In the United States, our current and future activities with investigators, healthcare professionals, consultants, third-party payors, patient organizations and customers are subject to regulation by various federal, state and local authorities in addition to the FDA, which may include but are not limited to, CMS, other divisions of the U.S. Department of Health and Human Services (e.g., the Office of Inspector General), the U.S. Department of Justice (“DOJ”) and individual U.S. Attorney offices within the DOJ, and state and local governments. For example, our business practices, including our clinical research, sales, marketing and scientific/educational grant programs may be required to comply with the anti-fraud and abuse provisions of the Social Security Act, the false claims laws, the patient data privacy and security provisions of HIPAA transparency requirements, and similar state laws, each as amended, as applicable. The federal Anti-Kickback Statute prohibits, among other things, any person or entity, from knowingly and willfully offering, paying, soliciting or receiving any remuneration, directly or indirectly, overtly or covertly, in cash or in kind, to induce or in return for purchasing, leasing, ordering or arranging for the purchase, lease or order of any good, item, facility or service reimbursable, in whole or part, under Medicare, Medicaid or other federal healthcare programs. The term “remuneration” has been interpreted broadly to include anything of value. The federal Anti-Kickback Statute has been interpreted to apply to arrangements between pharmaceutical manufacturers on one hand and prescribers, purchasers, and formulary managers on the other. There are a number of statutory exceptions and regulatory safe harbors protecting some common activities from prosecution. The exceptions and safe harbors are drawn narrowly and practices that involve remuneration that may be alleged to be intended to induce prescribing, purchasing or recommending may be subject to scrutiny if they do not qualify for an exception or safe harbor. Failure to meet all of the requirements of a particular applicable statutory exception or regulatory safe harbor does not make the conduct per se illegal under the Anti-Kickback Statute. Instead, the legality of the arrangement will be evaluated on a case-by-case basis based on a cumulative review of all of its facts and circumstances. Our practices may not in all cases meet all of the criteria for protection under a statutory exception or regulatory safe harbor. Additionally, the intent standard under the federal Anti-Kickback Statute was amended by the ACA, to a stricter standard such that a person or entity no longer needs to have actual knowledge of the federal Anti-Kickback Statute or specific intent to violate it in order to have committed a violation. Rather, if “one purpose” of the remuneration is to induce referrals, the federal Anti-Kickback Statute is implicated. In addition, the ACA codified case law that a claim that includes items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the federal civil False Claims Act (discussed below). The civil monetary penalties statute imposes penalties against any person or entity who, among other things, is determined to have presented or caused to be presented a claim to a federal healthcare program that the person knows or should know is for a medical or other item or service that was not provided as claimed or is false or fraudulent. The federal civil False Claims Act prohibits, among other things, any person or entity from knowingly presenting, or causing to be presented, a false claim for payment to, or approval by, the federal government, knowingly making, using, or causing to be made or used a false record or statement material to a false or fraudulent claim to the federal government, or knowingly making a false statement to improperly avoid, decrease or conceal an obligation to pay money to the federal government. As a result of a modification made by the Fraud Enforcement and Recovery Act of 2009, a claim includes “any request or demand” for money or property presented to the U.S. government. Several pharmaceutical and other healthcare companies are being investigated or, in the past, have been prosecuted under these laws for allegedly providing free product to customers with the expectation that the customers would bill federal programs for the product. Other companies have been prosecuted for causing false claims to be submitted because of the companies’ marketing of the product for unapproved, and thus non-reimbursable, uses. HIPAA imposes criminal and civil liability for, among other things, knowingly and willfully executing, or attempting to execute, a scheme to defraud or to obtain, by means of false or fraudulent pretenses, representations or promises, any money or property owned by, or under the control or custody of, any healthcare benefit program, including private third-party payors and knowingly and willfully falsifying, concealing or covering up by trick, scheme or device, a material fact or making any materially false, fictitious or fraudulent statement in connection with the delivery of or payment for healthcare benefits, items or services. Like the Anti-Kickback Statute, the ACA amended the intent standard for certain healthcare fraud statutes under HIPAA such that a person or entity no longer needs to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation. Analogous