Company: LIMN
Filing Date: 2025-07-28
Form Type: S-1/A
Source: 0001410578-25-001518
Chunk: 57

Company: Liminatus Pharma, Inc.
Filing Date: 2025-07-28
Form: S-1/A
Chunk 57
---
 disclosure of individually identifiable health information and require the implementation of administrative, physical, and technological safeguards to protect the privacy of individually identifiable health information and ensure the confidentiality, integrity, and availability of electronic protected health information. Determining whether individually identifiable health information has been handled in compliance with applicable privacy standards and our contractual obligations can require complex factual and statistical analyses and may be subject to changing interpretation. Depending on the facts and circumstances, we could be subject to civil and criminal penalties if we knowingly obtain, use, or disclose individually identifiable health information maintained by a HIPAA-covered entity in a manner that is not authorized or permitted by HIPAA. Enforcement activity can result in financial liability and reputational harm, and responses to such enforcement activity can consume significant internal resources. We cannot be sure how these regulations will be interpreted, enforced, or applied to our operations. In addition to the risks associated with enforcement activities and potential contractual liabilities, our ongoing efforts to comply with evolving laws and regulations at the federal and state level may be costly and require ongoing modifications to our policies, procedures and systems. Failure to comply with any of these laws could result in enforcement action against us, including fines, imprisonment of company officials and public censure, claims for damages by customers and other affected individuals, damage to our reputation, and loss of goodwill (both in relation to existing and prospective customers), any of which could have a material adverse effect on our business, financial condition, results of operations, or prospects.

Although we take measures to protect sensitive data from unauthorized access, use or disclosure, our information technology and infrastructure may be vulnerable to attacks by hackers or viruses or breached due to employee error, malfeasance, or other malicious or

<div align='center'>37</div>

inadvertent disruptions. Any such breach or interruption could compromise our networks and the information stored there could be accessed by unauthorized parties, manipulated, publicly disclosed, lost or stolen. Any such access, breach or other loss of information could result in legal claims or proceedings, and liability under federal or state laws that protect the privacy of personal information, such as HIPAA and HITECH, and regulatory penalties. Notice of breaches must be made to affected individuals, the Secretary of the HHS, and for extensive breaches, notice may need to be made to the media or State Attorneys General. Such a notice could harm our reputation and our ability to compete. The HHS has the discretion to impose penalties without attempting to resolve violations through informal means. In addition, state attorneys general are authorized to bring civil actions seeking either