Company: VCYT
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001384101-25-000014
Chunk: 99

Company: VERACYTE, INC.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 99
---
 have not anticipated in designing our practices and compliance policies. If so, this could result in government-imposed fines or orders requiring that we change our practices, which could adversely affect our business. We may be required to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply.

Furthermore, the C2i Acquisition included acquiring personal data that may originate from, be processed in, or be transferred to and from, Israel, the EU and other jurisdictions.  Our ability to process, use and transfer such personal data may be subject to Israel’s privacy and data protection laws including but not limited to Basic Law: Human Dignity and Liberty, 5752 -1992; the Protection of Privacy Law, 5741-1981 and the regulations promulgated thereunder, or the PPL, and the guidelines of the Israel Privacy Authority.  The PPL was most recently amended in August 2024, to take effect in August 2025 as PPL, 5774-2024. Personal data acquired through the C2i Acquisition may be subject to third-party contractual restrictions, as well as privacy and data protection laws in additional jurisdictions.  The additional layers of privacy laws in Israel, additional jurisdictions, and contractual requirements increases the complexity of our global data privacy and data protection compliance obligations and risks.  This could increase our potential liability, compliance costs, and may adversely affect our business operations. 

As privacy laws, regulations and standards continue to develop and evolve, we will likely need to  review and amend the legal mechanisms by which we make and/ or receive personal data transfers to/in the United States and other countries outside of the EEA. As supervisory authorities issue further guidance on personal data export mechanisms, including circumstances where the SCCs cannot be used, and/or commence enforcement actions, we could suffer additional costs, complaints and/or regulatory investigations or fines, and/or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services and/or the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results.

If we are unable to protect our intellectual property effectively, our business may be harmed.

We rely on patent protection as well as trademark, copyright, trade secret and other intellectual property rights and contractual restrictions to protect our proprietary technologies, all of which provide limited protection and may not adequately protect our rights or permit us to gain or keep any competitive advantage.  

We