Luna Innovations (LUNA) Risk Factors

Our success will depend on our ability to develop and introduce new products that customers choose to buy. The new products the market requires tend to be increasingly complex, incorporating more functions and operating at faster speeds than old products. If we fail to introduce new product designs or technologies in a timely manner or if customers do not successfully introduce new systems or products incorporating our products, our business, financial condition and results of operations could be materially harmed.

A substantial portion of our technology is licensed from academic institutions, corporations and government agencies. Under these licensing arrangements, a licensor may obtain rights over the technology, including the right to require us to grant a license to one or more third parties selected by the licensor or that we provide licensed technology or material to third parties for non-commercial research. The grant of a license for any of our core technologies to a third party could have a material and adverse effect on our business. In addition, some of our licensors retain certain rights under the licenses, including the right to grant additional licenses to a substantial portion of our core technology to third parties for non-commercial academic and research use. It is difficult to monitor and enforce such non-commercial academic and research uses, and we cannot predict whether the third-party licensees would comply with the use restrictions of such licenses. We have incurred and could incur substantial expenses to enforce our rights against them. We also may not fully control the ability to assert or defend those patents or other intellectual property which we have licensed from other entities, or which we have licensed to other entities. In addition, some of our licenses with academic institutions give us the right to use certain technology previously developed by researchers at these institutions. In certain cases, we also have the right to practice improvements on the licensed technology to the extent they are encompassed by the licensed patents and are within our field of use. Our licensors may currently own and may in the future obtain additional patents and patent applications that are necessary for the development, manufacture and commercial sale of our anticipated products. We may be unable to agree with one or more academic institutions from which we have obtained licenses whether certain intellectual property developed by researchers at these academic institutions is covered by our existing licenses. In the event that the new intellectual property is not covered by our existing licenses, we would be required to negotiate a new license agreement. We may not be able to reach agreement with current or future licensors on commercially reasonable terms, if at all, or the terms may not permit us to sell our products at a profit after payment of royalties, which could harm our business. Some of our patents may cover inventions that were conceived or first reduced to practice under, or in connection with, U.S. government contracts or other federal funding agreements. With respect to inventions conceived or first reduced to practice under such agreement, the U.S. government may retain a non-exclusive, non-transferable, irrevocable, paid-up license to practice or have practiced for or on behalf of the United States the invention throughout the world. We may not succeed in our efforts to retain title in patents, maintain ownership of intellectual property or in limiting the U.S. government's rights in our proprietary technologies and intellectual property when an issue exists as to whether such intellectual property was developed in the performance of such agreement or developed at private expense.

Various U.S. and foreign issued patents and pending patent applications, which are owned by third parties, exist in our technology areas. Such third parties may claim that we infringe their patents. Because patent applications can take several years to result in a patent issuance, there may be currently pending applications, unknown to us, which may later result in issued patents that our technologies may infringe. For example, we are aware of competitors with patents in technology areas applicable to our optical test equipment products. Such competitors may allege that we infringe these patents. There could also be existing patents of which we are not aware that our technologies may inadvertently infringe. We have from time to time been, and may in the future be, contacted by third parties, including patent assertion entities or intellectual property advisors, about licensing opportunities that also contain claims that we are infringing on third party patent rights. If third parties assert these claims against us, we could incur extremely substantial costs and diversion of management resources in defending these claims, and the defense of these claims could have a material adverse effect on our business, financial condition and results of operations. Even if we believe we have not infringed on a third party's patent rights, we may have to settle a claim on unfavorable terms because we cannot afford to litigate the claim. In addition, if third parties assert claims against us and we are unsuccessful in defending against these claims, these third parties may be awarded substantial damages as well as injunctive or other equitable relief against us, which could effectively block our ability to make, use, sell, distribute or market our products and services in the United States or abroad. In the event that a claim relating to intellectual property is asserted against us, or third parties not affiliated with us hold pending or issued patents that relate to our products or technology, we may seek licenses to such intellectual property or challenge those patents. However, we may be unable to obtain these licenses on commercially reasonable terms, if at all, and our challenge of the patents may be unsuccessful. Our failure to obtain the necessary licenses or other rights could prevent the sale, manufacture or distribution of our products and, therefore, could have a material adverse effect on our business, financial condition and results of operations.

