Mediwound (MDWD) Risk Factors

The United States and several other jurisdictions are considering, or have already enacted, a number of legislative and regulatory proposals to change the healthcare system in ways that may affect our ability to sell NexoBrid, EscharEx or any of our pipeline product candidates profitably, if approved. We cannot predict the initiatives that may be adopted in the future. The continuing efforts of hospitals, governments, insurance companies, managed care organizations and other payors of healthcare services to contain or reduce costs of healthcare may adversely affect: - the market acceptance or demand for NexoBrid, EscharEx or any of our pipeline product candidates, if approved;- the ability to set a price that we believe is fair for NexoBrid, EscharEx or any of our pipeline product candidates, if approved;- our ability to generate revenues and achieve or maintain profitability;- the level of taxes that we are required to pay; and - the availability of capital. Among policy makers and payors in the United States and elsewhere, there is significant interest in promoting changes in healthcare systems with the stated goals of containing healthcare costs, improving quality and/or expanding access. In the United States, the pharmaceutical industry has been a particular focus of these efforts and has been significantly affected by major legislative initiatives. In March 2010, the Patient Protection and Affordable Care Act, as amended by the Health Care and Education Reconciliation Act, or collectively, the Affordable Care Act, or ACA, was signed into law and intended to broaden access to health insurance, reduce or constrain the growth of healthcare spending, enhance remedies against fraud and abuse, add new transparency requirements for the healthcare and health insurance industries, impose new taxes and fees on the health industry and impose additional health policy reforms. Among the provisions of the ACA of importance to our potential product candidates are the following: - an annual, nondeductible fee on any entity that manufactures or imports certain branded prescription drugs and biologic agents, apportioned among these entities according to their market share in certain government healthcare programs;- an increase in the statutory minimum rebates a manufacturer must pay under the Medicaid Drug Rebate Program to 23.1% and 13.0% of the average manufacturer price for branded and generic drugs, respectively;- addressed a new methodology by which rebates owed by manufacturers under the Medicaid Drug Rebate Program are calculated for drugs that are inhaled, infused, instilled, implanted or injected;- a new Medicare Part D coverage gap discount program, in which manufacturers must agree to offer 70% point-of-sale discounts off negotiated prices of applicable brand drugs to eligible beneficiaries during their coverage gap period, as a condition for the manufacturer's outpatient drugs to be covered under Medicare Part D;- extension of manufacturers' Medicaid rebate liability to covered drugs dispensed to individuals who are enrolled in Medicaid managed care organizations;- expansion of eligibility criteria for Medicaid programs by, among other things, allowing states to offer Medicaid coverage to additional individuals and by adding new mandatory eligibility categories for certain individuals with income at or below 133% of the Federal Poverty Level, thereby potentially increasing manufacturers' Medicaid rebate liability;- expansion of the entities eligible for discounts under the Public Health Service pharmaceutical pricing program;- a new requirement to annually report drug samples that manufacturers and distributors provide to physicians; and - a new Patient-Centered Outcomes Research Institute to oversee, identify priorities in, and conduct comparative clinical effectiveness research. There remain judicial and congressional challenges to certain aspects of the ACA, as well as efforts by the current U.S. presidential administration to amend or repeal of the ACA. For example, the Tax Cuts and Jobs Act of 2017 includes a provision repealing, effective January 1, 2019, the tax-based shared responsibility payment imposed by the Affordable Care Act on certain individuals who fail to maintain qualifying health coverage for all or part of a year that is commonly referred to as the "individual mandate." On December 14, 2018, a U.S. District Court Judge in the Northern District of Texas, ruled that the individual mandate is a critical and inseverable feature of the Affordable Care Act, and therefore, because it was repealed as part of the Tax Act, the remaining provisions of the Affordable Care Act are invalid as well. The 2020 federal spending package permanently eliminated, effective January 1, 2020, the Affordable Care Act mandated "Cadillac" tax on high-cost employer-sponsored health coverage and medical device tax and, effective January 1, 2021, also eliminates the health insurer tax. Additionally, on December 18, 2019, the U.S. Court of Appeals for the 5th Circuit upheld the District Court ruling that the individual mandate was unconstitutional and remanded the case back to the District Court to determine whether the remaining provisions of the ACA are invalid as well. The U.S. Supreme Court is currently reviewing the case, although it is unclear how the Supreme Court will rule. It is also unclear how other efforts to challenge, repeal or replace the ACA will impact the ACA or our business. Congress may consider other legislation to repeal or replace elements of the ACA in the future. We cannot predict what legislation, if any, to repeal or replace the ACA will become law, or what impact any such legislation may have on our product candidate. In addition, other legislative changes have been proposed and adopted since the Affordable Care Act was enacted. These changes included aggregate reductions to Medicare payments to providers of 2% per fiscal year, which went into effect in April 2013 and, due to subsequent legislative amendments, will stay in effect through 2030, with the exception of a temporary suspension from May 1, 2020 through March 31, 2021, unless additional Congressional action is taken. In January 2013, President Obama signed into law the American Taxpayer Relief Act of 2012, which, among other things, further reduced Medicare payments to several providers, and increased the statute of