Company: NCNA
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0000950170-25-042709
Chunk: 90

Company: NuCana plc
Filing Date: 2025-03-20
Form: 20-F
Item: Item 3
Chunk 90
---
walls, servers, leased lines and connections to the Internet, are vulnerable to damage from attacks, hackers, computer viruses, unauthorized access, natural disasters, terrorism, war and telecommunication and electrical failures. Furthermore, we have little or no control over the security measures and computer systems of our third-party CROs and other contractors and consultants. While we have not experienced any such system failure, accident or material cybersecurity incident to date, if such an event were to occur and cause interruptions in our operations, it could result in a material disruption of our programs. For example, the loss of

clinical trial data for our product candidates could result in delays in our marketing approval efforts and significantly increase our costs to recover or reproduce the data. To the extent that any disruption or security breach results in a loss of or damage to our data or applications or other data or applications relating to our technology or product candidates, or inappropriate disclosure of confidential or proprietary information, we could incur liabilities and the further development of our product candidates could be delayed.
 Our employees, principal investigators, CROs and consultants may engage in misconduct or other improper activities, including non-compliance with regulatory standards and requirements and insider trading.
 We are exposed to the risk that our employees, principal investigators, CROs and consultants may engage in fraudulent conduct or other illegal activity. Misconduct by these parties could include intentional, reckless or negligent conduct or disclosure of unauthorized activities to us that violate the regulations of the FDA and other regulatory authorities, including those laws requiring the reporting of true, complete and accurate information to such authorities; healthcare fraud and abuse laws and regulations in the United States and abroad; or laws that require the reporting of financial information or data accurately. In particular, sales, marketing and business arrangements in the healthcare industry are subject to extensive laws and regulations intended to prevent fraud, misconduct, kickbacks, self-dealing and other abusive practices. These laws and regulations may restrict or prohibit a wide range of pricing, discounting, marketing and promotion, sales commission, customer incentive programs and other business arrangements. Activities subject to these laws also involve the improper use of information obtained in the course of clinical trials or creating fraudulent data in our preclinical studies or clinical trials, which could result in regulatory sanctions and cause serious harm to our reputation. It is not always possible to identify and deter misconduct by employees and other third parties, and the precautions we take to detect and prevent this activity may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming