Company: BLLN
Filing Date: 2025-09-17
Form Type: DRS/A
Source: 0001193125-25-206347
Chunk: 91

Company: BillionToOne, Inc.
Filing Date: 2025-09-17
Form: DRS/A
Chunk 91
---
 not be preempted by, HIPAA and its implementing rules. In addition, some countries have stricter consumer notice and/or consent requirements relating to personal data collection, use or sharing, more stringent requirements relating to organizations’ privacy programs and provide stronger individual rights. Failure to comply with GDPR and other applicable privacy or data security-related laws, rules or regulations in the EEA and elsewhere could have an adverse effect on our business, financial condition and results of operations. We expect that there will continue to be new proposed laws and regulations in the U.S. and internationally concerning data privacy and security, and we cannot yet determine the impact such future laws, regulations and standards may have on our business. Because the interpretation and application of laws, regulations, standards and other obligations relating to data privacy and security are still uncertain, these laws, regulations, standards and other obligations could be interpreted and applied in a manner that is inconsistent with our data processing practices and policies or the features of our products. In such cases, changes or modifications to our data processing practices and policies to comply with such interpretations in a commercially reasonable manner would be difficult. We will make public statements about our use and disclosure of personal information through our privacy policy, information provided on our internet platform and press statements. Although we endeavor to comply with our public statements and documentation, we may at times fail to do so or be alleged to have failed to do so. The publication of our privacy policy and other statements that provide promises and assurances about data privacy and security can subject us to potential government or legal action if they are found to be deceptive, unfair or misrepresentative of our actual practices. Any failure, real or perceived, by us to comply with our posted privacy policy or with any legal or regulatory requirements, standards, certifications or orders or other privacy or consumer protection-related laws and regulations applicable to us could cause our customers to reduce their use of our products and could materially and adversely affect our business, financial condition and results of operations. In many jurisdictions, enforcement actions and consequences for non-compliancecan be significant and are rising. In addition, from time to time, concerns may be expressed about whether our products or processes compromise the privacy of customers and others. Concerns about our practices with regard to the collection, use, retention, security, disclosure, transfer and other processing of personal information or other privacy-related matters, even if unfounded, could damage our reputation and materially and adversely affect our business, financial condition and results of operations. We conduct business in a heavily regulated industry, and changes in regulations or violations