limitations period for the government to recover overpayments to providers from three to five years. These laws may result in additional reductions in Medicare and other healthcare funding, which could negatively impact the market for NexoBrid and our other product candidates, if approved, and, accordingly, our financial operations. There has been heightened governmental scrutiny recently over the manner in which drug manufacturers set prices for their marketed products, which have resulted in several Congressional inquiries and proposed bills designed to, among other things, bring more transparency to product pricing, review the relationship between pricing and manufacturer patient programs, and reform government program reimbursement methodologies for drug products. The likelihood of implementation of any of these reform initiatives is uncertain, particularly in light of the new incoming Presidential administration. At the state level, legislatures have increasingly passed legislation and implemented regulations designed to control pharmaceutical and biological product pricing, including price or patient reimbursement constraints, discounts, restrictions on certain product access and marketing cost disclosure and transparency measures, and, in some cases, designed to encourage importation from other countries and bulk purchasing. We expect that other possible healthcare reform measures may result in additional reductions in Medicare and other healthcare funding, more rigorous coverage criteria, new payment methodologies and additional downward pressure on the price that we receive for any approved product. Any reduction in reimbursement from Medicare or other government programs may result in a similar reduction in payments from private payors. The implementation of cost containment measures or other healthcare reforms may prevent us from being able to generate revenue, attain profitability, or commercialize our drugs. Legislative and regulatory proposals have been made to expand post-approval requirements and restrict sales and promotional activities for drugs. We cannot be sure whether additional legislative changes will be enacted, or whether the FDA regulations, guidance or interpretations will be changed, or what the impact of such changes on the marketing approvals of our product candidates, if any, may be. In addition, increased scrutiny by the U.S. Congress of the FDA's approval process may significantly delay or prevent marketing approval, as well as subject us to more stringent product labeling and post-marketing testing and other requirements.

While we are executing a country-specific market access strategy, which includes pricing and/or reimbursement targets for NexoBrid in most of Europe, we cannot guarantee that we will receive favorable hospital, regional or national funding or pricing and reimbursement. Additionally, we cannot predict the pricing and reimbursement of NexoBrid, EscharEx or our pipeline product candidates. The regulations that govern marketing approvals, pricing and reimbursement for new products vary widely from country to country, among regions within some countries and among some hospitals. In some foreign jurisdictions, including the European Union, the pricing of prescription pharmaceuticals is subject to governmental control. In other countries, coverage negotiations must occur at the regional or hospital level in order to be included in the hospital formulary. Pricing negotiations with governmental authorities at the regional or hospital level can take considerable time after the receipt of marketing approval for a product candidate. As a result, even after obtaining regulatory approval for a product in a particular country, we may be subject to price regulations or denied or limited by reimbursement or formulary inclusion, which may delay or limit our commercial launch of the product and negatively impact the revenue we are able to generate from the sale of the product in that country. Adverse pricing limitations may hinder our ability to recoup our investment in NexoBrid, EscharEx or our pipeline product candidates, even after obtaining regulatory approval. Additionally, we cannot be sure that coverage and reimbursement will be available for NexoBrid, EscharEx or any pipeline product candidate that we commercialize in the future, and, if reimbursement is available, whether the level of reimbursement will be adequate. Coverage and reimbursement may affect the demand for, the price of, or the budget allocated for reimbursement for any product for which we obtain marketing approval. Obtaining coverage and adequate reimbursement for our products may be particularly difficult because of the higher prices often associated with products administered under the supervision of a physician. If coverage and reimbursement are not available or are available only at limited levels, we may not be able to successfully commercialize NexoBrid, EscharEx or any pipeline product candidate that we successfully develop. Eligibility for reimbursement does not guarantee that any product will be paid for in all cases or at a rate that covers our costs. Interim payments for new products, if applicable, may also not be sufficient to cover our costs and may not be made permanent. Payment rates may vary according to the use of the product and the clinical setting in which it is used, may be based on payments allowed for lower cost products that are already reimbursed and may be incorporated into existing payments for other services. Net prices for products may be reduced by mandatory discounts or rebates required by government healthcare programs or private payors and by any future relaxation of laws that presently restrict imports of products from countries where they may be sold at lower prices than in certain other countries, such as the United States. In the United States, third-party payors often rely on the coverage policies and payment limitations imposed by Medicare and other government payors, in setting their own coverage policies and reimbursement rates. Our inability to promptly obtain coverage and profitable payment rates from hospital budget, government-funded and private payors for NexoBrid, EscharEx or any pipeline product candidate could have a material adverse effect on our operating results, our ability to raise capital needed to commercialize products and our overall financial condition.

