Want to see ATOS full AI Analyst Report?
Atossa Therapeutics (ATOS) Risk Analysis
Risk Overview Q2, 2026
Source: the company's latest filing for the period ended Jun 30, 2026, filed Aug 07, 2026
Risk Change Over Time
- Regulation - Risk 1We have received Rare Pediatric Disease designations from the FDA for (Z)-endoxifen for both Duchenne Muscular Dystrophy and McCune-Albright Syndrome. However, Rare Pediatric Disease designation for any of our product candidates does not guarantee that the NDA for the product will qualify for a priority review voucher upon approval, and it does not lead to a faster development or regulatory review process, or increase the likelihood that our product candidates will receive marketing approval.
Under the Rare Pediatric Disease Priority Review Voucher program, upon the approval of a qualifying NDA for the treatment of a rare pediatric disease, the sponsor of such an application would be eligible for a rare pediatric disease PRV that can be used to obtain priority review for a subsequent BLA or NDA. Currently, a rare pediatric disease PRV may be issued only if the FDA approves the BLA or NDA on or before September 30, 2029. Designation of a drug for a rare pediatric disease does not guarantee that an NDA will meet the eligibility criteria for a rare pediatric disease PRV at the time the application is approved. A rare pediatric disease PRV may only be granted if a designated drug is approved or licensed by September 30, 2029, unless Congress further extends the program. If Congress does not extend this program, we may not meet the deadline for PRVs to be granted for our current programs given the expected timeline of development. Additionally, a rare pediatric disease designation does not lead to faster development or regulatory review of the product or increase the likelihood that it will receive marketing approval.
- Environmental / Social - Risk 2Our inadvertent or unintentional failure to comply with the complex government regulations concerning patients' privacy, data subjects, and of medical records could subject us to fines and adversely affect our reputation.
Federal privacy regulations, among other things, restrict our ability to use or disclose protected health information, including patient-identifiable laboratory data, without written patient authorization, for purposes other than payment, treatment, or healthcare operations as defined under HIPAA, except as otherwise permitted for various public policy purposes and other authorized uses under privacy regulations. Applicable privacy regulations provide for significant fines and other penalties for the wrongful use or disclosure of protected health information, including potential civil and criminal fines and penalties. We seek to implement policies and practices designed to support compliance with applicable privacy regulations. However, the documentation and process requirements of applicable privacy regulations are complex, evolving, and subject to interpretation. Failure to comply with applicable privacy regulations could subject us to sanctions or penalties, loss of business, and negative publicity. State privacy laws may also restrict our ability to use or process personal information (including information not covered by HIPAA), and require us to adhere to additional obligations and honor additional data rights. The HIPAA Privacy Rule establishes a "floor" of minimum protection for patients' medical information and does not supersede state privacy laws that are more stringent. State health information privacy laws, such as California's Confidentiality of Medical Information Act and Washington's My Health My Data Act, govern the privacy and security of health-related information and may apply even when HIPAA does not and impose additional or different requirements. Therefore, we may be required to comply with both HIPAA and state privacy laws, which vary from state to state, impose a range of obligations, and in some cases are more restrictive than HIPAA. The failure to comply with applicable privacy laws could subject us to regulatory actions, including significant fines or penalties, private actions by patients, adverse publicity and loss of business. In addition, federal and state laws and judicial decisions provide individuals with various rights for violating the privacy of their medical information by healthcare providers such as us. In addition to HIPAA, failing to take appropriate steps to protect consumers' personal information may result in the Federal Trade Commission (FTC) bringing a claim that a company has engaged in unfair or deceptive acts or practices in or affecting commerce, in violation of Section 5(a) of the Federal Trade Commission Act (FTC Act). The FTC expects companies to have reasonable and appropriate data security measures based on factors such as data sensitivity and volume, the complexity of the business, and available resources. Health information is considered sensitive data that merits stronger safeguards. There are also state consumer protection laws, which may be modeled on the FTC Act, that can also provide state-law causes of action for allegedly unfair or deceptive acts or practices, among other things. While we may not currently be subject to any comprehensive state privacy laws (e.g., the CCPA) due to applicability or exemption considerations, the legal landscape is rapidly changing. If we were