Company: CMND
Filing Date: 2025-12-05
Form Type: F-1/A
Source: 0001213900-25-118772
Chunk: 186

Company: Clearmind Medicine Inc.
Filing Date: 2025-12-05
Form: F-1/A
Chunk 186
---
 incur substantial costs in order to comply with such current or future laws and regulations. Data Privacy and Security Laws Numerous state, federal and foreign laws, including consumer protection laws and regulations, govern the collection, dissemination, use, access to, confidentiality and security of personal information, including health-related information. In the United States, federal and state laws and regulations, including data breach notification laws, health information privacy laws, and federal and state consumer protection laws and regulations (e.g., Section 5 of the Federal Trade Commission Act, or the FTC Act), that govern the collection, use, disclosure, and protection of health-related and other personal information could apply to our operations or the operations of our partners. For example, HIPAA, as amended by HITECH imposes privacy, security and breach notification obligations on certain health care providers, health plans, and health care clearinghouses, known as covered entities, as well as their business associates that perform certain services that involve creating, receiving, maintaining or transmitting individually identifiable health information for or on behalf of such covered entities. Entities that are found to be in violation of HIPAA as the result of a breach of unsecured protected health information, a complaint about privacy practices or an audit by the HHS, may be subject to significant civil, criminal and administrative fines and penalties and/or additional reporting and oversight obligations if required to enter into a resolution agreement and corrective action plan with HHS to settle allegations of HIPAA non-compliance. Further, entities that knowingly receive individually identifiable health information from a HIPAA covered entity in a manner that is not authorized or permitted by HIPAA may be subject to criminal penalties. 112 Even when HIPAA does not apply, according to the Federal Trade Commission, or FTC, violating consumers’ privacy rights or failing to take appropriate steps to keep consumers’ personal information secure may constitute unfair acts or practices in or affecting commerce in violation of Section 5 of the FTC Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. In addition, certain federal, state and foreign laws, such as the GDPR, govern the privacy and security of personal data, including health-related data in certain circumstances, some of which are more stringent than HIPAA and many of which differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts. Failure to comply with these laws, where applicable