Company: MIRM
Filing Date: 2025-08-06
Form Type: 10-Q
Source: 0001759425-25-000041
Chunk: 48

Company: Mirum Pharmaceuticals, Inc.
Filing Date: 2025-08-06
Form: 10-Q
Item: Part I, Item 3
Chunk 48
---
 in scope. For example, we may be subject to the following: state and foreign anti-kickback and false claims laws that may apply to sales or marketing arrangements and claims involving healthcare items or services reimbursed by non-governmental third party payors, including private insurers, or that apply regardless of payor; state and foreign laws that require pharmaceutical companies to comply with the pharmaceutical industry’s voluntary compliance guidelines and the relevant compliance guidance promulgated by the federal government; state and foreign laws that require drug manufacturers to report information related to payments and other transfers of value to physicians and other healthcare providers, marketing expenditures, or drug pricing; state and local laws requiring the registration of pharmaceutical sales representatives; and state and foreign laws, such as the EU’s and the United Kingdom’s General Data Protection Regulations (respectively, the “EU GDPR” and “UK GDPR”, together, the “GDPR”) governing the privacy and security of health information in some circumstances, many of which differ from each other in significant ways and often are not preempted by HIPAA, thus complicating compliance efforts.

Additionally, we may be subject to federal and comparable foreign consumer protection and unfair competition laws, which broadly regulate marketplace activities and activities that potentially harm consumers.

Because of the breadth of these laws and the narrowness of the statutory exceptions and regulatory safe harbors available, it is possible that some of our business activities, or our arrangements with physicians, could be subject to challenge under one or more of such laws. If we or our employees, independent contractors, consultants, commercial partners and vendors violate these laws, we may be subject to investigations, enforcement actions and/or significant penalties. We have adopted a code of conduct and healthcare compliance policies, but it is not always possible to identify and deter employee misconduct or business noncompliance, and the precautions we take to detect and prevent inappropriate conduct may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. Efforts to ensure that our business arrangements will comply with applicable healthcare laws may involve substantial costs. It is possible that governmental and enforcement authorities will conclude that our business practices may not comply with current or future statutes, regulations or case law interpreting applicable fraud and abuse or other healthcare laws and regulations. If any such actions are instituted against us, those actions could have a significant impact on our business, including the imposition of significant civil, criminal and administrative penalties, damages, disgorgement, monetary fines, imprisonment