to become subject to these laws, we would be required to comply with the demanding obligations they impose with respect to personal information. Furthermore, if our service providers, partners or collaborators are subject to such laws, we may have contractual obligations relating to these requirements. The collection and processing of personal data, including personal health data related to individuals in the EEA regardless of citizenship or residence, is governed by the provisions of the General Data Protection Regulation 2016/679 (GDPR) which provides for significant monetary fines for noncompliance. The GDPR regulates (i) the processing of personal data carried out in the context of the activities of a company established in the EEA; and (ii) the processing of personal data carried out by a company not established in the EEA where such processing relates to (a) the offering of goods or services to data subjects who are in the EEA or (b) the monitoring of the behavior of data subjects who are in the E.U. The GDPR imposes a number of requirements, including requirements related to the legal basis of the processing (such as consent of the individuals to whom the personal data relates), the information provided to the individuals prior to processing their personal data, the personal data breaches which may have to be notified to the national data protection authorities and data subjects, the measures to be taken when engaging processors, and the security and confidentiality of the personal data. E.U. Member States and EEA countries may also impose additional requirements in relation to health, genetic and biometric data through their national implementing legislation. Further, from January 1, 2021, in addition to the GDPR, companies have to comply with the UK GDPR, which, together with the amended UK Data Protection Act 2018, retains the GDPR in UK national law. The UK GDPR mirrors the fines under the GDPR, i.e., fines up to the greater of £17.5 million or 4% of global turnover. Furthermore, the passage of the Data (Use and Access) Act 2025 (DUAA), which received Royal Assent in June 2025, introduced new obligations. These include mandatory internal complaint mechanisms, and aligning the maximum fines of the Privacy and Electronic Communications Regulations (PECR) with UK GDPR levels. Notably for our operations, the DUAA provides a more expansive statutory definition of scientific research that explicitly includes commercial and privately funded activities, and it permits the use of "broad consent" for future research purposes where specific goals cannot be fully identified at the outset. These changes may lead to additional costs and increase our overall risk exposure. The European Commission has adopted an adequacy decision in favor of the UK, enabling personal data transfers from E.U. member states to the UK without additional safeguards. The European Commission renewed the UK adequacy decision on December 19, 2025 for a period of six years until December 27, 2031, with the possibility to be renewed after this period. In addition, transfers of personal data from the UK to other countries, including the EEA, are subject to specific transfer rules under the UK regime. Personal data may freely flow from the UK to the EEA, since the EEA is deemed to have an adequate data protection level for purposes of the UK regime. These UK international transfer rules broadly mirror the E.U. GDPR rules. With regard to the transfer of personal data from the UK to the U.S., from October 12, 2023, businesses in the UK can start to transfer personal data to U.S. organizations certified to the "UK Extension to the EU-US Data Privacy Framework" (UK Extension) under the UK GDPR, without the need for further safeguards. On March 21, 2022, the international data transfer agreement (IDTA) and the international data transfer addendum to the European Commission's standard contractual clauses (SCCs) for international data transfers (Addendum), and a document setting out transitional provisions, came into force and replaced the prior EU SCCs for purposes of the UK regime. Failure to comply with the requirements of GDPR and/or UK GDPR, and the related national data protection laws of the E.U. Member States or the UK may result in fines and other administrative penalties, litigation, government enforcement actions (which could include civil and/or criminal penalties), and harm our business. Moreover, patients about whom we or our partners obtain information, as well as the providers who share this information with us, may have contractual rights that may limit our ability to use this information. Claims that we have violated patient's or any individual's rights or breached our contractual obligations, even if ultimately we are not found liable, could be expensive and time-consuming to defend, and could result in adverse publicity and harm our business.
Risk Highlights Q2, 2026
Risk Word Cloud
Risk Factors Full Breakdown - Total Risks 49
- Innovation / R&D - Risk 1Compounds and methods that appear promising in research and development may fail to reach later stages of development for a number of reasons, including, among others, that clinical trials may take longer to complete than expected or may not be completed at all, and interim, top-line or preliminary clinical trial data reports may ultimately differ from actual results once data are more fully evaluated.
