidates, and operate as a public company.

Current wording

We have incurred significant operating losses since our inception and expect to incur significant losses for the foreseeable future. We do not have any products approved for sale and have not generated any revenue since our inception. If lorundrostat is not successfully developed, approved, and commercialized, we may never generate significant revenue, if we generate any revenue at all. Our net losses were $177.8 million and $71.9 million for the years ended December 31, 2024 and 2023, respectively. As of December 31, 2024, we had an accumulated deficit of $302.5 million. Substantially all of our losses have resulted from expenses incurred in connection with in-licensing intellectual property related to, and developing, lorundrostat and from general and administrative costs associated with our operations. Lorundrostat and any future product candidates will require substantial additional development time and resources before we would be able to apply for or receive regulatory approvals and begin generating revenue from product sales. We expect to continue to incur losses for the foreseeable future, and we anticipate these losses will increase substantially as we continue our development of, seek regulatory approval for, and potentially commercialize lorundrostat, seek to identify, assess, acquire, in-license intellectual property related to or develop additional product candidates, and operate as a public company.

Previous wording

The development of biopharmaceutical product candidates is capital-intensive. We expect our expenses to substantially increase in connection with our ongoing activities, particularly as we conduct our ongoing and planned clinical trials for lorundrostat and potentially seek regulatory approval for lorundrostat and any future product candidates we may develop. In addition, if we are able to progress lorundrostat through development and commercialization, we will be required to make commercial milestone and royalty payments to Mitsubishi Tanabe from whom we have in-licensed intellectual property related to lorundrostat. If we obtain regulatory approval for lorundrostat or any future product candidates, we also expect to incur significant commercialization expenses related to product manufacturing, marketing, sales, and distribution. Because the outcome of any clinical trial or preclinical study is highly uncertain, we cannot reliably estimate the actual amount of financing necessary to successfully complete the development and commercialization of lorundrostat or any future product candidates. Furthermore, we expect to incur additional costs associated with operating as a public company. Accordingly, we will need to obtain substantial additional funding in connection with our continuing operations. If we are unable to raise capital when needed or on attractive terms, we could be forced to delay, reduce, or eliminate our research and development programs or any future commercialization efforts.

Current wording

The development of biopharmaceutical product candidates is capital-intensive. We expect our expenses to substantially increase in connection with our ongoing activities, particularly as we conduct our ongoing and planned clinical trials for lorundrostat and potentially seek regulatory approval for lorundrostat and any future product candidates we may develop. In addition, if we are able to progress lorundrostat through development and commercialization, we will be required to make commercial milestone and royalty payments to Mitsubishi Tanabe from whom we have in-licensed intellectual property related to lorundrostat. If we obtain regulatory approval for lorundrostat or any future product candidates, we also expect to incur significant commercialization expenses related to product manufacturing, marketing, sales, and distribution. Because the outcome of any clinical trial or preclinical study is highly uncertain, we cannot reliably estimate the actual amount of financing necessary to successfully complete the development and commercialization of lorundrostat or any future product candidates. Furthermore, we expect to continue to incur additional costs associated with operating as a public company. Accordingly, we will need to obtain substantial additional funding in connection with our continuing operations. If we are unable to raise capital when needed or on attractive terms, we could be forced to delay, reduce, or eliminate our research and development programs or any future commercialization efforts.

Previous wording

Based on our current operating plan, we believe that our existing cash, cash equivalents, and investments will enable us to fund our operations for at least the next 12 months. We have based these estimates on assumptions that may prove to be wrong, and we could use our capital resources sooner than we currently expect. Our operating plans and other demands on our cash resources may change as a result of many factors currently unknown to us, and we may need to seek additional funds sooner than planned. Our existing capital may not be sufficient to complete development of lorundrostat, or any future product candidate, and we will require substantial capital in order to advance lorundrostat and any future product candidates through clinical trials, regulatory approval, and commercialization. Accordingly, we will need to obtain substantial additional funding in connection with our continuing operations. Our ability to raise additional funds may be adversely impacted by potential worsening global economic conditions and the disruptions to, and volatility in, the credit and financial markets in the United States and worldwide resulting from factors that include but are not limited to, inflation, geopolitical conflict in and around Ukraine, Israel, and other areas of the world, diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, and uncertainty about economic stability. If the equity and credit markets deteriorate, it may make any necessary debt or equity financing more difficult, more costly, and more dilutive. If we are unable to raise capital when needed or on attractive terms, we could be forced to delay, reduce, or eliminate our research and development programs or any future commercialization efforts, or even cease operations. We expect to finance our cash needs through public or private equity or debt financings or other capital sources, including potential collaborations, licenses, and other similar arrangements. In addition, we may seek additional capital due to favorable market conditions or strategic considerations even if we believe we have sufficient funds for our current or future operating plans. Attempting to secure additional financing may divert our management from our day-to-day activities, which may adversely affect our ability to develop lorundrostat and any future product candidates.

Current wording

Based on our current operating plan, we believe that our existing cash, cash equivalents, and investments will enable us to fund our operations for at least the next 12 months. We have based these estimates on assumptions that may prove to be wrong, and we could use our capital resources sooner than we currently expect. Our operating plans and other demands on our cash resources may change as a result of many factors currently unknown to us, and we may need to seek additional funds sooner than planned. Our existing capital may not be sufficient to complete development of lorundrostat, or any future product candidate, and we will require substantial capital in order to advance lorundrostat and any future product candidates through clinical trials, regulatory approval, and commercialization. Accordingly, we will need to obtain substantial additional funding in connection with our continuing operations. Our ability to raise additional funds may be adversely impacted by potential worsening global economic conditions and the disruptions to, and volatility in, the credit and financial markets in the United States and worldwide resulting from factors that include but are not limited to, geopolitical conflict in and around Ukraine, Israel, and other areas of the world, inflation, diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, and uncertainty about economic stability. If the equity and credit markets deteriorate, it may make any necessary debt or equity financing more difficult, more costly, and more dilutive. If we are unable to raise capital when needed or on attractive terms, we could be forced to delay, reduce, or eliminate our research and development programs or any future commercialization efforts, or even cease operations. We expect to finance our cash needs through public or private equity or debt financings or other capital sources, including potential collaborations, licenses, and other similar arrangements. In addition, we may seek additional capital due to favorable market conditions or strategic considerations even if we believe we have sufficient funds for our current or future operating plans. Attempting to secure additional financing may divert our management from our day-to-day activities, which may adversely affect our ability to develop lorundrostat and any future product candidates.

Previous wording

•requirements of regulatory authorities in any additional jurisdictions in which we may seek approval for lorundrostat and any future product candidates and our anticipated timing for seeking approval in such jurisdictions;

Current wording

•any additional jurisdictions in which we may seek approval for lorundrostat and any future product candidates and the timing of seeking approval in such jurisdictions;

Previous wording

•the costs associated with hiring additional personnel and consultants as our business grows, including additional executive officers and clinical development, regulatory, CMC quality, and commercial personnel;

Current wording

•the costs associated with hiring additional personnel and consultants as our business grows, including additional executive officers and clinical development, regulatory, manufacturing, quality, and commercial personnel;

Previous wording

•any delays and cost increases that may result from supply chain issues affected by any pandemics or geopolitical conflicts;

Current wording

•any delays and cost increases that may result from any pandemic or other healthcare emergency.