U.S. state laws and regulations, including state anti-kickback and false claims laws, may apply to claims involving healthcare items or services reimbursed by any third-party payor, including private insurers our business practices. HIPAA, as amended by HITECH, and their implementing regulations, imposes requirements on certain types of individuals and entities relating to the privacy, security and transmission of individually identifiable health information. Among other things, HITECH makes HIPAA’s privacy and security standards directly applicable to business associates that are independent contractors or agents of covered entities that receive or obtain protected health information in connection with providing a service on behalf of a covered entity. HITECH also created four new tiers of civil monetary penalties, amended HIPAA to make civil and criminal penalties directly applicable to business associates, and gave state attorneys general new authority to file civil actions for damages or injunctions in federal courts to enforce the federal HIPAA laws and seek attorneys’ fees and costs associated with pursuing federal civil actions. Additionally, the federal Physician Payments Sunshine Act within the ACA, and its implementing regulations, require that certain manufacturers of drugs, devices, biological and medical supplies for which payment is available under Medicare, Medicaid or the Children’s Health Insurance Program (with certain exceptions) report annually to CMS information related to certain payments or other transfers of value made or distributed to physicians and teaching hospitals, or to entities or individuals at the request of, or designated on behalf of, the physicians and teaching hospitals, and to report annually certain ownership and investment interests held by physicians and their immediate family members. Effective January 1, 2022, such reporting obligations for payments and transfers of value made in 2021 to covered recipients were expanded to include physician assistants, nurse practitioners, clinical nurse specialists, certified registered nurse anesthetists and anesthesiologist assistants and certified nurse-midwives. In order to distribute products commercially, we must comply with state laws that require the registration of manufacturers and wholesale distributors of drug and biological products in a state, including, in certain states, manufacturers and distributors who ship products into the state even if such manufacturers or distributors have no place of business within the state. Some states also impose requirements on manufacturers and distributors to establish the pedigree of product in the chain of distribution, including some states that require manufacturers and others to adopt new technology capable of tracking and tracing product as it moves through the distribution chain. State and local laws also require pharmaceutical and biotechnology companies to comply with the pharmaceutical industry’s voluntary compliance guidelines and the relevant compliance guidance promulgated by the U.S. federal government, establish marketing compliance programs, restrict payments that may be made to healthcare providers professionals and entities and other potential referral sources, file periodic reports with the state relating to pricing and marketing, make periodic public disclosures on sales, marketing, pricing, clinical trials and other activities, and/or register field representatives, as well as to prohibit pharmacies and other healthcare entities from providing certain physician prescribing data to pharmaceutical and biotechnology companies for use in sales and marketing, and to prohibit certain other sales and marketing practices. All of our activities are potentially subject to federal and state consumer protection and unfair competition laws. Ensuring that our internal operations and future business arrangements with third parties comply with applicable healthcare laws and regulations will involve substantial costs. Because of the breadth of these laws and the narrowness of the statutory exceptions and safe harbors available, it is possible that governmental authorities will conclude that our business practices do not comply with current or future statutes, regulations, agency guidance or case law involving applicable fraud and abuse or other healthcare laws and regulations. If our operations are found to be in violation of any of the federal and state healthcare laws described above or any other governmental regulations that apply to us, we may be subject to penalties, including without limitation, civil, criminal and/or administrative penalties, damages, fines, disgorgement, individual imprisonment, exclusion from participation in government programs, such as Medicare and Medicaid, injunctions, private “qui tam” actions brought by individual whistleblowers in the name of the government, exclusion, debarment or refusal to allow us to enter into government contracts, contractual damages, reputational harm, administrative burdens, diminished profits and future earnings, additional reporting requirements and/or oversight if we become subject to a corporate integrity agreement or similar agreement to resolve allegations of non-compliance with these laws, and the curtailment or restructuring of our operations, any of which could adversely affect our ability to operate our business and our results of operations.