Company: LCTX
Filing Date: 2025-03-10
Form Type: 10-K
Source: 0000950170-25-036309
Chunk: 126

Company: Lineage Cell Therapeutics, Inc.
Filing Date: 2025-03-10
Form: 10-K
Item: Item 1A
Chunk 126
---
 foreign laws, regulations, guidance, and industry standards. See Item 1. "Business—Government Regulation—Privacy and Data Security Laws,” above. These requirements may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. Preparing for and complying with these requirements requires significant resources and may necessitate changes to our information technologies, systems, and practices and to those of any third parties that process personal data on our behalf.

If we, or our personnel or third parties upon whom rely, fail, or are perceived to have failed, to address or comply with applicable data privacy, security, protection and transfer requirements, we could face significant consequences. 

74

These consequences may include, but are not limited to, government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-related claims); additional reporting requirements and/or oversight; bans on processing personal data; and orders to destroy or not use personal data. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions in our business operations (including, as relevant, clinical trials); inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or revision or restructuring of our operations. In the United States, privacy and security obligations are often enforced under deceptive and unfair trade practice laws, using theories that a company’s activities were either misleading or unfair.

If our information technology systems or data, or those of third parties upon which we rely, are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; and other adverse consequences.

We are dependent on information technology systems and infrastructure to operate our business. In the ordinary course of our business, we may process confidential, and sensitive, including personal data (such as health-related data), intellectual property, and proprietary business information (collectively, sensitive information). We have also outsourced some of our operations (including parts of our information technology infrastructure) to a number of third-party service providers who may have, or could gain, access to sensitive information. In addition, many of those third parties, in turn, subcontract or outsource some of their responsibilities to third parties.

Cyberattacks, malicious internet-based activity, and online