Company: ZLAB
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001628280-25-008409
Chunk: 179

Company: Zai Lab Ltd
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 179
---
 do business. This could result in significant losses or reputational damage, adversely affect our relationships 

-54-

with our partners, customers, vendors, and other third parties, negatively affect our competitive position, or otherwise harm our business. We could also face regulatory and other legal action, including for any failure to provide timely disclosure concerning, or appropriately to limit trading in our securities following, an incident. We may be required to expend significant additional resources to repair or replace information systems or networks, modify our internal controls, and implement or enhance other protective measures or to investigate or remediate vulnerabilities or other exposures. We also may be subject to litigation and financial losses that are not fully insured.

We, our employees, and our contracted third parties are subject to laws and government regulations relating to privacy and data protection that have required us to modify certain of our policies and procedures with respect to the collection and processing of personal data, and future laws and regulations may cause us to incur additional expenses or otherwise limit our ability to collect and process personal data.

We, our employees, and our contracted third parties are subject to data privacy and security laws in the various jurisdictions in which we operate, obtain, or store personally identifiable information, including in mainland China, the United States, and the EU. The legislative and regulatory landscape for privacy and data protection continues to evolve, and there has been an increasing focus on privacy and data protection issues with the potential to affect our business. 

We could be subject to regulatory actions and/or claims made by individuals and groups in private litigation involving privacy issues related to data collection and use practices and other data privacy laws and regulations, including claims under the laws described, as well as for alleged unfair or deceptive practices. If our operations are found to be in violation of any of the privacy laws, rules, or regulations that apply to us, we could be subject to penalties, including civil penalties, damages, injunctive relief, and other penalties, which could adversely affect our ability to operate our business and our financial results. We will continue to review these and all future privacy and other laws and regulations to assess whether additional procedural safeguards are warranted, which may cause us to incur additional expenses or otherwise limit our ability to collect and process personal data.

While we maintain and enforce policies and practices designed so that we and our employees comply with such data privacy and security laws in the various jurisdictions in which we operate, we have identified, and may in the future identify, instances of non-compliance with such policies and practices by our employees. Such non-compliance may