Successful development of pharmaceutical products is highly uncertain and obtaining regulatory approval to market drugs is expensive, difficult, and speculative. Compounds that appear promising in research and development may fail to reach later stages of development for several reasons, including, but not limited to: - an unacceptable safety profile;- lack of efficacy;- delay or failure in obtaining necessary U.S. and international regulatory approvals, or the imposition of a partial or full regulatory hold on a clinical trial;- difficulties in formulating a compound, scaling the manufacturing process, timely attaining process validation for particular drug products, and completing manufacturing to support clinical studies;- pricing or reimbursement issues or other factors that may make the product uneconomical to commercialize;- production problems, such as the inability to obtain raw materials or supplies satisfying acceptable standards for the manufacture of our products;- equipment obsolescence, malfunctions or failures, product quality/contamination problems or changes in regulations requiring manufacturing modifications;- inefficient cost structure of a compound, finished drug, or device compared to alternative treatments;- obstacles resulting from proprietary rights held by others, such as patent rights for a particular compound;- lower than anticipated rates of patient enrollment as a result of factors, such as the number of patients with the relevant conditions, the proximity of patients to clinical testing centers, perceived cost/benefit of participating in the study, eligibility criteria for tests, patient insurance approvals of trial participation, and competition with other clinical testing programs;- nonclinical or clinical testing requiring significantly more time than expected resources or expertise than originally expected and inadequate financing, which could cause clinical trials to be delayed or terminated;- failure of clinical testing to show potential products to be safe and efficacious, and failure to demonstrate desired safety and efficacy characteristics in human clinical trials;- suspension of a clinical trial at any time by us, an applicable collaboration partner or a regulatory authority on the basis that the participants are being exposed to unacceptable health risks or for other reasons;- delays in reaching or failing to reach agreement on acceptable terms with manufacturers or prospective Contract Research Organizations (CROs) and trial sites; and - failure of third parties, such as CROs, academic institutions, collaborators, cooperative groups, and/or investigator sponsors, to conduct, oversee, and monitor clinical trials and results. In addition, from time to time we expect to report interim, top-line or "preliminary" data for clinical trials, including for example the results from our Karisma-(Z)-endoxifen study, a Phase 2, randomized, double-blind, placebo-controlled, dose-response study evaluating the effect of low-dose (Z)-endoxifen on MBD in healthy premenopausal women with measurable MBD. Such data are based on a preliminary analysis of then-available efficacy and safety data, and such findings and conclusions are subject to change following a more comprehensive review of the data related to the particular study or trial. Interim, top-line or preliminary data are based on important assumptions, estimations, calculations and information then available to us to the extent we have had, at the time of such reporting, an opportunity to fully and carefully evaluate such information in light of all surrounding facts, circumstances, recommendations and analyses. As a result, interim, top-line or "preliminary" results may differ from future/final results, or different conclusions or considerations may qualify such results once existing data have been more fully evaluated. In addition, third parties, including regulatory agencies, may not accept or agree with our assumptions, estimations, calculations or analyses or may interpret or weigh the importance of data differently, which could impact the value of the particular program, the ability to obtain approvals, or commercialization of the particular compound and our business generally. If the development of our products is delayed or fails, or if top-line or preliminary clinical trial data reported differ from actual results, our development costs may increase and our ability to commercialize our products may be harmed, which could harm our business, financial condition, operating results or prospects.
- Innovation / R&D - Risk 2We may not enjoy the market exclusivity benefits of our orphan drug designations.
Although we may obtain orphan designations in the treatment of certain diseases our products are intended to treat, the designation may not be applicable to any particular product we might get approved and that product may not be the first product to receive approval for that indication. Under the Orphan Drug Act, the first approved product with an orphan designation receives market exclusivity, which prohibits the FDA from approving the "same" drug for the same indication. The FDA has stated that drugs can be the "same" even when they are not identical. It is possible that another drug that the FDA considers to be the "same" as (Z)-endoxifen could be approved for the treatment of a disease that one of our orphan products is intended to treat before our product is approved, which means that we may not obtain orphan drug exclusivity and could also potentially be blocked from approval until the first product's orphan drug exclusivity period expires or we demonstrate, if we can, that our product is superior. Further, even if we obtain orphan drug exclusivity for a product, that exclusivity may not effectively protect the product from competition because different drugs can be approved for the same condition. Even after an orphan drug is approved and granted orphan drug exclusivity, the FDA can subsequently approve the same drug for the same condition if the FDA concludes that the later drug is safer, more effective or makes a major contribution to patient care. Further, orphan drug exclusivity can be lost if the FDA later determines that the request for designation was materially defective or if the applicant is unable to assure the availability of sufficient quantities of the drug to meet the needs of patients with the same approved indication or use for which the drug was approved. Orphan Drug designation neither shortens the development time or regulatory review time of a drug nor gives the drug any advantage in the regulatory review or approval process. We do not know if, when, or how the FDA, Congress, or future judicial challenges may change the orphan drug regulations and policies in the future, and it is uncertain how any changes might affect our business. Depending on what changes the FDA may make to its orphan drug regulations and policies, our business could be adversely impacted. In view of the overturn of the Chevron doctrine in Loper Bright Enterprises v. Raimondo, this landmark Supreme Court decision may invite various stakeholders to bring lawsuits against the FDA to challenge longstanding decisions and policies, including regulatory exclusivities, which could lead to uncertainties in the industry. Further, changes in the leadership of the FDA and other federal agencies under the Trump administration may lead to new policies and changes in the regulations and operations of the FDA, which may impact our clinical development plans.
