Company: HURA
Filing Date: 2025-05-23
Form Type: 424B3
Source: 0001193125-25-125499
Chunk: 137

Company: TuHURA Biosciences, Inc./NV
Filing Date: 2025-05-23
Form: 424B3
Chunk 137
---
 are more favorably received than its products, are more cost effective or render TuHURA’s products obsolete. TuHURA is and will be subject to stringent privacy laws, cybersecurity laws, regulations, policies and contractual obligations related to privacy and security, and changes in such laws, regulations, policies or how they are interpreted or changes in related contractual obligations could adversely affect TuHURA’s business. TuHURA is subject to data privacy and protection laws and regulations that apply to the collection, transmission, processing, storage and use of personally-identifying information including comprehensive regulatory systems in the U.S. and EU, which, among other things, impose certain requirements relating to the privacy, security and transmission of personal information. The legislative and regulatory landscape for privacy and data protection continues to evolve worldwide, and there has been an increasing focus on privacy and data protection issues with the potential to affect TuHURA’s business. Failure to comply with any of these laws and regulations by TuHURA or third parties to whom TuHURA contracts certain types of work (like clinical trials) could result in enforcement action against TuHURA or such third parties, including fines, imprisonment of company officials and public censure, claims for damages by affected individuals, damage to TuHURA’s reputation and loss of goodwill, any of which could have a material adverse effect on its business, financial condition, results of operations or prospects. There are numerous U.S. federal and state laws and regulations related to the privacy and security of personal information. In particular, regulations promulgated pursuant to the HIPAA, establish privacy and security standards that limit the use and disclosure of individually identifiable health information, or protected 83

health information, and require the implementation of administrative, physical and technological safeguards to protect the privacy of protected health information and ensure the confidentiality,
integrity and availability of electronic protected health information. Determining whether protected health information has been handled in compliance with applicable privacy standards and its contractual obligations can be complex and may be
subject to changing interpretation.

If TuHURA is unable to properly protect the privacy and security of protected health information or
other personal, sensitive, or confidential information in its possession, TuHURA could be found to have breached its contracts. Further, if TuHURA fails to comply with applicable privacy laws, including applicable HIPAA privacy and security
standards, TuHURA could face significant administrative, civil and criminal penalties. Enforcement activity can also result in financial liability and reputational harm, and responses to such enforcement activity can consume significant internal and