Company: ADPT
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0000950170-25-030913
Chunk: 105

Company: Adaptive Biotechnologies Corp
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 105
---
 of the data protection laws described above or any other laws that apply to us, we may be subject to penalties, including, but not limited to, criminal, civil and administrative penalties, damages, fines, disgorgement, individual imprisonment, possible exclusion from participation in government healthcare programs, injunctions, private qui tam actions brought by individual whistleblowers in the name of the government, class action litigation and the curtailment or restructuring of our operations, as well as additional reporting obligations and oversight if we become subject to a corrective action plan or other agreement to resolve allegations of non-compliance with these laws, any of which could adversely affect our ability to operate our business and our results of operations. 

In addition, within the U.S., an increasing number of states and the federal government are considering or have proposed adoption of new data privacy laws. While not all of these bills become law, they add significant uncertainty about additional obligations or potential penalties which we may face in conducting our business. These uncertainties are confounded by parallel changes in laws adjacent to privacy, such as those impacting machine learning and artificial intelligence or data use, and we may incur substantial expense or experience disruption as related to compliance with these laws, which would adversely affect our ability to conduct our business. 

Security and cybersecurity breaches, loss of data and other disruptions could compromise confidential, personal and sensitive information related to our business or prevent us from accessing critical information and expose us to liability, which could adversely affect our business and our reputation. 

In the ordinary course of our business, we and our collaborators collect and store sensitive data, including PHI, personal information, financial information, intellectual property and proprietary business information owned or controlled by ourselves or our customers, third-party payors, our collaborators, government entities, insurance companies and other parties. We manage and maintain our applications and data through a combination of on-site systems and cloud-based data centers. We utilize external security and infrastructure vendors to manage components of our data centers. We also transmit sensitive data, including patient data, telephonically, through our website and pursuant to arrangements with multiple third-party vendors and their subcontractors. These applications and data encompass a wide variety of critical business information, including research and development information, patient data, commercial information and financial information. We face a number of risks related to protecting this critical information, including loss-of-access risk, unauthorized access, use, disclosure or modification, and the risk of our inability to adequately monitor, audit and modify our respective control over our critical information. This risk extends to the data we entrust