Company: PACB
Filing Date: 2025-08-07
Form Type: 10-Q
Source: 0001299130-25-000156
Chunk: 563

Company: PACIFIC BIOSCIENCES OF CALIFORNIA, INC.
Filing Date: 2025-08-07
Form: 10-Q
Item: Part II, Item 1
Chunk 563
---
 we take measures to protect sensitive data from unauthorized access, use or disclosure, our information technology and infrastructure may be vulnerable to attacks by hackers or viruses or disrupted, breached or otherwise compromised due to employee error, malfeasance or other malicious or inadvertent disruptions. Any such breach or disruption could compromise our networks, and the information stored there could be accessed, manipulated, publicly disclosed, lost, stolen, made unavailable, or otherwise processed without authorization. Any such disruption, access, breach, unavailability, theft, loss or other unauthorized processing of information, or the perception that any of these has occurred could result in legal claims or proceedings, and liability under federal or state laws that protect the privacy of personal information, such as the HIPAA, the Health Information Technology for Economic and Clinical Health Act, and regulatory penalties. Notice of breaches must be made to affected individuals, the Secretary of the Department of Health and Human Services, and for extensive breaches, notice may need to be made to the media or state attorneys general. Such a notice could harm our reputation and our ability to compete.

Q2 Fiscal 2025 Form 10-Q83

While we have in place formal policies and procedures related to the storage, collection, and processing of information, and have conducted data privacy audits, we continue to evaluate our compliance needs, including the need to conduct additional internal and external data privacy audits or adopt additional policies and procedures, to ensure our compliance with all applicable data protection laws and regulations. Additionally, we do not currently have policies and procedures in place for assessing our third-party vendors’ compliance with applicable data protection laws and regulations. All of these evolving compliance and operational requirements impose significant costs, such as costs related to organizational changes, implementing additional protection technologies, training employees and engaging consultants, which are likely to increase over time. In addition, such requirements may require us to modify our data processing practices and policies, distract management or divert resources from other initiatives and projects, all of which could have a material adverse effect on our business, financial condition, results of operations and prospects. Any failure or perceived failure by us or our third-party vendors, collaborators, contractors and consultants to comply with any applicable federal, state or similar foreign laws and regulations relating to data privacy and security, could result in damage to our reputation, as well as proceedings or litigation by governmental agencies or other third parties, including class action privacy litigation in certain jurisdictions, which would subject us to significant fines, sanctions, awards, penalties or judgments, all of which could have a material adverse effect on our business,