Company: DVAX
Filing Date: 2025-08-07
Form Type: 10-Q
Source: 0001029142-25-000117
Chunk: 195

Company: DYNAVAX TECHNOLOGIES CORP
Filing Date: 2025-08-07
Form: 10-Q
Item: Part II, Item 1A
Chunk 195
---
 and associated consequences we could suffer as a result of any such cyber events could be catastrophic and result in irreparable harm including (a) the loss of trade secrets or other intellectual property, or (b) the public exposure of personally identifiable information (including sensitive personal information) of our employees, collaborators, clinical trial patients, and others, (c) extortion and other monetary damages due to malware or business email compromise, (d) significant interruptions in our operations, or (e) other significant damages. A data security breach or privacy violation that leads to disclosure or modification of or prevents access to patient information, including personally identifiable information or protected health information, could harm our reputation, compel us to comply with federal, state and/or international data breach notification laws, subject us to mandatory corrective action, require us to verify the correctness of database contents and otherwise subject us to liability under laws and regulations that protect personal data, including, but not limited to, HIPAA, similar state data protection regulations, and the EU GDPR and UK GDPR, resulting in significant penalties; increased costs; loss of revenue; expenses of computer or forensic investigations; material fines and penalties; compensatory, special, punitive or statutory damages; litigation; consent orders regarding our privacy and security practices; requirements that we provide notices, credit monitoring services and/or credit restoration services or other relevant services to impacted individuals; adverse actions against our licenses to do business; or injunctive relief. 

Compliance with these and any other applicable privacy and data security laws and regulations is a rigorous and time-intensive process, and we may be required to put in place additional mechanisms ensuring compliance with the new data protection rules. If we fail to comply with any such laws or regulations, we may face significant fines and penalties that could adversely affect our business, financial condition and results of operations. Furthermore, the laws are not consistent, and compliance in the event of a widespread data breach is costly.

U.S. and equivalent foreign authorities and international authorities warned businesses of increased cybersecurity threats from actors seeking to exploit the COVID-19 pandemic. If we are unable to prevent data security breaches or privacy violations or implement satisfactory remedial measures, our operations could be disrupted, and we may suffer loss of reputation, financial loss and other regulatory penalties because of lost or misappropriated information, including sensitive patient data. Moreover, failure to maintain effective internal accounting controls related to data security breaches and cybersecurity in general could impact our ability to produce timely and accurate financial statements and could subject us to regulatory scrutiny. In addition, these breaches and other inappropriate access