Company: LIMN
Filing Date: 2025-02-07
Form Type: 424B3
Source: 0001104659-25-010605
Chunk: 135

Company: Liminatus Pharma, Inc.
Filing Date: 2025-02-07
Form: 424B3
Chunk 135
---
, operating results and financial condition.

<div align='center'>50</div>

TABLE OF CONTENTS

Failure to comply with privacy and data protection laws, regulations, or contractual obligations could lead to government enforcement actions (which could include civil or criminal penalties), private disputes and litigation, and/or adverse publicity and could negatively affect our operating results and business.

We receive, generate, and store significant and increasing volumes of sensitive information, such as employee, personal, patient and collaborator data. In addition, we actively seek access to medical information, including patient data, through research and development partnerships and collaborations or otherwise. We have legal and contractual obligations regarding the protection of confidentiality and appropriate use of personal data. We and our partners may be subject to federal, state, and foreign data protection laws and regulations (i.e., laws and regulations that address privacy and data security). These data protection laws and regulations continue to evolve and may result in ever-increasing public scrutiny and escalating levels of enforcement and sanctions and increased costs of compliance.

In the United States, numerous federal and state laws and regulations, including state data breach notification laws, state health information privacy laws, and federal and state consumer protection laws (e.g., Section 5 of the FTC Act), that govern the collection, use, disclosure and protection of health-related and other personal information could apply to our operations or the operations of our partners, including during our clinical trials. In addition, we may obtain health information from third parties (including research institutions from which we obtain clinical trial data) that are subject to privacy and security requirements under HIPAA, as amended by HITECH, which establish privacy and security standards that limit the use and disclosure of individually identifiable health information and require the implementation of administrative, physical, and technological safeguards to protect the privacy of individually identifiable health information and ensure the confidentiality, integrity, and availability of electronic protected health information. Determining whether individually identifiable health information has been handled in compliance with applicable privacy standards and our contractual obligations can require complex factual and statistical analyses and may be subject to changing interpretation. Depending on the facts and circumstances, we could be subject to civil and criminal penalties if we knowingly obtain, use, or disclose individually identifiable health information maintained by a HIPAA-covered entity in a manner that is not authorized or permitted by HIPAA. Enforcement activity can result in financial liability and reputational harm, and responses to such enforcement activity can consume significant internal resources. We cannot be sure how these regulations will be interpreted, enforced, or applied to our operations. In addition to the risks associated