In the short term, we have been relying, for a significant portion of our revenues from sales of products, on sales of NexoBrid in Europe and in other international markets for the treatment of severe burns and procurement of NexoBrid by the U.S. Biomedical Advanced Research and Development Authority (BARDA) for emergency stockpile as part of the U.S. Department of Health and Human Services' (HHS) mission to build national preparedness for public health medical emergencies.  However, our continued growth depends, in large part, on our ability to develop and obtain marketing authorization for NexoBrid for treatment of severe burns in additional markets, especially in the United States (from the U.S. Food and Drug Administration (FDA)). We expect that marketing approval from the FDA, if granted, would enable us to receive additional payments, including milestone payments, transfer price payments and royalties, from Vericel Corporation ("Vericel"), our U.S. commercial partner, who is responsible for commercializing NexoBrid in the North America. In January 2019, we announced top-line results from the U.S. Phase 3 pivotal study to support a Biologics License Application ("BLA") submission to the FDA, according to which the study has met its primary and all secondary endpoints. In September 2020, the FDA accepted for review our BLA, which was based on the above-available acute data, including primary, secondary and safety endpoints, as well as 12-month safety follow-up data.  The 24-month long-term safety follow-up data from the Phase 3 pivotal study will be submitted as a safety update as part of a post-approval commitment, if our BLA is approved. The FDA assigned a Prescription Drug User Fee Act ("PDUFA") goal date of June 29, 2021.  We cannot predict how long the FDA may take to review and approve NexoBrid following our BLA submission, or whether any such approval in the United States will ultimately be granted by the PDUFA goal date, or at all. For example, the FDA has requested additional information as a part of its review of the BLA for NexoBrid. However, there is no guarantee that FDA will consider our responses to be sufficient or timely to enable FDA approval by the PDUFA goal date, particularly in light of delays in the FDA's review caused or exacerbated by the COVID-19 pandemic, including delays in conducting required inspections of our manufacturing facilities. Similarly, we cannot predict how long regulatory authorities outside of the United States and Europe may take to provide NexoBrid with marketing authorization in their jurisdictions or whether such authorizations will be granted at all. A number of companies in the pharmaceutical and biotechnology industry have suffered significant setbacks in advanced clinical trials, even after obtaining promising results in earlier clinical trials. See "-Product development is a lengthy and expensive process, with an uncertain outcome" and "-Development and commercialization of NexoBrid and EscharEx in the United States and our pipeline product candidates worldwide requires successful completion of the regulatory approval process, and may suffer delays or fail." The failure to receive such marketing authorization, especially in the United States, would have a material adverse impact on our business prospects.

