XERS 2021 Annual Report

If we are investigated by a European data protection authority, we may face fines and other penalties, including bans on processing and transferring personal data. EU data protection authorities have the power to impose administrative fines for violations of the GDPR of up to a maximum of €20 million or 4% of the data controller’s or data processor’s total worldwide global turnover for the preceding fiscal year, whichever is higher, and violations of the GDPR may also lead to damages claims by data controllers and data subjects. Such penalties are in addition to any civil litigation claims by data controllers, clients, and data subjects. As such, we will need to take steps to cause our processes to continue to be compliant with the applicable portions of the GDPR, but we cannot assure you that we will be able to implement changes in a timely manner or without significant disruption to our business, or that such steps will be effective, and we may face the risk of liability under the GDPR. Similarly, non-compliance with the UK GDPR may result in monetary penalties of up to £17.5 million or 4% of worldwide revenue, whichever is higher. Although the EU GDPR and the UK GDPR currently impose substantially similar obligations, it is possible that over time the UK GDPR could become less aligned with the EU GDPR. This lack of clarity on future UK laws and regulations and their interaction with EU laws and regulations could add legal risk, uncertainty, complexity and cost to our handling of EU personal information and our privacy and data security compliance programs and could require us to implement different compliance measures for the UK and the European Union. Many jurisdictions outside of Europe where we may do business or conduct trials in the future are also considering and/or have enacted comprehensive data protection legislation. In addition, we also continue to see jurisdictions imposing data localization laws. These and similar regulations may interfere with our intended business activities, inhibit our ability to expand into those markets, require modifications to our products or services or prohibit us from continuing to offer services or conduct trials in those markets without significant additional costs. Our employees, independent contractors, consultants, collaborators and CROs may engage in misconduct or other improper activities, including non-compliance with regulatory standards and requirements, which could cause significant liability for us and harm to our reputation. We are exposed to the risk that our employees, independent contractors, consultants, collaborators and CROs may engage in fraud or other misconduct, including intentional failures to comply with FDA regulations or similar regulations of comparable non-U.S. regulatory authorities, to provide accurate information to the FDA or comparable non-U.S. regulatory authorities, to comply with manufacturing standards we have established, to comply with federal and state healthcare fraud and abuse laws and regulations and similar laws and regulations established and enforced by comparable non-U.S. regulatory authorities, to report financial information or data accurately or to disclose unauthorized activities to us. Such misconduct could also involve the improper use or misrepresentation of information obtained in the course of clinical trials, creating fraudulent data in our preclinical studies or clinical trials or illegal misappropriation of product materials, which could result in regulatory sanctions and serious harm to our reputation. It is not always possible to identify and deter misconduct, and the precautions we take to detect and prevent this activity may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws, standards or regulations. Additionally, we are subject to the risk that a person or government could allege such fraud or other misconduct, even if none occurred. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business and results of operations, including the imposition of significant fines or other sanctions. Global economic uncertainty and weakening product demand caused by political instability, changes in trade agreements and conflicts, such as the conflict between Russia and Ukraine, could adversely affect our business and financial performance. Economic uncertainty in various global markets caused by political instability and conflict and economic challenges caused by the COVID-19 pandemic has resulted, and may continue to result, in weakened demand for our products. Political developments impacting government spending and international trade, including potential government shutdowns and trade disputes and tariffs, may negatively impact markets and cause weaker macro-economic conditions. The effects of these events may continue due to potential U.S. government shutdowns and the transition in administrations, and the United States’ ongoing trade disputes with China and other countries. In addition, the current military conflict between Russia and Ukraine could disrupt or otherwise adversely impact our operations and related sanctions, export controls or other actions that may be initiated by nations including the U.S., the European Union or Russia (e.g., potential cyberattacks, disruption of energy flows, etc.) could adversely affect our business and/or our supply chain or those of our third party service providers. The continuing effect of any or all of these events could adversely impact demand for our products, harm our operations and weaken our financial results. ITEM 1B. UNRESOLVED STAFF COMMENTS We have no unresolved written comments regarding our periodic or current reports from the staff of the U.S. Securities and Exchange Commission ("SEC"). ITEM 2. PROPERTIES Our principal office is located in Chicago, Illinois and occupies approximately 41,000 square feet of leased space. The lease term expires on June 30, 2031. Our research and development laboratory site is also located in Chicago and occupies approximately 10,887 square feet of leased space under a 156-month lease through December 2033. We currently believe that our offices are suitable and adequate to meet our needs. 75

RkJQdWJsaXNoZXIy NTIzOTM0