Our commercial success will depend in part on our obtaining and maintaining patent, trade secret, copyright and trademark protection of our technologies in the United States and other jurisdictions as well as successfully enforcing this intellectual property and defending it against third-party challenges. We will only be able to protect our technologies from unauthorized use by third parties to the extent that valid and enforceable intellectual property protections, such as patents or trade secrets, cover them. In particular, we place considerable emphasis on obtaining patent and trade secret protection for significant new technologies, products and processes. The degree of future protection of our proprietary rights is uncertain because legal means afford only limited protection and may not adequately protect our rights or permit us to gain or keep our competitive advantage. The degree of future protection of our proprietary rights is also uncertain for products that are currently in the early stages of development because we cannot predict which of these products will ultimately reach the commercial market or whether the commercial versions of these products will incorporate proprietary technologies. Our patent position is highly uncertain and involves complex legal and factual questions. Accordingly, we cannot predict the breadth of claims that may be allowed or enforced in our patents or in third-party patents. For example: - we or our licensors might not have been the first to make the inventions covered by each of our pending patent applications and issued patents;- we or our licensors might not have been the first to file patent applications for these inventions;- others may independently develop similar or alternative technologies or duplicate any of our technologies;- it is possible that none of our pending patent applications or the pending patent applications of our licensors will result in issued patents;- patents may issue to third parties that cover how we might practice our technology;- our issued patents and issued patents of our licensors may not provide a basis for commercially viable technologies, may not provide us with any competitive advantages, or may be challenged and invalidated by third parties; and - we may not develop additional proprietary technologies that are patentable. Patents may not be issued for any pending or future pending patent applications owned by or licensed to us, and claims allowed under any issued patent or future issued patent owned or licensed by us may not be valid or sufficiently broad to protect our technologies. Moreover, protection of certain of our intellectual property may be unavailable or limited in the United States or in foreign countries, and we have not sought to obtain foreign patent protection for certain of our products or technologies due to cost, concerns about enforceability or other reasons. Any issued patents owned by or licensed to us now or in the future may be challenged, invalidated, or circumvented, and the rights under such patents may not provide us with competitive advantages. In addition, competitors may design around our technology or develop competing technologies. Intellectual property rights may also be unavailable or limited in some foreign countries, and in the case of certain products no foreign patents were filed or can be filed. This could make it easier for competitors to capture or increase their market share with respect to related technologies. We could incur substantial costs to bring suits in which we may assert our patent rights against others or defend ourselves in suits brought against us. An unfavorable outcome of any litigation could have a material adverse effect on our business and results of operations. We also rely on trade secrets to protect our technology, especially where we believe patent protection is not appropriate or obtainable. However, trade secrets are difficult to protect. We regularly attempt to obtain confidentiality agreements and contractual provisions with our collaborators, employees and consultants to protect our trade secrets and proprietary know-how. These agreements may be breached or may not have adequate remedies for such breach. While we use reasonable efforts to protect our trade secrets, our employees, consultants, contractors or scientific and other advisors, or those of our strategic partners, may unintentionally or willfully disclose our information to competitors. If we were to enforce a claim that a third party had illegally obtained and was using our trade secrets, our enforcement efforts would be expensive and time consuming, and the outcome would be unpredictable. In addition, courts outside the United States are sometimes unwilling to protect trade secrets. Moreover, if our competitors independently develop equivalent knowledge, methods and know-how, it will be more difficult for us to enforce our rights and our business could be harmed. If we are not able to defend the patent or trade secret protection position of our technologies, then we will not be able to exclude competitors from developing or marketing competing technologies and we may not generate enough revenue from product sales to justify the cost of developing our technologies and to achieve or maintain profitability. We also rely on trademarks to establish a market identity for our company and our products. To maintain the value of our trademarks, we might have to file lawsuits against third parties to prevent them from using trademarks confusingly similar to or dilutive of our registered or unregistered trademarks. Also, we might not obtain registrations for our pending trademark applications, and we might have to defend our registered trademark and pending trademark applications from challenge by third parties. Enforcing or defending our registered and unregistered trademarks might result in significant litigation costs and damages, including the inability to continue using certain trademarks.