To obtain FDA approval for our product candidates, we may obtain clinical data from trials in healthy human subjects that demonstrate adequate safety, and efficacy data from adequate and well-controlled animal studies under regulations issued by the FDA in 2002, often referred to as the "Animal Rule."  Among other requirements, the animal studies must establish that the drug or biological product is reasonably likely to produce clinical benefits in humans. If we use this approach we may not be able to sufficiently demonstrate this correlation to the satisfaction of the FDA, as these corollaries are difficult to establish and are often unclear.  Because the FDA must agree that data derived from animal studies may be extrapolated to establish safety and effectiveness in humans, seeking approval under the Animal Rule may add significant time, complexity and uncertainty to the testing and approval process. The FDA may decide that our data are insufficient for approval and require additional preclinical, clinical or other studies, refuse to approve our product candidates, or place restrictions on our ability to commercialize the products.  In addition, products approved under the Animal Rule are subject to additional requirements, including post-marketing study requirements, restrictions imposed on marketing or distribution, or requirements to provide information to patients. Further, regulatory authorities in other countries may not have established an "Animal Rule" equivalent, and, consequently, there can be no assurance that we will be able to make a submission for marketing approval in foreign countries based on such animal data

In the United States, as well as other jurisdictions, we are required to apply for and receive marketing authorization before we can market our products, as we have already received for NexoBrid in the European Union, Israel, Argentina, Russia, South Korea and Peru. This process can be time-consuming and complicated and may result in unanticipated delays. To secure marketing authorization, an applicant generally is required to submit an application that includes the data supporting preclinical and clinical safety and efficacy as well as detailed information on the manufacturing and control of the product, proposed labeling and other information. Before marketing authorization is granted, regulatory authorities generally require the inspection of the manufacturing facility or facilities and quality systems (including those of third parties) at which the product candidate is manufactured and tested, to assess compliance with strictly enforced current good manufacturing practices ("cGMP"), as well as potential audits of the non-clinical and clinical trial sites that generated the data cited in the marketing authorization application to assess compliance with requisite good clinical practices ("GCP"). We cannot predict how long the applicable regulatory authority or agency will take to grant marketing authorization or whether any such authorizations will ultimately be granted. Regulatory agencies, including the FDA and the European Medicines Agency (the "EMA"), have substantial discretion in the approval process, and the approval process and the requirements governing clinical trials vary from country to country. The policies of the FDA, the EMA or other regulatory authorities may change or may not be explicit, and additional government regulations may be enacted that could prevent, limit or delay regulatory approval of NexoBrid, EscharEx or our pipeline product candidates. If we are slow or unable to adapt to changes in existing requirements or the adoption of new requirements or policies, or if we are not able to maintain regulatory compliance, we may lose any marketing approval that we may have obtained and we may not achieve or sustain profitability. We also cannot predict the likelihood, nature or extent of government regulation that may arise from future legislation or administrative or executive action, either in the United States or abroad. For example, the results of the U.S. presidential election may impact our business and industry. Namely, the previous administration took several executive actions, including the issuance of a number of executive orders, that could impose significant burdens on, or otherwise materially delay, the FDA's ability to engage in routine regulatory and oversight activities such as implementing statutes through rulemaking, issuance of guidance, and review and approval of marketing applications. It is difficult to predict whether or how these requirements will be implemented, or whether they will be rescinded or replaced under the Biden administration. The policies and priorities of the Biden administration are unknown and could materially impact the regulatory framework governing our product candidates. If these executive actions impose constraints on the FDA's ability to engage in oversight and implementation activities in the normal course, or if we slow are slow or unable to adapt to changes in existing requirements or the adoption of new requirements or policies, or if we are unable to maintain regulatory compliance, we may be subject to enforcement action and our business may be negatively impacted. In addition, any regulatory approval that we will receive may also contain requirements for potentially costly post-marketing testing, including Phase 4 clinical trials, and surveillance to monitor the safety and efficacy of the product candidate. For example, as part of the EMA regulatory approval process, we agreed to provide further data from a post-marketing Phase 3 clinical trial of NexoBrid. We believe that our U.S. Phase 3 study will also serve to address this post-marketing commitment to EMA. If EMA is not satisfied with the study results, we will need to perform another costly study to provide such data. Once a product is approved, the manufacturing processes, labeling, packaging, distribution, adverse event reporting, storage, advertising, promotion, import, export and recordkeeping for the product will be subject to extensive and ongoing regulatory requirements. These requirements include submission of safety and other post-marketing information and reports, registration and continued compliance with cGMP and GCP for any clinical trials that we conduct post-approval. Although our manufacturing facility is cGMP-certified, we may face difficulties in obtaining regulatory approval for the manufacturing and quality control process of our pipeline product candidates. Any delays or failures in obtaining regulatory and marketing approval for NexoBrid in the United States, or for our pipeline product candidates worldwide, would adversely affect our business, prospects, financial condition and results of operations.

