Risk Factors Update Summary

• Net losses increased from $68.2 million to $68.8 million for the twelve months ended December 31, 2023.
• Failure to comply with GDPR may result in fines up to 4% of global revenues or €20,000,000.
• Accumulated deficit rose from $214 million to $282 million as of December 31, 2023.
• Future capital requirements revised to fund operations into the second half of 2026.
• GDPR imposes strict rules on transferring personal data to countries outside the EEA.
• Expenses expected to increase significantly due to the acquisition of Pionyr Immunotherapeutics, Inc.
• Multiple targeted oncology programs advanced through preclinical to Phase 1 clinical trials.
• The UK Data Protection Act 2018 complements the UK GDPR, potentially causing differences in data laws.
• Cash runway extended into the second half of 2026, up from 2025.
• Workforce reduction plan implemented to align with strategy, reducing operating expenses.
• The UK Adequacy Decision may be threatened by the UK Data Protection and Digital Information Bill.
• Divergence in data protection laws post-Brexit may increase compliance costs and legal risks.
• Various states have enacted comprehensive privacy laws, increasing compliance costs and risks.
• Proposed legislation like the American Data Privacy Law could introduce stringent privacy obligations.