Staar Surgical (STAA) Risk Analysis

We depend on information technology networks and our information technology infrastructure for electronic communications among our locations around the world and between our personnel and our subsidiaries, customers, and suppliers. The integrity and protection of our customer, vendor, supplier, employee, and other Company data that we collect, use and store, including personal information, is an important part of our business. Addressing applicable and evolving security and privacy regulations may increase our operating costs or adversely affect our business operations. Certain of our employees, contractors and vendors have access to and use personal information in the ordinary course of our business. The secure processing, maintenance and transmission of this information is critical to our operations. Despite our security measures and business controls, our information technology and infrastructure have in the past and may in the future be subject to attacks by hackers, breaches due to employee, contractor or vendor error, or malfeasance, systems error (whether as a result of an intentional breach, a natural disaster or human error) or other disruptions or subject to the inadvertent or intentional unauthorized release of information. Any such occurrence could compromise our networks and the information stored thereon could be accessed, publicly disclosed, lost or stolen. Any such access, disclosure or other loss of information could result in legal claims or proceedings, and liability under laws that protect the privacy of personal information and regulatory penalties, disrupt our operations and the supply of products we provide to our clients, compromise our intellectual property or other confidential business information, or damage our reputation, any of which could adversely affect our profitability, revenue and competitive position. Many of our employees currently work remotely, which may make us more vulnerable to cyberattacks. While we have not experienced a material system failure, accident or security breach to date, we cannot assure you that our data protection efforts and our investment in information technology will prevent significant breakdowns, data leakages, breaches in our systems or other cyber incidents that could have a material adverse effect upon our reputation, business, operations or financial condition. We continue to invest in our cybersecurity program to enhance current capabilities and also implement new capabilities in our effort to keep pace with the changing threat landscape. Also, certain of our information technology systems are not redundant, and our disaster recovery planning is not sufficient for every eventuality. Despite any precautions we may take, such events could materially harm our reputation and financial results. Moreover, while we maintain cyber insurance, it may be insufficient to address any potential loss incurred. We also rely on third parties to host or otherwise process some of this data (such as cloud-based computing). Elements of our information technology systems that we outsource to third parties may also be vulnerable to various types of attacks or disruptions. Any failure by a third party to prevent security breaches could have adverse consequences for us. We are subject to various data protection and privacy regulations in different jurisdictions, including the General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) and the California Consumer Privacy Act. We have made and continue to engage in compliance efforts to satisfy these and other regulations, however, we may be unsuccessful in complying with applicable requirements, and may be at risk of enforcement actions and/or subject to fines, including those imposed by a data protection authority. As a result, we may incur substantial expense in complying with data protection and privacy regulations, exposure resulting from a data breach, ransomware or non-compliance and may be distracted from other aspects of our business.

