Company: GHRS
Filing Date: 2025-02-27
Form Type: 20-F
Source: 0001140361-25-006175
Chunk: 68

Company: GH Research PLC
Filing Date: 2025-02-27
Form: 20-F
Item: Item 4
Chunk 68
---
 residents the ability to limit the use of their personal information, further restricts the use of cross-contextual advertising, establishes restrictions on the retention of personal information, expands the types of data breaches subject to the CCPA’s private right of action and establishes a new California Privacy Protection Agency to implement and enforce the CCPA and CPRA. Other states, such as Nevada and Oklahoma, and the U.S. federal government are considering comprehensive privacy laws, and on January 1, 2023, the Virginia Consumer Data Protection Act, or CDPA, became effective. The CDPA contains provisions that require businesses subject to the legislation to conduct data protection assessments in certain circumstances and that require opt-in consent from Virginia consumers to process certain sensitive personal information. In addition, Colorado enacted the Colorado Privacy Act, or the CoPA, and Connecticut enacted the Connecticut Data Privacy Act, each of which took effect on July 1, 2023, and Utah enacted the Consumer Privacy Act, which became effective on December 31, 2023. Several other states, including New Hampshire, Delaware, and Nebraska, have also enacted privacy laws that have taken effect in 2024 or will take effect in 2025. Moreover, laws in all 50 U.S. states require businesses to provide notice to consumers whose personal information has been disclosed as a result of a data breach. The CDPA, CoPA, the Connecticut and Utah laws, and such other proposed legislation, if enacted, may add additional complexity, variation in requirements, restrictions and potential legal risk, require additional investment of resources in compliance programs, impact strategies and the availability of previously useful data and could result in increased compliance costs and/or changes in business practices and policies.
 
The regulatory framework for data privacy and security issues in the United States and abroad is rapidly evolving and likely to remain uncertain for the foreseeable future. Compliance with applicable U.S. and foreign privacy and data protection laws and regulations is a rigorous and time-intensive process and could require us to take on more onerous obligations in our contracts, restrict our ability to collect, use and disclose certain data, or in some cases, impact our ability to operate in certain jurisdictions.
 
Healthcare Reform
 
The U.S. government, state legislatures and foreign governments have shown significant interest in implementing cost containment programs to limit the growth of government-paid healthcare costs pharmaceutical costs. This has resulted in several presidential executive orders, Congressional inquiries, and proposed and enacted federal and state legislation designed to, among other things, bring more transparency to product pricing, review the