Company: HCWB
Filing Date: 2025-04-16
Form Type: 424B3
Source: 0001193125-25-082835
Chunk: 71

Company: HCW Biologics Inc.
Filing Date: 2025-04-16
Form: 424B3
Chunk 71
---
 physical, electronic, and organizational measures to safeguard and secure our systems
to prevent a data compromise. We have also outsourced elements of our information technology infrastructure, and as a result a number of third-party vendors may or could have access to our confidential information. Despite the implementation of
security measures, our information technology systems and data and those of our contractors and consultants are vulnerable to compromise or damage from computer hacking, malicious software, fraudulent activity, employee misconduct, human error,
telecommunication and electrical failures, natural disasters, or other cybersecurity attacks or accidents. Future acquisitions could expose us to additional cybersecurity risks and vulnerabilities from any newly acquired information technology
infrastructure. While we continue to make investments to improve the protection of data and information technology, there can be no assurance that our efforts will prevent service interruptions or security breaches.

Any cybersecurity incident could adversely affect our business, by leading to, for example, the loss of trade secrets or other intellectual
property, demands for ransom or other forms of blackmail, or the unauthorized

44

disclosure of personal or other sensitive information of our employees, clinical trial patients, customers, and others. Although to our knowledge we have not experienced any material
cybersecurity incident to date, if such an event were to occur, it could seriously harm our development programs and our business operations. We could be subject to regulatory actions taken by governmental authorities, litigation under laws that
protect the privacy of personal information, or other forms of legal proceedings, which could result in significant liabilities or penalties. Further, a cybersecurity incident may disrupt our business or damage our reputation, which could have a
material adverse effect on our business, prospects, operating results, share price, stockholder value, and financial condition. We could also incur substantial remediation costs, including the costs of investigating the incident, repairing or
replacing damaged systems, restoring normal business operations, implementing increased cybersecurity protections, and paying increased insurance premiums.

We face potential liability related to the privacy of health information we obtain from clinical trials sponsored by us or our collaborators, from research institutions and our collaborators, and directly from individuals.

We and our partners and vendors are subject to various
federal, state, and foreign data protection laws and regulations (i.e., laws and regulations that address data privacy and security). If we fail to comply with these laws and regulations, we may be subject to litigation, regulatory
investigations, enforcement notices, enforcement actions, fines, and criminal or civil penalties, as well as negative publicity and a potential loss of business.

In the