Item 1A. Risk Factors.

Our business involves significant risks, some of which are described below. You should carefully consider these risks, as well as the other information in this Annual Report on Form 10-K, including our audited financial statements and the related notes and “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” The occurrence of any of the events or developments described below could have a material adverse effect on our business, results of operations, financial condition, prospects and stock price. Additional risks and uncertainties not presently known to us or that we currently deem immaterial may also impair our business operations. You should not interpret our disclosure of any of the following risks to imply that such risks have not already materialized.

Risks related to operational, commercial and manufacturing matters

Our sales, business, financial condition and results of operations have been and continue to be impacted by the COVID-19 pandemic.

The global spread of the COVID-19 pandemic, including the different COVID-19 variants and measures introduced by local, state and federal governments to contain the virus and mitigate its public health effects have significantly impacted the global economy and negatively impacted our business. Given the uncertainty around the duration and extent of the COVID-19 pandemic, we expect continued, lingering, and far-reaching adverse impacts to our business, results of operations, financial condition, and liquidity, but cannot accurately predict at this time the extent of the future potential impacts.

Multiple states and local jurisdictions have imposed and continue to maintain government orders and restrictions for their residents to control the spread and ameliorate the impact of COVID-19. Additionally, the Centers for Disease Control and Prevention, or the CDC, and other federal agencies have and may continue to issue additional requirements and guidance relative to actions to be taken by individuals and corporations to reduce the spread of COVID-19. Such orders or restrictions, as well as the perceived need by individuals to continue such practices to avoid infection, among other factors, continue to result in business closures, work stoppages, slowdowns and delays, work-from-home policies, travel restrictions and cancellation of events, among other effects. The states in which our RNS System is made, manufactured, distributed, sold, or implanted are and may continue to be in varying stages of addressing the COVID-19 pandemic. We continue to monitor our operations and government mandates. Our primary operations are in Mountain View, California, and as a result of various shelter-in-place and quarantine orders issued by Santa Clara Country and the State of California starting in March 2020, most of our Mountain View-based employees have been telecommuting during the pandemic, which has impacted and may continue to impact certain of our operations over the near and long term. Similar restrictions and orders in other states have limited the ability of our remote sales force to work with physicians and hospitals during the pandemic, which has further impacted and may continue to impact certain of our operations, including our sales process, over the near and long term.

Certain U.S. governmental authorities and certain hospitals have recommended, and in certain cases required, that various elective procedures, including implant procedures for our RNS System, be suspended or canceled to avoid nonessential patient exposure to medical environments and potential infection with COVID-19 and to focus limited healthcare resources and personnel capacity toward the treatment of COVID-19 patients. In addition, hospitals delayed or canceled admissions for epilepsy diagnostic procedures. These actions have resulted in an adverse impact to our ability to sell our RNS System to new and existing customers, customer adoption of our RNS System, and customer use of our RNS System. The disruptions to our activities and operations have negatively impacted and may continue to negatively impact our business, operating results and financial condition. Our sales were particularly negatively impacted in the third and fourth quarters of 2021, and given the dramatic increase in COVID-19 infections in the beginning of 2022, we expect the COVID-19 related adverse impact to continue into 2022. Specifically, in the third quarter of 2021 and in part as a result of the COVID Delta variant, our business was negatively impacted by decreased and delayed procedures being performed to implant our RNS System, delayed and decreased epilepsy diagnostic evaluations at epilepsy monitoring units, or EMUs, as well as increased vacation demand as a result of loosening travel restrictions and hospital staffing shortages, which we believe may continue throughout the pandemic. We saw additional impact in the fourth quarter as a result of continued Delta variant

headwinds and new headwinds from the emerging Omicron variant. We expect to see additional impact from the Omicron variant in the first quarter of 2022. We may also continue to see an impact on the sales of our RNS System as a result of hospital staffing shortages as well as seasonality, which, as COVID variants continue to emerge and certain pandemic restrictions are tightened then relaxed and physicians and patients take vacations, may result in additional reduction in both preimplantation diagnostic procedures as well as RNS implant and replacement procedures.

The widespread pandemic has also had a significant negative effect on the U.S. and global economies and, if the COVID-19 pandemic results in a prolonged economic recession, it would continue to harm our sales, business, operating results, and financial condition.

The impact of COVID-19 on our sales and operations has resulted in changes to the way our resources are allocated, including reduced resources to conduct further clinical studies. Additionally, restrictions on the ability to travel, social distancing policies, orders and restrictions, including those described above, and fears of COVID-19 spreading within hospital facilities, continue to limit access to hospitals or other clinical study sites and create challenges for enrolling and monitoring patients in clinical studies, which has and may further impact our current and future clinical study plans.

Quarantines or government reaction or shutdowns for COVID-19 have disrupted and may disrupt our supply chain, especially for components we source from single-source suppliers. Travel and cargo restrictions may also disrupt our ability to distribute our RNS System or engage with our customers in the ordinary course of business. Any cargo restrictions related to raw materials used to manufacture our RNS System or its components may restrict our ability to manufacture and ship devices and harm our sales, business, operating results, and financial condition.

Our key personnel and other employees have and could continue to be affected by COVID-19. Illness, or the fear of illness, in our workforce as a result of COVID-19, have resulted and may result in reduced availability and productivity. In addition, we may take cost saving measures that lead to reductions in force, furloughs, or altered job responsibilities. These measures could reduce the efficiency of our operations or prove insufficient. Additionally, we have delayed and reduced, and may continue to delay or reduce, certain critical research, development, capital spending, and other projects as a result of COVID-19, which will delay the completion of such projects.

We rely on strong working relationships with epileptologists, neurosurgeons and other medical professionals, as well as the support of key opinion leaders, to market our RNS System. Our sales and marketing personnel rely significantly on in-person and onsite access to clinicians and hospital facilities, primarily Level 4 CECs and programming centers, which has been and continues to be restricted as hospital facilities respond to new COVID variants, including the Delta and Omicron variants, by reducing access to essential personnel and patients. The COVID-19 pandemic has restrained, and will likely continue to restrain, access to clinicians and hospital facilities by our sales and marketing team, which will harm our ability to contract with new Level 4 CECs or programming centers, expand our reach within Level 4 CECs and programming centers, and drive referrals to Level 4 CECs. These restrictions have harmed our sales and marketing efforts, and continued restrictions would have a negative impact on adoption of our RNS System and, as a result, a negative impact on our sales, results of operations and financial condition.

Limited supplies of vaccines, including booster shots, personal protective equipment and COVID-19 testing supplies may further reduce onsite access for our personnel and may delay the lifting of restrictions on elective procedures, including implant procedures for our RNS System.

We currently rely on our RNS System, which can only be marketed in the United States for use in adults with drug-resistant focal epilepsy, and is recommended as well as implanted primarily at Level 4 CECs. If we are not successful in enhancing awareness of our RNS System, driving adoption across our current target population, expanding referral pathways to increase referrals to Level 4 CECs, and expanding the population of eligible patients, our sales, business, financial condition and results of operations will be negatively affected.

Our business currently depends primarily on our ability to successfully market our RNS System, which includes increasing the number of patients treated at Level 4 CECs, increasing adoption of our RNS System across Level 4 CECs, and driving utilization by clinicians within Level 4 CECs. Currently, our RNS System can only be marketed

for use in adults with drug-resistant focal epilepsy in the United States. Additionally, our RNS System is primarily recommended and implanted at Level 4 CECs, which provide advanced diagnosis and management of epilepsy. Therefore, we are dependent on widespread market adoption of our RNS System within a limited number of accounts. We are aiming to expand the population of patients we can treat with our RNS System, as well as the number of physicians that can prescribe and the number of centers at which neurosurgeons can implant our RNS System, but there can be no assurance that we will succeed.

The commercial success of our RNS System will continue to depend on a number of factors, including the following:

•the degree to which drug-resistant epilepsy remains a chronic and debilitating condition;

•the actual and perceived effectiveness, safety and reliability, and clinical benefit, of our RNS System, especially relative to alternative neuromodulation devices such as VNS or DBS;

•the prevalence and severity of any adverse patient events involving our RNS System;

•the degree to which clinicians, patients and hospital facilities, primarily Level 4 CECs, adopt our RNS System;

•the continued effects of the COVID-19 pandemic;

•the availability, relative cost and perceived advantages and disadvantages of alternative technologies or treatment methods for epilepsy;

•the results of additional clinical and other studies relating to the health, safety, economic or other benefits of our RNS System;

•whether key thought leaders in the medical community accept that our clinical efficacy and safety results are sufficiently meaningful to influence their decision to adopt our RNS System over other neuromodulation therapies;

•the extent to which we are successful in educating clinicians, patients, and hospital facilities about the benefits of our RNS System, including as a result of the extended battery life of the neurostimulator;

•our reputation among clinicians, patients and hospital facilities;

•our ability to predict product performance;

•the strength of our marketing and distribution infrastructure, including our ability to drive adoption and utilization of our RNS System at Level 4 CECs, our ability to develop and maintain relationships with programming centers, and our ability to expand referral pathways to Level 4 CECs;

•our ability to obtain, maintain, protect, enforce and defend our intellectual property rights, including in and to our RNS System;

•our ability to maintain compliance with all legal and regulatory requirements, including those applicable to our RNS System;

•our ability to continue to maintain a commercially viable manufacturing process at our manufacturing facility that is compliant with current Good Manufacturing Practices, or cGMP, and Quality Systems Regulations, or QSR;

•our ability to maintain our contractual relationships with our vendors and component suppliers, including single-source vendors and suppliers, through which we obtain critical components for our RNS System;

•the continued coverage of and adequate payment for the implantation procedure and for clinicians to provide ongoing care for patients implanted with our RNS System by third party payors, including both private and government payors; and

•our ability to continue to attract and retain key talent.

If we fail to successfully market and sell our RNS System cost-effectively and maintain and expand our market share, our sales, business, financial condition and results of operations will be negatively affected.

Our commercial success will continue to depend on attaining significant market acceptance of our RNS System among patients, clinicians and hospital facilities, primarily Level 4 CECs and increasing the number of patients treated at Level 4 CECs. If we are unable to successfully achieve substantial market acceptance and adoption of our RNS System, our sales, business, financial condition and results of operations would be harmed.

Our commercial success will depend in large part on the further acceptance by clinicians, patients and hospital facilities, primarily Level 4 CECs, of our RNS System as safe, useful, and cost-effective, and increasing the number of patients treated at Level 4 CECs. We cannot predict how quickly, if at all, additional clinicians, patients, and hospital facilities will adopt our RNS System over competing neuromodulation devices or surgical treatment options at Level 4 CECs that are appropriate for implant of our RNS System. For example, clinicians may be reluctant to use our RNS System due to familiarity with neuromodulation devices that are more established. Clinicians, patients, and hospital facilities may continue to prefer resective or ablative surgery or alternative neuromodulation therapies such as VNS and DBS. Moreover, we cannot predict how quickly, if at all, those currently suffering from epilepsy but who are not being treated will seek treatment or utilize Level 4 CECs for treatment. Our ability to grow sales of our RNS System and drive market acceptance will depend on successfully educating clinicians, patients, and hospital facilities of the relative benefits of our RNS System.

Additionally, patients rely on their healthcare providers, including epileptologists and neurosurgeons to recommend a course of treatment. If we are unable to successfully achieve substantial market acceptance and adoption of our RNS System by additional clinicians, patients, and hospital facilities, patients may be reluctant to use our products over alternative neuromodulation therapies. If we are unable to successfully drive patient interest in our RNS System, our business, financial condition and results of operations would be harmed.

Our commercial success will depend on a continued flow of patient referrals to Level 4 CECs from treating primary care physicians, neurologists, and other healthcare providers and from caregiver support and encouragement around physician referrals and self-referrals to Level 4 CECs. If we are unable to successfully expand our referral pathways to achieve an increased patient referral pipeline into Level 4 CECs, our sales, business, financial condition and results of operations would be harmed.

Our commercial success will depend in large part on continued referrals of appropriate patients from treating primary care physicians, neurologists, and other healthcare providers to epileptologists, neurosurgeons, and other clinicians, primarily at Level 4 CECs. We estimate that of the approximately 575,000 adults with drug-resistant focal epilepsy in the United States, approximately 24,000 adult drug-resistant focal epilepsy patients are treated in Level 4 CECs annually. We cannot predict how quickly, if at all, we can build that pipeline through our sales and marketing efforts and whether primary care physicians, neurologists, and other healthcare providers, as well as caregivers will support patient referrals to epileptologists and neurosurgeons at Level 4 CECs over other therapy options.

Primary care physicians, neurologists, and other healthcare providers may continue to prefer traditional treatments, such as additional attempts to treat with new therapeutic drugs that become available from time to time, including for fear of losing management of the patient’s care. If we are unable to educate clinicians to follow national guidelines, which recommend that patients whose seizures have not been brought under control after three months of care by a primary care physician or after 12 months of seeing a general neurologist be referred to a Level 3 or Level 4 CEC, we may be unable to successfully build our patient pipeline. This could harm our business, financial condition and results of operations.