Previous wording

Conducting clinical trials and preclinical studies and potentially identifying future product candidates is a time-consuming, expensive, and uncertain process that takes years to complete, and we may never generate the necessary data or results required to obtain regulatory approval and commercialize lorundrostat or any future product candidates. If approved, lorundrostat and any future product candidates may not achieve commercial success. Our commercial revenue, if any, will initially be derived from sales of lorundrostat, which we do not

Current wording

Conducting clinical trials and preclinical studies and potentially identifying future product candidates is a time-consuming, expensive, and uncertain process that takes years to complete, and we may never generate the necessary data or results required to obtain regulatory approval and commercialize lorundrostat or any future

Previous wording

-33- expect to be commercially available for many years, if at all. Accordingly, we will need to continue to rely on additional financing to achieve our business objectives. Adequate additional financing may not be available to us on acceptable terms, or at all.

Current wording

-33- product candidates. If approved, lorundrostat and any future product candidates may not achieve commercial success. Our commercial revenue, if any, will initially be derived from sales of lorundrostat, which we do not expect to be commercially available for many years, if at all. Accordingly, we will need to continue to rely on additional financing to achieve our business objectives. Adequate additional financing may not be available to us on acceptable terms, or at all.

Previous wording

The results from preclinical studies or clinical trials of a product candidate or a competitor’s product candidate in the same class may not predict the results of later clinical trials of our product candidate, and interim, topline, or preliminary results of a clinical trial are not necessarily indicative of final results. Product candidates in later stages of clinical trials may fail to show the desired safety and efficacy characteristics despite having progressed through preclinical studies and initial clinical trials. For example, while we have completed the Target-HTN Phase 2 clinical trial of lorundrostat with 200 patients who had either completed eight weeks of treatment or withdrew from the trial, this population represents a small sample size relative to our targeted enrollment for our currently ongoing or future planned clinical trials. As a result, we do not know how lorundrostat will perform in currently ongoing or future clinical trials. It is not uncommon to observe results in

Current wording

The results from preclinical studies or clinical trials of a product candidate or a competitor’s product candidate in the same class may not predict the results of later clinical trials of our product candidate, and interim, topline, or preliminary results of a clinical trial are not necessarily indicative of final results. Product candidates in later stages of clinical trials may fail to show the desired safety and efficacy characteristics despite having progressed through preclinical studies and initial clinical trials. For example, while we have completed

Previous wording

-35- clinical trials that are unexpected based on earlier clinical trials and preclinical studies, and many product candidates fail in clinical trials despite very promising early results. A number of companies in the biopharmaceutical and biotechnology industries have suffered significant setbacks in clinical development even after achieving promising results in earlier studies. Such setbacks have occurred and may occur for many reasons, including, but not limited to: clinical sites and investigators may deviate from clinical trial protocols, whether due to lack of training or otherwise, and we may fail to detect any such deviations in a timely manner; patients may fail to adhere to any required clinical trial procedures, including any requirements for post-treatment follow-up; our product candidates may fail to demonstrate effectiveness or safety in certain patient subpopulations, which has not been observed in earlier trials due to limited sample size, lack of analysis, or otherwise; or our clinical trials may not adequately represent the patient populations we intend to treat, whether due to limitations in our trial designs or otherwise, such as where one patient subgroup is overrepresented in the clinical trial. There can be no assurance that we will not suffer similar setbacks despite the data we observed in earlier or ongoing studies. Based on negative or inconclusive results, we or any future collaborator may decide, or regulators may require us, to conduct additional preclinical studies or clinical trials, which would cause us to incur additional operating expenses and delays and may not be sufficient to support regulatory approval on a timely basis or at all.

Current wording

-35- the Target-HTN Phase 2 clinical trial of lorundrostat with 200 patients who had either completed eight weeks of treatment or withdrew from the trial, this population represents a small sample size relative to our currently ongoing or future planned clinical trials. As a result, we do not know how lorundrostat will perform in currently ongoing or future clinical trials. It is not uncommon to observe results in clinical trials that are unexpected based on earlier clinical trials and preclinical studies, and many product candidates fail in clinical trials despite very promising early results. A number of companies in the biopharmaceutical and biotechnology industries have suffered significant setbacks in clinical development even after achieving promising results in earlier studies. Such setbacks have occurred and may occur for many reasons, including, but not limited to: clinical sites and investigators may deviate from clinical trial protocols, whether due to lack of training or otherwise, and we may fail to detect any such deviations in a timely manner; patients may fail to adhere to any required clinical trial procedures, including any requirements for post-treatment follow-up; our product candidates may fail to demonstrate effectiveness or safety in certain patient subpopulations, which has not been observed in earlier trials due to limited sample size, lack of analysis, or otherwise; or our clinical trials may not adequately represent the patient populations we intend to treat, whether due to limitations in our trial designs or otherwise, such as where one patient subgroup is overrepresented in the clinical trial. There can be no assurance that we will not suffer similar setbacks despite the data we observed in earlier or ongoing studies. Based on negative or inconclusive results, we or any future collaborator may decide, or regulators may require us, to conduct additional preclinical studies or clinical trials, which would cause us to incur additional operating expenses and delays and may not be sufficient to support regulatory approval on a timely basis or at all.

Previous wording

United States. Subject enrollment, a significant factor in the timing of clinical trials, is affected by many factors, including the size and characteristics of the patient population, the proximity of patients to clinical sites, the eligibility and exclusion criteria for the trial, the design of the clinical trial, the ability to obtain and maintain informed consents, the risk that enrolled patients will not complete a clinical trial, our ability to recruit clinical trial investigators with the appropriate competencies and experience, and competing clinical trials and clinicians’ and patients’ perceptions as to the potential advantages and risks of the product candidate being studied in relation to other available therapies, including any new products that may be approved for the indications we are investigating as well as any product candidates under development. We will be required to identify and enroll a sufficient number of patients for each of our clinical trials and monitor such patients adequately during and after treatment. Potential patients for any planned clinical trials may not be adequately diagnosed or identified with the diseases that we are targeting, which could adversely impact the outcomes of our trials and could have safety concerns for the potential patients. Potential patients for any planned clinical trials may also not meet the entry criteria for such trials.

Current wording

Successful and timely completion of clinical trials will require that we identify and enroll a specified number of patients for each of our clinical trials. We may not be able to initiate or continue clinical trials for lorundrostat or any future product candidates if we are unable to identify and enroll a sufficient number of eligible patients to participate in these trials as required by the FDA or similar regulatory authorities outside the United States. Subject enrollment, a significant factor in the timing of clinical trials, is affected by many factors, including the size and characteristics of the patient population, the proximity of patients to clinical sites, the eligibility and exclusion criteria for the trial, the design of the clinical trial, the ability to obtain and maintain informed consents, the risk that enrolled patients will not complete a clinical trial, our ability to recruit clinical trial investigators with the appropriate competencies and experience, and competing clinical trials and clinicians’ and patients’ perceptions as to the potential advantages and risks of the product candidate being studied in relation to other available therapies, including any new products that may be approved for the indications we are investigating as well as any product candidates under development. We will be required to identify and enroll a sufficient number of patients for each of our clinical trials and monitor such patients adequately during and after treatment. Potential patients for any planned clinical trials may not be adequately diagnosed or identified with the diseases that we are targeting, which could adversely impact the outcomes of our trials and could have safety concerns for the potential patients. Potential patients for any planned clinical trials may also not meet the entry criteria for such trials.

