Company: DAWN
Filing Date: 2025-02-25
Form Type: 10-K
Source: 0000950170-25-026654
Chunk: 202

Company: Day One Biopharmaceuticals, Inc.
Filing Date: 2025-02-25
Form: 10-K
Item: Item 1A
Chunk 202
---
 the European Commission may unilaterally revoke the adequacy decision at any point, and if this occurs it could lead to additional costs and increase our overall risk exposure.

Other countries, including China, Brazil, Australia and Japan, for example, have adopted certain legal requirements for local storage and processing of data and cross-border transfers of personal information, any and all of which could increase the cost and complexity of conducting preclinical testing and clinical trials or delivering our future products, if any, and operating our business. These obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other requirements or our practices.

We are or may become subject to the terms of external and internal privacy and security policies, representations, certifications and publications related to privacy and security. 

Compliance with domestic and foreign privacy, data security and data protection laws, regulations and contractual and other obligations could require us to take on more onerous obligations in our contracts, restrict our ability to collect, use and disclose data, or in some cases, impact our ability to operate in certain jurisdictions. The actual or perceived failure to comply with domestic and foreign privacy, data privacy and data protection laws and regulations could result in government enforcement actions (which could include civil, criminal and administrative penalties), 

81

private litigation and/or adverse publicity and could negatively affect our operating results and business. Moreover, clinical trial subjects about whom we or our potential collaborators obtain information, as well as the providers who share this information with us, may contractually limit our ability to use and disclose the information. Claims that we have violated individuals’ privacy rights, failed to comply with privacy, data security and data protection laws or breached our contractual obligations, even if we are not found liable, could be expensive and time consuming to defend and could result in adverse publicity that could harm our business. 

Investors’ expectations of our performance relating to environmental, social and governance factors may impose additional costs and expose us to new risks.

There is an increasing focus from certain regulators, investors, employees, users and other stakeholders concerning corporate responsibility, specifically related to ESG matters both in the United States and internationally. Some investors may use these non-financial performance factors to guide their investment strategies and, in some cases, may choose not to invest in us if they believe our policies and actions relating to corporate responsibility are inadequate. We may face reputational damage in the event that we do not meet the ESG standards set by various constituencies.

Further, ESG initiatives, goals or commitments could be