Company: SMNR
Filing Date: 2025-08-12
Form Type: S-4/A
Source: 0001193125-25-178821
Chunk: 912

Company: Semnur Pharmaceuticals, Inc.
Filing Date: 2025-08-12
Form: S-4/A
Chunk 912
---
 Stockholder or Affiliate thereof owns any right in or to any of the material Assets or properties belonging to the Company.

5.29 Privacy and Data Security.

(a) Except as set forth on Schedule5.29(a) of the Company Disclosure Schedules:

(i) The Company, and, to the knowledge of the Company, the Company’s officers, directors, managers, and employees to whom the Company has given access to Personal Data or Protected Health Information, are in compliance in all material respects with all applicable Privacy Laws;

(ii) Except as would not, individually or in the aggregate, have a Company Material Adverse Effect, to the knowledge of the Company, since January 1, 2023, neither the Company nor, to the knowledge of the Company, any contractor, agent or vendor of the Company, has experienced any loss, damage or unauthorized access, use, disclosure or modification, or any security breach of Personal Data. Protected Health Information, or “unsecured Protected Health Information” (as defined in 45 C.F.R. Part 164, Subpart D) maintained by or on behalf of the Company, in each case, requiring notification to any Governmental Authority or other Person;

(iii) Except as would not, individually or in the aggregate, have a Company Material Adverse Effect, since January 1, 2023, to the knowledge of the Company, (i) the Company has not received any written notice of any Proceeding from any Person, including any Governmental Authority, with respect to any violation of any Privacy Law by the Company, and (ii) the Company has not been given written notice of any alleged criminal, civil or administrative violation of any Privacy Law. All activities conducted by the Company with respect to any Protected Health Information or Personal Data are permitted under the Contracts relating to Personal Data or Protected Health Information.

(iv) The Company has established and implemented, and, to the knowledge of the Company, are operating in material compliance with, policies, programs and procedures that are commercially reasonable and include administrative, technical and physical safeguards that are designed to protect against unauthorized

<div align='center'>A-1-30</div>

access, use, modification, or disclosure of (a) Sensitive Data in their possession, custody or control, and (b) the technology systems owned by the Company, including computer hardware, software, networks, information technology systems, electronic data processing systems, network equipment, interfaces, and platforms, (collectively, the “Computer Systems”). Except as would not have a Company