Company: REVB
Filing Date: 2025-04-04
Form Type: DRS
Source: 0001213900-25-029022
Chunk: 62

Company: REVELATION BIOSCIENCES, INC.
Filing Date: 2025-04-04
Form: DRS
Chunk 62
---
 on implementation and compliance practices are often updated or otherwise revised. Compliance with the GDPR will be a rigorous and time -intensiveprocess that may increase our cost of doing business or require us to change our business practices, and despite those efforts, there is a risk that we may be subject to fines and penalties, litigation, and reputational harm in connection with our European activities. In addition, in 2018 California enacted the California Consumer Privacy Act (“CCPA”), which created new individual privacy rights for California consumers (as defined in the law) and places increased privacy and security obligations on entities handling personal data of consumers or households. The CCPA requires covered companies to provide new disclosure to consumers about such companies’ data collection, use and sharing practices, provide such consumers new ways to opt -outof certain sales or transfers of personal information, and provide consumers with additional causes of action. The CCPA went into effect on January 1, 2020, and the California Attorney General commenced enforcement actions for violations on July 1, 2020. Moreover, the California Privacy Rights Act, or CPRA, which was passed in November 2020 and will go into effect on January 1, 2023, with a “look -back” period to January 1, 2022. The CPRA significantly modified the CCPA, resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. The CCPA and the CPRA, may impact our business activities and exemplifies the vulnerability of our business to the evolving regulatory environment related to personal data and protected health information. Compliance with U.S. and international data protection laws and regulations could require us to take on more onerous obligations in our contracts, restrict our ability to collect, use and disclose data, or in some cases, impact our ability to operate in certain jurisdictions. Any actual or alleged failure to comply with U.S. or international laws and regulations relating to privacy, data protection, and data security could result in governmental investigations, proceedings and enforcement actions (which could include civil or criminal penalties), private litigation or adverse publicity, harm to our reputation, and could negatively affect our operating results and business. Moreover, clinical study subjects about whom we or our potential collaborators obtain information, as well as the providers who share this information with us, may contractually limit our ability to use and disclose the information or impose other obligations or restrictions in connection with our use, retention and other processing of information, and we may otherwise face contractual restrictions applicable to our use