Company: MLTX
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001821586-25-000006
Chunk: 55

Company: MoonLake Immunotherapeutics
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1
Chunk 55
---
 a downstream business associate, as determined according to the federal common law of agency. HITECH also increased the civil and criminal penalties applicable to covered entities and business associates and gave state attorneys general new authority to file civil actions for damages or injunctions in federal courts to enforce HIPAA and seek attorneys’ fees and costs associated with pursuing federal civil actions. To the extent that we submit electronic healthcare claims and payment transactions that do not comply with the electronic data transmission standards established under HIPAA and HITECH, payments to us may be delayed or denied. 

26

MOONLAKE IMMUNOTHERAPEUTICSFORM 10-K FOR THE YEAR ENDED DECEMBER 31, 2024PART I

In addition, state health information privacy laws, such as California’s Confidentiality of Medical Information Act and Washington’s My Health My Data Act, govern the privacy and security of health-related information, specifically, may apply even when HIPAA does not and impose additional requirements.

Even when HIPAA and state health information privacy laws do not apply, according to the FTC and state Attorneys General, violating consumers’ privacy rights or failing to take appropriate steps to keep consumers’ personal information secure may constitute unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act and state consumer protection laws.

In addition, certain state laws, such as the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), govern the privacy and security of personal information, including health-related information in certain circumstances, some of which are more stringent than HIPAA in various ways. Numerous other states have passed similar laws, but many differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts. The CCPA applies to personal data of consumers, business representatives, and employees, and imposes obligations on certain businesses that do business in California, including to provide specific disclosures in privacy notices, and affords rights to California residents in relation to their personal information. Health information falls under the CCPA’s definition of personal information where it identifies, relates to, describes, or is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, with a particular consumer or household - unless it is subject to HIPAA - and is included under a new category of personal information, “sensitive personal information,” which is offered greater protection. The numerous other comprehensive privacy laws that have passed or are being considered in other states, as well