Company: PRTA
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001559053-25-000009
Chunk: 63

Company: PROTHENA CORP PUBLIC LTD CO
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 63
---
 business processes as well as internal and external communications. Despite the implementation of security measures, our internal computer systems, and those of our current and any future CROs and other contractors, consultants, and collaborators, have been subject to and remain vulnerable to damage from cyberattacks, “phishing” attacks, ransomware, computer viruses, unauthorized access, natural disasters, terrorism, war, and telecommunication or electrical failures. Attacks upon information technology systems are increasing in their frequency, levels of persistence, sophistication, and intensity, and are being conducted by sophisticated and organized groups and individuals with a wide range of motives and expertise. As a result of the COVID-19 pandemic, we may also face increased cybersecurity risks due to our reliance on internet technology and the number of our employees who are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities. Furthermore, because the techniques used to obtain unauthorized access to or to sabotage systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period. Any breakdown, malicious intrusion, or computer virus could result in the impairment of key business processes or breach of data security, which could result in a material disruption of our development programs and cause interruptions in our business operations, whether due to a loss of our trade secrets or other intellectual property or lead to unauthorized disclosure of personal data of our employees, third parties with which we do business, clinical trial participants, or others. For example, the loss of clinical trial data from completed or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. In addition, such a breach may require notification to governmental agencies, the media, or individuals pursuant to applicable data privacy and security law and regulations. Such an event could have an adverse effect on our business, financial condition, or results of operations.

Changes in and failures to comply with U.S. and foreign privacy and data protection laws, regulations, and standards may adversely affect our business, operations, and financial performance.

We and our partners are subject to certain federal, state, and foreign data privacy and security laws and regulations. The legislative and regulatory landscape for privacy and data protection continues to evolve, and there has been an increasing focus on privacy and data protection issues, which may affect our business and may increase our compliance costs and exposure to liability. In the United States, numerous federal and state laws and regulations,