Company: LIMN
Filing Date: 2025-07-28
Form Type: S-1/A
Source: 0001410578-25-001518
Chunk: 59

Company: Liminatus Pharma, Inc.
Filing Date: 2025-07-28
Form: S-1/A
Chunk 59
---
 data from the European Economic Area (“EEA”) to the United States to our understanding of current regulatory obligations and guidance of data protection authorities, but the CJEU’s decision, the revised SCCs, regulatory guidance and opinions, and other developments relating to cross-border data transfer may require us to implement additional contractual and technical safeguards for any personal data transferred out of the EEA, which may increase compliance costs, lead to increased regulatory scrutiny or liability, may require additional contractual negotiations, and may adversely impact our business, financial condition and operating results. Any actual or alleged failure to comply with the requirements of the GDPR or other laws, regulations, and directives of the member states of the European Union may result in substantial fines, other administrative penalties and civil claims being brought against us, which could have a material adverse effect on our business, financial condition and results of operations.

In addition, U.S. states are adopting new laws or amending existing laws and regulations, requiring attention to frequently changing regulatory requirements applicable to data related to individuals. For example, California has enacted the California Consumer Privacy Act (“CCPA”). The CCPA gives California residents expanded rights to access and delete their personal information, opt out of certain personal information sharing and receive detailed information about how their personal information is used by requiring covered companies to provide new disclosures to California consumers (as that term is broadly defined and which can include any of our current or future employees who may be California residents or any other California residents whose data we collect or process) and provide such residents new ways to opt out of certain sales of personal information. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. As we expand our operations and trials (both preclinical or clinical), the CCPA may increase our compliance costs and potential liability. Additionally, a new privacy law, the California Privacy Rights Act (CPRA), was approved by California voters in the election on November 3, 2020. The CPRA creates obligations relating to consumer data beginning on January 1, 2022, and comes fully into force on January 1, 2023, with enforcement beginning July 1, 2023. The CPRA modifies the CCPA significantly, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. Additionally, other U.S. states continue to propose, and in certain cases adopt, privacy-focused legislation such as Colorado, Virginia, and Utah. Aspects of these state