Previous wording

As is the case with biopharmaceuticals generally, it is likely that there may be adverse side effects associated with lorundrostat or any future product candidates’ use. Results of our clinical trials could reveal a high and unacceptable severity and prevalence of expected or unexpected side effects or unexpected characteristics. Undesirable side effects caused by our product candidates when used alone or in combination with approved or investigational drugs could cause us or regulatory authorities to interrupt, delay, or halt clinical trials and could result in a more restrictive label, or lead to the delay or denial of regulatory approval by the FDA or comparable foreign regulatory authorities. The drug-related side effects could affect patient recruitment or the ability of enrolled patients to complete the trial or result in potential product liability claims. Any of these occurrences could severely harm our business, prospects, operating results, and financial condition.

Current wording

-39- high and unacceptable severity and prevalence of expected or unexpected side effects or unexpected characteristics. Undesirable side effects caused by our product candidates when used alone or in combination with approved or investigational drugs could cause us or regulatory authorities to interrupt, delay, or halt clinical trials and could result in a more restrictive label, or lead to the delay or denial of regulatory approval by the FDA or comparable foreign regulatory authorities. The drug-related side effects could affect patient recruitment or the ability of enrolled patients to complete the trial or result in potential product liability claims. Any of these occurrences could severely harm our business, prospects, operating results, and financial condition.

Previous wording

Because we have limited financial and managerial resources, we focus on specific indications for lorundrostat. We may fail to generate additional clinical development opportunities for lorundrostat for a number of reasons, including that lorundrostat may in indications we are seeking or may seek in the future, on further study, be shown to have harmful side effects, limited to no efficacy, or other characteristics that suggest it is unlikely to receive marketing approval and achieve market acceptance in such additional potential indications. Our resource allocation and other decisions may cause us to fail to identify and capitalize on viable potential product candidates or additional indications for lorundrostat. Our spending on current and future research and development programs for new product candidates or additional indications for existing product

Current wording

Because we have limited financial and managerial resources, we focus on specific indications for lorundrostat. We may fail to generate additional clinical development opportunities for lorundrostat for a number of reasons, including that lorundrostat may in indications we are seeking or may seek in the future, on further study, be shown to have harmful side effects, limited to no efficacy, or other characteristics that suggest it is unlikely to receive marketing approval and achieve market acceptance in such additional potential indications. Our resource allocation and other decisions may cause us to fail to identify and capitalize on viable potential product candidates or additional indications for lorundrostat. Our spending on current and future research and development programs for new product candidates or additional indications for existing product candidates may not yield any commercially viable product candidates or indications. If we do not accurately evaluate the commercial potential or target market for a particular indication or product candidate, we may fail to develop such product candidate or indication, or relinquish valuable rights to that product candidate through collaborations, license agreements, and other similar arrangements in cases where it would have been more advantageous for us to retain sole development and commercialization rights to such indication or product candidate, or negotiate less advantageous terms for any such arrangements than is optimal.

Previous wording

We are conducting and intend to conduct one or more of our clinical trials for our lorundrostat product candidate outside the United States. The acceptance of study data from clinical trials conducted outside the United States or another jurisdiction by the FDA or comparable foreign regulatory authorities may be subject to certain conditions or may not be accepted at all. In cases where data from foreign clinical trials are intended to serve as the sole basis for marketing approval in the United States, the FDA will generally not approve the application on the basis of foreign data alone unless (i) the data are applicable to the U.S. population and U.S. medical practice; (ii) the trials were performed by clinical investigators of recognized competence and pursuant to GCP regulations; and (iii) the data may be considered valid without the need for an on-site inspection by the FDA, or if the FDA considers such inspection to be necessary, the FDA is able to validate the data through an on-site inspection or other appropriate means. In addition, even where the foreign study data are not intended to serve as the sole basis for approval, the FDA will not accept the data as support for an application for marketing approval unless the study is well-designed and well-conducted in accordance with GCP requirements and the FDA is able to validate the data from the study through an onsite inspection if deemed necessary. We are currently conducting and plan to conduct part of our future clinical program for lorundrostat in the European Union. While data from clinical trial sites in such countries will not serve as the sole basis for FDA approval, any foreign data we use as part of any NDA submission will be subject to the foregoing FDA requirements and standards. Many foreign regulatory authorities have similar approval requirements. There can be no assurance that the FDA or any comparable foreign regulatory authority will accept data from trials conducted outside of the United States or the applicable jurisdiction. If the FDA or any comparable foreign regulatory authority does not accept such data, it would result in the need for additional trials, which could be costly and time-consuming, and which may result in current or future product candidates that we may develop not receiving approval for commercialization in the applicable jurisdiction. In addition, such foreign trials would be subject to the applicable local laws of the foreign jurisdictions where the trials are conducted, which may increase costs or time required to complete the clinical trial.

Current wording

We are conducting and intend to conduct one or more of our clinical trials for our lorundrostat product candidate outside the United States. The acceptance of study data from clinical trials conducted outside the United States or another jurisdiction by the FDA or comparable foreign regulatory authorities may be subject to certain conditions or may not be accepted at all. In cases where data from foreign clinical trials are intended to serve as the sole basis for marketing approval in the United States, the FDA will generally not approve the application on the basis of foreign data alone unless (i) the data are applicable to the U.S. population and U.S. medical practice; (ii) the trials were performed by clinical investigators of recognized competence and pursuant to GCP regulations; and (iii) the data may be considered valid without the need for an on-site inspection by the FDA, or if the FDA considers such inspection to be necessary, the FDA is able to validate the data through an on-site inspection or other appropriate means. In addition, even where the foreign study data are not intended to serve as the sole basis for approval, the FDA will not accept the data as support for an application for marketing approval unless the study is well-designed and well-conducted in accordance with GCP requirements and the FDA is able to validate the data from the study through an onsite inspection if deemed necessary. We are currently conducting and plan to conduct part of our future clinical program for lorundrostat in the European Union. While data from clinical trial sites in such countries will not serve as the sole basis for FDA approval, any foreign data we use as part of any NDA submission will be subject to the foregoing FDA requirements and standards. Many foreign regulatory authorities have similar approval requirements. There can be no assurance that the FDA or any comparable foreign regulatory authority will accept data from trials conducted outside of the United States or the applicable jurisdiction. If the FDA or any comparable foreign regulatory authority does not accept such data, it would result in the need for additional trials, which could be costly and time-consuming,

Previous wording

In addition, others, including regulatory authorities, may not accept or agree with our assumptions, estimates, calculations, conclusions, or analyses or may interpret or weigh the importance of data differently, which could impact the value of the particular program, the approvability, or commercialization of the particular product candidate or product and our company in general. Moreover, the information we choose to publicly disclose regarding a particular study or clinical trial is based on what is typically extensive information, and you or others may not agree with what we determine is material or otherwise appropriate information to include in our disclosure, and any information we determine not to disclose may ultimately be deemed significant with respect to future decisions, conclusions, views, activities, or otherwise regarding a particular drug, product candidate, or our business. If the interim, topline, or preliminary data that we report differ from actual results, or if others, including regulatory authorities, disagree with the conclusions reached, our ability to obtain approval for, and commercialize, lorundrostat and any future product candidates may be harmed, which could harm our business, operating results, prospects or financial condition.