- Innovation / R&D - Risk 3We are developing our products for patients who are severely ill, and patient deaths that occur in our clinical trials could negatively impact our business even if such deaths are not shown to be related to our drugs.
We have enrolled patients in studies of our drug candidates who may die while enrolled in our studies. Patients in our clinical trials may also experience adverse outcomes following treatment with our drug candidates, including patient death. These adverse outcomes, even if unrelated to our drugs, could expose us to lawsuits and liabilities and could diminish our ability to obtain regulatory approval and/or achieve commercial acceptance for the related drug and our business could be materially harmed.
- Innovation / R&D - Risk 4We may encounter delays in our clinical trials or may not be able to conduct our trials in a timely manner.
Clinical trials are expensive and subject to regulatory approvals. Potential trial delays may arise from, but are not limited to: - supply chain disruptions, or lack of availability or increased costs of materials for our product candidates, including as a result of changes in trade policies, including tariffs or other trade restrictions or the threat of such actions;- outbreaks of disease, pandemics or epidemics, which could limit access to clinical trial sites, divert healthcare resources and limit the availability of medical facilities for our clinical trials;- failure to obtain on a timely basis, or at all, approval from the applicable regulatory agencies, institutional review board or ethics committee to open a clinical study;- lower than anticipated patient enrollment or delays in patient enrollment, including due to the size and nature of the patient population, existing conditions, patient eligibility criteria defined in the protocol, proximity of patients to trial sites, the design of the trial, our ability to recruit clinical trial investigators with the appropriate competencies and expertise, competing clinical trials for similar or alternate therapeutic treatments, clinicians' and patients' perception of a lack of benefit to enroll in the study for whatever reason, our ability to obtain and maintain patient consents and patients dropping out of the trial;- delays in reaching agreements on acceptable terms with prospective CRO or vendors;- failure of CROs or other third parties to effectively and timely monitor, oversee, and maintain the clinical trials;- the imposition of partial or full clinical holds by FDA, or the pausing or termination of our clinical trials by institutional review boards or ethics committees;- complying with design protocols of any applicable special protocol assessment we receive from the FDA;- severe or unexpected drug-related side effects experienced by patients in clinical trials;- availability of materials provided by third parties necessary to manufacture our product candidates; and - changes in regulatory requirements, or additional regulatory requirements.
- Innovation / R&D - Risk 5Our clinical trials may fail to demonstrate adequately the efficacy and safety of our product candidates, which would prevent or delay regulatory approval and commercialization.
Even if our clinical trials are completed as planned, we cannot be certain that their results will support our product candidate claims or that the FDA or foreign authorities will agree with our conclusions. Success in pre-clinical studies and early clinical trials does not ensure that later clinical trials will be successful, and we cannot be sure that the later trials will replicate the results of prior trials and pre-clinical studies. The clinical trial process may fail to demonstrate that our product candidates are safe and effective for the proposed indicated uses. If the FDA concludes that our clinical trials have failed to demonstrate safety and effectiveness, we would not receive FDA approval to market that product candidate in the U.S. for the indications sought. In addition, it could cause us to abandon the product candidate and might delay development of other product candidates. Any delay or termination of our clinical trials would delay or preclude the filing of any submissions with the FDA and, ultimately, our ability to commercialize our product candidates and generate revenues. It is also possible that patients enrolled in clinical trials could experience adverse side effects that are not currently part of a product candidate's profile.
See a full breakdown of risk according to category and subcategory. The list starts with the category with the most risk. Click on subcategories to read relevant extracts from the most recent report.