Activities outside the U.S. accounted for approximately 91% of our total sales during 2025. Foreign currency fluctuations could result in volatility of our revenue. The results of operations and the financial position of our Japanese subsidiary are reported in Japanese yen and then translated into U.S. dollars at the applicable exchange rates for inclusion in our consolidated financial statements, exposing us to translation risk. In addition, we are exposed to transaction risk because we incur some of our sales and expenses in currencies other than the U.S. dollar. Our most significant currency exposures are to the Japanese yen, the euro, and the Swiss franc, and the exchange rates between these currencies and the U.S. dollar may fluctuate substantially. We do not actively hedge our exposure to currency rate fluctuations. Any strengthening of the U.S. dollar would likely negatively impact our results. We price some of our products in U.S. dollars, and thus changes in exchange rates can make our products more expensive in some offshore markets and reduce our sales. Inflation could also make our products more expensive and increase the credit risks to which we are exposed. Future foreign currency fluctuations could favorably or unfavorably impact and increase the volatility of our revenue, profitability, and stock price. Economic, social, and political conditions, laws, practices, and local customs vary widely among the countries in which we sell our products. Our operations outside of the U.S. face a number of risks and potential costs, including, enjoying less stringent protection of intellectual property, and facing economic, political, and social uncertainty in some countries, especially in emerging markets. For example, sales in certain Asian and developing markets may result in lower margins and higher exposure to intellectual property infringement or counterfeits. Given the size of the Company's business in China relative to its net sales in the rest of the world, macroeconomic conditions in China have a significant impact on the Company's business, operations, and financial results. Our results in fiscal 2024 were negatively impacted by a significant decline in ICL sales in China in the fourth quarter ended December 27, 2024, where the sluggish economy and weak consumer consumption contributed to fluctuating demand for ICL procedures. As expected, our sales in China declined in 2025, due to elevated levels of inventory held at our China distributors at the end of December 27, 2024. If China experiences a significant or prolonged slowdown or disruption to its economy, or social or political unrest, we may experience a significant reduction in sales in the future. Further, trade disputes or tensions between the United States and its significant trading partners may adversely affect our sales, including as a result of the imposition of tariffs or other barriers or restrictions on trade, or increase our costs. The institution of trade tariffs both globally and between the U.S. and China specifically could negatively impact the overall economic condition in our markets, including China, which could have a negative effect on our sales. As an example, on February 1, 2025, the U.S. government announced a 25% tariff on product imports from certain countries, including Mexico and Canada, and 10% tariffs on product imports from certain countries, including China. In response, China announced that they would impose counter tariffs on select goods imported from the U.S., to which the U.S. responded with heightened reciprocal tariffs. The U.S. and China have reached a one-year agreement with an expiration of November 10, 2026, which includes the continued suspension of the heightened reciprocal tariffs on China and delayed enforcement of new U.S. export rules targeting affiliates of blacklisted firms. If maintained, the newly announced tariffs and the potential escalation of trade disputes could pose a significant risk to our business and would affect our revenue and cost of goods sold. The extent, focus and duration of any such tariffs and the resulting impact on general economic conditions and on our business are uncertain and depend on various factors, such as negotiations between the U.S. and affected countries, the responses of other countries or regions, exemptions or exclusions that may be granted, availability and cost of alternative sources of supply, and demand for our products in affected markets. Further, actions we take to adapt to new tariffs or trade restrictions may cause us to modify our operations or forgo business opportunities. In addition, new laws, regulations and policies in China or elsewhere applicable to foreign medical device companies could negatively impact our business. The medical device landscape in China is rapidly evolving, and local preference policies and cost control measures, including programs like volume-based procurement, have the potential to disrupt our business. Also, we are exposed to credit and collectability risk on our trade receivables with customers in certain international markets. There can be no assurance we can effectively limit our credit risk and avoid losses and our ability to transfer foreign earnings to the U.S. may be subject to taxes or restricted or result in incurring substantial costs. Our continued success as a global company depends, in part, on our ability to develop and implement policies and strategies that are effective in anticipating and managing these and other risks in the countries where we do business. These and other risks may have a material adverse effect on our operations in any particular country and on our business, financial condition and results of operations as a whole.

We believe our primary competition in selling the ICL to patients seeking surgery to correct refractive conditions lies not in similar products to the ICL, but in laser surgical procedures. Alcon (formerly a part of Novartis), Johnson & Johnson (formerly Advanced Medical Optics or AMO), Bausch Health Companies (formerly Valeant, Bausch & Lomb or B+L), and Carl Zeiss Meditec AG, all market lasers for corneal refractive surgery and promote their sales worldwide. Each of these companies has much greater financial, technical, marketing and distribution resources and brand name recognition than we do, and some of them have large international markets for a full suite of ophthalmic products. Their greater resources for research, development and marketing, and their greater capacity to offer comprehensive products and equipment to providers, makes for intense competition. We also face competition from other phakic implantable lenses, including lenses made by Biotech Vision Care, Care Group, Eyebright, and Ophtec. Increasingly, competitors from Asia are beginning to appear in some markets with their low-cost version of an implantable contact lens, which competes with our ICL. With our commercial success with the ICL, additional companies may seek to enter the refractive phakic intraocular lens market.