CROs and other contractors and consultants are potentially vulnerable to breakdown or other damage or interruption from service interruptions, system malfunction, natural disasters, terrorism, war and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our employees, contractors, consultants, business partners, and/or other third parties, or from cyber-attacks by malicious third parties (including the deployment of harmful malware, ransomware,denial-of-service attacks, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information), which may compromise our system infrastructure or lead to data leakage.
While we have not experienced any such system failure, accident or security breach to date, there can be no assurances that our data protection efforts and our investment in information technology will prevent significant breakdowns, data leakages, breaches in our systems or other cyber incidents that could have a material adverse effect upon the reputation, business, operations or financial condition of the company. For example, if such an event were to occur and cause interruptions in our operations, it could result in a material disruption of our programs and the further development of our product candidates could be delayed. In addition, the loss of clinical trial data for our product candidates could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Furthermore, significant disruptions of our internal information technology systems or security breaches could adversely affect our business and/or result in the loss, misappropriation, and/or unauthorized access, use, or disclosure of, or the prevention of access to, confidential information (including trade secrets or other intellectual property, proprietary business information, and personal information), which could result in financial, legal, business, and reputational harm to us. For example, any such event that leads to unauthorized access, use, or disclosure of personal information, including personal information regarding our patients or employees, could harm our reputation directly, compel us to comply with federal and/or state breach notification laws and foreign law equivalents, subject us to mandatory corrective action, and otherwise subject us to liability under laws and regulations that protect the privacy and security of personal information, which could result in significant legal and financial exposure and reputational damages that could potentially have an adverse effect on our business.
We are subject to certain U.S. and foreign anti-corruption, anti-money laundering, export control, sanctions, and other trade laws and regulations (collectively, Trade Laws). We can face serious consequences for violations.
Among other matters, Trade Laws prohibit companies and their employees, agents, clinical research organizations, legal counsel, accountants, consultants, contractors, and other partners from authorizing, promising, offering, providing, soliciting, or receiving directly or indirectly, corrupt or improper payments or anything else of value to or from recipients in the public or private sector. Trade Laws also restrict the export or transfer of certain controlled equipment, materials, software and technology as well as transactions with certain restricted parties or sanctioned countries. Violations of Trade Laws can result in substantial criminal fines and civil penalties, imprisonment, the loss of trade privileges, debarment, tax reassessments, breach of contract and fraud litigation, reputational harm, and other adverse consequences. In particular, we have direct or indirect interactions with officials and employees of government agencies or government-affiliated hospitals, universities, and other organizations. We also expect ournon-U.S. activities to increase in time. We expect to rely on third parties for research, preclinical studies, and clinical trials and/or to obtain necessary permits, licenses, patent registrations, and other regulatory approvals. Such interactions would inherently increase the risk of violating applicable Trade Laws. We can be held liable for the corrupt or other illegal activities of our personnel, agents, or partners, even if we do not explicitly authorize or have prior knowledge of such activities.
Risks Related to Our Dependence on Third Parties
We rely on third parties to conduct our clinical trials and some aspects of our research and preclinical studies, and those third parties may not perform satisfactorily, including failing to meet deadlines for the completion of such trials, research or testing.
We rely on third parties, such as contract research organizations, clinical data management organizations, medical institutions and clinical investigators, to conduct our clinical trials. We currently rely and expect to continue to rely on third parties to conduct some aspects of our research and preclinical studies. Any of these third parties may terminate their engagements with us at any time. If we need to enter into alternative arrangements, it would delay our product development activities.
32