Company: PFSA
Filing Date: 2025-10-29
Form Type: 424B3
Source: 0001213900-25-103174
Chunk: 71

Company: Profusa, Inc.
Filing Date: 2025-10-29
Form: 424B3
Chunk 71
---
 and expand our administrative,
customer support or IT support services, we may also utilize the services of personnel and contractors located outside of the United States
to perform certain functions. While we make every effort to review our applicable contracts and other payor requirements, a local, state,
or federal government agency or one of our customers may find the use of offshore resources to be a violation of a legal or contractual
requirement, which could result in termination of the contractual relationship, penalties, or changes in our business operations that
could adversely affect our business, financial condition, and results of operations. Additionally, while we have implemented industry
standard security measures for offshore access to protected health information and other personal information, unauthorized access or
disclosure of such information by offshore personnel could result in legal claims or proceedings, and liability under laws that protect
the privacy of personal information and regulatory penalties, disrupt our operations and the services we provide to our clients, damage
to our reputation or result in the termination of contractual relationships, penalties or the loss of coverage, any of which could adversely
affect our profitability, revenue and competitive position.

Security breaches and other disruptions that compromise our information and expose us to liability, could cause our business and reputation to suffer and could subject us to substantial liabilities.

The Administrative Simplification
Provisions of the Health Insurance Portability and Accountability Act of 1996, as amended, and implementing regulations, or
HIPAA, extensively regulate the use and disclosure of individually identifiable health information, known as “protected health information,”
and require covered entities, including health plans and most health care providers, to implement administrative, physical and technical
safeguards to protect the security of such information. Certain provisions of the security and privacy regulations apply to business associates
(entities that handle protected health information on behalf of covered entities), and business associates are subject to direct liability
for violation of these provisions. In addition, a covered entity may be subject to penalties as a result of a business associate violating
HIPAA, if the business associate is found to be an agent of the covered entity. Profusa is a covered entity under HIPAA and may also function
in a business associate capacity to other covered entities.

<div align='center'>38</div>

Covered entities must report
breaches of unsecured protected health information to affected individuals without unreasonable delay and notification must also be made
to the U.S. Department of Health & Human Services, Office for Civil Rights, or OCR and, in certain situations involving
large breaches, to