Company: RPTX
Filing Date: 2025-12-03
Form Type: PREM14A
Source: 0001193125-25-306948
Chunk: 328

Company: Repare Therapeutics Inc.
Filing Date: 2025-12-03
Form: PREM14A
Chunk 328
---
 of the Company and its Subsidiary, and the use of any of the                                                                                                                                                    
 Intellectual Property used in connection therewith, does not infringe upon the Intellectual Property rights of any person. No claims have been asserted or are, to the knowledge of the Company, threatened by any person alleging that the operation or 
 conduct of the business of the Company and its Subsidiary infringes upon any of its Intellectual Property rights. Intellectual Property owned or used by Company and its Subsidiary is valid and enforceable, except as would not be expected to have a  
 Material Adverse Change on the Company.                                                                                                                                                                                                                  |

| (c) | Except as set forth in Schedule 37(c) of the Disclosure Letter, there are no other Contracts between the                                                                                                                                               
 Company (or any predecessor or any Affiliate thereof), on the one hand, and any other person (or any predecessor or Affiliate thereof), on the other hand, that requires the payment by the Company of any royalty payment, milestone payment or other 
 contingent payment of any kind in connection with the discovery, research, development, manufacture, use, sale or other exploitation of any Company Assets.                                                                                            |

| 38. | Data Security and Privacy Requirements |

| (a) | The Company and its Subsidiary have complied with all applicable Data Security and Privacy Requirements 
 pertaining to the business of the Company and its Subsidiary.                                           |

| (b) | Neither the Company nor its Subsidiary has been subject to any order or proceeding with respect to any actual                                                                                                                                          
 or alleged non-compliance with any Data Security and Privacy Requirements. No such proceeding has been threatened in writing against either the Company or its Subsidiary, and neither the Company nor its                                             
 Subsidiary is aware of any facts or circumstances that may reasonably be anticipated to give rise to any such order or of any proceeding or notification or reporting requirement under any Data Security and Privacy Requirement. Neither the Company 
 nor its Subsidiary has received within the past two years any written complaint alleging a violation of any Data Security and Privacy Requirement.                                                                                                     |

| (c) | Neither the Company nor its Subsidiary has suffered, discovered or been notified of any loss, unauthorized                                                                         
 access to or acquisition, use, disclosure or breach of any Personal Information, including any incident that (i) either constitutes (A) a breach of Personal Information, or (B) a |

A-83

| security breach, under any Data Security and Privacy