Company: NIVFW
Filing Date: 2025-09-18
Form Type: F-1
Source: 0001213900-25-088927
Chunk: 89

Company: NewGenIvf Group Ltd
Filing Date: 2025-09-18
Form: F-1
Chunk 89
---
. This could adversely affect NewGenIvf’s business,
financial condition and results of operations.

<div align='center'>49</div>

| ● | Data Protection and Breaches. In recent years, there have been a number of well-publicized data breaches involving the improper dissemination of personal information of individuals both within and outside of the healthcare industry. Pursuant to the applicable data protection law of Thailand, the PDPA requires businesses to notify the data subjects and/or the government authorities upon the occurrence of a data breach. The laws are not consistent, and compliance in the event of a widespread data breach is costly. Each country also constantly amending existing laws, requiring attention to frequently changing regulatory requirements. Most countries require holders of personal information to maintain safeguards and take certain actions in response to a data breach, such as providing prompt notification of the breach to affected individuals. In some countries, these laws are limited to electronic data, but they increasingly are enacting or considering stricter and broader requirements. |

Despite NewGenIvf’s security
management efforts with respect to physical and technological safeguards, employee training, vendor (and sub-vendor) controls and contractual
relationships, its infrastructure, data or other operation centers and systems used in its business operations, including the internet
and related systems of its vendors (including vendors to whom NewGenIvf outsources data hosting, storage and processing functions) are
vulnerable to, and may from time to time experience, unauthorized access to data and/or breaches of confidential information due to a
variety of causes. Techniques used to obtain unauthorized access to or compromise systems change frequently, are becoming increasingly
sophisticated and complex, and are often not detected until after an incident has occurred. As a result, NewGenIvf might not be able to
anticipate these techniques, implement adequate preventive measures, or immediately detect a potential compromise. If its security measures,
some of which are managed by third parties, or the security measures of its service providers or vendors, are breached or fail, it is
possible that unauthorized or illegal access to or acquisition, disclosure, use or processing of personal information, confidential information,
or other sensitive client or employee data, including protected health information, may occur. A security breach or failure could result
from a variety of circumstances and events, including third-party action, human negligence or error, malfeasance, employee theft or misuse,
phishing and other social engineering schemes, computer viruses, attacks by computer hackers, failures during the process of upgrading
or replacing software,