In the ordinary course of business we collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, processing) personal data and other sensitive information, including proprietary and confidential business data, intellectual property, sensitive third-party data, business plans, and transactions (collectively, sensitive data) in connection with our business customers and our employees. Our data processing activities may subject us to numerous data privacy and security obligations, such as various laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements, and other obligations relating to data privacy and security. In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). For example, the California Consumer Privacy Act, or the CCPA, requires businesses to provide specific disclosures in privacy notices and honor requests of California residents to exercise certain privacy rights. The CCPA provides for civil penalties of up to $7,500 per violation, as well as a private right of action for individuals affected by certain data breaches to recover significant statutory damages. Additionally, the California Privacy Rights Act, or CPRA, which became effective on January 1, 2023, expands the CCPA's requirements, including applying to personal information of business representatives and employees and creating a new regulatory agency that will be vested with authority to implement and enforce the CCPA and the CPRA. Other states, such as Virginia and Colorado, have also passed comprehensive privacy laws, and similar laws are being considered in several other states, as well as at the federal and local levels. These developments may further complicate compliance efforts, and may increase legal risk and compliance costs for us and the third parties upon whom we rely. Outside the United States, an increasing number of laws, regulations, and industry standards may govern data privacy and security. For example, under the European Union's General Data Protection Regulation, or EU GDPR, and the United Kingdom's so-called ‘UK GDPR' companies may face temporary or definitive bans on data processing and other corrective actions; fines of up to 20 million Euros under the EU GDPR / 17.5 million pounds sterling under the UK GDPR or 4% of annual global revenue, whichever is greater; or private litigation related to processing of personal data brought by classes of data subjects or consumer protection organizations authorized at law to represent their interests. In addition, we may be unable to transfer personal data from Europe and other jurisdictions to the United States or other countries due to data localization requirements or limitations on cross-border data flows. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal data to other countries. In particular, the European Economic Area, or EEA, and the United Kingdom, or UK, have significantly restricted the transfer of personal data to the United States and other countries whose privacy laws it believes are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA and UK's standard contractual clauses, these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. If there is no lawful manner for us to transfer personal data from the EEA, the UK, or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers of personal data to recipients outside Europe for allegedly violating the EU GDPR's cross-border data transfer limitations. Additionally, companies that transfer personal data to recipients outside of the EEA and/or UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators individual litigants and activist groups. In addition to data privacy and security laws, we may be contractually subject to industry standards adopted by industry groups and may become subject to such obligations in the future. We may also be bound by other contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. We may publish privacy policies, marketing materials, and other statements, such as compliance with certain certifications or self-regulatory principles, regarding data privacy and security. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences. Obligations related to data privacy and security are quickly changing, becoming increasingly stringent, and creating regulatory uncertainty. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. Preparing for and complying with these obligations may require us to; modify our data processing practices and policies; put in place additional mechanisms ensuring compliance with the new data protection rules; divert resources from other initiatives and projects; and restrict the way products and services involving data are offered, all of which could significantly harm our business, financial condition, results of operations and prospects. Further, compliance with these and any other applicable privacy and data security laws and regulations is a rigorous and time-intensive process. Moreover, despite our efforts, our personnel or third parties on whom we rely may fail to comply with any such laws or regulations, which could adversely affect our business, financial condition and results of operations. If we or the third parties on which we rely fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims); additional reporting requirements and/or oversight; bans on processing personal data; and orders to destroy or not use personal data. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Our facilities and current and proposed activities involve the use of a broad range of materials that are considered hazardous under applicable laws and regulations. Accordingly, we are subject to a number of foreign, federal, state and local laws and regulations relating to health and safety, protection of the environment and the storage, use, disposal of, and exposure to, hazardous materials and wastes. We could incur costs, fines and civil and criminal penalties, personal injury and third-party property damage claims, or could be required to incur substantial investigation or remediation costs, if we were to violate or become liable under environmental, health and safety laws. Moreover, a failure to comply with environmental laws could result in fines and the revocation of environmental permits, which could prevent us from conducting our business. Liability under environmental laws can be joint and several and without regard to fault. There can be no assurance that violations of environmental and health and safety laws will not occur in the future as a result of the inability to obtain permits, human error, equipment failure or other causes. Environmental laws could become more stringent over time, imposing greater compliance costs and increasing risks and penalties associated with violations, which could harm our business. Accordingly, violations of present and future environmental laws could restrict our ability to expand facilities, pursue certain technologies, and could require us to acquire costly equipment or incur potentially significant costs to comply with environmental regulations. Compliance with foreign, federal, state and local environmental laws and regulations represents a small part of our present budget. If we fail to comply with any such laws or regulations, however, a government entity may levy a fine on us or require us to take costly measures to ensure compliance. Any such fine or expenditure may adversely affect our development. We cannot predict the extent to which future legislation and regulation could cause us to incur additional operating expenses, capital expenditures or restrictions and delays in the development of our products and properties.

