Company: LIMN
Filing Date: 2025-01-16
Form Type: POS AM
Source: 0001104659-25-003835
Chunk: 137

Company: Liminatus Pharma, Inc.
Filing Date: 2025-01-16
Form: POS AM
Chunk 137
---
 be accessed by unauthorized parties, manipulated, publicly disclosed, lost or stolen. Any such access, breach or other loss of information could result in legal claims or proceedings, and liability under federal or state laws that protect the privacy of personal information, such as HIPAA and HITECH, and regulatory penalties. Notice of breaches must be made to affected individuals, the Secretary of the HHS, and for extensive breaches, notice may need to be made to the media or State Attorneys General. Such a notice could harm our reputation and our ability to compete. The HHS has the discretion to impose penalties without attempting to resolve violations through informal means. In addition, state attorneys general are authorized to bring civil actions seeking either injunctions or damages in response to violations that threaten the privacy of state residents. Although we have implemented security measures to prevent unauthorized access to patient data, such data is currently accessible through multiple channels, and there is no guarantee we can protect our data from breach. Unauthorized access, loss, or dissemination could also damage our reputation or disrupt our operations, including our ability to conduct our analyses, deliver test results, process claims and appeals, provide customer assistance, conduct research and development activities, collect, process and prepare

<div align='center'>51</div>

TABLE OF CONTENTS

company financial information, provide information about our tests and other patient and physician education and outreach efforts through our website, and manage the administrative aspects of our business.

We may collect, process, use or transfer personal information from individuals located in the European Union in connection with our business, including in connection with conducting clinical trials in the European Union. Additionally, if any of our product candidates are approved, we may seek to commercialize those products in the European Union. The collection and use of personal health data in the European Union are governed by laws, regulations, and directives, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This legislation imposes requirements relating to having legal bases for processing personal information relating to identifiable individuals and transferring such information outside of the European Economic Area, including to the United States, providing details to those individuals regarding the processing of their personal information, keeping personal information secure, having data processing agreements with third parties who process personal information, responding to individuals’ requests to exercise their rights in respect of their personal information, reporting security breaches involving personal data to the competent national data protection authority and affected individuals, appointing data protection officers, conducting data protection impact assessments and record-keeping. This legislation imposes significant responsibilities and liabilities in relation