Current wording

In addition, others, including regulatory authorities, may not accept or agree with our assumptions, estimates, calculations, conclusions, or analyses or may interpret or weigh the importance of data differently, which could impact the value of the particular program, the approvability, or commercialization of the particular product candidate or product and our company in general. Moreover, the information we choose to publicly disclose regarding a particular study or clinical trial is based on what is typically extensive information, and you or others may not agree with what we determine is material or otherwise appropriate information to include in our disclosure, and any information we determine not to disclose may ultimately be deemed significant with respect to future decisions, conclusions, views, activities, or otherwise regarding a particular drug, product candidate, or our business. If the interim, topline, or preliminary data that we report differ from actual results, or if others, including regulatory authorities, disagree with the conclusions reached, our ability to obtain approval

Previous wording

As product candidates progress through clinical trials to marketing approval and commercialization, it is common that various aspects of the development program, such as manufacturing methods and formulation, are altered along the way in an effort to optimize safety, efficacy, yield, and manufacturing batch size, minimize costs and achieve consistent quality and results. For example, the manufacturing process being used to produce clinical material for our planned clinical trials is different than that used in prior trials of lorundrostat. There can be no assurance that such changes will achieve these intended objectives. These changes and any future changes we may make to lorundrostat or any future product candidates may also cause such candidates to perform

Current wording

As product candidates progress through clinical trials to marketing approval and commercialization, it is common that various aspects of the development program, such as manufacturing methods and formulation, are altered along the way in an effort to optimize safety, efficacy, yield, and manufacturing batch size, minimize costs and achieve consistent quality and results. For example, the manufacturing process being used to produce clinical material for our ongoing or future clinical trials is different than that used in prior trials of lorundrostat. There can be no assurance that such changes will achieve these intended objectives. These changes and any future changes we may make to lorundrostat or any future product candidates may also cause such candidates to perform differently and affect the results of future clinical trials conducted with the altered materials. Such changes or related unfavorable clinical trial results could delay initiation or completion of additional clinical trials, require the conduct of bridging studies or clinical trials or the repetition of one or more studies or clinical trials, increase development costs, delay or prevent potential marketing approval, and jeopardize our ability to commercialize lorundrostat or any future product candidates, if approved, and generate revenue.

Previous wording

Separately, in response to the COVID-19 pandemic, the FDA postponed most inspections of domestic and foreign manufacturing facilities at various points. Even though the FDA has since resumed standard inspection operations of domestic facilities, the FDA has continued to monitor and implement changes to its inspectional activities to ensure the safety of its employees and those of the firms it regulates as it adapts to the evolving COVID-19 pandemic, and any resurgence of the virus or emergence of new variants may lead to further inspectional delays. Regulatory authorities outside the United States may adopt similar restrictions or other policy measures in the future. If a prolonged government shutdown occurs, or if future global health concerns prevent the FDA or other regulatory authorities from conducting their regular inspections, reviews, or other regulatory activities, it could significantly impact the ability of the FDA or other regulatory authorities to timely review and process our regulatory submissions, which could have a material adverse effect on our business.

Current wording

Separately, in response to the COVID-19 pandemic, the FDA postponed most inspections of domestic and foreign manufacturing facilities at various points. While the COVID-19 pandemic is no longer having a significant disruptive impact on the FDA’s standard inspection operations of domestic and foreign manufacturing facilities, it is possible another global pandemic could result in similar issues faced during the COVID-19 pandemic. Regulatory authorities outside the United States may adopt similar restrictions or other policy measures in the future. If a prolonged government shutdown occurs, or if future global health concerns prevent the FDA or other regulatory authorities from conducting their regular inspections, reviews, or other regulatory activities, it could significantly impact the ability of the FDA or other regulatory authorities to timely review and process our regulatory submissions, which could have a material adverse effect on our business.

Previous wording

Pursuant to the Mitsubishi License with Mitsubishi Tanabe, we have, among other things, secured an exclusive, royalty-bearing license from Mitsubishi Tanabe under certain patents and know-how relating to lorundrostat to commercialize lorundrostat globally for the prevention, treatment, diagnosis, detection, monitoring, or predisposition testing with respect to the Field. The Mitsubishi License expires on a country-by-country basis and Lorundrostat Product-by-Lorundrostat Product basis upon the expiration of the applicable royalty term with respect to each Lorundrostat Product in each country, as applicable, or in its entirety upon the expiration of the royalty term with respect to the last Lorundrostat Product commercialized in the last country, unless terminated earlier. We may terminate the Mitsubishi License in its entirety or on a Lorundrostat Product-by-Lorundrostat Product or country-by-country basis at our discretion upon (i) ninety days prior written notice to Mitsubishi Tanabe with respect to any country for which there is not a Lorundrostat Product approved by the regulatory authority; and (ii) one hundred and eighty days prior written notice to Mitsubishi Tanabe with respect to any country for which there is a Lorundrostat Product approved by the regulatory authority. We and Mitsubishi Tanabe may terminate the Mitsubishi License in the case of the other party’s insolvency, or upon

Current wording

-43- lorundrostat to commercialize lorundrostat globally for the prevention, treatment, diagnosis, detection, monitoring, or predisposition testing with respect to the Field. The Mitsubishi License expires on a country-by-country basis and Lorundrostat Product-by-Lorundrostat Product basis upon the expiration of the applicable royalty term with respect to each Lorundrostat Product in each country, as applicable, or in its entirety upon the expiration of the royalty term with respect to the last Lorundrostat Product commercialized in the last country, unless terminated earlier. We may terminate the Mitsubishi License in its entirety or on a Lorundrostat Product-by-Lorundrostat Product or country-by-country basis at our discretion upon (i) ninety days prior written notice to Mitsubishi Tanabe with respect to any country for which there is not a Lorundrostat Product approved by the regulatory authority; and (ii) one hundred and eighty days prior written notice to Mitsubishi Tanabe with respect to any country for which there is a Lorundrostat Product approved by the regulatory authority. We and Mitsubishi Tanabe may terminate the Mitsubishi License in the case of the other party’s insolvency, or upon prior written notice within a specified time period for the other party’s material uncured breach. Mitsubishi Tanabe may terminate the Mitsubishi License in its entirety if (i) we challenge the licensed patents, or assist any third party in challenging such patents; or (ii) have not initiated regulatory consultation for the first global clinical trials of lorundrostat in at least one major market country within a specified amount of time. In addition, if any of the regulatory milestones or other cash payments become due under the terms of the Mitsubishi License, and we do not have sufficient funds available to meet our obligations, Mitsubishi Tanabe has the right to terminate the Mitsubishi License upon our uncured failure to pay Mitsubishi Tanabe. If the Mitsubishi License is terminated, we would lose our rights to develop and commercialize lorundrostat, which in turn would have a material adverse effect on our business, financial condition, results of operations, and prospects, including, but not limited to, cessation of our operations to the extent we are unable to develop other product candidates at the time of such termination.