Various factors outside our direct control, including the COVID-19 pandemic, may negatively impact our manufacturing of our RNS System, which could harm our business, financial condition, and results of operations.

We manufacture our RNS System at our manufacturing facility in Mountain View, California. This facility supports our production operations, including manufacturing, quality control, and raw material and finished goods storage. We believe that we currently have adequate manufacturing capacity and supplies for our products sufficient to meet our demand forecasts. If demand for our RNS System increases more rapidly than we anticipate, if we encounter problems with one or more of our suppliers, or if we secure regulatory approval to commercialize our products in additional geographies or indications, we may need to either expand our manufacturing capabilities, qualify new suppliers, or outsource to other manufacturers.

Our manufacturing and distribution operations are subject to regulatory requirements of the FDA’s Quality System Regulation, or QSR, for medical devices sold in the United States. Manufacturers of medical device products often encounter difficulties in production, including difficulties with production costs and yields, quality control, quality assurance testing, shortages of qualified personnel, as well as compliance with strictly enforced FDA requirements, other federal and state regulatory requirements, and foreign regulations, to the extent applicable. If we fail to manufacture our products in compliance with QSR, or if our manufacturing facility suffers disruptions, supply chain issues, machine failures, slowdowns or disrepair, we may not be able to fulfill customer demand and our business would be harmed. Further, we typically do not maintain more than several months of inventory on hand and we manufacture our products using near term demand forecasts. As a result, deviations from our forecasts could cause us to fail to meet demand for our products.

Since we produce our products in one manufacturing facility, any contamination of the controlled environment, equipment malfunction, supply issues, personnel issues, including human error, or failure to strictly follow procedures can significantly reduce our yield. A drop in yield can increase our cost to manufacture our products or, in more severe cases, require us to halt the manufacture of our products until the problem is resolved. Identifying and resolving the cause of a drop in yield can require substantial time and resources. In addition, if demand for our products shifts such that our manufacturing facility is operated below our forecasts for an extended period, we may adjust our manufacturing operations to reduce fixed costs, which could lead to uncertainty and delays in manufacturing times and quality during any transition period.

The manufacturing, sterilization and distribution of our products are technically challenging. Changes that our suppliers may make, or additional requirements from regulatory agencies, outside of our direct control can have an impact on our processes, on quality and on the successful or timely delivery of our products to our customers. Mistakes and mishandling may occur, which can affect supply and delivery. As a result, our dependence on third-party, including single source, suppliers, subjects us to a number of risks that could impact our ability to manufacture our products and harm our business, financial condition, and results of operations, including:

•interruption of supply resulting from modifications to, or discontinuation of, a supplier’s operations, including due to the COVID-19 pandemic;

•delays in product shipments resulting from uncorrected defects, reliability issues or a supplier’s failure to produce components that consistently meet our quality specifications;

•delays in analytical results or failure of analytical techniques that we depend on for quality control and release of our products;

•price fluctuations due to a lack of long-term supply arrangements with our suppliers for key components;

•inability to obtain adequate supply in a timely manner or on commercially reasonable terms;

•difficulty identifying and qualifying alternative suppliers for components in a timely manner;

•inability of suppliers to comply with applicable provisions of the QSR or other applicable laws or regulations enforced by the FDA and other Federal and state regulatory authorities;

•delays in regulatory approvals of any changes to manufacturing, including the use of new suppliers;

•latent defects that may become apparent after our products have been released and that may result in an adverse event or a recall of such products;

•inclusion of vendors of raw materials not in compliance with regulatory requirements;

•natural or other disasters, global pandemics, labor disputes, financial distress, lack of raw material supply, issues with facilities and equipment, international conflict or war, or other forms of disruption to business operations affecting our manufacturer or its suppliers;

•production delays related to the evaluation and testing of our products or the use of components from alternative suppliers;

•failure to complete sterilization on time or in compliance with the required regulatory standards; and

•delays in delivery by our suppliers of components, materials, or services due to changes in demand from us or their other customers.

The occurrence of any of these issues could significantly harm our ability to manufacture our products and maintain sufficient quality standards, which would negatively impact our sales, business, financial condition, and results of operations.

We depend on a limited number of single-source suppliers and vendors in connection with the manufacture of our RNS System, which makes us vulnerable to supply shortages and price fluctuations that could harm our business, financial condition, and results of operations.

We source and rely upon materials, components, and sub-assemblies of our RNS System, as well as manufacturing services from approved suppliers, most of which are single source suppliers. For example, Micro Systems Technologies Management AG and Greatbatch Ltd are single source suppliers of several key components of our products, including printed circuit assemblies and batteries. In addition, certain of our suppliers are not under long-term contracts with us.

These components, materials, and services, which also include silicone adhesive, integrated circuits, and other components, are critical and there are relatively few alternative sources of supply. We believe our single source suppliers are capable of continuing to meet our specifications and maintaining quality, but any significant problem experienced by one of our single source suppliers may result in a delay or interruption in the supply of components, materials, or services to us. Our suppliers may experience manufacturing delays or issues, stop producing our components, materials, or services, increase the prices they charge us, or elect to terminate their relationships with us. In any of these cases, we could face a delay of several months to identify, perform appropriate testing, and qualify alternative suppliers and service providers with regulatory authorities, as we do not currently have supplier transition plans. In addition, the failure of our third-party suppliers and service providers to maintain acceptable quality requirements could result in the recall of our products. If one of our suppliers fails to maintain acceptable quality requirements, we may have to identify and qualify a new supplier. Although we require our third-party suppliers to supply us with materials, components and services that meet our specifications and comply with applicable provisions of the FDA’s QSR and other applicable legal and regulatory requirements in our agreements and contracts, and we perform incoming inspection, testing or other acceptance activities to ensure the materials and components meet our requirements, there is a risk that our suppliers will not always act consistent with our best interests, and may not always supply components that meet our requirements or supply components in a timely manner.

The number of third-party suppliers with the necessary manufacturing and regulatory expertise and facilities is limited and certification of a new supplier may be complex and time consuming. Any delay or interruption would likely lead to a delay or interruption in our manufacturing operations. The inclusion of substitute components must meet our product specifications and could require us to qualify the new supplier with the appropriate regulatory authorities, including the FDA. The added time and cost to arrange for alternative suppliers could harm our business. New manufacturers of any planned product would be required to qualify under applicable regulatory requirements

and would need to have sufficient rights under applicable intellectual property laws to the method of manufacturing the planned product. Obtaining the necessary FDA or international approvals or other qualifications under applicable regulatory requirements and ensuring non-infringement of third-party intellectual property or other proprietary rights could result in a significant interruption of supply and could require the new manufacturer to bear significant additional costs that may be passed on to us.

If we fail to optimize our sales and marketing capabilities and develop widespread brand awareness cost-effectively, our growth will be impeded and our business may suffer.

We are actively expanding our presence in the United States through additional sales and education efforts to drive adoption of our RNS System at Level 4 CECs and increase utilization of our RNS System within new and existing accounts. We also plan to explore regulatory and reimbursement approval pathways to expand our presence in international territories.

We take a measured approach to optimize our sales infrastructure to grow our customer base and our business. Identifying and recruiting qualified personnel and training them on the use of our RNS System, on applicable federal and state laws and regulations and on our internal policies and procedures, requires significant time, expense and attention, particularly given our strategy of having each Therapy Consultant, or sales representative, cover many accounts. It can take significant time before our Therapy Consultants are fully trained and productive and before they have established relationships with their target accounts. Our business may be harmed if our efforts to optimize do not generate a corresponding increase in revenue or result in a decrease in our operating margin. In particular, if we are unable to hire, develop and retain talented sales personnel or if new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, we may not be able to realize the expected benefits of this investment or increase our revenue.

We dedicate significant financial and other resources to our customer outreach and training programs, which may require us to incur significant upfront costs. For example, we may need to conduct additional physician trainings across hospital facilities, including Level 4 CECs. Our sales force may also need to develop additional efficiencies and approaches to address potential growth as we expand referral pathways, expand into additional existing Level 4 CECs as well as new Level 4 CECs, and increase the number of epileptologists recommending, and neurosurgeons implanting, our RNS System within each Level 4 CEC. Our business would be harmed if our programs and associated expenditures do not generate a corresponding increase in revenue.

In addition, we believe that developing and maintaining awareness of our brand in a cost-effective manner is critical to achieving broad acceptance of our products and attracting new customers. Brand promotion activities may not generate customer awareness or increase revenue and, even if they do, any increase in revenue may not offset the costs and expenses we incur in building our brand. If we fail to successfully promote, maintain and protect our brand, we may fail to realize a sufficient return on our brand-building efforts, or to achieve the widespread brand awareness that is critical for broad adoption of our RNS System.

We may be unable to compete successfully with other treatment options for drug-resistant focal epilepsy, which could harm our sales, business, financial condition and results of operations.

Our industry is competitive and has been evolving rapidly with not only existing treatment options, but also the introduction of new products and technologies as well as the market activities of industry participants. Our RNS System is indicated for adult patients with drug-resistant focal epilepsy in the United States and we primarily market our device to customers, primarily consisting of the clinicians within Level 4 CECs that treat these patients. In our target patient population, there are two primary treatment options (i) an ablative or resective surgery, or (ii) implantation of a neuromodulation device. Patients may also choose not to actively seek additional treatment for epilepsy or may choose to try new therapeutic drugs that become available from time to time. We estimate that approximately 80% of drug-resistant focal epilepsy patients are either not ideal candidates for ablative or resective surgery or are unwilling to undergo a destructive surgical procedure and we compete primarily with two manufacturers of neuromodulation devices for the treatment of these patients. Our primary competitors are LivaNova plc, which manufactures the VNS System, and Medtronic plc, which manufactures the DBS System. Third-party payors may encourage the use of competitors’ products or other neuromodulation therapies due to lower

costs of competing products or alternatives. Additionally, treating physicians, including epileptologists and neurosurgeons may promote the use of other competitors’ products or alternative therapies. Further, as existing competitors and other companies develop new or improved products, we cannot predict what the standard of care will be in the future.

Our primary competitors are large, well-capitalized companies with significant market share and resources. They have more established sales and marketing programs than we do and have greater name recognition. These competitors also have long operating histories and may have more established relationships with potential customers. In addition to competing for market share, competitors may develop or acquire patents or other rights that may limit our ability to compete.

The medical device industry is intensely competitive, subject to rapid change and significantly affected by new product introductions and other market activities of industry participants. There can be no assurance that other companies or institutions will not succeed in developing or marketing devices and products that are more effective or safer than our RNS System or that would render our RNS System obsolete or noncompetitive.

We believe that the clinical advantages of our RNS System and our focus on neuromodulation will be important factors in our future success. Our continued success depends on, among other things, our ability to:

•continue to demonstrate safety and efficacy in our Post-Approval Study and in ongoing commercial use;

•expand our referral pathways;

•expand the number of Level 4 CECs implanting our RNS System and increase utilization across these Level 4 CECs;

•drive awareness to increase the number of drug-resistant epilepsy patients referred to Level 4 CECs;

•maintain adequate reimbursement for implant procedures and for clinicians to provide ongoing care of patients treated with our RNS System;

•attract and retain skilled research, development, sales, marketing and clinical personnel;

•continue to innovate in order to improve therapy effectiveness and enhance the patient and provider experience;

•adequately predict product performance;

•obtain and maintain regulatory clearances and approvals, including for expanded indications;

•cost-effectively manufacture, market and sell our RNS System;

•obtain, maintain, protect, enforce and defend our intellectual property rights and operate our business without infringing, misappropriating or otherwise violating the intellectual property rights of others;

•acquire products or technologies complementary to or necessary for our business; and

•source materials, components, and sub-assemblies from suppliers on a cost-effective and timely basis.

Adoption of our RNS System depends on positive clinical data as well as clinician acceptance of the data and our products, and negative clinical data or perceptions among these clinicians would harm our sales, business, financial condition, and results of operations.

The rate of adoption and sales of our products are heavily influenced by clinical data. Although we have positive clinical data across four multi-center FDA approved prospective clinical studies going out as far as nine years, there can be no assurance that clinical data will continue to be positive for our ongoing studies, such as our Post-Approval Study. Additionally, there can be no assurance that future clinical studies, including those to continue demonstrating the efficacy of our products in currently approved patient populations and those to support label

retention and expansion for our products will demonstrate safety and effectiveness. Unfavorable or inconsistent clinical data from ongoing or future clinical studies conducted by us, our competitors, or third parties, the negative interpretation of our clinical data internally and externally, including by customers, competitors, patients, and regulators, or findings of new or more frequent adverse events, could harm our business, financial condition, and results of operations.

