Company: DHR
Filing Date: 2025-03-26
Form Type: ARS
Source: 0000313616-25-000085
Chunk: 44

Company: DANAHER CORP /DE/
Filing Date: 2025-03-26
Form: ARS
Chunk 44
---
 In addition, any businesses that we acquire may further expose us to the risks set forth above. In addition, our information technology systems require an ongoing commitment of significant resources to maintain and enhance existing systems and develop new systems to keep pace with continuing changes in information processing technology, evolving legal and regulatory standards, evolving customer expectations, changes in the techniques used to obtain unauthorized access to data and information systems, and the information technology needs associated with our changing products and services. There can be no assurance that we will be able to successfully maintain, enhance and upgrade our systems as necessary to effectively address these requirements. Further, more of our employees work remotely now compared to before the beginning of the COVID-19 pandemic, which exposes us to greater cybersecurity and data privacy risks. Any inability to maintain reliable information technology systems and appropriate controls with respect to global data privacy and security requirements and prevent data breaches can result in adverse regulatory and business consequences and litigation. As a global organization, we are subject to data privacy and security laws, regulations and customer-imposed controls in numerous jurisdictions as a result of having access to and processing confidential, personal and/or sensitive data in the course of our business. For example, entities that are found to be in violation of HIPAA as the result of a breach of unsecured patient health information, a complaint about privacy practices or an audit by HHS, may be subject to significant civil, criminal and administrative fines and penalties and/or additional reporting and oversight obligations. Failure to comply with the requirements of the GDPR and the applicable national data protection laws of the EU member states and other states subject to the GDPR may result in fines of up to €20 million or up to 4% of total worldwide annual turnover for the preceding financial year, whichever is higher, and other administrative penalties. Please see “Item 1. Business—Regulatory Matters” for additional information. Government investigations and enforcement actions can be costly and interrupt the regular operation of our business, and data breaches or violations of data privacy laws can result in civil and criminal, monetary and non-monetary penalties and damage to customer, patient, business partner and employee relationships and to our reputation, any of which may adversely affect our business and financial statements. In addition, compliance with the varying data privacy regulations across the U.S. and around the world has required significant expenditures and may require additional expenditures, and may require further changes in our products or business models that increase expenses or reduce revenue. 21

Defects and unanticipated use or inadequate disclosure with respect to our products or services, or allegations