Company: DVAX
Filing Date: 2025-05-06
Form Type: 10-Q
Source: 0001029142-25-000071
Chunk: 32

Company: DYNAVAX TECHNOLOGIES CORP
Filing Date: 2025-05-06
Form: 10-Q
Item: Part I, Item 3
Chunk 32
---
 and to what extent various states will conform to such legislation or any newly enacted federal tax legislation. Changes in corporate tax rates, the realization of net deferred tax assets relating to our operations, the taxation of foreign earnings, and the deductibility of expenses under past or future reform legislation could have a material impact on the value of our deferred tax assets, could result in significant one-time charges, and could increase our future U.S. tax expense. 

We and the third parties supporting our operations are subject to stringent and evolving U.S. and foreign laws, regulations, and rules, contractual obligations, industry standards, policies and other obligations related to data privacy and security. Our actual or perceived failure to comply with such obligations (or by the third parties supporting our operations) could lead to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse business consequences. 

In the ordinary course of business, we process personal data and other sensitive information, including our proprietary and confidential business data, trade secrets, intellectual property, data we may collect about trial participants in connection with clinical trials, and other sensitive data. Our data processing activities subject us to numerous data privacy and security obligations, such as various laws, regulations, guidance, industry standards, external and internal privacy and security policies, contracts, and other obligations that govern the processing of personal data by us and on our behalf. 

In the U.S., federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). In the past few years, numerous U.S. states—including California, Virginia, Colorado, Connecticut, and Utah—have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example