Company: DRTSW
Filing Date: 2025-03-12
Form Type: 20-F
Source: 0001213900-25-023187
Chunk: 45

Company: Alpha Tau Medical Ltd.
Filing Date: 2025-03-12
Form: 20-F
Item: Item 3
Chunk 45
---
 to other jurisdictions more generally to continue to be subject to enhanced
scrutiny by regulators. As a result, we may have to make certain operational changes and we will have to implement revised standard contractual
clauses and other relevant documentation for existing data transfers within required time frames. As supervisory authorities issue further
guidance on personal data export mechanisms, including circumstances where the SCCs cannot be used, and/or start taking enforcement action,
we could suffer additional costs, complaints and/or regulatory investigations or fines, and/or if we are otherwise unable to transfer
personal data between and among countries and regions in which we operate, it could affect the manner in which we conduct our business,
the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results.

Further, from January 1, 2021,
companies have had to comply with the GDPR and also the UK GDPR, which, together with the amended UK Data Protection Act 2018, retains
the GDPR in UK national law. The UK GDPR mirrors the fines under the GDPR, i. e., fines up to the greater of €20 million (£17.5
million) or 4% of global turnover. On October 12, 2023, the UK Extension to the DPF came into effect (as approved by the UK Government),
as a data transfer mechanism from the UK to U. S. entities self-certified under the DPF. As we continue to expand into other foreign countries
and jurisdictions, we may be subject to additional laws and regulations that may affect how we conduct business.

Failure or perceived failure
to comply with the GDPR, the UK GDPR, and other countries’ privacy or data security-related laws, rules or regulations could result
in significant regulatory penalties and fines, affect our compliance with contracts entered into with our partners, collaborators and
other third-party payors, and could have an adverse effect on our reputation, business and financial condition.

Although we work to comply
with applicable laws, regulations and standards, our contractual obligations and other legal obligations, these requirements are evolving
and may be modified, interpreted and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another
or other legal obligations with which we must comply. Any failure or perceived failure by us or our employees, representatives, contractors,
consultants, collaborators, or other third parties to comply with such requirements or adequately address privacy and security concerns,
even if unfounded, could result in additional cost and liability to us, damage our