Company: RNAC
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001453687-25-000060
Chunk: 67

Company: Cartesian Therapeutics, Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1
Chunk 67
---
 of the U.S. in which we are established, run clinical trials or in which we sell or market our products once approved. For example, in Europe we are subject to Regulation (EU) 2016/679 (General Data Protection Regular, or GDPR) in relation to our collection, control, processing and other use of personal data (i.e., data relating to an identifiable living individual). We process personal data in relation to participants in our clinical trials in the EEA, including the health and medical information of these participants. The GDPR is directly applicable in each EU Member State, however, it provides that EU Member States may introduce further conditions, including limitations which could limit our ability to collect, use and share personal data (including health and medical information), or could cause our compliance costs to increase, ultimately having an adverse impact on our business. The GDPR imposes accountability and transparency obligations regarding personal data. We are also subject to EU rules with respect to cross-border transfers of personal data out of the EU and EEA. We are subject to the supervision of local data protection authorities in those EU jurisdictions where we are established or otherwise subject to the GDPR. A breach of the GDPR could result in significant fines, regulatory investigations, reputational damage, orders to cease/ change our use of data, enforcement notices, as well potential civil claims including class action type litigation where individuals suffer harm. Moreover, the United Kingdom leaving the EU could also lead to further legislative and regulatory changes. It remains unclear how the United Kingdom data protection laws or regulations will develop in the medium to longer term and how data transfer to the United Kingdom from the EU will be regulated. However, the United Kingdom has transposed the GDPR into domestic law with the Data Protection Act 2018, which remains in force following the United Kingdom’s departure from the EU.

Other Healthcare Laws

The federal Anti-Kickback Statute prohibits, among other things, any person or entity from knowingly (regardless of knowledge of this specific statute) and willfully offering, paying, soliciting, receiving or providing any remuneration, directly or indirectly, overtly or covertly, to induce or in return for purchasing, leasing, ordering, or arranging for or recommending the purchase, lease, or order of any item or service reimbursable, in whole or in part, under Medicare, Medicaid or other federal healthcare programs. The term “remuneration” has been broadly interpreted to include anything of value. The Anti-Kickback Statute has been interpreted to apply to arrangements between pharmaceutical manufacturers