Company: NIVFW
Filing Date: 2025-08-21
Form Type: DRS
Source: 0001213900-25-079301
Chunk: 87

Company: NewGenIvf Group Ltd
Filing Date: 2025-08-21
Form: DRS
Chunk 87
---
, and the other burdens imposed by, these and other laws or regulatory actions may increase its operational costs, prevent it from
providing its solutions, and/or impact its ability to invest in or jointly develop its solutions. NewGenIvf also may face audits or investigations
by one or more government agencies relating to its compliance with these laws and regulations.

An adverse outcome under any such
investigation or audit could result in fines, penalties, other liability, or could result in adverse publicity or a loss of
reputation, and adversely affect NewGenIvf’s business. Any failure or perceived failure by it or by NewGenIvf’s
solutions to comply with these laws and regulations may subject it to legal or regulatory actions, damage its reputation or
adversely affect its ability to provide its solutions in the jurisdiction that has enacted the applicable law or regulation.
Moreover, if these laws and regulations change, or are interpreted and applied in a manner that is inconsistent with its policies
and processes or the operation of its solutions NewGenIvf may Need to expend resources in order to change its business operations,
policies and processes or the manner in which it provides its solutions. This could adversely affect NewGenIvf’s business,
financial condition and results of operations.

<div align='center'>48</div>

| ● | Data Protection and Breaches. In recent years, there have been a number of well-publicized data breaches involving the improper dissemination of personal information of individuals both within and outside of the healthcare industry. Pursuant to the applicable data protection law of Thailand, the PDPA requires businesses to notify the data subjects and/or the government authorities upon the occurrence of a data breach. The laws are not consistent, and compliance in the event of a widespread data breach is costly. Each country also constantly amending existing laws, requiring attention to frequently changing regulatory requirements. Most countries require holders of personal information to maintain safeguards and take certain actions in response to a data breach, such as providing prompt notification of the breach to affected individuals. In some countries, these laws are limited to electronic data, but they increasingly are enacting or considering stricter and broader requirements. |

Despite NewGenIvf’s security
management efforts with respect to physical and technological safeguards, employee training, vendor (and sub-vendor) controls and contractual
relationships, its infrastructure, data or other operation centers and systems used in its business operations, including the internet
and related systems of its vendors (including vendors to whom NewGenIvf outsources data hosting,