The rate of adoption and sales of our products are also influenced by clinicianperceptions. Negative perceptions of our products by clinicians, including due to negative clinical data, could result in decreased adoption or use of our products, which would harm our business, financial condition, and results of operations. Additionally, if key opinion leaders who support our products cease to recommend our products, our business, financial condition and results of operations will be harmed. Further, if we cannot maintain strong working relationships with clinicians and continue to receive their advice and input, the marketing of our products could suffer, which could harm our business, financial condition and results of operations. The COVID-19 pandemic and related restrictions on access to clinicians as well as hospital staffing shortages have impacted, and will likely continue to impact, our ability to maintain such relationships. Finally, although we have demonstrated the safety, effectiveness and clinical advantages of our products in pivotal clinical studies, neuromodulation is still a relatively new approach to treating drug-resistant focal epilepsy. The results of clinical studies of the products conducted to date and from commercial use do not necessarily predict future results. Any negative long-term results or adverse events from use of our products that arise in the future could harm our business, financial condition, and results of operations.

Our future success also depends upon patients having an understanding of how to properly use our RNS System and an experience with our products that meets their expectations in order to increase clinician demand for our products as a result of positive feedback and word-of-mouth. Patients may be dissatisfied if their expectations of the procedure and results are not met or if they are not adequately trained on use of our RNS System. Patients may be dissatisfied if they experience adverse events or insufficient reduction in frequency of seizures. If the results of our products do not meet the expectations of the patients, or the patient experiences adverse events, it could discourage the patient from continuing to use our device or referring our products to others. Dissatisfied patients may express negative opinions through social media, advocacy, or other publicity. Any failure to meet patient expectations and any resulting negative publicity could harm our reputation and future sales.

If adequate reimbursement becomes unavailable for the procedures to implant our RNS System and for clinicians to provide ongoing care for patients treated with our RNS System, it could diminish our sales or affect our ability to sell our RNS System profitably.

The implant procedure for our RNS System and the ongoing patient care provided by clinicians, including monitoring and programming, are reimbursed under well-established physician and hospital codes. Our ability to increase sales of our RNS System depends, in significant part, on the availability of adequate financial coverage and reimbursement from third-party payors, including governmental payors (such as the Medicare and Medicaid programs in the United States), managed care organizations, and private health insurers. Third-party payors decide which treatments they will cover and establish reimbursement rates for those treatments. We do not bill any third-party payors for our RNS System. Instead, we invoice healthcare providers for our RNS System and the cost is bundled into the reimbursement received by healthcare providers for the procedures in which our RNS System is used.

We expect our RNS System will continue to be purchased by hospital facilities, primarily Level 4 CECs, and other providers who will then seek reimbursement from third-party payors for brain-responsive neuromodulation for drug resistant focal epilepsy. While third-party payors currently cover and provide reimbursement for both implant procedures of our RNS System as well as for clinicians providing ongoing patient care, we can give no assurance that these third-party payors will continue to provide coverage and adequate reimbursement, or that current reimbursement levels for implant procedures as well as clinician-provided ongoing patient care will continue.

Furthermore, the overall amount of reimbursement available for brain-responsive neuromodulation for drug resistant focal epilepsy could decrease in the future. Changes in reimbursement may not necessarily impact our sales. Additionally, we cannot be sure that the reimbursement amounts available for brain-responsive neuromodulation for drug resistant focal epilepsy will not reduce or otherwise negatively impact the demand for our

marketed RNS System. Failure by Level 4 CECs and other users of our RNS System to obtain coverage and adequate reimbursement for the implant procedures or for clinicians providing ongoing patient care would cause our business, financial condition, and results of operations to suffer.

Use of our RNS System requires appropriate neurosurgeon training for implantation and epileptologist training for programming and ongoing patient care, and inadequate training may lead to negative patient outcomes, which could harm our business, financial condition, and results of operations.

The successful use of our RNS System depends in part on the training and skill of the neurosurgeon performing the implant procedure as well as the clinician, typically an epileptologist, performing the subsequent programming of our RNS System and monitoring the patient response. Clinicians could experience difficulty with the technique necessary to successfully implant and program our RNS System, and monitor patients if they do not receive appropriate training. Moreover, epileptologists and neurosurgeons rely on their previous medical training and experience when recommending or implanting our RNS System, and we cannot guarantee that all neurosurgeons will have the necessary implantation skills to properly perform the procedure. We cannot be certain that physicians or healthcare providers that use our RNS System have received sufficient training, and physicians or healthcare providers who have not received adequate training may nonetheless attempt to use our RNS System with their patients. If neurosurgeons or epileptologists implant or utilize our RNS System incorrectly, or without adhering to or completing all relevant training, their patient outcomes may not be consistent with the outcomes achieved in our clinical studies. Adverse safety outcomes that arise from improper or incorrect use of our RNS System may negatively impact the perception of patient benefit and safety of our RNS System, notwithstanding results from our clinical studies. These results could limit adoption of our RNS System in treatment for drug-resistant focal epilepsy, which would harm our sales, business, financial condition, and results of operations.

We are highly dependent on our senior management team and key personnel, and our business could be harmed if we are unable to attract and retain personnel necessary for our success.

We are highly dependent on our senior management and key personnel. Our success will depend on our ability to retain senior management and to attract and retain qualified personnel in the future, including sales and marketing professionals, engineers, scientists, clinical trial specialists and other highly skilled personnel and to integrate current and additional personnel in all departments. The turnover of members of our senior management, sales and marketing professionals, engineers, scientists and clinical trial specialists could impact decision-making and could result in delays in product development and harm our business.

Competition for skilled personnel in our market is intense and may limit our ability to hire and retain highly qualified personnel on acceptable terms, or at all. To induce valuable employees to remain at our company, in addition to salary and cash incentives, we have issued stock options that vest over time. The value to employees of stock options that vest over time may be significantly affected by fluctuations in our stock price that are beyond our control, and may at any time be insufficient to counteract more lucrative offers from other companies. Despite our efforts to retain valuable employees, members of our management and other key personnel may terminate their employment with us on short notice. Our employment arrangements with our employees provide for at-will employment, which means that any of our employees could leave our employment at any time, with or without notice. We also do not maintain “key man” insurance policies on the lives of these individuals or the lives of any of our other employees.

We rely on our own direct sales force to market and sell our RNS System, and if we are unable to optimize our sales force, it could harm our business. Our operating results are directly dependent upon the sales and marketing efforts of our sales and customer support team. If our employees fail to adequately promote, market and sell our products, our sales could significantly decrease. As we launch new products, expand our product offerings and increase our marketing efforts with respect to existing products, we will need to expand the reach of our marketing and sales networks. Our future success will depend largely on our ability to continue to hire, train, retain and motivate skilled employees with significant technical knowledge in various areas. An inability to attract, hire, train and retain employees will harm our sales, business, financial condition, and results of operations.

We expect to increase the size of our organization in the future, and we may experience difficulties in managing this growth. If we are unable to manage the anticipated growth of our business, our future revenue and operating results may be harmed.

As of December 31, 2021, we had 166 employees. As our sales and marketing strategies develop and as we continue our transition of operating as a public company, we expect to need additional managerial, operational, sales, marketing, financial and other personnel. Future growth would impose significant added responsibilities on members of management, including:

•identifying, recruiting, integrating, maintaining and motivating additional employees;

•managing our internal development efforts effectively, while complying with our contractual obligations to contractors and other third parties; and

•improving our operational, financial and management controls, reporting systems and procedures.

Our future financial performance and our ability to successfully market and sell our RNS System will depend, in part, on our ability to effectively manage any future growth, and our management may also have to divert a disproportionate amount of attention away from day-to-day activities in order to devote a substantial amount of time to managing these growth activities.

As demand for our RNS System increases, we will need to continue to scale our capacity at our manufacturing facility, expand customer service, billing and systems processes and enhance our internal quality assurance program. We cannot be certain that any increases in scale, related improvements and quality assurance will be successfully implemented or that appropriate personnel will be available to facilitate the growth of our business. If we encounter difficulty meeting market demand, quality standards or physician expectations, our reputation will be harmed and our business will suffer. Additionally, additional growth may result in higher fixed costs and may slow our ability to reduce costs in the face of a sudden decline in demand for our products.

We may not be able to achieve or maintain satisfactory pricing and margins for our RNS System, which could harm our business and results of operations.

Manufacturers of medical devices have a history of price competition, and we can give no assurance that we will be able to maintain satisfactory prices for our RNS System at the levels we have historically achieved. The pricing of our products could be impacted by several factors, including pressure to reduce prices by our customers due to a decline in the amount that third-party payors reimburse for implant procedures using our RNS System for clinicians providing ongoing patient care. A decline in the amount that third-party payors reimburse our customers for ongoing patient care could also make it difficult for programming centers to conduct ongoing patient support without a corresponding reduction in prices for our products. If we are forced to lower or are unable to increase the price we charge for our RNS System, our gross margins will decrease, which will harm our ability to invest in and grow our business. If we are unable to maintain our prices, or if our costs increase and we are unable to offset such increase with an increase in our prices, our margins could erode, which could harm our business and results of operations.

Our results of operations may be harmed if we are unable to accurately forecast customer demand for our products.

We do not maintain large amounts of excess inventory at any given time. To ensure adequate supply, we must forecast inventory needs and manufacture our products based on our estimates of future demand. Our ability to accurately forecast demand for our products could be negatively affected by many factors, including our failure to accurately manage our expansion strategy, product introductions by competitors, our inability to forecast the lifecycle of our products, an increase or decrease in customer demand for our products or for competitor products, our failure to accurately forecast customer adoption of new products, unanticipated changes in general market conditions or regulatory matters and weakening of economic conditions or consumer confidence in future economic conditions, as well as the ongoing COVID-19 pandemic. Inventory levels in excess of customer demand may result in inventory write-downs or write-offs, which would cause our gross margin to be adversely affected and could

impair the strength of our brand. Conversely, if we underestimate customer demand for our products, our manufacturing team may not be able to deliver products to meet our requirements, and this could result in damage to our reputation and customer relationships. In addition, if we experience a significant increase in demand, additional supplies of components, materials, or services, or additional manufacturing capacity may not be available when required on terms that are acceptable to us, or at all, which may negatively affect our business, financial condition, and results of operations.

We are seeking expanded FDA labeling for our RNS System to be able to treat patients between the age of 12 and 17 with drug-resistant focal epilepsy, as well as patients with generalized drug-resistant epilepsy, but if we are unable to broaden the indications for our RNS System to include these patients, our growth potential could be harmed.

Our products are subject to extensive regulation by the FDA in the United States. Before a new medical device or a new intended use for an existing medical device can be marketed in the United States, we must first submit and receive either 510(k) clearance pursuant to Section 510(k) of the Food, Drug and Cosmetic Act, or the FDCA, or approval of a PMA application from the FDA, unless an exemption applies.

If clinical studies do not produce results necessary to support regulatory clearance or approval to expand our indications to include patients age 12 to 17 with drug-resistant focal epilepsy or patients with generalized drug-resistant epilepsy, we will be unable to obtain and maintain necessary approvals to expand our indications to include these patients in accordance with our expected timelines, which could harm our growth potential. Furthermore, we could incur substantial costs and the attention of management could be diverted throughout this process.

We may expand sales of our RNS System internationally in the future, but we may experience difficulties in obtaining regulatory clearance or approval or in successfully marketing our RNS System internationally even if approved. A variety of risks associated with marketing our RNS System internationally could harm our growth potential.

While our RNS System is not yet approved for sale outside the United States, we may pursue regulatory and reimbursement approval pathways in markets outside of the United States. Sales of our RNS System outside of the United States will be subject to foreign regulatory requirements governing clinical studies and marketing approval, as well as additional post-approval requirements. We would incur substantial expenses in connection with any international expansion. Additional risks related to operating in foreign countries include:

•differing regulatory requirements in foreign countries, including with respect to data privacy and security;

•differing reimbursement regimes in foreign countries, including price controls;

•unexpected changes in tariffs, trade barriers, price and exchange controls and other regulatory requirements;

•economic weakness, including inflation, or political instability in particular foreign economies and markets;

•compliance with tax, employment, immigration and labor laws for employees living or traveling abroad;

•foreign taxes, including withholding of payroll taxes;

•foreign currency fluctuations, which could result in increased operating expenses or reduced revenue;

•difficulties staffing and managing foreign operations;

•workforce uncertainty in countries where labor unrest is more common than in the United States;

•potential liability under the U.S. Foreign Corrupt Practices Act of 1977, as amended, or the FCPA, or comparable foreign regulations;

•challenges enforcing our contractual and intellectual property rights as well as intellectual property theft or compulsory licensing, especially in those foreign countries that do not respect and protect intellectual property rights to the same extent as the United States; and

•business interruptions resulting from geopolitical actions, including tariffs, war and terrorism.

These and other risks associated with international operations may harm our ability to attain or maintain profitable operations internationally, which would harm our growth potential.

