Company: NIVFW
Filing Date: 2025-03-07
Form Type: F-1
Source: 0001213900-25-021404
Chunk: 75

Company: NewGenIvf Group Ltd
Filing Date: 2025-03-07
Form: F-1
Chunk 75
---
 in a manner that is inconsistent with its policies and processes or the operation of its solutions NewGenIvf may need to expend resources in order to change its business operations, policies and processes or the manner in which it provides its solutions. This could adversely affect NewGenIvf’s business, financial condition and results of operations.

| ● | Data Protection and Breaches. In recent years, there                                                                                    
 have been a number of well-publicized data breaches involving the improper dissemination of personal information of individuals both    
 within and outside of the healthcare industry. Pursuant to the applicable data protection law of Thailand, the PDPA requires businesses 
 to notify the data subjects and/or the government authorities upon the occurrence of a data breach. The laws are not consistent,        
 and compliance in the event of a widespread data breach is costly. Each country also constantly amending existing laws, requiring       
 attention to frequently changing regulatory requirements. Most countries require holders of personal information to maintain safeguards 
 and take certain actions in response to a data breach, such as providing prompt notification of the breach to affected individuals.     
 In some countries, these laws are limited to electronic data, but they increasingly are enacting or considering stricter and broader    
 requirements.                                                                                                                           |

Despite NewGenIvf’s security management efforts with respect to physical and technological safeguards, employee training, vendor (and sub-vendor) controls and contractual relationships, its infrastructure, data or other operation centers and systems used in its business operations, including the internet and related systems of its vendors (including vendors to whom NewGenIvf outsources data hosting, storage and processing functions) are vulnerable to, and may from time to time experience, unauthorized access to data and/or breaches of confidential information due to a variety of causes. Techniques used to obtain unauthorized access to or compromise systems change frequently, are becoming increasingly sophisticated and complex, and are often not detected until after an incident has occurred. As a result, NewGenIvf might not be able to anticipate these techniques, implement adequate preventive measures, or immediately detect a potential compromise. If its security measures, some of which are managed by third parties, or the security measures of its service providers or vendors, are breached or fail, it is possible that unauthorized or illegal access to or acquisition, disclosure, use or processing of personal information, confidential information, or other sensitive client or employee data, including protected health information, may occur. A security breach or failure could result from a variety of circumstances and events, including third-party action, human negligence or error, malfeasance,