Company: RCUS
Filing Date: 2025-02-25
Form Type: 10-K
Source: 0001724521-25-000040
Chunk: 58

Company: Arcus Biosciences, Inc.
Filing Date: 2025-02-25
Form: 10-K
Item: Item 1
Chunk 58
---
24

We will be subject to additional regulations with respect to any activities we conduct in the EU and the UK. For example, the EU General Data Protection Regulation (the "EU GDPR") and the United Kingdom’s General Data Protection Regulation (the "UK GDPR" and, together with the EU GDPR, the "GDPR") applies to health-related and other personal data of individuals in the EU and UK, respectively. The GPDR imposes more stringent operational requirements on processors and controllers of personal data, including, for example, expanded disclosures about how personal data is collected, used and shared, limitations on retention of personal data, more stringent requirements pertaining to genetic, biometric and health data, mandatory data breach notification requirements, and higher standards for controllers to demonstrate valid consent for certain data processing activities. The GDPR further provides that EU member states may implement their own additional laws and regulations in relation to the processing of genetic, biometric or health data, which could result in differences in the GDPR’s implementation among member states. The GDPR increases our responsibility and liability in relation to personal data that we process, and we must put in place additional mechanisms to ensure compliance with GDPR.

Data Privacy and Security 

Numerous state, federal and foreign laws, regulations and standards govern the collection, use, access to, confidentiality and security of health-related and other personal information, and could apply now or in the future to our operations or the operations of our partners. In the U.S., numerous federal and state laws and regulations, including data breach notification laws, health information privacy and security laws and consumer protection laws and regulations govern the collection, use, disclosure, and protection of health-related and other personal information. In addition, certain foreign laws govern the privacy and security of personal data, including health-related data. Privacy and security laws, regulations, and other obligations are constantly evolving, may conflict with each other to complicate compliance efforts, and can result in investigations, proceedings, or actions that lead to significant civil and/or criminal penalties and restrictions on data processing.

Human Capital Resources

Our culture and values can be defined by one overarching concept: We do the right things for the right reasons. We take pride in hard work and approach our mission—to create, develop and commercialize highly differentiated combination therapies that have the potential to cure—with a great sense of urgency. We recognize that our employees are a critical component to our success and we strive to attract the best talent from a range of sources, including an internship program through which we have developed strong relationships with multiple universities to foster talent and attract