Our operations, particularly our international sales, subject us to numerous U.S. and foreign laws and regulations, including, without limitation, regulations relating to imports, exports (including the Export Administration Regulations and the International Traffic in Arms Regulations), technology transfer restrictions, anti-boycott provisions, economic sanctions and anti-corruption. Our products and solutions are subject to export control and import laws and regulations, including the U.S. Export Administration Regulations, the U.S. International Traffic in Arms Regulations (ITAR), U.S. Customs regulations, and the economic and trade sanctions regulations administered by the U.S. Treasury Department's Office of Foreign Assets Controls. Exports of our products, services, and technology must be made in compliance with these laws and regulations, and in some cases, certain registration, licensing, authorization, or reporting requirements may need to be performed. In addition, these laws may restrict or prohibit altogether the sale or supply of certain of our products, services, and technologies to certain governments, persons, entities, countries, and territories, including those that are the target of comprehensive sanctions, unless there are license exceptions that apply or specific licenses are obtained. Any future changes in export control, import, or economic sanctions laws and regulations may adversely impact our ability to sell our products, services, and technologies in certain markets or, in some cases, prevent the export or import of our products, services, and technologies to or from certain countries, governments, or persons altogether, which could adversely affect our business, results of operations, and growth prospects. Our products, services, and technologies may have in the past been provided, and could in the future be provided, in violation of export control, import, or sanctions laws and regulations, despite the precautions we take. As a result, we have submitted, and from time to time may continue to submit as warranted, voluntary self-disclosures regarding compliance with U.S. export control and sanctions laws and regulations to relevant governmental authorities. Any failure to comply with applicable export control and sanctions laws may materially affect us through reputational harm, as well as other negative consequences, including government investigations, substantial civil or criminal penalties, and possible loss of export or import privileges. We are also subject to the FCPA, the U.S. domestic bribery statute contained in 18 U.S.C. § 201, the U.S. Travel Act, the USA PATRIOT Act, the United Kingdom Bribery Act 2010, the Proceeds of Crime Act 2002, and possibly other state and national anti-bribery and anti-money laundering laws in countries in which we conduct activities. Anti-corruption laws are interpreted broadly and prohibit companies and their employees, third-party intermediaries, and other associated persons from authorizing, promising, offering, providing, soliciting, or accepting directly or indirectly, improper payments or benefits to or from any person whether in the public or private sector. These laws also require us to make and keep books and records that accurately and fairly reflect our transactions and to devise and maintain an adequate system of internal accounting controls. We can be held liable for the corrupt or other illegal activities of our employees, representatives, contractors, business partners, and agents, even if we do not explicitly authorize or have actual knowledge of such activities. Failure by us or our sales representatives or consultants to comply with the above laws and regulations could result in administrative, civil, or criminal liabilities and could result in suspension of our export privileges, which could have a material adverse effect on our business. Changes in regulation or political environment may affect our ability to conduct business in foreign markets including investment, procurement and repatriation of earnings.