Previous wording

We are dependent on third parties to conduct our clinical trials and preclinical studies. Specifically, we rely on, and intend to continue to rely on, medical institutions, clinical investigators, CROs, and consultants to conduct preclinical studies and clinical trials, in each case in accordance with our clinical protocols and regulatory requirements. These CROs, investigators, and other third parties play a significant role in the conduct and timing of these trials and subsequent collection and analysis of data. Though we expect to carefully manage our relationships with our CROs, investigators, and other third parties, there can be no assurance that we will not encounter challenges or delays in the future or that these delays or challenges will not have a material adverse impact on our business, financial condition, and prospects. Further, while we have and will have agreements governing the activities of our third-party contractors, we have limited influence over their actual performance. Nevertheless, we are responsible for ensuring that each of our clinical trials is conducted in accordance with the applicable protocol and legal, regulatory, and scientific standards and requirements, and our reliance on our CROs and other third parties does not relieve us of our regulatory responsibilities. In addition, we and our CROs are required to comply with GLP and GCP requirements, which are regulations and guidelines enforced by the FDA and comparable foreign regulatory authorities for lorundrostat and any future product candidates in clinical development. Regulatory authorities enforce these GCPs through periodic inspections of trial sponsors, principal investigators, and trial sites. If we or any of our CROs or trial sites fail to comply with applicable GLP or GCP or other requirements, the clinical data generated in our clinical trials may

Current wording

-44- not encounter challenges or delays in the future or that these delays or challenges will not have a material adverse impact on our business, financial condition, and prospects. Further, while we have and will have agreements governing the activities of our third-party contractors, we have limited influence over their actual performance. Nevertheless, we are responsible for ensuring that each of our clinical trials is conducted in accordance with the applicable protocol and legal, regulatory, and scientific standards and requirements, and our reliance on our CROs and other third parties does not relieve us of our regulatory responsibilities. In addition, we and our CROs are required to comply with GLP and GCP requirements, which are regulations and guidelines enforced by the FDA and comparable foreign regulatory authorities for lorundrostat and any future product candidates in clinical development. Regulatory authorities enforce these GCPs through periodic inspections of trial sponsors, principal investigators, and trial sites. If we or any of our CROs or trial sites fail to comply with applicable GLP or GCP or other requirements, the clinical data generated in our clinical trials may be deemed unreliable, and the FDA or comparable foreign regulatory authorities may require us to perform additional clinical trials before approving our marketing applications. For example, the conduct of the lorundrostat Phase 2 clinical trial at one of our clinical sites was terminated by the IRB following our report to the IRB regarding such site’s failure to comply with GCP, which we observed during one of our routine clinical site inspections. Furthermore, our clinical trials must be conducted with products produced under cGMP regulations. Failure to comply with these regulations may require us to repeat clinical trials, which would delay the regulatory approval process.

Previous wording

We do not own or operate manufacturing facilities and have no plans to develop our own clinical or commercial-scale manufacturing capabilities. We rely on a third party and expect to continue to rely on third parties for the manufacture of lorundrostat and related raw materials for clinical development, as well as for commercial manufacture if lorundrostat or any future product candidates receive marketing approval. The facilities used by third-party manufacturers to manufacture lorundrostat must be approved by the FDA and any comparable foreign regulatory authority pursuant to inspections that will be conducted after we submit an NDA to the FDA or any comparable submission to a foreign regulatory authority. We do not control the manufacturing process of, and are completely dependent on, third-party manufacturers for compliance with cGMP requirements for manufacture of products. If these third-party manufacturers cannot successfully manufacture material that conforms to our specifications and the strict regulatory requirements of the FDA or any comparable foreign regulatory authority, they will not be able to secure and/or maintain regulatory approval for their manufacturing facilities. In addition, we have no control over the ability of third-party manufacturers to maintain adequate quality control, quality assurance, and qualified personnel. If the FDA or any comparable foreign regulatory authority does not approve these facilities for the manufacture of lorundrostat or if it

Current wording

-45- commercial manufacture if lorundrostat or any future product candidates receive marketing approval. The facilities used by third-party manufacturers to manufacture lorundrostat must be approved by the FDA and any comparable foreign regulatory authority pursuant to inspections that will be conducted after we submit an NDA to the FDA or any comparable submission to a foreign regulatory authority. We do not control the manufacturing process of, and are completely dependent on, third-party manufacturers for compliance with cGMP requirements for manufacture of products. If these third-party manufacturers cannot successfully manufacture material that conforms to our specifications and the strict regulatory requirements of the FDA or any comparable foreign regulatory authority, they will not be able to secure and/or maintain regulatory approval for their manufacturing facilities. In addition, we have no control over the ability of third-party manufacturers to maintain adequate quality control, quality assurance, and qualified personnel. If the FDA or any comparable foreign regulatory authority does not approve these facilities for the manufacture of lorundrostat or if it withdraws any such approval in the future, we may need to find alternative manufacturing facilities, which would significantly impact our ability to develop, obtain regulatory approval for, or market lorundrostat, if approved. Our failure, or the failure of our third-party manufacturers, to comply with applicable regulations could result in sanctions being imposed on us, including clinical holds, fines, injunctions, civil penalties, delays, suspension, or withdrawal of approvals, seizures or recalls of lorundrostat or products, operating restrictions, and criminal prosecutions, any of which could significantly and adversely affect supplies of our products.

Previous wording

Any performance failure on the part of our existing or future manufacturers could delay clinical development or marketing approval, or jeopardize our ability to commence or continue commercialization of lorundrostat or any future product candidates, and any related remedial measures may be costly or time-consuming to implement. We do not currently have arrangements in place for redundant supply or a second source for all required raw materials used in the manufacture of our product candidates. If our existing or future

Current wording

Any performance failure on the part of our existing or future manufacturers could delay clinical development or marketing approval, or jeopardize our ability to commence or continue commercialization of lorundrostat or any future product candidates, and any related remedial measures may be costly or time-consuming to implement. We do not currently have arrangements in place for redundant supply or a second source for all required raw materials used in the manufacture of our product candidates. If our existing or future third-party manufacturers cannot perform as agreed, we may be required to replace such manufacturers and we may be unable to replace them on a timely basis or at all. Without additional suppliers of required raw materials, we may also be unable to meet the commercial needs of a commercial launch of any future product candidates.

Previous wording

We may seek to enter into collaborations, joint ventures, license agreements, and other similar arrangements for the development or commercialization of lorundrostat and any future product candidates, due to capital costs required to develop or commercialize the product candidate or manufacturing constraints. We may not be successful in our efforts to establish or maintain such collaborations because our research and development pipeline may be insufficient, lorundrostat or any future product candidates may be deemed to be at too early of a stage of development for collaborative effort or third parties may not view our product candidates as having the requisite potential to demonstrate safety and efficacy or significant commercial opportunity. In addition, we face significant competition in seeking appropriate strategic partners, and the negotiation process can be time-consuming and complex. Even if we are successful in our efforts to establish such collaborations, the terms that we agree upon may not be favorable to us. For example, we may need to relinquish valuable rights to our future revenue streams, research programs, intellectual property, or product candidates, or grant licenses on terms that may not be favorable to us, as part of any such arrangement, and such arrangements may restrict us from entering into additional agreements with other potential collaborators. In addition, if we enter into such collaborations, we will have limited control over the amount and timing of resources that our collaborators will dedicate to the development or commercialization of our product candidates. Our ability to generate revenue from these arrangements will depend on any future collaborators’ abilities to successfully perform the functions assigned to them in these arrangements. We cannot be certain that, following a collaboration, license, or strategic transaction, we will achieve an economic benefit that justifies such transaction.

Current wording

-47- the terms that we agree upon may not be favorable to us. For example, we may need to relinquish valuable rights to our future revenue streams, research programs, intellectual property, or product candidates, or grant licenses on terms that may not be favorable to us, as part of any such arrangement, and such arrangements may restrict us from entering into additional agreements with other potential collaborators. In addition, if we enter into such collaborations, we will have limited control over the amount and timing of resources that our collaborators will dedicate to the development or commercialization of our product candidates. Our ability to generate revenue from these arrangements will depend on any future collaborators’ abilities to successfully perform the functions assigned to them in these arrangements. We cannot be certain that, following a collaboration, license, or strategic transaction, we will achieve an economic benefit that justifies such transaction.