In addition, there can be no guarantee that we will receive approval to sell our RNS System in every international market we target, nor can there be any guarantee that any sales would result even if such approval is received. Approval in the United States, or in any other jurisdiction, does not ensure approval in other jurisdictions. Obtaining foreign approvals could result in significant delays, difficulties and costs for us and require additional studies and additional expenses. Regulatory requirements can vary widely from country to country and could delay the introduction of our RNS System in those countries. If we fail to comply with these regulatory requirements or to obtain and maintain required approvals, our target market will be reduced and our ability to generate revenue will be diminished. Our inability to successfully enter all our desired international markets and manage business on a global scale could harm our growth potential.

Further, there are foreign privacy laws and regulations that impose restrictions on the collection, use, storage, disclosure, transfer and other processing of personal data, including health information. For example, the European Union General Data Protection Regulation, or the GDPR, imposes stringent data protection requirements, including, for example, more robust disclosures to individuals, a strengthened individual data rights regime, shortened timelines for data breach notifications, limitations on retention of information, increased requirements pertaining to special categories of data, such as health data, and additional obligations regarding third-party processors in connection with the processing of the personal data. Our failure to comply with the GDPR or other applicable foreign privacy laws or regulations or significant changes in the laws and regulations restricting our ability to obtain or use required patient information could significantly impact our business and our future business plans.

Risks related to government regulation and our industry

If we fail to comply with U.S. federal and state laws and regulations, including fraud and abuse and other healthcare laws and regulations, such as those relating to kickbacks and false claims for reimbursement, we could face substantial penalties and our business, financial condition and results of operations could be harmed.

Healthcare providers play a primary role in the distribution, recommendation, ordering and purchasing of any medical device for which we have or obtain marketing clearance or approval. Through our arrangements with healthcare professionals and hospital facilities, we are exposed to broadly applicable anti-fraud and abuse, anti-kickback, false claims and other healthcare laws and regulations that may constrain our business, our arrangements and relationships with customers, and how we market, sell and distribute our marketed medical devices. We have a compliance program, code of conduct and associated policies and procedures, but it is not always possible to identify and deter misconduct by our employees, contractors, and other third parties, including our customers, and the precautions we take to detect and prevent noncompliance may not be effective in protecting us from governmental investigations for failure to comply with applicable fraud and abuse or other healthcare laws and regulations.

In the United States, we are subject to various state and federal anti-fraud and abuse laws, including, without limitation, the federal Anti-Kickback Statute and federal civil False Claims Act, or the FCA. Our relationships with physicians, other health care professionals and hospitals are subject to scrutiny under these laws. There are also similar laws in other countries that we may become subject to if we expand internationally.

The laws that may affect our ability to operate include, among others:

•the Anti-Kickback Statute, which prohibits, among other things, knowingly and willingly soliciting, offering, receiving or paying remuneration, directly or indirectly, overtly or covertly, in cash or in kind, to induce or reward either the referral of an individual, or the purchase, order or recommendation of, items or

services for which payment may be made, in whole or in part, under a federal healthcare program, such as the Medicare and Medicaid programs;

•federal civil and criminal false claims laws, including the FCA, and civil monetary penalties laws, which prohibits, among other things, persons or entities from knowingly presenting, or causing to be presented, a false or fraudulent claim for payment of government funds and knowingly making, using or causing to be made or used, a false record or statement to get a false claim paid or to avoid, decrease or conceal an obligation to pay money to the federal government;

•the Health Insurance Portability & Accountability Act of 1996, or HIPAA, which applies to our customers and some of their downstream vendors and contractors, imposes criminal and civil liability for, among other actions, knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program, including private third-party payors, or knowingly and willfully falsifying, concealing or covering up a material fact or making a materially false, fictitious or fraudulent statement or representation, or making or using any false writing or document knowing the same to contain any materially false, fictitious or fraudulent statement or entry in connection with the delivery of or payment for healthcare benefits, items or services;

•various state laws governing the privacy and security of personal information, including the California Consumer Privacy Act, or the CCPA, which became effective on January 1, 2020, and regulates the processing of personal information of California residents and increases the privacy and security obligations of covered companies handling such personal information. The CCPA requires covered companies to, amongst other things, provide new and additional disclosures to California residents, and affords such residents new abilities to access their personal information and opt out of certain sales of personal information; and

•the federal Physician Payments Sunshine Act, also known as Open Payments, which requires manufacturers of drugs, devices, biologics and medical supplies for which payment is available under Medicare, Medicaid or the Children’s Health Insurance Program to report annually, with certain exceptions to the Centers for Medicare & Medicaid Services, or CMS, information related to payments or other “transfers of value” made to physicians, as defined by such law, and teaching hospitals, and requires applicable manufacturers and group purchasing organizations to report annually to CMS ownership and investment interests held by physicians and their immediate family members.

State and federal regulatory and enforcement agencies continue to actively investigate violations of healthcare laws and regulations, and the U.S. Congress continues to strengthen the arsenal of enforcement tools. Most recently, the Bipartisan Budget Act of 2018, or the BBA, increased the criminal and civil penalties that can be imposed for violating certain federal health care laws, including the Anti-Kickback Statute. Enforcement agencies also continue to pursue novel theories of liability under these laws. In particular, government agencies have increased regulatory scrutiny and enforcement activity with respect to manufacturer reimbursement support activities and patient care programs, including bringing criminal charges or civil enforcement actions under the Anti-Kickback Statute, federal civil FCA and HIPAA’s healthcare fraud and privacy provisions.

Achieving and sustaining compliance with applicable federal and state anti-fraud and abuse laws may prove costly. If we or our employees are found to have violated any of the above laws we may be subjected to substantial criminal, civil and administrative penalties, including imprisonment, exclusion from participation in federal healthcare programs, such as Medicare and Medicaid, and significant fines, monetary penalties, forfeiture, disgorgement and damages, contractual damages, reputational harm, administrative burdens, diminished profits and future earnings and the curtailment or restructuring of our operations, any of which could adversely affect our ability to operate our business and our financial results. Any action or investigation against us for the violation of these healthcare fraud and abuse laws, even if successfully defended, could result in significant legal expenses and could divert our management’s attention from the operation of our business. Companies settling federal civil FCA, Anti-Kickback Statute or civil monetary penalties law cases also may be required to enter into a Corporate Integrity Agreement with the Office of Inspector General, or OIG, in order to avoid exclusion from participation (such as loss of coverage for their products) in federal healthcare programs such as Medicare and Medicaid. Corporate Integrity

Agreements typically impose substantial costs and operational burdens on companies to ensure compliance. Defending against any such actions can be detrimental to our reputation and brand and can otherwise be costly, time-consuming and may require significant personnel resources, and may harm our business, financial condition and results of operations.

In addition, the medical device industry’s relationship with physicians is under increasing scrutiny by the OIG, the U.S. Department of Justice, or the DOJ, the state attorney generals and other foreign and domestic government agencies. Our failure to comply with requirements governing the industry’s relationships with physicians or an investigation into our compliance by the OIG, the DOJ, state attorney generals and other government agencies, could harm our business, financial condition and results of operations.

Our employees, independent contractors, consultants, commercial partners and vendors may engage in misconduct or other improper activities, including noncompliance with regulatory standards and requirements, which could harm our business, financial condition and results of operations.

We are exposed to the risk that our employees, independent contractors, consultants, commercial partners and vendors may engage in fraudulent or illegal activity. Misconduct by these parties could include intentional, reckless or negligent conduct or disclosure of unauthorized activities to us that violates: (i) the laws of the FDA and other similar foreign regulatory bodies, including those laws requiring the reporting of true, complete and accurate information to such regulators; (ii) manufacturing standards; (iii) healthcare fraud and abuse laws in the United States and similar foreign fraudulent misconduct laws; or (iv) laws that require the true, complete and accurate reporting of financial information or data. These laws may impact, among other things, future sales, marketing and education programs. In particular, the promotion, sales and marketing of healthcare items and services, as well as certain business arrangements in the healthcare industry, are subject to extensive laws designed to prevent fraud, kickbacks, self-dealing and other abusive practices. These laws and regulations may restrict or prohibit a wide range of pricing, discounting, marketing and promotion, structuring and commissions, certain customer incentive programs and other business arrangements generally. Activities subject to these laws also involve the improper use of information obtained in the course of patient recruitment for clinical studies.

We have adopted a code of conduct, employee handbook, and compliance policies, but it is not always possible to identify and deter misconduct by our employees and other third parties, and the precautions we take to detect and prevent these activities may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. If any such actions are instituted against us and we are not successful in defending ourselves or asserting our rights, those actions could result in the imposition of significant fines or other sanctions, including the imposition of civil, criminal and administrative penalties, damages, monetary fines, disgorgement, imprisonment, reporting and oversight obligations, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, diminished profits and future earnings and curtailment of operations, any of which could adversely affect our ability to operate our business and our results of operations. If any such actions are instituted against us and we are not successful in defending ourselves or asserting our rights, those actions could result in integrity issues, or a negative impact to our reputation or brand. Whether or not we are successful in defending against any such actions or investigations, we could incur substantial costs, including legal fees, and divert the attention of management in defending ourselves against any of these claims or investigations, which could harm our business, financial condition and results of operations.

Regulatory compliance is expensive, complex and uncertain, and a failure to comply could lead to enforcement actions against us and other negative consequences for our business.

The FDA and similar agencies regulate our products as medical devices. Complying with these regulations is costly, time-consuming, complex and uncertain. For instance, before a new medical device, or a new intended use for an existing device, can be marketed in the United States, a company must first submit and receive either 510(k) clearance or approval of a PMA from the FDA, unless an exemption applies. FDA regulations and regulations of similar agencies are wide-ranging and include, among other things, oversight of:

•product design, development, manufacturing (including suppliers) and testing;

•laboratory, preclinical and clinical studies;

•product safety and effectiveness;

•product labeling;

•product storage and shipping;

•record keeping;

•pre-market clearance or approval;

•marketing, advertising and promotion;

•product sales and distribution;

•product changes;

•product recalls; and

•post-market surveillance and reporting of deaths or serious injuries and certain malfunctions.

Our products are subject to extensive regulation by the FDA and if we expand internationally in the future may be subject to extensive regulation by non-U.S. regulatory agencies. Further, improvements of our existing products, any potential new products, and new indications for use of our current products will be subject to extensive regulation, and we may require permission from regulatory agencies and ethics boards to conduct clinical studies, as well as clearance or approval from the FDA prior to commercial sale. In order to commercialize and distribute our products in markets outside of the United States, it will require approval from non-U.S. regulatory agencies.

The FDA and foreign regulatory bodies can delay, limit or deny clearance or approval of a device for many reasons, including:

•our inability to demonstrate to the satisfaction of the FDA or the applicable regulatory entity or notified body that our products are safe or effective for their intended uses;

•the disagreement of the FDA or the applicable foreign regulatory body with the design or implementation of our clinical studies or the interpretation of data from clinical studies;

•serious and unexpected adverse device effects experienced by participants in our clinical studies;

•the data from our preclinical studies and clinical studies may be insufficient to support clearance or approval, where required;

•our inability to demonstrate that the clinical and other benefits of the device outweigh the risks;

•the manufacturing process or facilities we use may not meet applicable requirements; and

•the potential for approval policies or regulations of the FDA or applicable foreign regulatory bodies to change significantly in a manner rendering our clinical data or regulatory filings insufficient for clearance or approval.

Failure to comply with applicable U.S. requirements regarding, for example, promoting, manufacturing or labeling our RNS System, may subject us to a variety of administrative or judicial actions and sanctions, such as Form 483 observations, warning letters, untitled letters, product recalls, product seizures, and total or partial suspension of production or distribution, injunctions, fines, civil penalties and criminal prosecution. Any enforcement action by the FDA and other comparable non-U.S. regulatory agencies could harm our business, financial condition and results of operations.

Our failure to comply with applicable regulatory requirements could result in enforcement action by the FDA or state agencies, which may include any of the following actions:

•untitled letters, warning letters, fines, injunctions, consent decrees and civil penalties;

•removal from FDA’s Voluntary Improvement Program pilot;

•unanticipated expenditures to address or defend such actions;

•form 483s, or other compliance or enforcement notices, communications or correspondence, including customer notifications for repair, replacement or refunds;

•recall, detention or seizure of our RNS System;

•operating restrictions or partial suspension or total shutdown of production;

•refusing or delaying our requests for 510(k) clearance or PMA of new products or modified products;

•operating restrictions;

•seizure or detention of products;

•withdrawing 510(k) clearances or PMAs that have already been granted;

•refusal to grant export approval for our RNS System;

•criminal prosecution; or

•civil penalties.

If any of these events were to occur, it would have a negative impact on our business, financial condition and results of operations.

The FDA also regulates the advertising and promotion of our RNS System to ensure that the claims we make are consistent with our regulatory clearances and approvals, that there are adequate and reasonable data to substantiate the claims and that our promotional labeling and advertising is neither false nor misleading in any respect. If the FDA determines that any of our advertising or promotional claims are misleading, not substantiated or not permissible, we may be subject to enforcement actions, including warning letters, and we may be required to revise our promotional claims and make other corrections or restitutions. Additionally, our manufacturing facility is required to comply with extensive requirements imposed by the FDA, including ensuring that quality control and manufacturing procedures conform to the QSR. As such, we will be subject to continual review and inspections to assess compliance with the QSR and adherence to commitments made in any 510(k) or PMA application.

