Company: WHWK
Filing Date: 2025-01-21
Form Type: PREM14A
Source: 0001193125-25-009599
Chunk: 394

Company: Whitehawk Therapeutics, Inc.
Filing Date: 2025-01-21
Form: PREM14A
Chunk 394
---
% of the total worldwide annual turnover of the preceding financial year,
whichever is higher, and other administrative penalties. Additionally, the UK has implemented legislation that substantially implements the GDPR, the UK GDPR, which provides for similar obligations and provides for penalties for noncompliance of up
to the greater of £17.5 million or four percent of worldwide revenues. The GDPR and UK GDPR may increase our responsibility and liability in relation to personal data that we may process, and we may be required to put in place additional
mechanisms in an effort to comply with the GDPR and UK GDPR. This may be onerous and if our efforts to comply with the GDPR, UK GDPR or other applicable European Union laws and regulations are not successful, it could adversely affect our business
in the European Union and United Kingdom.

Finally, state and foreign laws may apply generally to the privacy and security of information we maintain, and
may differ from each other in significant ways, thus complicating compliance efforts. For example, the California Consumer Privacy Act of 2018 (the “CCPA”), which took effect on January 1, 2020, and subsequently was amended and
supplemented by the CPRA, gives California residents expanded rights to access and require deletion of their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information
is used. In addition, the CCPA (a) allows enforcement by the California Attorney General, with fines set at $2,500 per violation (i.e., per person) or $7,500 per intentional violation and (b) authorizes private lawsuits to recover
statutory damages for certain data breaches. Numerous other states in the U.S. have proposed or enacted similar legislation. While the CCPA and many other similar state laws exempt some data regulated by the Health Insurance Portability and
Accountability Act of 1996 (“HIPAA”) and certain clinical trials data, the CCPA and such other laws, to the extent applicable to our business and operations, may increase our compliance costs and potential liability. Further, some states
have enacted more specific legislation, such as Washington’s enactment of the My Health, My Data Act, which includes a private right of action. The U.S. federal government is also contemplating federal privacy legislation. The evolving trend
toward more stringent privacy legislation in the United States, including the foregoing laws and regulations and the potential for future laws and regulations, could increase our compliance costs and potential liability and adversely affect our
business.