Company: HMDCF
Filing Date: 2025-03-19
Form Type: 20-F
Source: 0001410578-25-000377
Chunk: 53

Company: HUTCHMED (China) Ltd
Filing Date: 2025-03-19
Form: 20-F
Item: Item 1
Chunk 53
---
-increasing public scrutiny and escalating levels of enforcement and sanctions and increased cost of compliance. Failure to comply with any of these laws could result in enforcement action against us, including investigations, civil and criminal enforcement action, fines, imprisonment of company officers and public censure, claims for damages by customers and other affected individuals, damage to our reputation and loss of goodwill, any of which could have a material adverse effect on our business, financial condition, results of operations or prospects.

Data protection and privacy laws and regulations generally require clinical trial sponsors and operators and their personnel to protect the privacy of their enrolled subjects and prohibit unauthorized disclosure of personal information. We have established procedures to protect the confidentiality of medical records and personal data of subjects enrolled in our clinical trials. Access to clinical trial data has been strictly limited to authorized personnel only according to the relevant rules and regulations. External parties involved in clinical trials are also required to comply with all relevant data protection and confidentiality requirements. Data are to be used only for the intended use, as agreed by the patients and consistent with the patients’ informed consent form. While we have adopted security policies and measures to protect our proprietary data and patients’ privacy, personal patient information could be subject to leaks caused by hacking activities, human error, employee misconduct or negligence or system breakdown. We also cooperate with third parties including collaboration partners, principal investigators, hospitals, CROs and other third-party contractor and consultants for our clinical trials and operations. Any leakage or abuse of patient data by our third-party partners may be perceived by the patients as a result of our failure. Furthermore, any change in applicable laws and regulations could affect our ability to use medical data and subject us to liability for the use of such data for previously permitted purposes. For instance, we may be subject to additional regulations, laws and policies adopted by the PRC government to apply more stringent social and ethical standards in data privacy resulting from the increased global focus on this area. Any failure or perceived failure by us to prevent information security breaches or to comply with privacy policies or privacy-related legal obligations, or any compromise of information security that results in the unauthorized release or transfer of personally identifiable information or other patient data, could cause our customers to lose trust in us and could expose us to regulatory action and legal claims.

Table of Contents

There are numerous U. S. federal and state laws and regulations relating to the privacy and security of personal information. In particular, regulations promulgated pursuant to the Health Insurance Portability and Accountability Act of 1996, or HIPAA, as amended,