Company: ARVN
Filing Date: 2025-02-11
Form Type: 10-K
Source: 0001655759-25-000016
Chunk: 259

Company: ARVINAS, INC.
Filing Date: 2025-02-11
Form: 10-K
Item: Item 1A
Chunk 259
---
 new clinical trials, other than bioavailability or bioequivalence studies, that were conducted by or for the applicant and are essential to the approval of the application. 

Generic drug manufacturers may seek to launch generic products following the expiration of any applicable exclusivity period we obtain if our product candidates are approved, even if we still have patent protection for such product candidates. Competition that any such product candidates of ours may face from generic versions of such products could materially and adversely impact our future revenue, profitability and cash flows and substantially limit our ability to obtain a return on the investments we may make in those product candidates.

Compliance with global privacy and data security requirements could result in additional costs and liabilities to us or inhibit our ability to collect and process data globally, and the failure to comply with such requirements could subject us to significant fines and penalties, which may have a material adverse effect on our business, financial condition or results of operations.

We are subject to international data privacy and protection laws and regulations that apply to our collection, transmission, storage and use of personally identifiable information. The legislative and regulatory landscape for privacy and data protection continues to evolve in jurisdictions worldwide, and there has been an increasing focus on privacy and data protection issues with the potential to affect our business. Failure to comply with any of these laws and regulations could result in enforcement action against us, including fines, claims for damages by affected individuals, damage to our reputation and loss of goodwill, any of which could have a material adverse effect on our business, financial condition, results of operations or prospects.

There are numerous U.S. federal and state laws and regulations related to the privacy and security of personal information, including HIPAA. Determining whether protected health information has been handled in compliance with applicable privacy standards and our contractual obligations can be complex and may be subject to changing interpretation. These obligations may be applicable to some or all of our business activities now or in the future.

If we are unable to properly protect the privacy and security of protected health information, we could be found to have breached our contracts. Further, if we fail to comply with applicable privacy laws, we could face civil and criminal penalties. HHS enforcement activity can result in financial liability and reputational harm, and responses to such enforcement activity can consume significant internal resources. In addition, state attorneys general are authorized to bring civil actions seeking either injunctions or damages in response to violations that threaten the privacy of state residents. We cannot be sure how these regulations will be interpreted, enforced or applied to our operations. In addition to the risks associated with