Company: SCYX
Filing Date: 2025-03-12
Form Type: 10-K
Source: 0000950170-25-038044
Chunk: 42

Company: SCYNEXIS INC
Filing Date: 2025-03-12
Form: 10-K
Item: Item 1
Chunk 42
---
 subjects in the EEA.  These obligations may include limiting personal data processing to only what is necessary for specified, explicit, and legitimate purposes; requiring a legal basis for personal data processing; requiring the appointment of a data protection officer in certain circumstances; increasing transparency obligations to data subjects; requiring data protection impact assessments in certain circumstances; limiting the collection and retention of personal data; increasing rights for data subjects; formalizing a heightened and codified standard of data subject consents; requiring the implementation and maintenance of technical and organizational safeguards for personal data; mandating notice of certain personal data breaches to the relevant supervisory authority(ies) and affected individuals; and mandating the appointment of representatives in the UK and/or the EU in certain circumstances.

See the section titled “Risk Factors” for additional information about the laws and regulations to which we may become subject and about the risks to our business associated with such laws and regulations.

Other U.S. Healthcare Laws and Compliance Requirements

In the United States our activities are subject to regulation by various federal, state and local authorities in addition to the FDA, including but not limited to, the Centers for Medicare & Medicaid Services, or CMS, other divisions of the U.S. Department of Health and Human Services, or HHS, such as the Office of Inspector General, the U.S. Department of Justice, or DOJ, and individual U.S. Attorney offices within the DOJ, and state and local governments. For example, in the United States, sales, marketing and scientific and educational programs also must comply with state and federal fraud and abuse laws, false claims laws, transparency laws, government price reporting, and health information privacy and security laws. These laws include the following:

•the federal Anti-Kickback Statute, which makes it illegal for any person, including a prescription drug manufacturer (or a party acting on its behalf), to knowingly and willfully solicit, receive, offer or pay any remuneration that is intended to induce or reward referrals, including the purchase, recommendation, order or prescription of a particular drug, for which payment may be made under a federal healthcare program, such as Medicare or Medicaid. Moreover, the Patient Protection and Affordable Care Act, as amended by the Health Care and Education Reconciliation Act of 2010, or collectively, the Affordable Care Act, provides that the government may assert that a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the civil False Claims Act;

•the federal civil and criminal