Company: MLTX
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001821586-25-000006
Chunk: 109

Company: MoonLake Immunotherapeutics
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 109
---
 or future laws and regulations may impair our research, development or commercialization efforts. Failure to comply with these laws and regulations also may result in substantial fines, penalties or other sanctions.

We are subject to laws and regulations related to privacy, data protection, information security and consumer protection across different markets where we conduct our business. Our actual or perceived failure to comply with such obligations could harm our business.

We are subject to laws and regulations related to, among other things, privacy, data protection, information security and consumer protection across different markets where we conduct our business. Such laws and regulations are constantly evolving and changing and are likely to remain uncertain for the foreseeable future. Our actual or perceived failure to comply with such obligations could have an adverse effect on our business, operating results and financial operations. Complying with these numerous, complex, and often changing regulations is expensive and difficult, and failure to comply with any data protection, privacy laws or data security laws or any security incident or breach involving the potential or actual misappropriation, loss or other unauthorized processing, use or disclosure of sensitive or confidential patient, consumer or other personal information, whether by us, one of our collaborators or another third party, could adversely affect our business, financial condition, and results of operations, including but not limited to investigation costs, material fines and penalties, compensatory, special, punitive, and statutory damages, litigation, consent orders regarding our privacy and security practices, requirements that we provide notices, credit monitoring services, and/or credit restoration services or other relevant services to impacted individuals, adverse actions against our licenses to do business, reputational damage and injunctive relief.

The collection and use of personal health data and other personal data in the EU is governed by the provisions of the GDPR, which became applicable in May 2018, and related data protection laws in individual EU Member States. The GDPR imposes a number of strict obligations and restrictions on the ability to process (processing includes collecting, analyzing and transferring) personal data of individuals, including with respect to health data from clinical trials and adverse event reporting. The GDPR includes requirements relating to the legal basis of the processing (such as consent of the individuals to whom the personal data relates), the information provided to the individuals prior to processing their personal data, the personal data breaches which may have to be notified to national data protection authorities and data subjects, the measures to be taken when engaging processors, and the security and confidentiality of the personal data. EU Member States may also impose additional requirements in relation to health, genetic and biometric data through