As a foreign private issuer, we are exempt from the rules and regulations under the Exchange Act related to the furnishing and content of proxy statements, and our officers, directors and principal shareholders are exempt from the reporting and short-swing profit recovery provisions contained in Section 16 of the Exchange Act. In addition, we are not required under the Exchange Act to file annual and current reports and financial statements with the SEC as frequently or as promptly as U.S. domestic companies whose securities are registered under the Exchange Act, and we are generally exempt from filing quarterly reports with the SEC under the Exchange Act. Moreover, we are not required to comply with Regulation FD, which prohibits the selective disclosure of material nonpublic information to, among others, broker-dealers and holders of a company's securities under circumstances in which it is reasonably foreseeable that the holder will trade in the company's securities on the basis of the information. Even though we intend to comply voluntarily with Regulation FD, these exemptions and leniencies will reduce the frequency and scope of information and protections to which you are entitled as an investor. For so long as we qualify as a foreign private issuer, we are not required to comply with the proxy rules applicable to U.S. domestic companies, including the requirement applicable to emerging growth companies to disclose the compensation of our Chief Executive Officer and other two most highly compensated executive officers on an individual, rather than an aggregate, basis. Nevertheless, the regulations promulgated under the Israeli Companies Law, 5759-1999 (the "Israeli Companies Law") require us to disclose the annual compensation of our five most highly compensated officers on an individual, rather than on an aggregate, basis. See "ITEM 6.B. Compensation." Under the Companies Law regulations, this disclosure is required to be included in the proxy statement for our annual meeting of shareholders each year, which we furnish to the SEC under cover of a Report of Foreign Private Issuer on Form 6-K. Because of that disclosure requirement under Israeli law, we are also including such information in this annual report, pursuant to the disclosure requirements of Form 20-F. We would lose our foreign private issuer status if a majority of our outstanding ordinary shares are held of record by U.S. shareholders and we fail to meet additional requirements necessary to avoid loss of foreign private issuer status. Although we have elected to comply with certain U.S. regulatory provisions, our loss of foreign private issuer status would make such provisions mandatory. The regulatory and compliance costs to us under U.S. securities laws as a U.S. domestic issuer may be significantly higher. If we lose our foreign private issuer status, we will be required to file periodic reports and registration statements on U.S. domestic issuer forms with the SEC, which are more detailed and extensive than the forms available to a foreign private issuer. We would also be required to follow U.S. proxy disclosure requirements, including the requirement to disclose more detailed information about the compensation of our senior executive officers on an individual basis. We may also be required to modify certain of our policies to comply with accepted governance practices associated with U.S. domestic issuers. Such conversion and modifications will involve additional costs. In addition, we would lose our ability to rely upon exemptions from certain corporate governance requirements on U.S. stock exchanges that are available to foreign private issuers. If we are unable to satisfy the requirements of Section 404 of the Sarbanes-Oxley Act, or if our internal control over financial reporting or our disclosure controls and procedures are not effective, investors may lose confidence in the accuracy and the completeness of the reports we furnish or file with the SEC, the reliability of our financial statements may be questioned and our share price may suffer. We are required to comply with the internal control, evaluation and certification requirements of Section 404 of the Sarbanes-Oxley Act of 2002 (the "Sarbanes-Oxley Act"). Pursuant to Section 404(a) of the Sarbanes-Oxley Act, we are required to furnish a report by management on the effectiveness of our internal control over financial reporting. If we become an accelerated filer or a large accelerated filer, we will be required to comply with the auditor attestation requirements of Section 404(b) of the Sarbanes Oxley Act. To maintain the effectiveness of our disclosure controls and procedures and our internal control over financial reporting, we expect that we will need to continue to enhance existing, and implement new, financial reporting and management systems, procedures and controls to manage our business effectively and support our growth in the future. The process of evaluating our internal control over financial reporting requires an investment of substantial time and resources, including by our Chief Financial Officer and other members of our senior management. The determination and any remedial actions required could divert internal resources and take a significant amount of time and effort to complete and could result in us incurring additional costs that we did not anticipate, including the hiring of outside consultants. Irrespective of compliance with Section 404, any failure of our internal controls could have a material adverse effect on our stated results of operations and harm our reputation. As a result, we may experience higher than anticipated operating expenses, as well as higher independent auditor fees during and after the implementation of these changes. If we are unable to implement any of the required changes to our internal control over financial reporting effectively or efficiently, it could adversely affect our operations, financial reporting or results of operations. Further, if our internal controls over financial reporting are not effective, the reliability of our financial statements may be questioned and our share price may suffer.