Many factors beyond our control affect our business, including consumer confidence in the economy, interest rates, inflation, fuel prices, health crises, such as the COVID-19 pandemic, international conflicts, such as the current hostilities between Russia and Ukraine and the Israel-Hamas war, and the general availability of credit. The overall economic climate and changes in Gross National Product growth have a direct impact on some of our customers and the demand for our products. We cannot be sure that our business will not be adversely affected as a result of an industry or general economic downturn. Our customers may reduce capital expenditures and have difficulty satisfying liquidity needs because of continued turbulence in the U.S. and global economies, resulting in reduced sales of our products and harm to our financial condition and results of operations. In particular, our historical results of operations have been subject to substantial fluctuations, and we may experience substantial period-to-period fluctuations in future results of operations. Any future downturn in the markets in which we compete, could significantly reduce the demand for our products and therefore may result in a significant reduction in revenue or increase the volatility of the price of our common stock. Our revenue and results of operations may be adversely affected in the future due to changes in demand from customers or cyclical changes in the markets utilizing our products. In addition, the telecommunications industry has, from time to time, experienced, and may again experience, a pronounced downturn. To respond to a downturn, many service providers may slow their capital expenditures, cancel or delay new developments, reduce their workforces and inventories and take a cautious approach to acquiring new equipment and technologies from original equipment manufacturers, which would have a negative impact on our business. Weakness in the global economy or a future downturn in the telecommunications industry may cause our results of operations to fluctuate from quarter-to-quarter and year-to-year, harm our business, and may increase the volatility of the price of our common stock.

We make planning and spending decisions, including determining the levels of business that we will seek and accept, production schedules, inventory levels, component procurement commitments, personnel needs and other resource requirements, based on our estimates of customer requirements. The short-term nature of commitments by many of our customers and the possibility of unexpected changes in demand for their products reduce our ability to accurately estimate future customer requirements. On occasion, customers may require rapid increases in production, which can strain our resources, cause our manufacturing to be negatively impacted by materials shortages, necessitate higher or more restrictive procurement commitments, increase our manufacturing yield loss and scrapping of excess materials, and reduce our gross margin. We may not have sufficient capacity at any given time to meet the volume demands of our customers, or one or more of our suppliers may not have sufficient capacity at any given time to meet our volume demands. Conversely, a downturn in the markets in which our customers compete can cause, and in the past have caused, our customers to significantly reduce or delay the amount of products ordered or to cancel existing orders, leading to lower utilization of our facilities. Because many of our costs and operating expenses are relatively fixed, reduction in customer demand due to market downturns or other reasons would have a negative effect on our gross margin, operating income and cash flow.

Our business is reliant on our ability to find new customers and retain existing customers. In particular, customers normally purchase certain of our products and incorporate them into products that they, in turn, sell in their own markets on an ongoing basis. As a result, the historical sales of these products have been dependent upon the success of our customers' products and our future performance is dependent upon our success in finding new customers and receiving new orders from existing customers. In several markets, the quality and reliability of our products are a major concern for our customers, not only upon the initial manufacture of the product, but for the life of the product. Many of our products are used in remote locations for higher value assembly, making servicing of our products unfeasible. Any failure of the quality or reliability of our products could harm our business.