NVUS 2018 Annual Report

Other Healthcare Laws and Compliance Requirements If we obtain regulatory approval for any of our product candidates, we may be subject to various federal and state laws targeting fraud and abuse in the healthcare industry. These laws may impact, among other things, our proposed sales, marketing and education programs. In addition, we may be subject to patient privacy regulation by both the federal government and the states in which we conduct our business. The laws that may affect our ability to operate include: x the federal Anti-Kickback Statute, which prohibits, among other things, persons from knowingly and willfully soliciting, receiving, offering or paying remuneration, directly or indirectly, to induce, or in return for, the purchase or recommendation of an item or service reimbursable under a federal healthcare program, such as the Medicare and Medicaid programs; x federal civil and criminal false claims laws and civil monetary penalty laws, which prohibit, among other things, individuals or entities from knowingly presenting, or causing to be presented, claims for payment from Medicare, Medicaid, or other third-party payors that are false or fraudulent; x the federal Health Insurance Portability and Accountability Act of 1996, (HIPAA), which created new federal criminal statutes that prohibit executing a scheme to defraud any healthcare benefit program and making false statements relating to healthcare matters; x the federal transparency laws, including the provision of the Affordable Care Act referred to as the federal Physician Payment Sunshine Act, that requires drug and biologics manufacturers to disclose payments and other transfers of value provided to physicians and teaching hospitals and ownership interests of physicians and their immediate family members; x HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act (HITECH) and its implementing regulations, which imposes certain requirements relating to the privacy, security and transmission of individually identifiable health information; and x state law equivalents of each of the above federal laws, such as anti-kickback and false claims laws that may apply to items or services reimbursed by any third-party payor, including commercial insurers, and state laws governing the privacy and security of health information in certain circumstances, many of which differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts. The Affordable Care Act broadened the reach of the fraud and abuse laws by, among other things, amending the intent requirement of the federal Anti-Kickback Statute and the applicable criminal healthcare fraud statutes contained within 42 U.S.C. § 1320a-7b. Pursuant to the statutory amendment, a person or entity no longer needs to have actual knowledge of this statute or specific intent to violate it in order to have committed a violation. In addition, the Affordable Care Act provides that the government may assert that a claim including items or services resulting from a violation of the federal Anti- Kickback Statute constitutes a false or fraudulent claim for purposes of the civil False Claims Act or the civil monetary penalties statute. Many states have adopted laws similar to the federal Anti-Kickback Statute, some of which apply to the referral of patients for healthcare items or services reimbursed by any source, not only the Medicare and Medicaid programs. We are also subject to the U.S. Foreign Corrupt Practices Act (FCPA) which prohibits improper payments or offers of payments to foreign governments and their officials for the purpose of obtaining or retaining business. Safeguards we implement to discourage improper payments or offers of payments by our employees, consultants, and others may be ineffective, and violations of the FCPA and similar laws may result in severe criminal or civil sanctions, or other liabilities or proceedings against us, any of which would likely harm our reputation, business, financial condition and result of operations. If our operations are found to be in violation of any of the laws described above or any other governmental regulations that apply to us, we may be subject to penalties, including civil and criminal penalties, exclusion from participation in government healthcare programs, such as Medicare and Medicaid and imprisonment, damages, fines and the curtailment or restructuring of our operations, any of which could adversely affect our ability to operate our business and our results of operations. Employees As of March 22, 2019, Novus had ten employees, all of which were full-time employees. None of our employees are represented by labor unions or covered by collective bargaining agreements. We consider our relationship with our employees to be good.

19