Company: GLPG
Filing Date: 2025-03-27
Form Type: 20-F
Source: 0001558370-25-003806
Chunk: 66

Company: GALAPAGOS NV
Filing Date: 2025-03-27
Form: 20-F
Item: Item 3
Chunk 66
---
 and personnel resources. Therefore, even if we are successful in defending against any such actions that may be brought against us, our business may be impaired. If any of the physicians or other providers or entities with whom we expect to do business are found to not be in compliance with applicable laws, they may be subject to criminal, civil or administrative sanctions, including exclusions from government funded healthcare programs and imprisonment. If any legislative and/or regulatory initiatives and changes would lead to increased restriction on the marketing of our approved products and product candidates, or lead to limiting the funds available for healthcare in any relevant jurisdiction which may reduce reimbursement levels and is likely to affect the prices we may set, we would be negatively impacted in our ability to successfully and profitably market our approved products and product candidates. If any of the above occur, our ability to operate our business and our results of operations could be adversely affected.
​

​
43

We may fail to comply with evolving privacy and data protection laws and requirements in effect in the European Union, United Kingdom and other jurisdictions.
​
In the European Union, or “EU”, the European Economic Area, or “EEA” and the United Kingdom, or
“UK”, we may face particular privacy, data security, privacy and data protection risks in connection with requirements of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, or the “EU GDPR”, the EU GDPR in such form as
incorporated into the laws of the UK, or the “UK GDPR”, and other applicable implementing or supplemental data protection laws and regulations in effect in the EEA and UK. The UK’s data
protection regime is independent from but aligned to the EU’s data protection regime. Unless stated
otherwise, in this annual report, the “GDPR” refers to both the EU GDPR and UK GDPR, and applies inter alia to the processing of personal data in connection with 
(a) the offering of goods or services to/the monitoring of the behavior of
individuals in the EEA/UK; or (b) the activities of our establishments in the EEA/UK. The GDPR impose strict data protection obligations for controllers and processors of personal data, including, for example, expanded disclosures about how personal data is to be used, limitations on retention of data, enhanced