The 510(k) or PMA process can be expensive, lengthy and unpredictable and we will continue to expend time, money and effort in all areas of regulatory compliance, including manufacturing, production and quality control. We may not be able to obtain necessary clearances or approvals or may be unduly delayed in doing so, which would negatively affect our business, financial condition and results of operations. Furthermore, even if we are granted regulatory clearances or approvals, they may include significant limitations on the indicated uses for the product, which may limit the market for the product. Although we have obtained PMA approval to market our RNS System, our approval can be revoked if safety or efficacy problems develop.

Our operations are subject to pervasive and continuing FDA regulatory requirements, and failure to comply with these requirements could harm our business, financial condition and results of operations.

Before a new medical device or service, or a new intended use for an existing product or service, can be marketed in the United States, a company must first submit and receive either 510(k) clearance or PMA from the FDA, unless an exemption applies. In the 510(k) clearance process, before a device may be marketed, the FDA must determine that a proposed device is substantially equivalent to a legally-marketed predicate device, which includes a

device that has been previously cleared through the 510(k) process, a device that was legally marketed prior to May 28, 1976 (pre-amendments device), a device that was originally on the U.S. market pursuant to an approved PMA and later down-classified, or a 510(k)-exempt device.

In the process of obtaining PMA approval, which was required for our RNS System, the FDA must determine that a proposed device is safe and effective for its intended use based, in part, on extensive data, including, but not limited to, technical, preclinical, clinical study, manufacturing and labeling data. The PMA process is typically required for devices that are deemed to pose the greatest risk, such as life-sustaining, life-supporting or implantable device.

The FDA and state and international authorities have broad enforcement powers. The medical device industry is now experiencing greater scrutiny and regulation by federal, state and foreign governmental authorities. Companies in our industry are subject to more frequent and more intensive reviews and investigations, often involving the marketing, business practices and product quality management. Such reviews and investigations may result in: civil and criminal proceedings; the imposition of substantial fines and penalties; the receipt of warning letters, untitled letters, demands for recalls or the seizure of our products; the requirement to enter into corporate integrity agreements, stipulated judgments or other administrative remedies; and result in our incurring substantial unanticipated costs and the diversion of key personnel and management’s attention from their regular duties, any of which may harm our business, financial condition and results of operations, and may result in greater and continuing governmental scrutiny of our business in the future.

Additionally, federal, state and foreign governments and entities have enacted laws and issued regulations and other standards requiring increased visibility and transparency of interactions with healthcare providers. For example, Open Payments requires us to annually report to CMS payments and other transfers of value to U.S. physicians and certain other clinicians and U.S. teaching hospitals, with the reported information made publicly available on a searchable website. Failure to comply with these legal and regulatory requirements could impact our business, and we have had and will continue to spend substantial time and financial resources to develop and implement enhanced structures, policies, systems and processes to comply with these legal and regulatory requirements, which could harm our business, financial condition and results of operations.

Modifications to our products may require new 510(k) clearances or PMAs or may require us to recall or cease marketing our products until clearances or approvals are obtained, which could harm our business, financial condition and results of operations.

In the United States, our RNS System is marketed pursuant to a PMA order issued by the FDA. Any modifications to a PMA-approved device that could significantly affect its safety or effectiveness, including significant design and manufacturing changes, or that would constitute a major change in its intended use, manufacture, design, components, or technology requires approval of a new PMA application or PMA supplement. For instance, we believe that the change in the expected average battery life of our RNS System requires a label change, and we have submitted this to the FDA as a PMA supplement for review. However, certain changes to a PMA-approved device do not require submission and approval of a new PMA or PMA supplement and may only require notice to FDA in a PMA 30-Day Notice, Special PMA Supplement - Changes Being Effected or PMA Annual Report. The FDA requires every manufacturer to make this determination in the first instance, but the FDA may review any manufacturer’s decision. The FDA may not agree with our decisions regarding whether new approvals are necessary. If the FDA disagrees with our determination and requires us to seek new PMA approvals for modifications to our previously approved products for which we have concluded that new approvals are unnecessary, we may be required to cease marketing or to recall the modified product until we obtain clearance or approval, and we may be subject to significant regulatory fines or penalties.

For products that have received 510(k) clearance, such as our Burr Hole Cover product, modifications that could significantly affect safety and effectiveness, such as changes to the intended use or technological characteristics, may require new 510(k) clearances or PMAs or require us to recall or cease marketing the modified devices until these clearances or approvals are obtained. Based on FDA published guidelines, the FDA requires device manufacturers to initially make and document a determination of whether or not a modification requires a new approval, supplemental approval or clearance; however, the FDA can review a manufacturer’s decision. Any

modification to an FDA-cleared device that could significantly affect its safety or efficacy or that would constitute a major change in its intended use would require a new 510(k) clearance, or if such modification put the device into Class III, possibly a PMA. We may not be able to obtain additional 510(k) clearances or PMAs for new products or for modifications to, or additional indications for, our products in a timely fashion, or at all. Delays in obtaining required future clearances or approvals would adversely affect our ability to introduce new or enhanced products in a timely manner, which in turn would harm our future growth.

We have made modifications to our RNS System in the past and expect to make additional modifications in the future that we believe do not or will not require additional clearances or approvals. If the FDA disagrees and requires new clearances or approvals for these modifications, we may be required to recall and to stop selling or marketing such products as modified, which could harm our operating results and require us to redesign such products. In these circumstances, we may be subject to significant enforcement actions. The FDA may also change its clearance and approval policies, adopt additional regulations or revise existing regulations, or take other actions which may impact our ability to modify our currently approved or cleared products on a timely basis. Any of these actions could harm our business, financial condition and results of operations.

Our products may be subject to recalls after receiving FDA approval or clearance, which could divert managerial and financial resources, harm our reputation and our business.

The FDA has the authority to require the recall of our products because of any failure to comply with applicable laws and regulations, or defects in design or manufacture. A government mandated or voluntary product recall by us could occur because of, for example, component failures, device malfunctions or other adverse events, such as serious injuries or deaths, or quality-related issues, such as manufacturing errors or design or labeling defects. Any future recalls of our products could divert managerial and financial resources, harm our reputation and negatively impact our business.

If we initiate a correction or removal of one of our products to reduce a risk to health posed by the device, we would be required to submit a publicly available Correction and Removal report to the FDA and, in many cases, similar reports to other regulatory agencies. This report could be classified by the FDA as a device recall which could lead to increased scrutiny by the FDA and our customers regarding the quality and safety of our products. Furthermore, the submission of these reports has been and could be used by competitors against us and could harm our reputation, which could cause customers to delay purchase decisions, cancel orders or decide not to purchase our products and could cause patients to lose trust in and decide not to implant our RNS System.

If any of our products cause or contribute to a death or a serious injury or malfunction in certain ways, we will be required to report under applicable medical device reporting regulations, or MDRs, which can result in voluntary corrective actions or agency enforcement actions and harm our reputation, business, financial condition and results of operations.

Under MDRs, medical device manufacturers are required to report to the FDA information that a device has or may have caused or contributed to a death or serious injury or has malfunctioned in a way that would likely cause or contribute to death or serious injury if the malfunction of the device or one of our similar devices were to recur. If we fail to report events required to be reported to the FDA within the required timeframes, or at all, the FDA could take enforcement action and impose sanctions against us. Any such adverse event involving our products also could result in future voluntary corrective actions, such as recalls or customer notifications, or agency action, such as inspection or enforcement action. Any corrective action, whether voluntary or involuntary, as well as defending ourselves in a lawsuit, would be costly, distract management from operating our business, could be used by competitors against us, and may harm our reputation, business, financial condition and results of operations.

From time to time, we engage outside parties to perform services related to certain of our clinical studies. If these third parties do not successfully carry out their contractual duties or meet expected deadlines, we may not be able to complete our clinical studies on our planned timelines, or at all, and may incur significant additional costs.

From time to time, we engage consultants to help design, monitor and analyze the results of certain of our clinical studies and trials. The consultants we engage may interact with clinical investigators to enroll patients in our clinical studies. We depend on these consultants and clinical investigators to conduct clinical studies and trials and

monitor and analyze data from these studies and trials under the investigational plan and protocol for the study or trial and in compliance with applicable regulations and standards, such as the FDA’s Good Clinical Practice, or GCP, guidelines and FDA human subject protection regulations. We may face delays in completing our clinical studies if these parties do not perform their obligations in a timely, compliant or competent manner. If these third parties do not successfully carry out their duties or meet expected deadlines, or if the quality, completeness or accuracy of the data they obtain is compromised due to the failure to adhere to our clinical study protocols or for other reasons, our clinical studies or trials may need to be extended, delayed or terminated or may otherwise prove to be unsuccessful, and we may have to conduct additional studies, which would significantly increase our costs.

Healthcare reform initiatives and other administrative and legislative proposals may harm our business, financial condition, results of operations and cash flows in our key markets.

There have been and continue to be proposals by the federal government, state governments, regulators and third-party payors to control or manage the increased costs of healthcare and, more generally, to reform the U.S. healthcare system. Certain of these proposals could limit the prices we are able to charge for our products or the coverage and reimbursement available for our products and could limit the acceptance and availability of our products. The adoption of proposals to control costs could harm our business, financial condition and results of operations.

There likely will continue to be legislative and regulatory proposals at the federal and state levels directed at containing or lowering the cost of healthcare. We cannot predict the initiatives that may be adopted in the future or their full impact. The continuing efforts of the government, insurance companies, managed care organizations and other payors of healthcare services to contain or reduce costs of healthcare may harm:

•our ability to set a price that we believe is fair for our products;

•our ability to generate revenue and achieve or maintain profitability; and

•the availability of capital.

Further, recently there has been heightened governmental scrutiny over the manner in which manufacturers set prices for their marketed products, which has resulted in several U.S. Congressional inquiries and proposed and enacted federal legislation designed to bring transparency to product pricing and reduce the cost of products and services under government healthcare programs. Additionally, individual states in the United States have also increasingly passed legislation and implemented regulations designed to control product pricing, including price or patient reimbursement constraints, discounts, restrictions on certain product access and marketing cost disclosure and transparency measures. Moreover, regional healthcare authorities and individual hospitals are increasingly using bidding procedures to determine what products to purchase and which suppliers will be included in their healthcare programs. Adoption of price controls and other cost-containment measures, and adoption of more restrictive policies in jurisdictions with existing controls and measures may prevent or limit our ability to generate revenue and attain profitability.

Various new healthcare reform proposals are emerging at the federal and state level. It is also possible that additional governmental action will be taken in response to the COVID-19 pandemic. Any new federal and state healthcare initiatives that may be adopted could limit the amounts that federal and state governments will pay for healthcare products and services, and could harm our business, financial condition and results of operations.

Our collection, use, storage, disclosure, transfer and other processing of sensitive and personal information could give rise to significant costs, liabilities and other risks, including as a result of investigations, inquiries, litigation, fines, legislative and regulatory action and negative press about our privacy and data protection practices, which may harm our business, financial conditions, results of operations and prospects.

In the course of our operations, we collect, use, store, disclose, transfer and otherwise process an increasing volume of sensitive, and personal information, including detailed recordings of iEEGs from patients as well as information from our employees and third parties with whom we conduct business. The collection, use, storage, disclosure, transfer and other processing of personal information is increasingly subject to a wide array of federal,

state and foreign laws, rules, regulations, and standards regarding data privacy and security, including comprehensive laws of broad application, such as the CCPA and the GDPR, that are intended to protect the privacy of personal information that is collected, used, stored, disclosed, transferred or otherwise processed in or from the governing jurisdiction. As we seek to expand our business, we are, and may increasingly become, subject to various laws, rules, regulations and standards, as well as contractual obligations, relating to data privacy and security in the jurisdictions in which we operate or in the jurisdictions where our patients may be. When conducting clinical studies, we face risks associated with collecting trial participants’ data, especially health data, in a manner consistent with applicable laws and regulations, such as GCP guidelines or FDA human subject protection regulations.

In many cases, these laws, rules, regulations and standards apply not only to third-party transactions, but also to transfers of information between or among us, any of our affiliates and other parties with whom we conduct business. These laws, rules, regulations and standards may be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible that they will be interpreted and applied in ways that may harm our business, financial condition and results of operations. The regulatory framework for data privacy and security worldwide is continuously evolving and developing and, as a result, interpretation and implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future.

