Company: DNLI
Filing Date: 2025-11-06
Form Type: 10-Q
Source: 0001714899-25-000193
Chunk: 88

Company: Denali Therapeutics Inc.
Filing Date: 2025-11-06
Form: 10-Q
Item: Part I, Item 2
Chunk 88
---
 could incur liability and reputational damage. For example, any corruption, loss, or other unavailability of clinical trial data from completed, ongoing or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Likewise, we rely on our third-party research institution collaborators for research and development of our product candidates and other third parties for the manufacture of our product candidates and to conduct clinical trials, and similar events relating to their computer systems could also have a material adverse effect on our business.

Cyber-attacks, breaches, interruptions, or other data security incidents could result in legal claims or proceedings by private parties or governmental authorities, liability under federal or state laws that protect the privacy of personal information, regulatory penalties, significant remediation costs, disrupt key business operations, and divert attention of management and key information technology resources. In the United States, notice of breaches must be made to affected individuals, the U.S. Secretary of the Department of Health and Human Services ("HHS"), and for extensive breaches, notice may need to be made to the media or U.S. state attorneys general. Such a notice could harm our reputation and our ability to compete. In addition, U.S. state attorneys general are authorized to bring civil actions seeking either injunctions or damages in response to violations that threaten the privacy of state residents. There can be no assurance that we, our collaborators, CROs, contractors, consultants, and any other business counterparties will be successful in efforts to detect, prevent, protect against, or fully recover systems or data from all break-downs, service interruptions, attacks, or security breaches or incidents. Although we maintain standalone cybersecurity insurance, the costs related to significant security breaches, incidents, or disruptions could be material and exceed the limits of any insurance coverage we have, and may result in increases in our insurance costs. Relevant insurance may in the future become unavailable to us on commercially reasonable terms or at all. Any disruption or security breach or incident that results in or is perceived to have resulted in a loss of, or damage to, our data or systems, or inappropriate disclosure, use, acquisition, transfer, modification, unavailability, or other processing of confidential or proprietary information, including data related to our personnel, could result in the loss, unauthorized modification, use, unavailability, disclosure or other unauthorized processing of critical or sensitive data, and could cause us to incur liability. Further, in any such event, the development and commercialization of our product candidates could be delayed and our business