Company: CNTB
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001835268-25-000014
Chunk: 77

Company: Connect Biopharma Holdings Ltd
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 77
---
 was amended by the California Privacy Rights Act on January 1, 2023 (as amended, the “CPRA”). The CPRA creates individual privacy rights for California consumers and increases the privacy and security obligations of entities handling specific personal information. It also provides a private right of action for data breaches which has increased the likelihood of, and risks associated with, data breach litigation and creates a statutory damages framework. In addition, the CPRA created a new state agency to oversee implementation and enforcement efforts. Additional compliance investment and potential business process changes may be required as the CPRA evolves and is enforced. Similar laws have passed in several other states, and have been proposed in other states and at the federal level, reflecting a trend toward more stringent privacy legislation in the U.S. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging. 

In addition, most healthcare providers who may utilize our products we may sell in the future are subject to privacy and security requirements under HIPAA and HITECH. We are not a HIPAA covered entity, do not intend to become one, and we do not operate as a business associate to any covered entities. Therefore, these privacy and security requirements do not apply to us. However, we could be subject to civil and criminal penalties if we knowingly obtain individually identifiable or protected health information from a covered entity in a manner that is not authorized or permitted by HIPAA or for aiding and abetting the violation of HIPAA. The legislative and regulatory landscape for privacy and data protection 

20

continues to evolve, and there has been an increasing amount of focus on privacy and data protection issues with the potential to affect our business, including through affecting our customers. These laws could create liability for us or increase our cost of doing business, and any failure to comply could result in harm to our reputation, and potentially fines and penalties. 

In addition, state laws govern the privacy and security of health information in certain circumstances, many of which differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts.

Environmental, Health and Safety Laws

Our operations are subject to complex and increasingly stringent environmental, health and safety laws and regulations. Further, in the future, we may open manufacturing facilities that would likely be subject to environmental and health and safety authorities in the relevant jurisdictions. These authorities typically administer laws which regulate, among other matters, the emission of pollutants into the air (including the workplace), the discharge of pollutants into bodies of water, the storage, use, handling and