We must comply with numerous laws and regulations relating to the formation, administration and performance of government contracts, which can make it more difficult for us to retain our rights under our BARDA contracts. These laws and regulations affect how we conduct business with government agencies. Among the most significant government contracting regulations that affect our business are: - the Federal Acquisition Regulations ("FAR") and agency-specific regulations supplemental to the FAR, which comprehensively regulate the procurement, formation, administration and performance of government contracts;- business ethics and public integrity obligations, which govern conflicts of interest and the hiring of former government employees, restrict the granting of gratuities and funding of lobbying activities and include other requirements such as the Anti-Kickback Statute and Foreign Corrupt Practices Act;- export and import control laws and regulations; and - laws, regulations and executive orders restricting the use and dissemination of information classified for national security purposes and the exportation of certain products and technical data. Any material changes in applicable laws and regulations could restrict our ability to maintain our BARDA contracts or obtain new contracts with the U.S. federal government.

The laws governing our conduct in the United States are enforceable by criminal, civil and administrative penalties. Violations of laws such as the Federal Food, Drug and Cosmetic Act (the "FDCA"), the Public Health Service Act, the Federal False Claims Act, provisions of the U.S. Social Security Act, including the "Anti-Kickback Statute," or any regulations promulgated under their authority, may result in significant administrative, civil and criminal sanctions, jail sentences, fines or exclusion from federal and state programs, as may be determined by the U.S. Department of Justice, the Office of Inspector General of the U.S. Department of Health and Human Services (the "OIG"), the Centers for Medicare & Medicaid Services, ("CMS") other regulatory authorities and the courts. There can be no assurance that our activities will not come under the scrutiny of regulators and other government authorities or that our practices will not be found to violate applicable laws, rules and regulations or prompt lawsuits by private citizen "relators" under federal or state false claims laws. The federal Anti-Kickback Statute prohibits, among other things, knowingly and willfully offering, paying, soliciting or receiving any remuneration (including any kickback, bribe or rebate), directly or indirectly, overtly or covertly, to induce or in return for purchasing, leasing, ordering or arranging for or recommending the purchase, lease or order of any good, facility, item or service reimbursable, in whole or in part, under Medicare, Medicaid or other federal healthcare programs. The term "remuneration" has been broadly interpreted to include anything of value. Although there are a number of statutory exceptions and regulatory safe harbors protecting some common activities from prosecution, the exceptions and safe harbors are drawn narrowly. Practices that involve remuneration that may be alleged to be intended to induce prescribing, purchases or recommendations may be subject to scrutiny if they do not qualify for an exception or safe harbor. For example, even common business arrangements, such as discounted terms and volume incentives for customers in a position to recommend or choose drugs and devices for patients, such as physicians and hospitals, can result in substantial legal penalties, including, among other things, exclusion from Medicare and Medicaid programs if not carefully structured to comply with applicable requirements. Also, certain business practices, such as payment of consulting fees to healthcare providers, sponsorship of educational or research grants, charitable donations, interactions with healthcare providers and financial support for continuing medical education programs, must be conducted within narrowly prescribed and controlled limits to avoid any possibility of unlawfully inducing healthcare providers to prescribe or purchase particular products or rewarding past prescribing. Failure to meet all of the requirements of a particular applicable statutory exception or regulatory safe harbor does not make the conduct per se illegal under the Anti-Kickback Statute. Instead, the legality of the arrangement will be evaluated on a case-by-case basis based on a cumulative review of all its facts and circumstances. Several courts have interpreted the statute's intent requirement to mean that if any one purpose of an arrangement involving remuneration is to induce referrals of federal healthcare covered business, the Anti-Kickback Statute has been violated. In addition, a person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation. Violations of the federal Anti-Kickback Statute may result in significant civil monetary penalties for each violation, plus up to three times the remuneration involved. Moreover, a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the federal civil False Claims Act. Accordingly, civil penalties for such conduct can further be assessed under the federal False Claims Act. Violations can also result in criminal penalties, including criminal fines and imprisonment. Similarly, violations can result in exclusion from participation in government healthcare programs, including Medicare and Medicaid. Significant enforcement activity has also taken place under federal and state false claims act statutes. Violations of the federal False Claims Act can result in treble damages, and a penalty for each false claim submitted for payment. Pharmaceutical, device and other healthcare companies have been prosecuted