Company: PGEN
Filing Date: 2025-03-19
Form Type: 10-K
Source: 0001356090-25-000007
Chunk: 79

Company: PRECIGEN, INC.
Filing Date: 2025-03-19
Form: 10-K
Item: Item 1A
Chunk 79
---
 the United Kingdom. The United Kingdom has transposed the GDPR into domestic law with a United Kingdom version of the GDPR, or the U.K. GDPR, which took effect in January 2021, and could expose us to two parallel regimes, each of which potentially authorizes similar fines and other potentially divergent enforcement actions for violations. The GDPR and U.K. GDPR also impose strict rules on the transfer of personal data to countries outside the European Economic Area or the United Kingdom, respectively, including the United States. The European Commission has adopted an adequacy decision in favor of the United Kingdom, enabling data transfers from the European Economic Area to the United Kingdom without additional safeguards. However, the United Kingdom adequacy decision will automatically expire in June 2025 unless the European Commission re-assesses and renews or extends that decision. We and many other companies may need to implement different or additional measures (such as the recently revised European Commission-approved Standard 

50

Contractual Clauses or the U.K. Government-approved International Data Transfer Agreement) to establish or maintain legitimate means for the transfer and receipt of personal data from the European Economic Area and the United Kingdom to the United States.

Compliance with United States and foreign data protection laws and regulations could require us to take on more onerous obligations in our contracts; restrict our ability to collect, use, and disclose data; or in some cases, impact our ability to operate in certain jurisdictions. Failure by us or our collaborators to comply with United States and foreign data protection laws and regulations could result in government enforcement actions (which could include civil or criminal penalties), private litigation and/or adverse publicity and could negatively affect our operating results and business. Moreover, clinical trial subjects about whom we or our potential collaborators obtain information, as well as the providers who share this information with us, may contractually limit our ability to use and disclose the information. Claims that we have violated individuals' privacy rights, failed to comply with data protection laws, or breached our contractual obligations, even if we are not found liable, could be expensive and time consuming to defend, could result in adverse publicity, and could have a material adverse effect on our business, financial condition, results of operations, and prospects.

We may incur significant costs complying with environmental, health, and safety laws and regulations, and failure to comply with these laws and regulations could expose us to significant liabilities.

We use hazardous chemicals and radioactive and biological materials in our business and are subject to a variety of federal, state, local and international laws and regulations governing, among other