Company: GEHC
Filing Date: 2025-02-13
Form Type: 10-K
Source: 0001932393-25-000005
Chunk: 42

Company: GE HealthCare Technologies Inc.
Filing Date: 2025-02-13
Form: 10-K
Item: Item 1A
Chunk 42
---
 other operational difficulties. 

These arrangements may require us to incur non-recurring and other charges, increase expenditures, or disrupt our ordinary business activities. These arrangements may expose us to known and unknown risks, including unique risks with respect to the economic, political, and regulatory environment of any foreign entities with which we partner, quality control, and legal and regulatory violations committed by partners whose actions are outside of our control. Any of the foregoing could have a material adverse effect on our business results, cash flows, financial condition, or prospects. 

Increased cybersecurity requirements, vulnerabilities, threats, and more sophisticated and targeted cyber crimes pose a risk to our systems, networks, products, solutions, services, and data, as well as our reputation, which could adversely affect our business. 

We manufacture and sell products that rely upon software and computer systems to operate properly and process and store confidential information. Our products often are connected to, and reside within, our customers’ IT infrastructures. In some jurisdictions, we are expected to design our products to include appropriate cybersecurity protections, and regulatory authorities may review such protections when granting marketing authorizations. 

While we seek to protect our products and IT systems from unauthorized access, these measures may not be effective, particularly because techniques used to obtain unauthorized access or to sabotage systems change frequently, increase in sophistication, and often are not identified at the time that they are launched against a target. These risks apply to our installed base of products, products we currently sell, new products we will introduce in the future, and older technology that we no longer sell or service but remains in use by customers. Additionally, we offer software, cloud, and edge computing products that are developed, controlled, or hosted by third-party providers. A cybersecurity breach of or other disruption to our systems or products, service providers’ network security and systems, or other third-party services could disrupt treatment being delivered to patients or interfere with our customers’ operations, and could lead to the loss of, damage to, or public disclosure of our employees’ and customers’ stored information, including personal data, such as individually identifiable health information (including “protected health information” or “PHI”). Such an event could have serious negative consequences, including alleged customer or patient harm, obligations to notify enforcement authorities or users of our products, voluntary or forced recalls of or modifications to our products, regulatory actions, fines, penalties and damages, reduced demand for or use of our offerings by customers, harm to our reputation, and time-consuming and expensive litigation, any of which could have a material adverse