We are subject to many diverse laws and regulations relating to data privacy and security. In the United States, various federal and state regulators have adopted, or are considering adopting, laws and regulations concerning personal information and data security. Additionally, our customers may be subject to additional federal and state privacy and security laws, rules, regulations and standards, including HIPAA, that they may require us to comply with through contractual obligations. This patchwork of legislation and regulation may give rise to conflicts or differing views of personal privacy rights. For example, certain state laws may be more stringent or broader in scope, or offer greater individual rights, with respect to personal information than federal, foreign or other state laws, and such laws may differ from each other, all of which may complicate compliance efforts. Additionally, new privacy rules are being enacted in the United States and globally, and existing ones are being updated and strengthened. For example, the CCPA, which became effective on January 1, 2020, regulates the processing of personal information of California residents and increases the privacy and security obligations of covered companies handling such personal information. The CCPA requires covered companies to, amongst other things, provide new and additional disclosures to California consumers and provide such consumers new data protection and privacy rights, including the ability to access their personal information and opt out of certain sales of personal information. The CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal information. This private right of action may increase the likelihood of, and risks associated with, data breach litigation. The CCPA was amended in September 2018 and November 2019, and it is possible that further amendments will be enacted, but even in its current form it remains unclear how various provisions of the CCPA will be interpreted and enforced. Moreover, a new privacy law, the California Privacy Rights Act, or the CPRA – a consumer privacy ballot initiative that amends and expands the CCPA – was recently passed. The CPRA affords California residents significantly more control over their personal information, imposes heightened compliance obligations on covered companies, and establishes a new enforcement agency dedicated to consumer privacy. The CPRA’s substantive provisions become effective January 1, 2023, and new regulations are expected to be introduced in 2022. Importantly, certain of CPRA’s provisions impact personal information collected during the ramp-up period, on or after January 1, 2022. While aspects of the CPRA and its interpretation remain to be determined in practice, they create further uncertainty and may result in additional costs and expenses in an effort to comply. Further, all 50 states have passed laws regulating the actions that a business must take if it experiences a data breach, such as prompt disclosure to affected customers. In addition to data breach notification laws, some states have enacted statutes and rules requiring businesses to reasonably protect certain types of personal information they hold or to otherwise comply with certain specified data security requirements for personal information. We are also subject to the supervisory and enforcement authority of the Federal Trade Commission with regard to the collection, use, sharing, and disclosure of certain data collected from or about individuals. State laws are changing rapidly and there is discussion in Congress of a new federal data protection and privacy law to which we would become subject if it is enacted. All of these evolving compliance and operational requirements impose significant costs that are likely to increase over time, may require us to modify our data processing practices and policies, divert resources from other initiatives and projects, and could restrict the way products and services involving data are offered, all of which may harm our business, financial condition and results of operations.

In the event we expand our operations internationally, we may become subject to additional foreign data privacy and security laws, rules, regulations, requirements, and standards, which in the European Union, for instance, have been significantly reformed. On May 25, 2018, the GDPR entered into force and became directly applicable in all European Union member states. The GDPR implements more stringent operational requirements than its predecessor legislation. For example, the GDPR requires companies to make more detailed disclosures to data subjects, requires disclosure of the legal basis on which companies can process personal data, makes it harder for companies to obtain valid consent for processing, requires the appointment of data protection officers when sensitive personal data, such as health data, is processed on a large scale, provides more robust rights for data subjects, introduces mandatory data breach notification through the European Union, imposes additional obligations on companies when contracting with service providers and requires companies to adopt appropriate privacy governance including policies, procedures, training and data audits. The GDPR permits data protection authorities to impose large penalties for violations of the GDPR, including potential fines of up to €20 million or four percent of annual global revenues, whichever is greater. The GDPR also confers a private right of action on data subjects and consumer associations to lodge complaints with supervisory authorities, seek judicial remedies, and obtain compensation for damages resulting from violations of the GDPR. If we become subject to the GDPR and do not comply with our obligations under the GDPR, we could be exposed to significant fines. Compliance with the GDPR will be a rigorous and time-intensive process that may increase our cost of doing business or require us to change our business practices, and despite those efforts, there is a risk that we may be subject to fines and penalties, litigation, and reputational harm in connection with our European activities. In addition, we may be the subject of litigation or adverse publicity, which could negatively affect our business, financial condition and results of operations.

We expect that there will continue to be new proposed laws and regulations concerning data privacy and security, and we cannot yet determine the impact such future laws, rules, regulations and standards may have on our business. New laws, amendments to or re-interpretations of existing laws, regulations, standards and other obligations may require us to incur additional costs and restrict our business operations. Because the interpretation, scope, and application of laws, regulations, standards and other obligations relating to data privacy and security are still uncertain, it is possible that these laws, regulations, standards and other obligations may be interpreted and applied in a manner that is inconsistent with our data processing practices and policies or the features of our products and services. If so, in addition to the possibility of fines, lawsuits, regulatory investigations, public censure, other claims and penalties, and significant costs for remediation and damage to our reputation, we could be materially and adversely affected if legislation or regulations are expanded to require changes in our data processing practices and policies or if governing jurisdictions interpret or implement their legislation or regulations in ways that negatively impact our business, financial condition and results of operations. We may be unable to make such changes and modifications in a commercially reasonable manner, or at all. In addition to government regulation, privacy advocates and industry groups have and may in the future propose self-regulatory standards from time to time. These and other industry standards may legally or contractually apply to us, or we may elect to comply with such standards. Any inability to adequately address data privacy or security-related concerns, even if unfounded, or to comply with applicable laws, regulations, standards and other obligations relating to data privacy and security, could result in additional cost and liability to us, harm our reputation and brand, damage our relationships with consumers and harm our business, financial condition and results of operations.

We make public statements about our use and disclosure of personal information through our privacy policies, information provided on our website and press statements. Although we endeavor to comply with our public statements and documentation, we may at times fail to do so or be alleged to have failed to do so. The publication of our privacy policies and other statements that provide promises and assurances about data privacy and security can subject us to potential government or legal action if they are found to be deceptive, unfair or misrepresentative of our actual practices. Any concerns about our data privacy and security practices, even if unfounded, could damage the reputation of our business and harm our business, financial condition and results of operations.

Complying with these numerous, complex and often changing laws, rules, regulations, and standards is expensive and difficult. Any failure or perceived failure by us or our service providers to comply with our posted privacy policies or with any applicable or potentially applicable federal or state laws, rules, regulations, standards, certifications or orders relating to data privacy, security or consumer protection, or any compromise of security that

results in the theft, unauthorized access, acquisition, use, disclosure, or misappropriation of personal information or other user data, could result in significant fines or penalties, negative publicity or proceedings or litigation by governmental agencies or consumers, including class action privacy litigation in certain jurisdictions, which would subject us to significant awards, penalties or judgments, one or all of which could require us to change our business practices or increase our costs and could materially and adversely affect our business, financial condition and results of operations. In addition, if our practices are not consistent, or viewed as not consistent, with applicable legal and regulatory requirements, including changes in laws, regulations and standards or new interpretations or applications of existing laws, regulations and standards, we may also become subject to audits, inquiries, whistleblower complaints, adverse media coverage, investigations, criminal or civil sanctions, all of which may harm our business, financial condition and results of operations.

Significant disruptions in our information technology systems, whether through breaches or failures of our systems, unauthorized access or otherwise, may result in both an adverse impact to our products, as well as the unauthorized use, disclosure, modification or misappropriation of patient personal information, the occurrence of fraudulent activity, or other data security-related incidents, all of which could have a material and adverse impact on our business, financial condition and results of operations.

We are increasingly dependent on complex information technology systems for the efficient functioning of our business, including the manufacture, distribution and maintenance of our products, as well as for accounting, data storage, compliance, purchasing and inventory management purposes. Further, our products collect, use, store, disclose, transfer, and otherwise process sensitive patient data, such as detailed recordings of iEEGs to help clinicians make more informed treatment decisions and optimize their patients’ care. These data are recorded by our RNS System and can be viewed by the physician during regular patient visits using the Physician Tablet or on demand through a secure website. We also collect, use, store, disclose, transfer, and otherwise process a growing volume of other personal information and confidential, proprietary and sensitive data, which may include procedure-based information and sensitive healthcare data, credit card, and other financial information, insurance information, and other potentially personally identifiable information. Our information technology systems or those of our service providers may be subject to computer viruses, phishing, social engineering, denial or degradation of service attacks, ransomware, malware attacks or other threats, cyberattacks, or dishonest acts by computer hackers or terrorists, failures during the process of upgrading or replacing software, databases or components thereof, power outages, damage or interruption from fires or other natural disasters, hardware failures, telecommunication failures and user errors, among other malfunctions. Technological interruptions or threats would disrupt our operations, including the ability of our clinicians to use our products as intended to treat patients, the ability of patients to safely and securely upload their data using and into our products, as well as our ability to adequately manufacture our products, timely ship and track product orders, project inventory requirements, manage our supply chain and otherwise adequately service our customers. Additionally, any of these incidents could result in the theft, unauthorized access, acquisition, use, disclosure, modification, or misappropriation of personal information of patients that use our products, trial participants, employees, third parties with whom we conduct business, as well as other confidential, proprietary, and sensitive data, and can also result in fraudulent activity, system disruptions or shutdowns.

The occurrence of any actual or attempted breach, failure of security or fraudulent activity, the reporting of such an incident, whether accurate or not, or our failure to make adequate or timely disclosures to the public or law enforcement agencies following any such event, whether due to delayed discovery or a failure to follow existing protocols, could result in claims made against us or our service providers, which could result in state and/or federal litigation and related financial liabilities, as well as criminal penalties or civil liabilities, regulatory actions from state and/or federal governmental authorities, and significant fines, orders, sanctions, litigation and claims against us by consumers or third parties and related indemnification obligations. Actual or perceived security breaches or failures could also cause financial losses, increased costs, interruptions in the operations of our businesses, misappropriation of assets, significant damage to our brand and reputation with customers, patients, employees, and third parties with whom we do business, and result in adverse publicity, loss of consumer confidence, distraction to our management, and reduced sales and profits, any or all of which could harm our business, financial condition and results of operations.

Our systems are also subject to compromise from internal threats, such as theft, misuse, unauthorized access or other improper actions by employees, service providers and other third parties with otherwise legitimate access to

our systems and website. Data security-related incidents and fraudulent activity are increasing in frequency and evolving in nature. We rely on a framework of security processes, procedures, tools, and controls designed to protect our information and assets but, given the unpredictability of the timing, nature and scope of data security-related incidents and fraudulent activity, there can be no assurance that any security procedures and controls that we or our service providers have implemented will be sufficient to prevent data security-related incidents or other fraudulent activity from occurring. Furthermore, because the methods of attack and deception change frequently, are increasingly complex and sophisticated, and can originate from a wide variety of sources, including third parties such as service providers and even nation-state actors, despite our reasonable efforts to ensure the integrity of our systems and website, it is possible that we may not be able to anticipate, detect, appropriately react and respond to, or implement effective preventative measures against, all security breaches and failures and fraudulent activity. In the event we experience significant disruptions, we may be unable to repair our systems in an efficient and timely manner.

We also face risks associated with security breaches affecting third parties with whom we are affiliated or otherwise conduct business. Due to applicable laws and regulations or contractual obligations, we may be held responsible for any breach, failure or fraudulent activity attributed to our service providers as they relate to the information we share with them. In addition, while we take precautions in selecting service providers, because we do not control our service providers and our ability to monitor their data security is limited, we cannot ensure the security measures they take will be sufficient to protect our information. Any of the foregoing could harm our business, financial condition and results of operations.

As data security-related threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities, or to protect against, respond to and recover from any potential, attempted, or existing security breaches. In addition, our remediation efforts may not be successful. The inability to implement, maintain and upgrade adequate safeguards could have a material and adverse impact on our business, financial condition and results of operations. Moreover, there could be public announcements regarding any data security-related incidents and any steps we take to respond to or remediate such incidents, and if securities analysts or investors perceive these announcements to be negative, it could, among other things, have a substantial adverse effect on the price of our common stock. Any of the foregoing could harm our business, financial condition and results of operations.

We currently maintain a cybersecurity insurance policy and business interruption coverage to mitigate certain potential losses but this insurance is limited in amount, and we cannot be certain that such potential losses will not exceed our policy limits, or will cover all potential claims to which we are exposed and may not be adequate to indemnify us for all liability that may be imposed. Therefore, failure to maintain or protect our information systems and data integrity effectively could harm our business, financial condition, and results of operations.

We face potential liability related to the privacy of health information we obtain.

We may maintain, use, and share sensitive health information that we receive directly from patients that use our products, throughout the clinical study process, in the course of our research collaborations, and from healthcare providers in the course of using our products and systems. Most healthcare providers, including hospitals from which we obtain patient health information, are subject to privacy and security regulations promulgated under HIPAA, as amended by the Health Information Technology for Economic and Clinical Health, or HITECH. We are not currently classified as a covered entity or business associate under HIPAA and thus are not subject to its requirements or penalties. However, any person may be prosecuted under HIPAA’s criminal provisions either directly or under aiding-and-abetting or conspiracy principles. Consequently, depending on the facts and circumstances, we could face substantial criminal penalties if we knowingly receive, maintain, use, or transfer individually identifiable health information from a HIPAA-covered healthcare provider or research institution that has not satisfied HIPAA’s requirements for disclosure of individually identifiable health information. Furthermore, certain health privacy laws, data breach notification laws, consumer protection laws and genetic testing laws may apply directly to our operations or those of our collaborators and may impose restrictions on our collection, use and dissemination of individuals’ health information As such, we may be subject to state laws requiring notification of affected individuals and state regulators in the event of a breach of personal information, including certain health information, which is a broader class of information than the health information protected by HIPAA. To the extent

we engage in clinical studies outside the United States, we may implicate foreign data privacy and security laws and regulations, including the GDPR and legislation of the European Union member states implementing it.

