Company: JUNS
Filing Date: 2025-11-26
Form Type: S-1
Source: 0001493152-25-025204
Chunk: 64

Company: JUPITER NEUROSCIENCES, INC.
Filing Date: 2025-11-26
Form: S-1
Chunk 64
---
 such as state data breach notification laws, state personal data privacy laws (for example, the California Consumer Privacy Act of 2018 (CCPA)), state health information privacy laws, and federal and state consumer protection laws. A range of enforcement agencies exist at both the state and federal levels that can enforce these laws and regulations. For example, the CCPA requires covered businesses that process personal information of California residents to disclose their data collection, use and sharing practices. Further, the CCPA provides California residents with new data privacy rights (including the ability to opt out of certain disclosures of personal data), imposes new operational requirements for covered businesses, provides for civil penalties for violations as well as a private right of action for data breaches and statutory damages (that is expected to increase data breach class action litigation and result in significant exposure to costly legal judgements and settlements). Aspects of the CCPA and its interpretation and enforcement remain uncertain. In addition, the CCPA will be expanded on January 1, 2023, when the California Privacy Rights Act of 2020 (CPRA) becomes operative. The CPRA will, among other things, give California residents the ability to limit use of certain sensitive personal information, further restrict the use of cross-contextual advertising, establish restrictions on the retention of personal information, expand the types of data breaches subject to the CCPA’s private right of action, provide for increased penalties for CPRA violations concerning California residents under the age of 16, and establish a new California Privacy Protection Agency to implement and enforce the new legislation. Although there are limited exemptions for clinical trial data under the CCPA, the CCPA and other similar laws could impact our business activities, depending on their interpretation.

With the GDPR, CCPA, CRPA and other laws, regulations and other obligations relating to privacy and data protection imposing new and relatively burdensome obligations, and with substantial uncertainty over the interpretation and application of these and other obligations, we may face challenges in addressing their requirements and making necessary changes to our policies and practices, and may incur significant costs and expenses in an effort to do so. Additionally, if third parties we work with, such as vendors or service providers, violate applicable laws or regulations or our policies, such violations may also put our or our customers’ data at risk and could in turn have an adverse effect on our business. Any failure or perceived failure by us or our service providers to comply with our applicable policies or notices relating to privacy or data protection, our contractual or other obligations to third parties, or any of our