Company: TVRD
Filing Date: 2025-05-30
Form Type: S-1
Source: 0001104659-25-054853
Chunk: 109

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-05-30
Form: S-1
Chunk 109
---
 to regulatory investigations or actions; litigation; fines and penalties; disruptions of its business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse business consequences.

In the ordinary course of business, the Company collects, receives, stores, processes, generates, uses, transfers, discloses, makes accessible, protects, secures, disposes of, transmits, and shares (collectively, process or processing) certain sensitive information, including proprietary and confidential business data, trade secrets, employee data, intellectual property, data it collects about clinical trial participants in connection with clinical trials, and other sensitive third-party data (collectively, sensitive data). The global data protection landscape is rapidly evolving and the Company is or may become subject to numerous data privacy and security obligations, such as various state, federal and foreign laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements, and other obligations governing the collection use, disclosure, retention, and security of personal information or otherwise relating to data privacy and security, including as relates to information that the Company may collect in connection with clinical trials in the United States and abroad.

Various federal, state, local and foreign legislative and regulatory bodies, or self-regulatory organizations, may expand current laws, rules or regulations, enact new laws, rules or regulations or issue revised rules or guidance regarding data privacy and security. Implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and the Company cannot yet determine the impact future laws, regulations, standards, or perception of their requirements may have on its business. This evolution may create uncertainty in the Company’s business, affect its ability to operate in certain jurisdictions or to collect, store, transfer use and share personal information, necessitate the acceptance of more onerous obligations in its contracts, result in liability or impose additional costs on the Company. The cost of compliance with these laws, regulations and standards is high and is likely to increase in the future. Any actual or perceived failure by the Company to comply with federal, state or foreign laws or regulations, its internal policies and procedures or its contracts governing the processing of personal information could result in, among other things, negative publicity, government investigations and enforcement actions, claims by third parties and damage to the Company’s reputation, any of which could have a material adverse effect on its business, results of operation, and financial condition.

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach