Company: SXTPW
Filing Date: 2025-02-14
Form Type: S-1
Source: 0001213900-25-014334
Chunk: 81

Company: 60 DEGREES PHARMACEUTICALS, INC.
Filing Date: 2025-02-14
Form: S-1
Chunk 81
---
. These laws include several requirements relating to the consent of the individuals to whom the personal data relates, limitations on data processing, establishing a legal basis for processing, notification of data processing obligations or security incidents to appropriate data protection authorities or data subjects, the security and confidentiality of the personal data and various rights that data subjects may exercise. The Directive and the GDPR prohibit, without an appropriate legal basis, the transfer of personal data to countries outside of the European Economic Area (“EEA”), such as the United States, which are not considered by the European Commission to provide an adequate level of data protection. Switzerland has adopted similar restrictions. Although there are legal mechanisms to allow for the transfer of personal data from the EEA and Switzerland to the United States, uncertainty about compliance with European Union data protection laws remains. For example, ongoing legal challenges in Europe to the mechanisms allowing companies to transfer personal data from the EEA to the United States could result in further limitations on the ability to transfer personal data across borders, particularly if governments are unable or unwilling to reach new or maintain existing agreements that support cross-border data transfers, such as the European Union-U.S. and Swiss-U.S. Privacy Shield framework. Additionally, other countries have passed or are considering passing laws requiring local data residency. Under the GDPR, regulators may impose substantial fines and penalties for non-compliance. Companies that violate the GDPR can face fines of up to the greater of 20 million Euros or 4% of their worldwide annual turnover (revenue). The GDPR increases our responsibility and potential liability in relation to personal data that we process, and we may be required to put in place additional mechanisms to ensure compliance with the GDPR and other EU and international data protection rules. 46 Compliance with U.S. and foreign privacy and security laws, rules and regulations could require us to take on more onerous obligations in our contracts, require us to engage in costly compliance exercises, restrict our ability to collect, use and disclose data, or in some cases, impact our or our partners’ or suppliers’ ability to operate in certain jurisdictions. Each of these constantly evolving laws can be subject to varying interpretations. Failure to comply with U.S. and foreign data protection laws and regulations could result in government investigations and enforcement actions (which could include civil or criminal penalties), fines, private litigation, and/or adverse publicity and could negatively affect our operating results and business. Moreover, patients about whom we or our partners obtain information, as well as the providers who share this information with us, may contractually limit our ability to use