Company: SCLXW
Filing Date: 2025-05-14
Form Type: 424B3
Source: 0001193125-25-119846
Chunk: 130

Company: Scilex Holding Co
Filing Date: 2025-05-14
Form: 424B3
Chunk 130
---
 commensurate to promises made to individuals about the security of their personal information (such as in a privacy notice) may constitute unfair or deceptive acts or practices in violation of Section 5(a) of the FTC
Act. While we do not intend to engage in unfair or deceptive acts or practices, the FTC has the power to enforce promises as it interprets them, and events that we cannot fully control, such as data breaches, may be result in FTC enforcement.
Enforcement by the FTC under the FTC Act can result in civil penalties or enforcement actions.

International data protection laws,
including the EU’s and UK’s GDPR, may also apply to health-related and other personal information obtained outside of the United States. The GDPR imposes several data protection requirements in the EU, as well as fines for violations that
can reach up to the greater of €20 million or 4% of annual global revenue. The regulation imposes numerous requirements for the collection, use, storage and disclosure of personal information, including more stringent requirements relating
to consent and the information that must be shared with data subjects about how their personal information is used, the obligation to notify regulators and affected individuals of personal data breaches, extensive new internal privacy governance

78

obligations and obligations to honor expanded rights of individuals in relation to their personal information, including the right to access, correct and delete their data.

Compliance with international data protection laws and regulations could require us to take on more onerous obligations in our contracts,
increase our compliance costs, restrict our ability to collect, use and disclose data, or in some cases, impact our ability to operate in certain jurisdictions. We cannot guarantee that we are or will be in compliance with all applicable
international regulations as they are enforced now or as they evolve. Claims that we have violated individual privacy rights, failed to comply with data protection laws, or breached our contractual obligations, even if we are not found liable, could
be expensive and time-consuming to defend against and could result in adverse publicity that could harm our business, financial condition, and results of operations.

Our business may be impacted by actions of the new U.S. administration, including executive orders, policies, new legislation and judicial decisions.

The impact of the new U.S. administration is currently unknown. However, actions of the administration may cause us to change our
business operations, with an unknown impact to our stakeholders, including patients, healthcare providers and employees. Failure to comply with new administration actions could expose us to litigation or other government actions. There can be no