If we do business in international markets in the future, any failure by us or our third-party contractors to comply with the strict rules on the transfer of personal data outside of the European Union and the United Kingdom into the United States in accordance with such laws and regulations may result in the imposition of criminal and administrative sanctions on such contractors, which could adversely affect our business.

Moreover, patients about whom we or our contractors or collaborators obtain or share health information, as well as the providers who share this information with us or whom we share this data with, may have statutory or contractual rights that limit our ability to use and disclose the information. We may be required to expend significant capital and other resources to ensure ongoing compliance with applicable privacy and data security laws. Claims that we have violated individuals’ privacy rights or breached our contractual obligations, even if we are not found liable, could be expensive and time consuming to defend and could result in adverse publicity that could negatively affect our business, financial condition and results of operations. If we or third-party contractors or consultants fail to comply with applicable federal, state or local regulatory requirements, we could be subject to a range of regulatory actions that could affect our or our contractors’ ability to develop and commercialize our products and could harm or prevent sales of our products, or could substantially increase the costs and expenses of developing, commercializing and marketing our products. Any threatened or actual government enforcement action could also generate adverse publicity and require that we devote substantial resources that could otherwise be used in other aspects of our business.

Additionally, data collection, privacy and security have become the subject of increasing public concern and changing preferences towards data collection, privacy and security could adversely affect patient willingness to consent to our collection of their health information. Patients may be reluctant or unwilling to consent to the collecting of their health information, and patients that have opted-in to the collection of their health information may revoke their consent at any time, including as a result of these concerns or as a result of changes to our data policies that we have implemented or may implement in the future. In particular, the success of our business depends in part on our ability to lawfully obtain health information from our patients. If patients choose not to consent to the collection of their health information as a result of these concerns, or our consent practices are found to be unlawful, this could negatively impact the growth potential for our business.

Compliance with environmental laws and regulations could be expensive, and the failure to comply with these laws and regulations could subject us to significant liability.

Our research, development and manufacturing operations involve the use of hazardous substances, and we are subject to a variety of federal, state and local environmental laws and regulations relating to the storage, use, handling, generation, manufacture, treatment, discharge and disposal of hazardous substances. Our products may also contain hazardous substances, and they are subject laws and regulations relating to labeling requirements and to their sale, collection, recycling, treatment, storage and disposal. Compliance with these laws and regulations may be expensive and noncompliance could result in substantial fines and penalties. Environmental laws and regulations also impose liability for the remediation of releases of hazardous substances into the environment and for personal injuries resulting from exposure to hazardous substances, and they can give rise to substantial remediation costs and to third-party claims, including for property damage and personal injury. Liability under environmental laws and regulations can be joint and several and without regard to fault or negligence, and they tend to become more stringent over time, imposing greater compliance costs and increased risks and penalties associated with violations. We cannot be certain that violations of these laws and regulations, or releases of or exposure to hazardous substances, will not occur in the future or have not occurred in the past, including as a result of human error, accidents, equipment failure or other causes. The costs of complying with environmental laws and regulations, and liabilities that may be imposed for violating them, or for remediation obligations or responding to third-party claims, could negatively affect our business, financial condition and results of operations.

Future clinical studies may be delayed, suspended or terminated for many reasons, which will increase our expenses and delay the time it takes to support label expansion for additional indications.

We plan to continue to develop and execute clinical studies to support label retention for our products and label expansion for our products into additional epilepsy populations. We may also develop and execute clinical studies for new products or for label expansion for our current products into patient populations suffering from other neurologic conditions. We do not know whether future clinical studies will begin on time, need to be redesigned, enroll an adequate number of patients or be completed on schedule, if at all. The commencement and completion of clinical studies to support label retention and expansion for additional indications or for new products may be delayed, suspended or terminated as a result of many factors, including:

•the delay or refusal of regulators or Institutional Review Boards, or IRBs, to authorize us to commence a clinical study at a prospective trial site;

•changes in regulatory requirements, policies and guidelines;

•delays or failure to reach agreement on acceptable terms with prospective clinical research organizations, or CROs, and clinical study sites, the terms of which can be subject to extensive negotiation and may vary significantly among different CROs and trial sites;

•delays in patient enrollment and variability in the number and types of patients available for clinical studies, including due to COVID-19, and delays in or the inability to monitor enrolled patients, including due to COVID-19;

•the inability to enroll a sufficient number of patients in studies to observe statistically significant treatment effects in the trial;

•having clinical sites deviate from the trial protocol or dropping out of a study;

•safety or tolerability concerns that could cause us to suspend or terminate a trial if we find that the participants are being exposed to unacceptable health risks;

•regulators or IRBs requiring that we or our investigators suspend or terminate clinical research for various reasons, including noncompliance with regulatory requirements or safety concerns, among others;

•lower than anticipated retention rates of patients and volunteers in clinical studies;

•our CROs or clinical studies sites failing to comply with regulatory requirements or meet their contractual obligations to us in a timely manner, or at all, deviating from the protocol or dropping out of a trial;

•delays relating to adding new clinical study sites; and

•exceeding budgeted costs due to difficulty in accurately predicting costs associated with clinical studies.

We could also encounter delays if a clinical study is suspended or terminated by us, by the IRBs or the Ethics Committees of institutions at which such studies are being conducted, by the Data Safety Monitoring Board for such trial or by the FDA or other regulatory authorities. Such authorities may suspend or terminate a clinical study due to a number of factors, including failure to conduct the clinical study in accordance with regulatory requirements, including GCP regulations, or our clinical protocols, inspection of the clinical study operations or trial site by the FDA resulting in the imposition of a clinical hold, unforeseen safety issues or adverse side effects, failure to demonstrate safety and effectiveness, changes in governmental regulations or administrative actions or lack of adequate funding to continue the clinical study.

In addition, we may encounter delays if the FDA concludes that our financial relationships with investigators result in a perceived or actual conflict of interest that may have affected the interpretation of a study, the integrity of the data generated at the applicable clinical study site or the utility of the clinical study itself. Principal investigators for our clinical studies may serve as scientific advisors or consultants to us from time to time and receive cash

compensation and/or stock options in connection with such services. If these relationships and any related compensation to or ownership interest by the clinical investigator carrying out the study result in perceived or actual conflicts of interest, or if the FDA concludes that the financial relationship may have affected interpretation of the study, the integrity of the data generated at the applicable clinical study site may be questioned and the utility of the clinical study itself may be jeopardized, which could result in the delay or rejection by the FDA. Any such delay or rejection could prevent us from supporting label retention and expansion for our RNS System.

Risks related to our intellectual property

If we are unable to obtain, maintain, protect, enforce and defend patent or other intellectual property protection for our products, or if the scope of the patent and other intellectual property protection obtained is not sufficiently broad, or as a result of our existing or any future out-licenses of our intellectual property, our competitors could develop and commercialize products similar to or competitive with our products, our ability to continue to commercialize our RNS System, or our other products, may be harmed.

As with other medical device companies, our success depends in large part on our ability to obtain, maintain, protect, enforce and defend a proprietary position for our products, which will depend upon our success in obtaining and maintaining effective patent and other intellectual property protection in the United States and other countries into which we may expand our business in the future that covers our RNS System and any other products, their manufacturing processes and their intended methods of use. Furthermore, our success will also depend on our ability to enforce and defend those patents, as well as our other intellectual property. In some cases, we may not be able to obtain patents covering our products which are sufficient to prevent third parties, such as our competitors, from utilizing our products, or our competitors may have rights under current or future out-licenses of our intellectual property, which could result in our competitors developing and commercializing products similar to or competitive with our products. Any failure to obtain, maintain, protect, enforce or defend patent and other intellectual property protection with respect to our RNS System or other aspects of our business could harm our business, competitive position, financial condition and results of operations.

Changes in either the patent laws or their interpretation in the United States and other countries may diminish our ability to protect our inventions, obtain, maintain, protect, enforce, and defend our intellectual property rights and, more generally, could affect the value of our intellectual property or narrow the scope of our patents. Additionally, we cannot predict whether the patent applications we are currently pursuing will issue as patents in any particular jurisdiction or whether the claims of any issued patents will provide sufficient protection from competitors or other third parties.

The patent prosecution process is expensive, time-consuming and complex, and we may not be able to file, prosecute, maintain, enforce or license all necessary or desirable patent applications at a reasonable cost or in a timely manner. It is also possible that we will fail to identify patentable aspects of our research and development output in time to obtain patent protection in one, several, or all geographies. Although we enter into non-disclosure and confidentiality agreements with parties who have access to confidential or patentable aspects of our research and development output, such as our employees, corporate collaborators, outside scientific collaborators, suppliers, consultants, advisors and other third parties, any of these parties may breach the agreements and disclose such output before a patent application is filed, thereby jeopardizing our ability to seek patent protection. In addition, our ability to obtain and maintain valid and enforceable patents depends on whether the differences between our inventions and the prior art allow our inventions to be patentable over the prior art. Furthermore, the publication of discoveries in scientific literature often lags behind the actual discoveries, and patent applications in the United States and other jurisdictions are typically not published until 18 months after filing, or in some cases not at all. As such, we cannot be certain that we were the first to make the inventions claimed in any of our patents or pending patent applications, or that we were the first to file for patent protection of such inventions. Moreover, in some circumstances, we may not have the right to control the preparation, filing and prosecution of patent applications, or to maintain the patents, covering technology that we license from or license to third parties, including by way of our cross-license with Medtronic, and we are therefore reliant on our licensors or licensees. Therefore, these and any of our patents and patent applications may not be prosecuted and enforced in a manner consistent with the best interests of our business. Furthermore, our license agreements may be terminated by the licensor. Defects of form in the preparation or filing of our patents or patent applications may exist, or may arise in the future, for example, with

respect to proper priority claims, inventorship and the like, although we are unaware of any such defects that we believe are of importance. If we or any of our current or future licensors or licensees fail to obtain, maintain, protect, enforce or defend such patents and other intellectual property rights, such rights may be reduced or eliminated. If any of our current or future licensors or licensees are not fully cooperative or disagree with us as to the prosecution, maintenance or enforcement of any patent rights, such patent rights could be compromised. If there are material defects in the form, preparation or prosecution of our patents or patent applications, such patents or applications may be invalid and unenforceable. Any of these outcomes could impair our ability to prevent competition from third parties, which may harm our business.

The strength of patent rights generally, and particularly the patent position of medical device companies, involves complex legal and scientific questions, can be uncertain, and has been the subject of much litigation in recent years. This uncertainty includes changes to the patent laws through either legislative action to change statutory patent law or court action that may reinterpret existing law or rules in ways affecting the scope or validity of issued patents. Our current or future patent applications may fail to result in issued patents in the United States or foreign countries with claims that cover our products, including our RNS System. Even if patents do successfully issue from our patent applications, third parties may challenge the validity, enforceability or scope of such patents, which may result in such patents being narrowed, invalidated or held unenforceable. Any successful challenge to our patents could deprive us of exclusive rights necessary for the successful commercialization of our products, including our RNS System. Furthermore, even if they are unchallenged, our patents may not adequately protect our RNS System or any other products we develop, provide exclusivity for these products or prevent others from designing around our claims. If the scope of any patent protection we obtain is not sufficiently broad, or if we lose any of our patent protection, our ability to prevent our competitors from commercializing similar or identical products could be adversely affected. If the breadth or strength of protection provided by the patents we hold or pursue with respect to our products is challenged, it could dissuade companies from collaborating with us to develop, or threaten our ability to commercialize, our products.

Patents have a limited lifespan. In the United States, the natural expiration of a utility patent is generally 20 years after its effective filing date and the natural expiration of a design patent is generally 14 years after its issue date, unless the filing date occurred on or after May 13, 2015, in which case the natural expiration of a design patent is generally 15 years after its issue date. However, the actual protection afforded by a patent varies from country to country, and depends upon many factors, including the type of patent, the scope of its coverage, the availability of regulatory-related extensions, the availability of legal remedies in a particular country and the validity and enforceability of the patent. Various extensions may be available; however, the life of a patent, and the protection it affords, is limited. Without patent protection for our products, we may be open to competition. Further, if we encounter delays in our development efforts, the period of time during which we could market our products under patent protection would be reduced and, given the amount of time required for the development, testing and regulatory review of planned or future products, patents protecting such products might expire before or shortly after such products are commercialized. Our issued patents are expected to continue to expire through August 2038 without taking into account all possible patent term adjustments, extensions, or abandonments, and assuming payment of all appropriate maintenance, renewal, annuity, and other governmental fees. As our patents expire, the scope of our patent protection will be reduced, which may reduce or eliminate any competitive advantage afforded by our patent portfolio. As a result, our patent portfolio may not provide us with sufficient rights to exclude others from commercializing products similar or identical to ours.

