Company: BDRX
Filing Date: 2025-01-17
Form Type: F-1
Source: 0001214659-25-000922
Chunk: 75

Company: Biodexa Pharmaceuticals Plc
Filing Date: 2025-01-17
Form: F-1
Chunk 75
---
 is some risk of any data transfers from the EU and UK being halted. In addition, in June of 2021, the European Commission issued a decision, which will sunset on June 27, 2025 without further action, that the United Kingdom ensures an adequate level of protection for personal data transferred under the E.U. GDPR from the E.U. to the United Kingdom. Adequacy decisions can be adapted or even withdrawn in the event of developments affecting the level of protection in the applicable jurisdiction.

| 37 |

Failure to comply with European Union laws, including failure under the GDPR and UK GDPR, Data Protection Act 2018, ePrivacy Directive and other laws relating to the security of personal data may result in fines up to €20 million (or £17.5 million under the UK GDPR) or up to 4% of the total worldwide annual turnover of the preceding financial year, if greater, and other administrative penalties including criminal liability, which may be onerous and adversely affect our business, financial condition, results of operations and prospects. The GDPR and UK GDPR also confer a private right of action on data subjects and consumer associations to lodge complaints with supervisory authorities, seek judicial remedies, and obtain compensation for damages resulting from violations of the GDPR and UK GDPR, respectively. Failure to comply with the GDPR, UK GDPR, and related laws may lead to increased risk of private actions from data subjects and consumer not-for-profit organizations, including a new form of class action that is available under the GDPR and UK GDPR. Further, if we have to rely on third parties to carry out services for us, including processing personal data on our behalf, we are required under GDPR and UK GDPR to enter into contractual arrangements to flow down or help ensure that these third parties only process such data according to our instructions and have sufficient security measures in place. Any security breach or non-compliance with our contractual terms or breach of applicable law by such third parties could result in enforcement actions, litigation, fines and penalties or adverse publicity and could cause customers to lose trust in us, which would have an adverse impact on our reputation and business. Future customers or other service providers may respond to these evolving laws and regulations by asking us to make certain privacy or data-related contractual commitments that we are unable or unwilling to make. This could lead to the loss of future customers or other business relationships.

We may in the future be unable to retain and recruit qualified scientists, key executives and directors, key employ ees or key consultants, may delay our development efforts or otherwise