Company: MIRM
Filing Date: 2025-11-04
Form Type: 10-Q
Source: 0001759425-25-000054
Chunk: 479

Company: Mirum Pharmaceuticals, Inc.
Filing Date: 2025-11-04
Form: 10-Q
Item: Part I, Item 8
Chunk 479
---
ness of the statutory exceptions and regulatory safe harbors available, it is possible that some of our business activities, or our arrangements with physicians, could be subject to challenge under one or more of such laws. If we or our employees, independent contractors, consultants, commercial partners and vendors violate these laws, we may be subject to investigations, enforcement actions and/or significant penalties. We have adopted a code of conduct and healthcare compliance policies, but it is not always possible to identify and deter employee misconduct or business noncompliance, and the precautions we take to detect and prevent inappropriate conduct may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. Efforts to ensure that our business arrangements will comply with applicable healthcare laws may involve substantial costs. It is possible that governmental and enforcement authorities will conclude that our business practices may not comply with current or future statutes, regulations or case law interpreting applicable fraud and abuse or other 

58

healthcare laws and regulations. If any such actions are instituted against us, those actions could have a significant impact on our business, including the imposition of significant civil, criminal and administrative penalties, damages, disgorgement, monetary fines, imprisonment, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs or comparable foreign programs, contractual damages, reputational harm, diminished profits and future earnings, additional reporting requirements and/or oversight if we become subject to a corporate integrity agreement or similar agreement to resolve allegations of non-compliance with these laws, and curtailment of our operations, any of which could adversely affect our ability to operate our business and our results of operations. In addition, the approval and commercialization of any of our product candidates outside the U.S. will also likely subject us to foreign equivalents of the healthcare laws mentioned above, among other foreign laws.

Our business is subject to complex, stringent and evolving U.S. and foreign laws, regulations, and rules, contractual obligations, industry standards, policies and other obligations relating to privacy and data protection. Our actual or perceived failure to comply with such obligations could result in regulatory investigations or actions, litigations (including class claims) and mass arbitration demands, fines and penalties, disruptions of and changes to our business practices, monetary penalties, reputational harm, loss of revenue or profits, and other adverse business consequences.

In the ordinary course of business, we collect, receive, store, process, generate, use, transfer, disclose, make accessible