Company: LIMN
Filing Date: 2025-02-07
Form Type: 424B3
Source: 0001104659-25-010605
Chunk: 138

Company: Liminatus Pharma, Inc.
Filing Date: 2025-02-07
Form: 424B3
Chunk 138
---
.

In addition, U.S. states are adopting new laws or amending existing laws and regulations, requiring attention to frequently changing regulatory requirements applicable to data related to individuals. For example, California has enacted the California Consumer Privacy Act (“CCPA”). The CCPA gives California residents expanded rights to access and delete their personal information, opt out of certain personal information sharing and receive detailed information about how their personal information is used by requiring covered companies to provide new disclosures to California consumers (as that term is broadly defined and which can include any of our current or future employees who may be California residents or any other California residents whose data we collect or process) and provide such residents new ways to opt out of certain sales of personal information. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. As we expand our operations and trials (both preclinical or clinical), the CCPA may increase our compliance costs and potential liability. Additionally, a new privacy law, the California Privacy Rights Act (CPRA), was approved by California voters in the election on November 3, 2020. The CPRA creates obligations relating to consumer data beginning on January 1, 2022, and comes fully into force on January 1, 2023, with enforcement beginning July 1, 2023. The CPRA modifies the CCPA significantly, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. Additionally, other U.S. states continue to propose, and in certain cases adopt, privacy-focused legislation such as Colorado, Virginia, and Utah. Aspects of these state laws remain unclear, resulting in further uncertainty and potentially requiring us to modify our data practices and policies and to incur substantial additional costs and expenses in an effort to comply.

<div align='center'>52</div>

TABLE OF CONTENTS

Failure to comply with U.S. and international data protection laws and regulations could result in government enforcement actions (which could include civil or criminal penalties), private litigation, and/or adverse publicity and could negatively affect our operating results and business. Moreover, patients about whom we or our partners obtain information, as well as the providers who share this information with us, may contractually limit our ability to use and disclose the information. Claims that we have violated individuals’ privacy rights, failed to comply with data protection laws or breached our contractual obligations, even if we are not found liable, could be expensive and time-consuming to defend and could