confidential, sensitive and personal information than federal, international or other state laws, and such laws may differ from each other, which may complicate compliance efforts.
Given the breadth and depth of changes in data protection obligations, preparing for and complying with such requirements is rigorous and time intensive and requires significant resources and a review of our technologies, systems and practices, as well as those of any third-party collaborators, service providers, contractors or consultants that process or transfer personal data. The GDPR and other changes in laws or regulations associated with the enhanced protection of certain types of sensitive data, such as healthcare data or other personal information from our clinical trials, could require us to change our business practices and put in place additional compliance mechanisms, may interrupt or delay our development, regulatory and commercialization activities and increase our cost of doing business, and could lead to government enforcement actions, private litigation and significant fines and penalties against us and could have a material adverse effect on our business, financial condition or results of operations.
We are subject to U.S. and certain foreign export control, import, sanctions, anti-corruption, and anti-money laundering laws and regulations with respect to our operations and non-compliance with such laws can subject us to criminal and/or civil liability and harm our business.
We are subject to export control and import laws and regulations, including the U.S. Export Administration Regulations, U.S. Customs regulations, various economic and trade sanctions regulations administered by the U.S. Treasury Department’s Office of Foreign Assets Control, the U.S. Foreign Corrupt Practices Act of 1977, as amended, or the FCPA, the U.S. domestic bribery statute contained in 18 U.S.C. § 202, the U.S. Travel Act, the USA PATRIOT Act, and other state and national anti-bribery and anti-money laundering laws in countries in which we conduct activities. Anti-corruption laws are interpreted broadly and prohibit companies and their employees, agents, third-party intermediaries, joint venture partners and collaborators from authorizing, promising, offering or providing, directly or indirectly, improper payments or benefits to recipients in the public or private sector. We may have direct or indirect interactions with officials and employees of government agencies or government-affiliated hospitals, universities and other organizations. In addition, we may engage third party intermediaries to promote our clinical research activities abroad and/or to obtain necessary permits, licenses, and other regulatory approvals. We can be held liable for the corrupt or other illegal activities of these third-party intermediaries, our employees, representatives, contractors, partners and agents, even if we do not explicitly authorize or have actual knowledge of such activities.
Noncompliance with the laws and regulations described above could subject us to whistleblower complaints, investigations, sanctions, settlements, prosecution, other enforcement actions, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, suspension and/or debarment from contracting with certain persons, the loss of export privileges, reputational harm, adverse media coverage and other collateral consequences. If any subpoenas, investigations or other enforcement actions are launched, or governmental or other sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business, results of operations and financial condition could be materially harmed. In addition, responding to any action will likely result in a materially significant diversion of management’s attention and resources and significant defense and compliance costs and other professional fees. In certain cases, enforcement authorities may even cause us to appoint an independent compliance monitor which can result in added costs and administrative burdens.
If we fail to comply with environmental, health and safety laws and regulations, we could become subject to fines or penalties or incur costs that could harm our business.
We are subject to numerous environmental, health and safety laws and regulations, including those governing laboratory procedures and the handling, use, storage, treatment and disposal of hazardous materials and wastes. From time to time and in the future, our operations may involve the use of hazardous and flammable materials, including chemicals and biological materials, and may also produce hazardous waste products. Even if we contract with third parties for the disposal of these materials and waste products, we cannot completely eliminate the risk of contamination or injury resulting from these materials. In the event of contamination or injury resulting from the use or disposal of our hazardous materials, we could be held liable for any resulting damages, and any liability could exceed our resources. We also could incur significant costs associated with civil or criminal fines and penalties for failure to comply with such laws and regulations.