Because of the breadth of these laws and the narrowness of the statutory exceptions and regulatory safe harbors available under such laws, it is possible that some of our business activities, including our consulting agreements and other relationships with physicians and other healthcare providers, some of whom receive stock or stock options as compensation for their services, could be subject to challenge under one or more of such laws. Ensuring that our current and future internal operations and business arrangements with third parties comply with applicable healthcare laws and regulations will involve substantial costs. It is possible that governmental authorities will conclude that our business practices do not comply with current or future statutes, regulations, agency guidance or case law involving applicable fraud and abuse or other healthcare laws and regulations.
If our operations are found to be in violation of any of the laws described above or any other governmental laws and regulations that may apply to us, we may be subject to the imposition of civil, criminal and administrative penalties, damages, disgorgement, monetary fines, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, individual imprisonment, contractual damages, reputational harm, diminished profits and future earnings, additional reporting requirements or oversight if we become subject to a corporate integrity agreement or similar agreement to resolve allegations of non-compliance with these laws, and curtailment or restructuring of our operations, any of which could adversely affect our ability to operate our business and our results of operations. If any of the physicians or other providers or entities with whom we expect to do business are found to not be in compliance with applicable laws, they may be subject to criminal, civil or administrative sanctions, including exclusions from government funded healthcare programs and imprisonment, which could affect our ability to operate our business. Further, defending against any such actions can be costly, time-consuming and may require significant personnel resources. Therefore, even if we are successful in defending against any such actions that may be brought against us, our business may be impaired.
Any clinical trial programs we conduct or research collaborations we enter into in the EEA may subject us to the General Data Protection Regulation.
If we conduct clinical trial programs or enter into research collaborations in the EEA, we may be subject to the General Data Protection regulation (“GDPR”). The GDPR applies extraterritorially and implements stringent operational requirements for processors and controllers of personal data, including, for example, high standards for obtaining consent from individuals to process their personal data, robust disclosures to individuals, a comprehensive individual data rights regime, data export restrictions governing transfers of data from the European Union (“EU”) to other jurisdictions, short timelines for data breach notifications, limitations on retention of information, increased requirements pertaining to health data, other special categories of personal data and coded data and additional obligations if we contract third-party processors in connection with the processing of personal data. The GDPR provides that EU member states may establish their own laws and regulations limiting the processing of personal data, including genetic, biometric or health data, which could limit our ability to use and share personal data or could cause our costs to increase. If our or our partners’ or service providers’ privacy or data security measures fail to comply with the GDPR requirements, we may be subject to litigation, regulatory investigations, enforcement notices requiring us to change the way we use personal data and/or fines of up to 20 million Euros or up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher, as well as compensation claims by affected individuals, negative publicity, reputational harm and a potential loss of business and goodwill.
We are subject to environmental, health and safety laws and regulations, and we may become exposed to liability and substantial expenses in connection with environmental compliance or remediation activities.
Our operations, including our development, testing and manufacturing activities, are subject to numerous environmental, health and safety laws and regulations. These laws and regulations govern, among other things, the controlled use, handling, release and disposal of and the maintenance of a registry for, hazardous materials and biological materials, such as chemical solvents, human cells, carcinogenic compounds, mutagenic compounds and compounds that have a toxic effect on reproduction, laboratory procedures and exposure to blood-borne pathogens. If we fail to comply with such laws and regulations, we could be subject to fines or other sanctions.
As with other companies engaged in activities similar to ours, we face a risk of environmental liability inherent in our current and historical activities, including liability relating to releases of or exposure to hazardous or biological