36 Our employees, independent contractors, consultants, commercial partners and vendors may engage in misconduct or other improper activities, including noncompliance with regulatory standards and requirements or insider trading violations, which could significantly harm our business. We are exposed to the risk of fraud, misconduct or other illegal activity by our employees, independent contractors, consultants, commercial partners and vendors. Misconduct by these parties could include intentional, reckless and negligent conduct that fails to: comply with the laws of the FDA, EMA and other comparable foreign regulatory authorities; provide true, complete and accurate information to the FDA, EMA and other comparable foreign regulatory authorities; comply with manufacturing standards we have established; comply with healthcare fraud and abuse laws in the United States and similar foreign fraudulent misconduct laws; or report financial information or data accurately or to disclose unauthorized activities to us. If we obtain FDA approval of any of our product candidates and begin commercializing those products in the United States, our potential exposure under such laws will increase significantly, and our costs associated with compliance with such laws are also likely to increase. In particular, research, sales, marketing, education and other business arrangements in the healthcare industry are subject to extensive laws designed to prevent fraud, kickbacks, self-dealing and other abusive practices. These laws and regulations may restrict or prohibit a wide range of pricing, discounting, educating, marketing and promotion, sales and commission, certain customer incentive programs and other business arrangements generally. Activities subject to these laws also involve the improper use of information obtained in the course of patient recruitment for clinical trials, which could result in regulatory sanctions and cause serious harm to our reputation. Employee misconduct could also involve the improper use of, including improper trading based upon, information obtained in the course of clinical studies, which could result in regulatory sanctions and serious harm to our reputation. We have adopted a code of business conduct and ethics that applies to all our employees, including management, and our directors. However, it is not always possible to identify and deter misconduct by employees and third parties, and the precautions we take to detect and prevent this activity may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business, including the imposition of significant fines or other sanctions. If we fail to comply with healthcare laws, we could face substantial penalties and our business, operations and financial conditions could be adversely affected. Our current and future arrangements with healthcare providers, third-party payors, customers, and others may expose us to broadly applicable fraud and abuse and other healthcare laws and regulations, which may constrain the business or financial arrangements and relationships through which we research, as well as, sell, market and distribute any products for which we obtain marketing approval. The laws that may impact our operations include: • the federal Anti-Kickback Statute, which prohibits, among other things, persons and entities from knowingly and willfully soliciting, receiving, offering or paying any remuneration (including any kickback, bribe or rebate), directly or indirectly, overtly or covertly, in cash or in kind, to induce, or in return for, either the referral of an individual, or the purchase, lease, order or recommendation of any good, facility, item or service for which payment may be made, in whole or in part, under a federal healthcare program, such as the Medicare and Medicaid programs. A person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation. In addition, the government may assert that a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the False Claims Act; • federal civil and criminal false claims laws, including the False Claims Act, which can be enforced by private citizens on behalf of the government through civil whistleblower or qui tam actions, and civil monetary penalty laws, which impose criminal and civil penalties against individuals or entities from knowingly presenting, or causing to be presented, claims for payment or approval from Medicare, Medicaid or other third-party payors that are false or fraudulent or knowingly making a false statement to improperly avoid, decrease or conceal an obligation to pay money to the federal government; • HIPAA, which created new federal criminal statutes that, among other things, prohibit knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program or obtain, by means of false or fraudulent pretenses, representations, or promises, any of the money or property owned by, or under the custody or control of, any healthcare benefit program, regardless of the payor (e.g., public or private) and knowingly and willfully falsifying, concealing or covering up by any trick or device a material fact or making any materially false statements in connection with the delivery of, or payment for, healthcare benefits, items or services relating to healthcare matters. Similar to the federal Anti-Kickback Statute, a person or entity does not