Company: NIVFW
Filing Date: 2025-08-22
Form Type: DRS
Source: 0001213900-25-079717
Chunk: 83

Company: NewGenIvf Group Ltd
Filing Date: 2025-08-22
Form: DRS
Chunk 83
---
 invest in or jointly develop its solutions. NewGenIvf also may face audits or investigations
by one or more government agencies relating to its compliance with these laws and regulations.

<div align='center'>45</div>

An adverse outcome under any such investigation
or audit could result in fines, penalties, other liability, or could result in adverse publicity or a loss of reputation, and adversely
affect NewGenIvf’s business. Any failure or perceived failure by it or by NewGenIvf’s solutions to comply with these laws
and regulations may subject it to legal or regulatory actions, damage its reputation or adversely affect its ability to provide its solutions
in the jurisdiction that has enacted the applicable law or regulation. Moreover, if these laws and regulations change, or are interpreted
and applied in a manner that is inconsistent with its policies and processes or the operation of its solutions NewGenIvf may Need to expend
resources in order to change its business operations, policies and processes or the manner in which it provides its solutions. This could
adversely affect NewGenIvf’s business, financial condition and results of operations.

| ● | Data Protection and Breaches. In recent years, there have been a number of well-publicized data breaches involving the improper dissemination of personal information of individuals both within and outside of the healthcare industry. Pursuant to the applicable data protection law of Thailand, the PDPA requires businesses to notify the data subjects and/or the government authorities upon the occurrence of a data breach. The laws are not consistent, and compliance in the event of a widespread data breach is costly. Each country also constantly amending existing laws, requiring attention to frequently changing regulatory requirements. Most countries require holders of personal information to maintain safeguards and take certain actions in response to a data breach, such as providing prompt notification of the breach to affected individuals. In some countries, these laws are limited to electronic data, but they increasingly are enacting or considering stricter and broader requirements. |

Despite NewGenIvf’s security
management efforts with respect to physical and technological safeguards, employee training, vendor (and sub-vendor) controls and contractual
relationships, its infrastructure, data or other operation centers and systems used in its business operations, including the internet
and related systems of its vendors (including vendors to whom NewGenIvf outsources data hosting, storage and processing functions) are
vulnerable to, and may from time to time experience, unauthorized access to data and/or breaches of confidential information due to a
variety of causes.