Company: CMND
Filing Date: 2025-01-22
Form Type: 20-F
Source: 0001213900-25-005490
Chunk: 50

Company: Clearmind Medicine Inc.
Filing Date: 2025-01-22
Form: 20-F
Item: Item 3
Chunk 50
---
 the implementation of administrative,
physical and technological safeguards to protect the privacy of protected health information and ensure the confidentiality, integrity
and availability of electronic protected health information. Depending on the facts and circumstances, we could be subject to civil, criminal,
and administrative penalties if we knowingly obtain, use, or disclose individually identifiable health information maintained by a HIPAA-covered
entity in a manner that is not authorized or permitted by HIPAA.

In addition to HIPAA, additional privacy and data
security laws and regulations have been enacted in the United States and additional laws and regulations may be enacted in the near future.
For example, the California Consumer Privacy Act, or the CCPA, which became effective on January 1, 2020, requires companies that process
information on California residents to make new disclosures to consumers about their data collection, use and sharing practices, provides
such individuals with new data privacy rights, including the ability to opt out of certain sales of personal information, imposes new
operational requirements for covered businesses, provides a private right of action for data breaches and creates a statutory damages
framework. Many other states are considering similar legislation, and a broad range of legislative measures also have been introduced
at the federal level. In addition, California voters recently approved a new privacy law, the California Privacy Rights Act, or the CPRA,
which significantly modifies the CCPA, including by expanding consumers’ rights with respect to certain personal information and
creating a new state agency to oversee implementation and enforcement efforts. Many of the CPRA’s provisions became effective on
January 1, 2023. Although there are limited exemptions for clinical trial data under the CCPA, the CCPA and other similar laws could impact
our business activities depending on how it is interpreted and exemplifies the vulnerability of our business to the evolving regulatory
environment related to personal information.

In the event we decide to conduct clinical trials
or continue to enroll subjects in our ongoing or future clinical trials in Europe, we may be subject to additional privacy restrictions.
The collection, use and transfer of personal health data in the EEA is governed by the provisions of the General Data Protection Regulation
2016/679, or the GDPR. The GDPR went into effect in May 2018 and establishes a strengthened individual data rights regime and imposes
several requirements for controllers and processors of personal data relating to the establishment of a legal basis for processing, the
consent of the individuals to whom the personal data relates, notification of data processing obligations to the competent national data
protection authorities