Company: ATHE
Filing Date: 2025-08-29
Form Type: 20-F
Source: 0001213900-25-082027
Chunk: 15

Company: ALTERITY THERAPEUTICS LTD
Filing Date: 2025-08-29
Form: 20-F
Item: Item 3
Chunk 15
---
 systems or those of our third-party vendors and other contractors and consultants, or other cyber incidents that could have a material adverse effect upon our reputation, business, operations or financial condition. Furthermore, cyberattacks and security incidents are expected to accelerate in both frequency and impact as the use of AI increases and attackers become increasingly sophisticated and utilize tools and techniques that are designed to circumvent controls, avoid detection, and remove or obfuscate forensic evidence.

If such an event were to occur and cause interruptions in our operations, it could result in a material disruption of our development programs, business operations, a breach of sensitive personal information or a loss or corruption of critical data assets including trade secrets or other proprietary information. For example, the loss of clinical trial data from future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Such IT system failures, cybersecurity attacks or vulnerabilities to our or our third-party vendors’ information security programs or defenses could result in legal liability, reputational damage, business interruption, and our competitive position could be harmed and the further development and commercialization of our products or any future products could be delayed or disrupted. Moreover, containing and remediating any IT system failure, cybersecurity attack or vulnerability may require significant investment of resources. Furthermore, significant security breaches or disruptions of our internal information technology systems or those of our third-party vendors and other contractors and consultants could result in the loss, misappropriation and/or unauthorized access, use, or disclosure of, or the prevention of access to, confidential information (including trade secrets or other intellectual property, proprietary business information and personal information), which could result in financial, legal, business and reputational harm to us.

9

We and the third parties with whom we work are subject to stringent and evolving U.S. and foreign laws, regulations, rules, contractual obligations, industry standards, policies and other obligations related to data privacy and security. Our actual or perceived failure to comply with such obligations (or that of the third parties with whom we work) could lead to regulatory investigations or actions; litigation (including class actions); mass arbitration demands; fines and penalties; a disruption of our business operations; reputational harm; loss of revenue or profits; and other adverse business consequences.

In the ordinary course of business, we collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, “process”) personal data and other sensitive information including proprietary and confidential