Company: DARE
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001401914-25-000012
Chunk: 169

Company: Dare Bioscience, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 169
---
acy decisions can be adapted or even withdrawn in the event of developments affecting the level of protection in the applicable jurisdiction. Future actions of EU data protection authorities are difficult to predict. Some customers or other service providers may respond to these evolving laws and regulations by asking us to make certain privacy or data-related contractual commitments that we are unable or unwilling to make. This could lead to the loss of current or prospective customers or other business relationships.

55

 If we have to rely on third parties to carry out services for us, including processing personal data on our behalf, we are required under the GDPR to enter into contractual arrangements to help ensure that these third parties only process such data according to our instructions and have sufficient security measures in place. Any security breach or non-compliance with our contractual terms or breach of applicable law by such third parties could result in enforcement actions, litigation, fines and penalties or adverse publicity and could cause customers to lose trust in us, which would have an adverse impact on our reputation and business. Any contractual arrangements requiring the transfer of personal data from the EU to us in the United States will require greater scrutiny and assessments as required under Schrems II and may have an adverse impact on cross-border transfers of personal data, or increase costs of compliance. 

The GDPR provides an enforcement authority to impose large penalties for noncompliance, including the potential for fines of up to €20 million or 4% of the annual global revenues of the noncompliant company, whichever is greater. We will be subject to the GDPR when we have a European Union presence or “establishment” (e.g., EU based subsidiary or operations), when conducting clinical trials with EU based data subjects, whether the trials are conducted directly by us or through a vendor or partner, or offering approved products or services to EU-based data subjects, regardless of whether involving a EU based subsidiary or operations. 

U.S. Foreign Corrupt Practices Act 

The U.S. Foreign Corrupt Practices Act, or FCPA, prohibits U.S. corporations and their representatives from offering, promising, authorizing or making payments to any foreign government official, government staff member, political party or political candidate in an attempt to obtain or retain business abroad. The scope of the FCPA would include interactions with certain health care professionals in many countries, either directly or through third parties. Our present and future business has been and will continue to be subject to various other U.S. and foreign laws, rules and/or regulations.

Environmental, Health and Safety Regulation

We are subject to numerous federal,