Previous wording

•disagreements with collaborators, including disagreements over proprietary rights, contract interpretation, or the preferred course of development, might cause delays in or termination of the research, development, or commercialization of product candidates, might lead to additional responsibilities for us with respect to product candidates, or might result in litigation or arbitration, any of which would be time-consuming and expensive;

Current wording

•disagreements with collaborators, including disagreements over proprietary rights, contract interpretation, or the preferred course of development, might cause delays in or termination of the research, development, or commercialization of product candidates, might lead to additional

Previous wording

Any regulatory approvals that we may receive for lorundrostat or any future product candidates will require the submission of reports to regulatory authorities, subject us to surveillance to monitor the safety and efficacy of the product, may contain significant limitations related to use restrictions for specified age groups, warnings, precautions, or contraindications, and may include burdensome post-approval study or risk management requirements. For example, the FDA may require a REMS as a condition of approval of lorundrostat or any future product candidates, which could include requirements for a medication guide, physician communication plans, or additional elements to ensure safe use, such as restricted distribution methods, patient registries, and other risk minimization tools. In addition, if the FDA or a comparable foreign regulatory authority approves lorundrostat or any future product candidates, the manufacturing processes, labeling, packaging, distribution, adverse event reporting, storage, advertising, promotion, import, export, and recordkeeping for our products will be subject to extensive and ongoing regulatory requirements. These requirements include submissions of safety and other post-marketing information and reports, registration, as well as continued compliance with cGMPs and cGCPs requirements for any clinical trials that we conduct post-approval. Manufacturers of approved products and their facilities are subject to continual review and periodic, unannounced inspections by the FDA and other regulatory authorities for compliance with cGMP regulations and standards. Failure to comply with regulatory requirements or later discovery of previously unknown

Current wording

-49- methods, patient registries, and other risk minimization tools. In addition, if the FDA or a comparable foreign regulatory authority approves lorundrostat or any future product candidates, the manufacturing processes, labeling, packaging, distribution, adverse event reporting, storage, advertising, promotion, import, export, and recordkeeping for our products will be subject to extensive and ongoing regulatory requirements. These requirements include submissions of safety and other post-marketing information and reports, registration, as well as continued compliance with cGMPs and cGCPs requirements for any clinical trials that we conduct post-approval. Manufacturers of approved products and their facilities are subject to continual review and periodic, unannounced inspections by the FDA and other regulatory authorities for compliance with cGMP regulations and standards. Failure to comply with regulatory requirements or later discovery of previously unknown problems with our products, including adverse events of unanticipated severity or frequency, or with our third-party manufacturers or manufacturing processes, may result in, among other things:

Previous wording

The FDA and other regulatory agencies strictly regulate the promotional claims that may be made about prescription products, such as lorundrostat or any future product candidates, if approved. In particular, a product may not be promoted for uses that are not approved by the FDA or such other regulatory agencies as reflected in the product’s approved labeling. If we receive marketing approval for lorundrostat or any future product candidate, physicians may nevertheless prescribe it to their patients in a manner that is inconsistent with the approved label. If we are found to have promoted such off-label uses, we may become subject to significant liability. The U.S. federal government has levied large civil and criminal fines against companies for alleged improper promotion of off-label use and has enjoined several companies from engaging in off-label promotion. The government has also required companies to enter into consent decrees or imposed permanent injunctions under which specified promotional conduct is changed or curtailed. If we cannot successfully manage the promotion of lorundrostat or any future product candidates, if approved, we could become subject to significant liability, which would materially adversely affect our business and financial condition.

Current wording

The FDA and other regulatory agencies strictly regulate the promotional claims that may be made about prescription products, such as lorundrostat or any future product candidates, if approved. In particular, a product may not be promoted for uses that are not approved by the FDA or such other regulatory agencies as reflected in the product’s approved labeling. If we receive marketing approval for lorundrostat or any future product candidate, physicians may nevertheless prescribe it to their patients in a manner that is inconsistent with the approved label. If we are found to have promoted such off-label uses, we may become subject to significant liability. The U.S. federal government has levied large civil and criminal fines against companies for alleged improper promotion of off-label use and has enjoined several companies from engaging in off-label promotion. The government has also required companies to enter into consent decrees or imposed permanent injunctions

Previous wording

We believe that our current and future competition for resources and eventually for customers can be grouped into three broad categories:

Current wording

We believe our current and future competition can be grouped into three broad categories:

Previous wording

•companies working to develop ASIs, including AstraZeneca, Boehringer Ingelheim, Damian Pharma, and JIXING;

Current wording

•companies working to develop ASIs, including AstraZeneca, Boehringer Ingelheim, Damian Pharma and CORXEL;

Previous wording

•companies with product candidates with other mechanisms of action, such as non-steroidal MRAs and angiotensinogen directed therapies, including Alnylam, Idorsia, IONIS, Novo Nordisk, Quantum Genomics, and Sihuan Pharmaceutical Holdings Group, Roche; and

Current wording

•companies commercializing or developing branded products with other mechanisms of action, such as non-steroidal MRAs, endothelin receptor antagonists, and angiotensinogen directed therapies, including Roche/Alnylam, Idorsia, Ionis, Bayer, Daiichi Sankyo, Azurity, and George Medicines; and

Previous wording

The precise incidence and prevalence for all the conditions we aim to address with lorundrostat or any future product candidates are unknown. Our projections of both the number of people who have these diseases, as well as the subset of people with these diseases who have the potential to benefit from treatment with our product candidates, are based on a number of internal and third-party estimates. These estimates have been

Current wording

The precise incidence and prevalence for all the conditions we aim to address with lorundrostat or any future product candidates are unknown. Our projections of both the number of people who have these diseases, as well as the subset of people with these diseases who have the potential to benefit from treatment with our product candidates, are based on a number of internal and third-party estimates. These estimates have been derived from a variety of sources, including the scientific literature, surveys of clinics, patient foundations, or

Previous wording

-54- derived from a variety of sources, including the scientific literature, surveys of clinics, patient foundations, or market research, and may prove to be incorrect. Further, new trials may change the estimated incidence or prevalence of these indications. While we believe our assumptions and the data underlying our estimates are reasonable, we have not independently verified the accuracy of the third-party data on which we have based our assumptions and estimates, and these assumptions and estimates may not be correct and the conditions supporting our assumptions or estimates may change at any time, including as a result of factors outside our control, thereby reducing the predictive accuracy of these underlying factors. The total addressable market across all of the potential indications for lorundrostat and any future product candidates will ultimately depend upon, among other things, the diagnosis criteria included in the final label for each such product candidate which receives marketing approval for these indications, the availability of alternative treatments and the safety, convenience, cost, and efficacy of such product candidates relative to such alternative treatments, acceptance by the medical community and patient access, drug pricing, and reimbursement. The number of patients in the United States and other major markets and elsewhere may turn out to be lower than expected, patients may not be otherwise amenable to treatment with our product candidates, or new patients may become increasingly difficult to identify or gain access to, all of which would adversely affect our business, financial condition, and results of operations.

