and marketing of healthcare items and services, as well as certain business arrangements in the healthcare industry, are subject to extensive laws and regulations intended to prevent fraud, misconduct, kickbacks, self-dealing and other abusive practices. These laws and regulations may restrict or prohibit a wide range of pricing, discounting, marketing and promotion, including off-label uses of our products, structuring and commission(s), certain customer incentive programs and other business arrangements generally. Activities subject to these laws also involve the improper use or misrepresentation of information obtained in the course of patient recruitment for clinical trials, creating fraudulent data in our preclinical studies or clinical trials or illegal misappropriation of drug product, which could result in regulatory sanctions and cause serious harm to our reputation. See “Business – Governmental Regulation – Healthcare Law and Regulation” in Part I, Item 1 of our Annual Report on Form 10-K filed on February 27, 2020 for more information on the healthcare laws and regulations that may affect our ability to operate.
We are also exposed to the risk of fraud, misconduct or other illegal activity by our employees, independent contractors, consultants, principal investigators, CROs, commercial partners and vendors. Misconduct by these parties could include intentional, reckless and/or negligent conduct that fails to: comply with the laws of the FDA and other similar foreign regulatory bodies; provide true, complete and accurate information to the FDA and other similar foreign regulatory bodies; comply with manufacturing standards we have established; comply with federal and state data privacy, security, fraud and abuse and other healthcare laws and regulations in the United States and similar foreign fraudulent misconduct laws; or report financial information or data accurately or to disclose unauthorized activities to us. It is not always possible to identify and deter employee misconduct, and the precautions we take to detect and prevent inappropriate conduct may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations.
We are also subject to the risk that a person or government could allege such fraud or other misconduct, even if none occurred. Efforts to ensure that our business arrangements will comply with applicable healthcare laws and regulations will involve substantial costs. It is possible that governmental and enforcement authorities will conclude that our business practices may not comply with current or future statutes, regulations or case law interpreting applicable fraud and abuse or other healthcare laws and regulations. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business, including the imposition of significant civil, criminal and administrative penalties, damages, disgorgement, monetary fines, imprisonment, additional reporting obligations and oversight if we become subject to a corporate integrity agreement or other agreement to resolve allegations of non-compliance with these laws, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, reputational harm, diminished profits and future earnings, and curtailment or restructuring of our operations, any of which could adversely affect our ability to operate our business and our results of operations.
We are subject to stringent privacy and information security laws, regulations, policies and contractual obligations, and changes in such laws, regulatons, policies, contractual obligations and failure to comply with such requirements could subject us to significant fines and penalties, which may have a material adverse effect on our business, financial condution, results of operations or prospects.*
We are subject to, or affected by, numerous federal, state and foreign laws and regulations, as well as regulatory guidance, policies and contractual obligations governing the collection, use, disclosure, retention, and security of personal information. The global data protection landscape is rapidly evolving, and implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future. This evolution may create uncertainty in our business, affect our or our collaborators’, service providers’ and contractors’ ability to operate in certain jurisdictions or to collect, store, transfer, use and share personal information, necessitate the acceptance of more onerous obligations in our contracts, result in liability or impose additional costs on us. The cost of compliance with these laws, regulations and standards is high and is likely to increase in the future. Any failure or perceived failure by us or our collaborators, service providers and contractors to comply with federal, state or foreign laws or regulation, our internal policies and procedures or our contracts governing processing of personal information could result in negative publicity, diversion of management time and effort and proceedings against us by governmental entities or others. In many jurisdictions, enforcement actions and consequences for noncompliance are rising.