Company: TVRD
Filing Date: 2025-10-20
Form Type: S-1/A
Source: 0001104659-25-100896
Chunk: 110

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-10-20
Form: S-1/A
Chunk 110
---
 expensive for the Company to obtain director and officer liability insurance and the Company may be required to incur substantial costs to maintain the same or similar coverage. The Company cannot predict or estimate the amount or timing of additional costs the Company may incur to respond to these requirements. The impact of these requirements could also make it more difficult for the Company to attract and retain qualified persons to serve on its board of directors, its board committees or as executive officers.

<div align='center'>65</div>

TABLE OF CONTENTS

The Company, and the third parties with whom it works, are or may be subject to stringent and evolving U.S. and foreign laws, regulations, rules, contractual obligations, and policies related to data privacy and security. The Company’s (or the third parties with whom it works) actual or perceived failure to comply with such obligations could lead to regulatory investigations or actions; litigation; fines and penalties; disruptions of its business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse business consequences.

In the ordinary course of business, the Company collects, receives, stores, processes, generates, uses, transfers, discloses, makes accessible, protects, secures, disposes of, transmits, and shares (collectively, process or processing) certain sensitive information, including proprietary and confidential business data, trade secrets, employee data, intellectual property, data it collects about clinical trial participants in connection with clinical trials, and other sensitive third-party data (collectively, sensitive data). The global data protection landscape is rapidly evolving and the Company is or may become subject to numerous data privacy and security obligations, such as various state, federal and foreign laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements, and other obligations governing the collection use, disclosure, retention, and security of personal information or otherwise relating to data privacy and security, including as relates to information that the Company may collect in connection with clinical trials in the United States and abroad.

Various federal, state, local and foreign legislative and regulatory bodies, or self-regulatory organizations, may expand current laws, rules or regulations, enact new laws, rules or regulations or issue revised rules or guidance regarding data privacy and security. Implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and the Company cannot yet determine the impact future laws, regulations, standards, or perception of their requirements may have on its business. This evolution may create uncertainty in the Company’s business, affect its ability to operate in