Moreover, the coverage claimed in a patent application can be significantly reduced before the patent is issued, and its scope can be reinterpreted after issuance. Even if patent applications we license or own, currently or in the future, issue as patents, they may not issue in a form that will provide us with any meaningful protection, prevent competitors or other third parties from competing with us, or otherwise provide us with any competitive advantage. Any patents that we own may be challenged, narrowed, circumvented or invalidated by third parties. Consequently, we do not know whether our RNS System or our other products will be protectable or remain protected by valid and enforceable patents. Our competitors or other third parties may be able to circumvent our patents by developing similar or alternative products in a non-infringing manner, which could harm our business, financial condition and results of operations.

Some of our patents and patent applications may be co-owned or cross-licensed with third parties. If we give up, do not pursue, or are unable to obtain an exclusive license to any such third-party co-owners’ or licensee’s interest in such patents or patent applications, such co-owners may be able to license their rights to other third parties, including our competitors, and our competitors could market competing products and technology. In addition, we may need the cooperation of any such co-owners of our patents in order to enforce such patents against third parties, and such cooperation may not be provided to us. Any of the foregoing could harm our business, financial condition and results of operations.

We may not be successful in obtaining necessary rights to any products or processes we may develop through acquisitions and in-licenses.

We may find it necessary or prudent to acquire or obtain licenses to intellectual property or proprietary rights held by third parties that we may identify as necessary or important to our business operations. However, we may be unable to acquire or secure such licenses to any or all intellectual property or proprietary rights from third parties that we identify as necessary for our RNS System or any future products we may develop. The acquisition or licensing of third-party intellectual property or proprietary rights is a competitive area, and our competitors may pursue strategies to acquire or license third party intellectual property or proprietary rights that we may consider attractive or necessary. Our competitors may have a competitive advantage over us due to their size, capital resources and greater development and commercialization capabilities. In addition, companies that perceive us to be a competitor may be unwilling to assign or license rights to us. We also may be unable to acquire or license third party intellectual property or proprietary rights on terms that would allow us to make an appropriate return on our investment or at all. If we are unable to successfully acquire or license required third-party intellectual property or proprietary rights or maintain the existing licenses to intellectual property rights we have, we may have to spend time and resources to develop intellectual property ourselves or abandon development of the relevant product, both of which could harm our business, financial condition and results of operations.

Patents covering our products, including our RNS System could be found invalid or unenforceable if challenged in court or before administrative bodies in the United States or abroad, which could harm our business, financial condition and results of operations.

The issuance of a patent is not conclusive as to its inventorship, scope, validity or enforceability, and our patents may be challenged in the courts or patent offices in the United States and abroad. We may be subject to a third-party preissuance submission of prior art to the U.S. Patent and Trademark Office, or the USPTO, or become involved in opposition, derivation, revocation, reexamination, post-grant and inter partes review, or IPR, or interference proceedings or other similar proceedings challenging our patent rights. An adverse determination in any such submission, proceeding or litigation could reduce the scope of, or invalidate or render unenforceable, such patent rights, allow third parties to commercialize our products and compete directly with us, without payment to us, or result in our inability to manufacture or commercialize products without infringing third-party patent rights. Moreover, we may have to participate in interference proceedings declared by the USPTO to determine priority of invention or in post-grant challenge proceedings, such as oppositions in a foreign patent office, that challenge our priority of invention or other features of patentability with respect to our patents and patent applications. Such challenges may result in loss of patent rights, in loss of exclusivity, or in patent claims being narrowed, invalidated or held unenforceable, which could limit our ability to stop others from using or commercializing similar or identical products or limit the duration of the patent protection of our products. Such proceedings also may result in substantial cost and require significant time from our management, even if the eventual outcome is favorable to us.

In addition, if we initiate legal proceedings against a third party to enforce a patent covering our products, the defendant could counterclaim that such patent is invalid or unenforceable. In patent litigation in the United States, defendant counterclaims alleging invalidity or unenforceability are commonplace. Grounds for a validity challenge could be an alleged failure to meet any of several statutory requirements, including lack of novelty, obviousness or non-enablement. Grounds for an unenforceability assertion could be an allegation that someone connected with prosecution of the patent withheld relevant information from the USPTO or made a misleading statement during prosecution. Defenses of these types of claims, regardless of their merit, would involve substantial litigation expense, would result in reputational harm, and would be a substantial diversion of employee resources from our business. Third parties may also raise claims challenging the validity or enforceability of our patents before

administrative bodies in the United States or abroad, even outside the context of litigation, including through re-examination, post-grant review, IPR, interference proceedings, derivation proceedings and equivalent proceedings in foreign jurisdictions (such as opposition proceedings). Such proceedings could result in the revocation of, cancellation of or amendment to our patents in such a way that they no longer cover our products. The outcome for any particular patent following legal assertions of invalidity and unenforceability is unpredictable. With respect to the validity question, for example, we cannot be certain that there is no invalidating prior art, of which we and the patent examiner were unaware during prosecution. If a defendant or other third party were to prevail on a legal assertion of invalidity or unenforceability, we would lose at least part, and perhaps all, of the patent protection for the patents raised in such a claim. Such a loss of patent protection would harm our business, financial condition and results of operations.

The medical device industry is characterized by patent litigation and in the future we could become subject to patent or other intellectual property litigation that could be costly, result in the diversion of management’s time and efforts, require us to pay damages or prevent us from marketing our existing or future products.

Patent litigation is prevalent in the medical device and diagnostic sectors. Our commercial success depends in part upon our ability and that of our suppliers to manufacture, market, sell, and use our proprietary products without infringing, misappropriating or otherwise violating the intellectual property or proprietary rights of third parties. We may in the future become party to, or be threatened with, adversarial proceedings or litigation regarding intellectual property rights with respect to our products. Additional third parties may assert infringement claims against us based on existing or future intellectual property rights, regardless of merit. If we are found to infringe a third party’s intellectual property rights, we could be required to incur costs to obtain a license from such third party to continue developing and marketing our products. We may also elect to enter into such a license in order to settle pending or threatened litigation. However, we may not be able to obtain any required license on commercially reasonable terms, or at all. Even if we were able to obtain a license, it could be non-exclusive, thereby giving our competitors access to the same technologies licensed to us, and could require us to pay significant royalties and other fees. We could be forced, including by court order, to cease commercializing the infringing product. In addition, we could be found liable for monetary damages, which may be significant. If we are found to have willfully infringed a third-party patent, we could be required to pay treble damages and attorneys’ fees. A finding of infringement could prevent us from commercializing our planned products in commercially important territories, or force us to cease some of our business operations, which could harm our business and cause brand and reputational harm. We could also be forced to redesign those products that contain the allegedly infringing intellectual property, which could be costly, disruptive and infeasible. Many of our employees were previously employed at, and many of our current advisors and consultants are employed by, universities or other biotechnology, medical device, healthcare, or pharmaceutical companies, including our competitors or potential competitors. Although we try to ensure that our employees, advisors and consultants do not use the proprietary information or know-how of others in their work for us, we may be subject to claims that we, or these employees, have used or disclosed intellectual property, including trade secrets or other proprietary information, of any such employee’s former employer. Furthermore, although these agreements may be difficult to enforce, we may in the future be subject to claims that these individuals are violating non-compete agreements with their former employers. These and other claims that we have misappropriated the confidential information or trade secrets of third parties can have a similar negative impact on our business to the infringement claims discussed above.

Even if we are successful in defending against intellectual property claims, litigation or other legal proceedings relating to such claims may cause us to incur significant expenses, cause reputational harm, and could distract our technical and management personnel from their normal responsibilities. If we fail in defending any such claims, in addition to paying monetary damages or other settlements, we may lose valuable intellectual property rights or personnel, which could harm our business, financial condition and results of operations. In addition, there could be public announcements of the results of hearings, motions or other interim proceedings or developments and if securities analysts or investors perceive these results to be negative, it could have a substantial negative impact on the price of our common shares. Such litigation or proceedings could substantially increase our operating losses and reduce our resources available for development activities. We may not have sufficient financial or other resources to adequately conduct such litigation or proceedings. Some of our competitors may be able to sustain the costs of such litigation or proceedings more effectively than we can because of their substantially greater financial resources.

Uncertainties resulting from the initiation and continuation of litigation or other intellectual property related proceedings could harm our business, financial condition and results of operations.

Obtaining and maintaining our patent protection depends on compliance with various procedural, document submission, fee payment and other requirements imposed by government patent agencies, and our patent protection could be reduced or eliminated for non-compliance with these requirements.

Obtaining and maintaining our patent protection depends on compliance with various procedural measures, document submissions, fee payments and other requirements imposed by government patent agencies, and our patent protection could be reduced or eliminated for non-compliance with these requirements.

Periodic maintenance fees, renewal fees, annuity fees and various other government fees on patents and patent applications will be due to be paid to the USPTO and various government patent agencies outside of the United States over the lifetime of our patents and applications. The USPTO and various non-U.S. government agencies require compliance with several procedural, documentary, fee payment and other similar provisions during the patent application process. In some cases, an inadvertent lapse can be cured by payment of a late fee or by other means in accordance with the applicable rules. There are situations, however, in which non-compliance can result in the abandonment or lapse of the patent or patent application, resulting in a partial or complete loss of patent rights in the relevant jurisdiction. In such an event, potential competitors might be able to enter the market with similar or identical products or technology, which could harm our business, financial condition and results of operations.

Certain of our patents are, and our future owned and in-licensed patents may be, discovered through government funded programs and thus may subject to federal regulations such as “march-in” rights, certain reporting requirements and a preference for U.S.-based companies. Compliance with such regulations may limit our exclusive rights, and limit our ability to contract with non-U.S. manufacturers.

Certain of our patents are, and our future owned and in-licensed patents may be, discovered through government funded programs. As a result, the U.S. government may have certain rights to intellectual property embodied in our current or future products pursuant to the Bayh-Dole Act of 1980, or the Bayh-Dole Act, and implementing regulations, which are amended from time to time. These U.S. government rights in certain inventions developed under a government-funded program include a non-exclusive, non-transferable, irrevocable worldwide license to use inventions for any governmental purpose. In addition, the U.S. government has the right to require us or our licensors to grant exclusive, partially exclusive, or non-exclusive licenses to any of these inventions to a third party if it determines that: (i) adequate steps have not been taken to commercialize the invention; (ii) government action is necessary to meet public health or safety needs; or (iii) government action is necessary to meet requirements for public use under federal regulations, which are also referred to as “march-in rights.” The U.S. government also has the right to take title to these inventions if we, or the applicable licensor, fail to disclose the invention to the government and fail to file an application to register the intellectual property within specified time limits. These time limits have recently been changed by regulation, and may change in the future. Intellectual property generated under or in collaboration with a government funded program is also subject to certain reporting requirements, compliance with which may require us or the applicable licensor to expend substantial resources. In addition, the U.S. government requires that any products embodying the subject invention or produced through the use of the subject invention be manufactured substantially in the United States. The manufacturing preference requirement can be waived if the owner of the intellectual property can show that reasonable but unsuccessful efforts have been made to grant licenses on similar terms to potential licensees that would be likely to manufacture substantially in the United States or that under the circumstances domestic manufacture is not commercially feasible. This preference for U.S. manufacturers may limit our future ability to contract with non-U.S. product manufacturers for products covered by such intellectual property. If the U.S. government decides to exercise these rights, it is not required to engage us as its contractor in connection with doing so. These rights may permit the U.S. government to disclose our confidential information to third parties. To the extent any of our current or future intellectual property is generated through the use of U.S. government funding, the provisions of the Bayh-Dole Act may similarly apply. Any exercise by the government of any of the foregoing rights could harm our business, financial condition, results of operations and prospects.

If we fail to comply with our obligations in any current or future agreements under which we license intellectual property rights from third parties or otherwise experience disruptions to our business relationships with our licensors, we could lose license rights that are important to our business.

We are and may become party to license or collaboration agreements with third parties to advance our research or allow commercialization of our products. Such agreements may impose numerous obligations, such as development, diligence, payment, commercialization, funding, milestone, royalty, sublicensing, insurance, patent prosecution, enforcement and other obligations on us and may require us to meet development timelines, or to exercise certain efforts to develop and commercialize licensed products, in order to maintain the licenses. In spite of our best efforts, our licensors might conclude that we have materially breached such license agreements and might therefore terminate the license agreements, thereby removing or limiting our ability to develop and commercialize products and technologies covered by these license agreements.

NPCE US Equity

NPCE · 10-K · period ended 2021-12-31

Item 1A. Risk Factors.

NPCE US Equity☆

NPCE · 10-K · period ended 2021-12-31

Item 1A. Risk Factors.

NPCE US Equity