13 Other U.S. Regulatory Laws Manufacturing, sales, promotion and other activities following product approval are also subject to regulation by numerous regulatory authorities in the United States in addition to the FDA, including the Centers for Medicare & Medicaid Services, or CMS, other divisions of the Department of Health and Human Services, or HHS, the Department of Justice, the Drug Enforcement Administration, the Consumer Product Safety Commission, the Federal Trade Commission, the Occupational Safety & Health Administration, the Environmental Protection Agency and state and local governments. For example, in the United States, our business operations, including any sales, marketing and scientific and educational programs, also must comply with state and federal fraud and abuse laws, including the federal Anti-Kickback Statue and false claims laws; federal data privacy and security laws; and federal transparency laws related to payments and/or other transfers of value made to physicians and other healthcare professionals and teaching hospitals. The federal Anti-Kickback Statute makes it illegal for any person, including a prescription drug manufacturer (or a party acting on its behalf), to knowingly and willfully solicit, receive, offer or pay any remuneration that is intended to induce or reward referrals, including the purchase, recommendation, order or prescription of a particular drug, for which payment may be made under a federal healthcare program, such as Medicare or Medicaid. Moreover, the Patient Protection and Affordable Health Care Act, as amended by the Health Care and Education Reconciliation Act, or collectively the ACA, provides that the government may assert that a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the False Claims Act. Federal false claims laws, including the False Claims Act, prohibit individuals or entities from, among other things, knowingly presenting, or causing to be presented, false or fraudulent claims for payment of federal funds, and knowingly making, or causing to be made, a false record or statement material to a false or fraudulent claim to avoid, decrease or conceal an obligation to pay money to the federal government. The federal Health Insurance Portability and Accountability Act of 1996, or HIPAA, prohibits, among other things, knowingly and willfully executing, or attempting to execute, a scheme or artifice to defraud any healthcare benefit program or obtain, by means of false or fraudulent pretenses, representations, or promises, any of the money or property owned by, or under the custody or control of, any healthcare benefit program, regardless of the payor (e.g., public or private), and knowingly and willfully falsifying, concealing or covering up by any trick or device a material fact or making any materially false, fictitious or fraudulent statements in connection with the delivery of, or payment for, healthcare benefits, items or services relating to healthcare matters. Similar to the federal Anti-Kickback Statute, a person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation. Many states have similar laws and regulations that may differ from federal law in significant ways, thus complicating compliance efforts. For example, states have anti-kickback and false claims laws that may be broader in scope than analogous federal laws and may apply regardless of payor. In addition, the federal physician payment transparency requirements, sometimes referred to as the “Physician Payments Sunshine Act,” created under the ACA and its implementing regulations, require certain manufacturers of drugs, devices, biologics and medical supplies for which payment is available under Medicare, Medicaid or the Children’s Health Insurance Program (with certain exceptions) to report annually to CMS information related to payments or other transfers of value made to physicians (defined to include doctors, dentists, optometrists, podiatrists and chiropractors), other healthcare professionals (such as physician assistants and nurse practitioners) and teaching hospitals, as well as ownership and investment interests held by physicians and their immediate family members. HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, or HITECH, and their respective implementing regulations, impose requirements on certain covered healthcare providers, health plans, and healthcare clearinghouses and their respective business associates that perform services for them that involve the use, or disclosure of, individually identifiable health information as well as their covered subcontractors, relating to the privacy, security, and transmission of such individually identifiable health information. In addition, state data privacy laws that protect the security of health information may differ from each other and may not be preempted by federal law. Moreover, several states and local jurisdictions have enacted legislation requiring pharmaceutical manufacturers to, among other things, establish marketing compliance programs, file periodic reports with the state, make periodic public disclosures on sales and marketing activities, report information related to drug pricing, require the registration of sales representatives, and prohibit certain other sales and marketing practices. In addition, the approval and commercialization of any of our product candidates outside the United States will also likely subject us to foreign equivalents of the healthcare laws mentioned above. Pricing and rebate programs must comply with the Medicaid rebate requirements of the U.S. Omnibus Budget Reconciliation Act of 1990 and more recent requirements in the ACA. If products are made available to authorized users of the Federal Supply Schedule of the General Services Administration, additional laws and requirements apply. Products must meet applicable child-resistant packaging requirements under the U.S. Poison Prevention Packaging Act. Manufacturing, sales, promotion and other activities also are potentially subject to federal and state consumer protection and unfair competition laws.

Kodiak Sciences 2024 Annual Report - Page 25 Kodiak Sciences 2024 Annual Report Page 24 Page 26