Company: TVRD
Filing Date: 2025-11-13
Form Type: 424B3
Source: 0001104659-25-111336
Chunk: 186

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-11-13
Form: 424B3
Chunk 186
---
 may be subject to stringent and evolving U.S. and foreign laws, regulations, rules, contractual obligations, and policies related to data privacy and security. Tvardi’s (or the third parties with whom it works) actual or perceived failure to comply with such obligations could lead to regulatory investigations or actions; litigation; fines and penalties; disruptions of its business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse business consequences.

In the ordinary course of business, Tvardi collects,
receives, stores, processes, generates, uses, transfers, discloses, makes accessible, protects, secures, disposes of, transmits, and shares
(collectively, process or processing) certain sensitive information, including proprietary and confidential business data, trade secrets,
employee data, intellectual property, data it collects about clinical trial participants in connection with clinical trials, and other
sensitive third-party data (collectively, sensitive data). The global data protection landscape is rapidly evolving and Tvardi is or may
become subject to numerous data privacy and security obligations, such as various state, federal and foreign laws, regulations, guidance,
industry standards, external and internal privacy and security policies, contractual requirements, and other obligations governing the
collection use, disclosure, retention, and security of

<div align='center'>109</div>

Table of Contents

personal information or otherwise relating to data privacy and security,
including as relates to information that Tvardi may collect in connection with clinical trials in the United States and abroad.

​

Various federal, state, local and foreign legislative
and regulatory bodies, or self-regulatory organizations, may expand current laws, rules or regulations, enact new laws, rules or regulations
or issue revised rules or guidance regarding data privacy and security. Implementation standards and enforcement practices are likely
to remain uncertain for the foreseeable future, and Tvardi cannot yet determine the impact future laws, regulations, standards, or perception
of their requirements may have on its business. This evolution may create uncertainty in Tvardi’s business, affect its ability to
operate in certain jurisdictions or to collect, store, transfer use and share personal information, necessitate the acceptance of more
onerous obligations in its contracts, result in liability or impose additional costs on Tvardi. The cost of compliance with these laws,
regulations and standards is high and is likely to increase in the future. Any actual or perceived failure by Tvardi to comply with federal,
state or foreign laws or