Company: SMNR
Filing Date: 2025-08-13
Form Type: 424B3
Source: 0001193125-25-179226
Chunk: 528

Company: Semnur Pharmaceuticals, Inc.
Filing Date: 2025-08-13
Form: 424B3
Chunk 528
---
EA countries, national sunshine rules, regulations, industry self-regulation codes of conduct and physicians’
codes of professional conduct. Failure to comply with these requirements could result in reputational risk, public reprimands, administrative penalties, fines or imprisonment.

In the EEA, the advertising and promotion of our products are subject to laws governing promotion of medicinal products, interactions with physicians,
misleading and comparative advertising and unfair commercial practices. For example, applicable laws require that promotional materials and advertising in relation to medicinal products comply with the product’s Summary of Product
Characteristics (“SmPC”), as approved by the competent authorities in connection with a marketing authorization approval. The SmPC is the document that provides information to physicians concerning the safe and effective use of the
product. Promotional activity that does not comply with the SmPC is considered off-label and is prohibited in the EEA. Other applicable laws at the EEA level and in the individual EU Member States also apply
to the advertising and promotion of medicinal products, including laws that prohibit the direct-to-consumer advertising of prescription-only medicinal products and
further limit or restrict the advertising and promotion of our products to the general public and to health care professionals. Violations of the rules governing the promotion of medicinal products in the EEA could be penalized by administrative
measures, fines and imprisonment.

In addition to data privacy and security regulations in the United States, we may be subject to, or our marketing
activities may be limited by, data privacy and security regulations in the EEA, Switzerland, or the United Kingdom (“UK”), where the legislative and regulatory landscape continues to evolve. There has been increased regulator attention
to privacy and data security issues that could potentially affect our business, including through legislation such as the EEA GDPR and UK GDPR, which each imposes strict obligations on the processing of

328

personal data, including the transfer of personal data from the EEA, Switzerland, or UK to third countries that the European Commission has determined does not ensure an adequate level of
protection, such as the United States. If we violate the GDPR, we may face significant penalties of up to EUR 10,000,000 or 2% of our total worldwide annual turnover, or for more serious violations, up to EUR 20,000,000 or 4% of our total worldwide
annual turnover.

The GDPR and other EEA and UK data privacy and security regulations generally restrict the transfer of personal data from the EEA, UK
and Switzerland, to the United States and