Current wording

-54- market research, and may prove to be incorrect. Further, new trials may change the estimated incidence or prevalence of these indications. While we believe our assumptions and the data underlying our estimates are reasonable, we have not independently verified the accuracy of the third-party data on which we have based our assumptions and estimates, and these assumptions and estimates may not be correct and the conditions supporting our assumptions or estimates may change at any time, including as a result of factors outside our control, thereby reducing the predictive accuracy of these underlying factors. The total addressable market across all of the potential indications for lorundrostat and any future product candidates will ultimately depend upon, among other things, the diagnosis criteria included in the final label for each such product candidate which receives marketing approval for these indications, the availability of alternative treatments and the safety, convenience, cost, and efficacy of such product candidates relative to such alternative treatments, acceptance by the medical community and patient access, drug pricing, and reimbursement. The number of patients in the United States and other major markets and elsewhere may turn out to be lower than expected, patients may not be otherwise amenable to treatment with lorundrostat or any future product candidates, or new patients may become increasingly difficult to identify or gain access to, all of which would adversely affect our business, financial condition, and results of operations.

Previous wording

In addition, job candidates and existing employees often consider the value of the stock awards they receive in connection with their employment. If the perceived benefits of our stock awards decline, either because we are a public company or for other reasons, it may harm our ability to recruit and retain highly skilled employees. Our employees may be more likely to leave us if the shares they own have significantly appreciated in value relative to the original purchase prices of the shares, or if the exercise prices of the options that they hold are significantly below the market price of our common stock.

Current wording

In addition, job candidates and existing employees often consider the value of the stock awards they receive in connection with their employment. If the perceived benefits of our stock awards decline, it may harm our ability to recruit and retain highly skilled employees. Our employees may be more likely to leave us if the shares they own have significantly appreciated in value relative to the original purchase prices of the shares, or if the exercise prices of the options that they hold are significantly below the market price of our common stock.

Previous wording

As of December 31, 2023, we had 28 full-time employees, of whom 22 were primarily engaged in research and development. As we continue development and pursue the potential commercialization of lorundrostat and any future product candidates, and as we continue our transition to operating as a public company, we will need to continue to expand our financial, accounting, development, regulatory, manufacturing, information technology, marketing, and sales capabilities or contract with third parties to provide these capabilities for us. As our operations expand, we expect that we will need to manage additional relationships with various strategic partners, suppliers, and other third parties and we may not be successful in doing so. Our future financial performance and our ability to develop and commercialize lorundrostat and any future product candidates and to compete effectively will depend, in part, on our ability to manage any future growth effectively.

Current wording

As of December 31, 2024, we had 51 full-time employees, of whom 39 were primarily engaged in research and development. As we continue development and pursue the potential commercialization of lorundrostat and any future product candidates, and as we continue operating as a public company, we will need to continue to expand our financial, accounting, development, regulatory, manufacturing, information technology, marketing, and sales capabilities or contract with third parties to provide these capabilities for us. As our operations expand, we expect that we will need to manage additional relationships with various strategic partners, suppliers, and other third parties, and we may not be successful in doing so. Our future financial performance and our ability to develop and commercialize lorundrostat and any future product candidates and to compete effectively will depend, in part, on our ability to manage any future growth effectively.

Previous wording

In addition, other legislative changes have been proposed and adopted since the ACA was enacted. On March 11, 2021, the American Rescue Plan Act of 2021 was signed into law, which eliminates the statutory cap on the Medicaid drug rebate, currently set at 100% of a drug’s AMP, beginning January 1, 2024. Further, there has been heightened governmental scrutiny in the United States of pharmaceutical pricing practices in light of

Current wording

In addition, other legislative changes have been proposed and adopted since the ACA was enacted. On March 11, 2021, the American Rescue Plan Act of 2021 was signed into law, which eliminated the statutory cap on the Medicaid drug rebate, currently set at 100% of a drug’s AMP, beginning January 1, 2024. Further, there has been heightened governmental scrutiny in the United States of pharmaceutical pricing practices in light of

Previous wording

As our operations and business grow, we may become subject to or affected by new or additional data protection laws and regulations and face increased scrutiny or attention from regulatory authorities. In the United States, numerous federal and state laws and regulations, including health information privacy laws, data breach notification laws, and consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), govern the collection, use, storage, transfer, disclosure, protection, and other processing of health-related and other personal information could apply to our operations or the operations of our collaborators and third-party providers. In addition, we may obtain health information from third parties (including research institutions from which we obtain clinical trial data) that are subject to privacy and security requirements under HIPAA. Depending on the facts and circumstances, we could be subject to significant penalties if we violate HIPAA.

Current wording

As our operations and business grow, we may become subject to or affected by new or additional data protection laws and regulations and face increased scrutiny or attention from regulatory authorities. In the United States, numerous federal and state laws and regulations, including health information privacy laws, data breach notification laws, and consumer protection laws (e.g., Section 5 of the Federal Trade Commission (FTC) Act), govern the collection, use, storage, transfer, disclosure, protection, and other processing of health-related and other personal information could apply to our operations or the operations of our collaborators and third-party providers. Depending on the facts and circumstances, we could be subject to significant penalties if we violate HIPAA.

Previous wording

In addition, certain state laws govern the privacy and security of health-related and other personal information in certain circumstances, some of which may be more stringent, broader in scope, or offer greater individual rights with respect to protected health information than HIPAA, many of which may differ from each other, thus, complicating compliance efforts. These laws are evolving rapidly and may differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. Failure to comply with these laws, where applicable, can result in the imposition of significant civil and/or criminal penalties and private litigation. By way of example, the California Consumer Privacy Act (CCPA), which went into effect on January 1, 2020, gives California residents individual privacy rights to access and delete their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information is used. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that are expected to increase data breach litigation. The CCPA may increase our compliance costs and potential liability and many similar laws have been proposed at the federal level and in other states. Further, the California Privacy Rights Act (CPRA) was recently passed in California. The CPRA imposes additional data protection obligations on covered businesses, including additional consumer rights processes, limitations on data uses, new audit requirements for higher-risk data, and opt-outs for certain uses of sensitive data. It also created a new California data protection agency authorized to issue substantive regulations and could result in increased privacy and information security enforcement. The majority of the provisions of the CPRA went into effect on January 1, 2023, and additional compliance investment and potential business process changes may be required. Other states are exploring their own laws, which may or may not be similar to

Current wording

In addition, certain state laws govern the processing, collection, use, disclosure, transfer, storage, disposal, and protection of health-related and other personal information in certain circumstances. These state law protections are different and, in some cases, may be more stringent, broader in scope, or offer greater individual rights with respect to protected health information than HIPAA. These laws are evolving rapidly and may differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. Failure to comply with these laws, where applicable, can result in the imposition of significant civil and/or criminal penalties and private litigation. By way of example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), gives California residents individual privacy rights to access and delete their personal information, opt out of certain personal information sharing, limit the use of their sensitive personal information, and receive detailed information about how their personal information is used. Of particular relevance to our business, the CCPA imposes detailed obligations regarding collection, use, and disclosure of personal information of employees, job applicants, and business contacts in addition to consumers. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches. The CCPA also established a new California agency, the California Privacy Protection Agency, which is authorized to issue new substantive regulations and has independent enforcement power alongside the California Attorney General. These additional rights and the establishment of an agency with independent enforcement powers are expected to increase data breach litigation and government enforcement activity in California. Comprehensive privacy legislation similar to the CCPA has been adopted in other U.S. states including Colorado, Connecticut, Kentucky, Maryland, Minnesota, Montana, New Jersey, New Hampshire, Nevada, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. In the event that we are subject to or

Previous wording

-62- the CCPA or the CPRA. In the event that we are subject to or affected by HIPAA, the CCPA, the CPRA, or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition.

