Company: DNLI
Filing Date: 2025-05-06
Form Type: 10-Q
Source: 0001714899-25-000105
Chunk: 172

Company: Denali Therapeutics Inc.
Filing Date: 2025-05-06
Form: 10-Q
Item: Part I, Item 3
Chunk 172
---
 countries). The GDPR, UK GDPR, CCPA, CPRA, and many other federal, state, and foreign laws and regulations relating to privacy and data protection are still being tested in courts, and they are subject to new and differing interpretations by courts and regulatory officials. Additionally, the interplay of federal and state laws may be subject to varying interpretations by courts and government agencies, creating complex compliance issues for us and data we receive, use and share, potentially exposing us to additional expense, adverse publicity and liability. 

It is possible that the GDPR, UK GDPR, CCPA, CPRA, or other laws and regulations relating to privacy and data protection may be interpreted and applied in a manner that is inconsistent from jurisdiction to jurisdiction or inconsistent with our current policies and practices. We cannot guarantee that we or our vendors are in compliance with all such applicable data protection laws and regulations and we cannot be sure how these regulations will be interpreted, enforced or applied to our operations. Furthermore, other jurisdictions outside the EU are similarly introducing or enhancing laws and regulations addressing privacy and data protection and security, which could increase our compliance costs and the risks associated with noncompliance. It is possible that these laws, regulations, or other actual or asserted obligations may be interpreted and applied in a manner that is inconsistent with our practices and our compliance efforts may be unsuccessful. We cannot guarantee that we or our vendors may be in compliance with all applicable international laws and regulations as currently maintained and enforced or as they evolve. Our actual or alleged non-compliance could result in government-imposed fines or orders requiring that we change our practices, which could adversely affect our business. In addition to the risks associated with enforcement activities and potential contractual liabilities, our ongoing efforts to comply with evolving laws and regulations may be costly and require ongoing modifications to our policies, procedures and systems. In addition, if we are unable to properly protect the privacy and security of protected health information, we could be alleged or found to have breached certain contractual obligations.

Our actual or perceived failure to adequately comply with applicable laws and regulations or other actual or asserted obligations relating to privacy and data protection and security, or to protect personal data and other data we process or maintain, could result in regulatory enforcement actions against us, including fines, imprisonment of company officials and public censure, claims for damages by affected individuals, other lawsuits or reputational damage, all of which could materially affect our business, financial condition, results of operations and growth prospects.

64

If we or any contract manufacturers and suppliers we engage fail to comply with environmental,