under these laws for, among other things, allegedly providing free product to customers with the expectation that the customers would bill federal programs for the product. Companies have been prosecuted for causing false claims to be submitted because of the companies' marketing of products for unapproved, and thus non-covered, uses. The government may further prosecute conduct constituting a false claim under the criminal False Claims Act. The criminal False Claims Act prohibits the making or presenting of a claim to the government knowing such claim to be false, fictitious, or fraudulent and, unlike the civil False Claims Act, requires proof of intent to submit a false claim. The federal False Claims Act, as well as certain state false claims acts, also permits relators to file complaints in the name of the United States (and if applicable, particular states). These relators may be entitled to receive up to 30% of total recoveries and have been active in pursuing cases against pharmaceutical companies. Where practices have been found to involve improper incentives to use products, the submission of false claims, or other improper conduct, government investigations and assessments of penalties against manufacturers have resulted in substantial damages and fines. In addition, to avoid exclusion from participation in federal healthcare programs, many manufacturers have been required to enter into Corporate Integrity Agreements that prescribe allowable corporate conduct and impose reporting and disclosure obligations by the manufacturer to the government. Failure to satisfy requirements under the FDCA can also result in a variety of administrative, civil and criminal penalties, including injunctions or consent decrees that prescribe allowable corporate conduct. The federal Health Insurance Portability and Accountability Act of 1996, or HIPAA, created additional federal criminal statutes that prohibit, among other things, knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program, including private third-party payors, knowingly and willfully embezzling or stealing from a healthcare benefit program, willfully obstructing a criminal investigation of a healthcare offense, and knowingly and willfully falsifying, concealing or covering up a material fact or making any materially false, fictitious or fraudulent statement in connection with the delivery of or payment for healthcare benefits, items or services. Like the Anti-Kickback Statute, a person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation. HIPAA, as amended by the Health Information Technology for Economic and Clinical Health ("HITECH") Act and its implementing regulations, also imposes obligations, including mandatory contractual terms, on covered entities and their respective business associates that create, receive, maintain or transmit individually identifiable health information for or on their behalf, with respect to safeguarding the privacy, security and transmission of individually identifiable health information. Additionally, there has been a recent trend of increased federal and state regulation of payments and transfers of value provided to healthcare professionals and/or entities. The Affordable Care Act, among other things, imposed annual reporting requirements on certain manufacturers of drugs, devices, biologicals and medical supplies for payments and other transfers of value provided by them, directly or indirectly, to physicians (defined to include doctors, dentists, optometrists, podiatrists and chiropractors), certain other healthcare professionals beginning in 2022, and teaching hospitals, as well as ownership and investment interests held by physicians and their family members. A manufacturer's failure to submit timely, accurately and completely the required information for all payments, transfers of value or ownership or investment interests may result in significant civil monetary penalties. In addition, we are subject to analogous state and foreign laws and regulations, such as state anti-kickback and false claims laws, which may apply to sales or marketing arrangements and claims involving healthcare items or services reimbursed by non-governmental third-party payors, including private insurers; state and foreign laws that require pharmaceutical companies to comply with the pharmaceutical industry's voluntary compliance guidelines and the relevant compliance guidance promulgated by the federal government or otherwise restrict payments that may be made to healthcare providers; state and foreign laws that require drug manufacturers to report information related to payments and other transfers of value to physicians and other healthcare providers or marketing expenditures; state and local laws requiring the registration of pharmaceutical sales representatives, and state and foreign laws governing the privacy and security of health information in certain circumstances. Many of these laws differ from each other in significant ways and often are not preempted by HIPAA thus complicating compliance efforts. For example, the California Consumer Privacy Act, or CCPA, which went into effect on January 1, 2020, among other things, creates new data privacy obligations for covered companies and provides new privacy rights to California residents, including the right to opt out of certain disclosures of their information. The CCPA also creates a private right of action with statutory damages for certain data breaches, thereby potentially increasing risks associated with a data breach. Although the law includes limited exceptions, including for "protected health information" maintained by a covered entity or business associate, it may regulate or impact our processing of personal information depending on the context. Further, the California Privacy Rights Act (CPRA) recently