Current wording

-62- affected by HIPAA, the CCPA, or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition.

Previous wording

There also are a wide variety of privacy laws in other countries that may impact our operations, now or in the future. For example, in Europe, the General Data Protection Regulation (GDPR) imposes stringent requirements regarding the collection, use, disclosure, storage, transfer, or other processing of personal data of individuals within the European Economic Area (EEA), including providing information to individuals regarding data processing activities, implementing safeguards to protect the security and confidentiality of personal data, providing notification of data breaches, and taking certain measures when engaging third-party processors. Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to €20 million or 4% of the annual global revenue of the noncompliant company, whichever is greater. The GDPR also confers a private right of action in some circumstances on data subjects and consumer associations to lodge complaints with supervisory authorities, seek judicial remedies, and obtain compensation for damages resulting from violations of the GDPR. Among other things, the GDPR requires the establishment of a lawful basis for the processing of data, imposes requirements relating to the consent of the individuals to whom the personal data relates, including detailed notices for clinical trial subjects and investigators, as well as requirements regarding the security of personal data and notification of data processing obligations to the competent national data processing authorities. In addition, the GDPR increases the scrutiny of transfers of personal data from the EEA to the United States and other jurisdictions that the European Commission does not recognize as having “adequate” data protection laws. Recent legal developments in Europe have created complexity and uncertainty regarding transfers of personal data from the EEA to the United States. For example, on July 16, 2020, the Court of Justice of the European Union (CJEU) invalidated the EU-US Privacy Shield Framework (Privacy Shield) under which personal data could be transferred from the EEA to United States entities that had self-certified under the Privacy Shield scheme. While the CJEU upheld the adequacy of the standard contractual clauses (a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism, and potential alternative to the Privacy Shield), it made clear that reliance on the standard contractual clauses alone may not necessarily be sufficient in all circumstances. Use of the standard contractual clauses must now be assessed on a case-by-case basis taking into account the legal regime applicable in the destination country, in particular applicable surveillance laws and rights of individuals, and additional measures and/or contractual provisions may need to be put in plac…

Excerpt shortened here; the source contains the full paragraph.

Current wording

There also are a wide variety of privacy laws in other countries that may impact our operations, now or in the future. For example, in Europe, the General Data Protection Regulation (GDPR) imposes stringent requirements regarding the collection, use, disclosure, storage, transfer, or other processing of personal data of individuals within the European Economic Area (EEA), including providing information to individuals regarding data processing activities, implementing safeguards to protect the security and confidentiality of personal data, providing notification of data breaches, and taking certain measures when engaging third-party processors. Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to €20 million or 4% of the annual global revenue of the noncompliant company, whichever is greater. The GDPR also confers a private right of action in some circumstances on data subjects and consumer associations to lodge complaints with supervisory authorities, seek judicial remedies, and obtain compensation for damages resulting from violations of the GDPR. Among other things, the GDPR requires the establishment of a lawful basis for the processing of data, imposes requirements relating to the consent of the individuals to whom the personal data relates, including detailed notices for clinical trial subjects and investigators, as well as requirements regarding the security of personal data and notification of data processing obligations to the competent national data processing authorities. In addition, the GDPR increases the scrutiny of transfers of personal data from the EEA to the United States and other jurisdictions that the European Commission does not recognize as having “adequate” data protection laws. Recent legal developments in Europe have created complexity and uncertainty regarding transfers of personal data from the EEA to the United States. For example, on July 16, 2020, the Court of Justice of the European Union (CJEU) invalidated the EU-US Privacy Shield Framework (Privacy Shield) under which personal data could be transferred from the EEA to United States entities that had self-certified under the Privacy Shield scheme. While the CJEU upheld the adequacy of the standard contractual clauses (a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism, and potential alternative to the Privacy Shield), it made clear that reliance on the standard contractual clauses alone may not necessarily be sufficient in all circumstances. Use of the standard contractual clauses must now be assessed on a case-by-case basis taking into account the legal regime applicable in the destination country, in particular applicable surveillance laws and rights of individuals, and additional measures and/or contractual provisions may need to be put in plac…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

-63- ability to fine up to the greater of €20 million/£17 million or 4% of global turnover. The relationship between the United Kingdom and the European Union and the EEA in relation to certain aspects of data protection law remains unclear, and it is unclear how United Kingdom data protection laws and regulations will develop in the medium to longer term. The European Commission has adopted an adequacy decision in favor of the United Kingdom, enabling data transfers from European Union member states to the United Kingdom without additional safeguards. However, the UK adequacy decision will automatically expire in June 2025 unless the European Commission re-assesses and renews or extends that decision, which could have implications for our transfer of personal data.

Current wording

Further, following the withdrawal of the United Kingdom from the European Union and the EEA and the end of the transition period, from January 1, 2021, we have to comply with the GDPR and separately the GDPR as implemented in the United Kingdom, which, together with the amended UK Data Protection Act 2018, retains the GDPR in UK national law. The UK GDPR mirrors the fines under the GDPR and has the ability to fine up to the greater of €20 million/£17 million or 4% of global turnover. The relationship between the United Kingdom and the European Union and the EEA in relation to certain aspects of data protection law remains unclear, and it is unclear how United Kingdom data protection laws and regulations will develop in the medium to longer term. The European Commission has adopted an adequacy decision in favor of the United Kingdom, enabling data transfers from European Union member states to the United Kingdom without additional safeguards. However, the UK adequacy decision will automatically expire in June 2025 unless the European Commission re-assesses and renews or extends that decision, which could have implications for our transfer of personal data.

Previous wording

Our internal information technology systems, or those of any of our service providers, may fail or suffer security breaches, loss or leakage of data, and other disruptions, which could result in a material disruption of our product development programs, comprise sensitive information related to our business or prevent us from accessing critical information, potentially exposing us to liability or otherwise adversely affecting our business.

Current wording

Our internal information technology systems, or those of any of our service providers, may fail or suffer security breaches, loss or leakage of data, and other disruptions, which could result in a material disruption of our product development programs, compromise sensitive information related to our business or prevent us from accessing critical information, potentially exposing us to liability or otherwise adversely affecting our business.

Previous wording

-64- opportunities for cybercriminals to exploit vulnerabilities. Furthermore, because the techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, avoid detection, and remove or obfuscate forensic evidence. It is not possible to prevent all cybersecurity threats to our information technology systems and information and those of our third-party service providers, over which we exert less control, and any controls we implement to do so may prove to be ineffective.

Current wording

Attacks upon information technology systems are increasing in their frequency, levels of persistence, sophistication, and intensity, and are being conducted by sophisticated and organized groups and individuals with a wide range of motives and expertise. These attacks can present meaningful risks to our operations, data, and commercial information. We may also face increased cybersecurity risks due to our reliance on internet technology and the number of our employees who are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities. Furthermore, because the techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, avoid detection, and remove or obfuscate forensic evidence. It is not possible to prevent all cybersecurity threats to our information technology systems and information and those of our third-party service providers, over which we exert less control, and any controls we implement to do so may prove to be ineffective.