Company: RGNX
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0000950170-25-038770
Chunk: 161

Company: REGENXBIO Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1A
Chunk 161
---
 federal Anti-Kickback Statute violations and certain marketing practices, including off-label promotion, may implicate the False Claims Act;

•HIPAA, which created new federal criminal statutes that prohibit a person from knowingly and willfully executing a scheme or from making false or fraudulent statements to defraud any healthcare benefit program, regardless of the payor (e.g., public or private);

•HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act (HITECH), and its implementing regulations, and as amended again by the final HIPAA omnibus rule, Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under HITECH and the Genetic Information Nondiscrimination Act;

•Other Modifications to HIPAA, which imposes certain requirements relating to the privacy, security and transmission of individually identifiable health information without appropriate authorization by entities subject to the rule, such as health plans, health care clearinghouses and health care providers;

•federal transparency laws, including the federal Physician Payment Sunshine Act, that require disclosure of payments and other transfers of value provided to physicians and teaching hospitals, and ownership and investment interests held by physicians and other healthcare providers and their immediate family members and applicable group purchasing organizations;

•national laws, industry codes and professional codes of conduct applicable to certain European Union Member States which require payments made to physicians to be publicly disclosed and agreements with physicians to often be the subject of prior notification and approval by the physicians’ employer, his or her competent professional organization and/or the regulatory authorities of the individual Member States;

•federal, state and foreign laws relating to the processing, storage and transfer of personal data, including, but not limited to, the California Consumer Privacy Act and the European Union’s General Data Protection Regulation, which may require us to incur substantial costs or change our business practices with respect to the treatment of personal data; and

•state and foreign law equivalents of each of the above federal laws, state laws that require drug manufacturers to report information related to payments and other transfers of value to physicians and other healthcare providers or marketing expenditures and state laws governing the privacy and security of health information in certain circumstances, many of which differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts in certain circumstances, such as specific disease states.

Because of the breadth of these laws and the narrowness of the statutory exceptions and safe harbors available, it is possible that some of our business activities could be subject to challenge under one or more of such laws. If our operations are