passed in California. The CPRA will impose additional data protection obligations on covered businesses, including additional consumer rights processes, limitations on data uses, new audit requirements for higher risk data, and opt outs for certain uses of sensitive data. It will also create a new California data protection agency authorized to issue substantive regulations and could result in increased privacy and information security enforcement. The majority of the provisions will go into effect on January 1, 2023, and additional compliance investment and potential business process changes may be required. Efforts to ensure that our business arrangements with third parties will comply with applicable healthcare laws and regulations may involve substantial costs. It is possible that governmental authorities will conclude that our business practices do not comply with current or future statutes, regulations or case law involving applicable fraud and abuse or other healthcare laws and regulations. If our operations are found to be in violation of any of these laws or any other governmental regulations that may apply to us, we may be subject to significant civil, criminal and administrative penalties, including, without limitation, damages, fines, imprisonment, exclusion from participation in government healthcare programs, such as Medicare and Medicaid, and the curtailment or restructuring of our operations, which could have a material adverse effect on our business. If any of the physicians or other healthcare providers or entities with whom we expect to do business is found not to be in compliance with applicable laws, it may be subject to criminal, civil or administrative sanctions, including exclusions from participation in government healthcare programs, which could also materially affect our business. As a public company with securities registered under the U.S. Securities Exchange Act of 1934, as amended (the "Exchange Act"), we are subject to the U.S. Foreign Corrupt Practices Act (the "FCPA"). The FCPA and similar worldwide anti-bribery laws generally prohibit companies and their intermediaries from making improper payments to officials for the purpose of obtaining or retaining business. While we continue to maintain and enhance internal policies mandating compliance with these anti-bribery laws, we may operate in parts of the world that have experienced governmental corruption to some degree and in certain circumstances, strict compliance with anti-bribery laws may conflict with local customs and practices or may require us to interact with doctors and hospitals, some of which may be state controlled, in a manner that is different than in the United States. Our internal control policies and procedures may not be sufficient to effectively protect us against reckless or criminal acts committed by our employees or agents. Violations of these laws, or allegations of such violations, could disrupt our business and result in a material adverse effect on our financial condition, results of operations and cash flows.

The marketing approval for NexoBrid in the European Union, Israel, Argentina, South Korea, Russia and Peru is limited to the treatment of deep partial- and full-thickness burns in adults. In addition, any additional regulatory approval of NexoBrid for severe burns and any regulatory approval we may receive for any of our pipeline product candidates in the future, would be limited to those specific indications for which such pipeline product candidate had been deemed safe and effective by the EMA, the FDA or another regulatory authority and, like the EMA marketing approval for NexoBrid, would be subject to a renewal examination five years after the marketing approval was extended for an additional five years during 2017. Additionally, labeling restrictions in EU limit the manner in which a product may be used. For example, NexoBrid's label provides that it may only be used in specialized burns centers or by burn specialists and that it is not to be applied to more than 15% of the patient's total body surface area. If physicians prescribe the medication for unapproved, or "off-label," uses or in a manner that is inconsistent with the manufacturer's labeling, it could produce results such as reduced efficacy or other adverse effects, and the reputation of our products in the marketplace may suffer. In addition, should any of our future products have a significant price difference and if they are used interchangeably, off-label uses may cause a decline in our revenues or potential revenues. Furthermore, while physicians may choose to prescribe treatments for uses that are not described in the product's labeling and for uses that differ from those approved by regulatory authorities, we cannot promote the products for any indications other than those that are specifically approved by the EMA, the FDA or other regulatory authorities. Regulatory authorities restrict communications by companies on the subject of off-label use. If our promotional activities fail to comply with these regulations or guidelines, we may be subject to enforcement actions by those authorities. In the United States, "off-label promotion" by pharmaceutical companies has resulted in significant litigation under the Federal False Claims Act, violations of which may result in substantial civil penalties and fines as well as exclusion from government health care programs. More generally, failure to follow the rules and guidelines of regulatory agencies relating to promotion and advertising, such as that promotional materials not be false or misleading, can result in refusal to approve a product, the suspension or withdrawal of an approved product from the market, product recalls, fines, disgorgement of money, operating restrictions, injunctions or criminal prosecution.