There are various U.S. federal and state and U.K. privacy laws and regulations, including the privacy and security rules contained in the Health Insurance Portability and Accountability Act of 1996 (commonly referred to as “HIPAA”) and the U.K. Data Protection Act 1998,, which provide for the privacy and security of personal health information. An increasing focus of the U. S. Federal Trade Commission’s (“FTC’s”) consumer protection regulation is the impact of technological change on protection of consumer privacy. The FTC, as well as state attorneys general, have taken enforcement action against companies that do not abide by their representations to consumers regarding electronic security and privacy. To the extent we or our affiliated operating entities are a covered entity or business associate under HIPAA and the Health Information Technology for Economic and Clinical Health Act (the “HITECH Act”), compliance with those requirements would require us to, among other things, conduct a risk analysis, implement a risk management plan, implement policies and procedures, and conduct employee training. In most cases, we are dependent on our tenants and management companies to fulfill our compliance obligations, and we are in the process of developing programshave developed a program to complyperiodically monitor compliance with aspects of these laws that cannot be delegated to third parties.such obligations. Because of the far reaching nature of these laws, there can be no assurance that we would not be required to alter one or more of our systems and data security procedures to be in compliance with these laws. Our failure to protect health information could subject us to civil or criminal liability and adverse publicity, and could harm our business and impair our ability to attract new customers and residents. We may be required to notify individuals, as well as government agencies and the media, if we experience a data breach.

Sources of revenue for some of our tenants and operators include, among others, governmental healthcare programs, such as the federal Medicare programs and state Medicaid programs, and in the U.K., the National Health Service (“NHS”) and local authority funding, and non-governmental third-party payors, such as insurance carriers and HMOs. As federal and state governments focus on healthcare reform initiatives, and as the federal government and many states face significant current and future budget deficits, efforts to reduce costs by these payors will likely continue, which may result in reduced or slower growth in reimbursement for certain services provided by some of our tenants and operators. Similarly, in the U.K., the NHS and the local authorities are undertaking efforts to reduce costs, which may result in reduced or slower growth in reimbursement for certain services provided by our U.K. tenants and operators. Additionally, new and evolving payor and provider programs in the U.S., including but not limited to Medicare Advantage, Dual Eligible, Accountable Care Organizations, and Bundled Payments could adversely impact our tenants’ and operators’ liquidity, financial condition, or results of operations.

Certain healthcare facilities in our portfolio (including our facilities located in the U.K.) are subject to extensive national, federal, state, and local licensure, certification, and inspection laws and regulations. A healthcare facility’s failure to comply with these laws and regulations could result in a revocation, suspension, restriction, or non-renewal of the facility’s license and loss of a certificate of need, which could adversely affect the facility’s operations and ability to bill for items and services provided at the facility. In addition, various licenses and permits are required to handle controlled substances (including narcotics), operate pharmacies, handle radioactive materials, and operate equipment. Many states in the U.S. require certain healthcare providers to obtain a certificate of need, which requires prior approval for the construction, expansion, or closure of certain healthcare facilities. The approval process related to state certificate of need laws may impact the ability of some of our tenants and operators to expand or change their businesses.

While our life science tenants include some well-established companies, other tenants are less established and, in some cases, may not yet have a product approved by the Food and Drug Administration, or other regulatory authorities, for commercial sale. Creating a new pharmaceutical product or medical device requires substantial investments of time and capital, in part because of the extensive regulation of the healthcare industry; itindustry. It also entails considerable risk of failure in demonstrating that the product is safe and effective and in gaining regulatory approval and market acceptance.