Company: SXTPW
Filing Date: 2025-03-27
Form Type: S-1/A
Source: 0001013762-25-003353
Chunk: 73

Company: 60 DEGREES PHARMACEUTICALS, INC.
Filing Date: 2025-03-27
Form: S-1/A
Chunk 73
---
 for exercising these rights. The CCPA also gives consumers the right to request disclosure of information collected about them and whether that information has been sold or shared with others. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. Although there are limited exemptions for clinical trial data and the CCPA’s implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, the CCPA may increase our compliance costs and potential liability. Many similar privacy laws have been proposed at the federal level and in other states. Foreign data protection laws, including, without limitation, the European Union Directive 95/46/EC, or the Directive, and the European Union’s General Data Protection Regulation (“GDPR”), that became effective in May 2018, and member state data protection legislation, may also apply to health-related and other personal information obtained outside of the United States. These laws impose strict obligations on the ability to process health-related and other personal information of data subjects in the European Union and the United Kingdom, including in relation to use, collection, analysis, and transfer (including cross-border transfer) of such personal information. These laws include several requirements relating to the consent of the individuals to whom the personal data relates, limitations on data processing, establishing a legal basis for processing, notification of data processing obligations or security incidents to appropriate data protection authorities or data subjects, the security and confidentiality of the personal data and various rights that data subjects may exercise. The Directive and the GDPR prohibit, without an appropriate legal basis, the transfer of personal data to countries outside of the European Economic Area (“EEA”), such as the United States, which are not considered by the European Commission to provide an adequate level of data protection. Switzerland has adopted similar restrictions. Although there are legal mechanisms to allow for the transfer of personal data from the EEA and Switzerland to the United States, uncertainty about compliance with European Union data protection laws remains. For example, ongoing legal challenges in Europe to the mechanisms allowing companies to transfer personal data from the EEA to the United States could result in further limitations on the ability to transfer personal data across borders, particularly if governments are unable or unwilling to reach new or maintain existing agreements that support cross-border data transfers, such as the European Union-U.S. and Swiss-U.S. Privacy Shield framework. Additionally, other countries have passed or are considering passing laws requiring local data residency. Under the GDPR, regulators may impose substantial fines and penalties for non-compliance. Companies