Risk Factors Update Summary

• Increased scrutiny on personal data transfers under GDPR and DPF, with potential legal challenges.
• Added risks related to raising additional capital causing dilution, with accumulated deficit increasing from $358 million to $570 million.
• Fines under GDPR and UK GDPR mirror each other, with fines up to €[value] million or 4% of global turnover.
• Increased focus on potential delays, costs, and limitations due to ongoing and planned clinical trials.
• The UK Extension to the DPF came into effect, providing a data transfer mechanism.
• Introduction of risks related to unstable market conditions and adverse developments affecting financial institutions.
• Legal complexity and uncertainty in international data transfers may lead to increased costs.
• Enhanced cybersecurity risks due to continued hybrid working environment and remote work.
• Potential disruptions from unauthorized disclosure of proprietary or sensitive information, impacting business operations.
• Market and economic instability risks from geopolitical events, sanctions, and financial market closures.