MNKD 2017 Annual Report

program reimbursement methodologies for products. At the federal level, the costs of prescription pharmaceuticals in the United States has also been the subject of considerable discussion, and members of Congress and the Trump administration have stated that they will address such costs through new legislative and administrative measures. At the state level, legislatures are increasingly passing legislation and implementing regulations designed to control pharmaceutical and biological product pricing, including price or patient reimbursement constraints, discounts, restrictions on certain product access and marketing cost disclosure and transparency measures, and, in some cases, designed to encourage importation from other countries and bulk purchasing. In addition, we may be subject to data privacy and security regulation by both the federal government and the states in which we conduct our business. The federal Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology and Clinical Health Act (“HITECH”), and their respective implementing regulations, imposes certain requirements relating to the privacy, security and transmission of individually identifiable health information. Among other things, HITECH makes HIPAA’s privacy and security standards directly applicable to “business associates” — independent contractors or agents of covered entities that receive or obtain protected health information in connection with providing a service on behalf of a covered entity. HITECH also increased the civil and criminal penalties that may be imposed against covered entities, business associates and possibly other persons, and gave state attorneys general new authority to file civil actions for damages or injunctions in federal courts to enforce the federal HIPAA laws and seek attorneys’ fees and costs associated with pursuing federal civil actions. State laws also govern the privacy and security of health information in certain circumstances, many of which differ from each other in significant ways and may not have the same effect, thus complicating compliance efforts. In addition, the European Union, or EU, has established its own data security and privacy legal framework, including but not limited to Directive 95/46/EC, or the Data Protection Directive. The Data Protection Directive will be replaced starting in May 2018 with the recently adopted European General Data Protection Regulation, or GDPR, which contains new provisions specifically directed at the processing of health information, higher sanctions and extra-territoriality measures intended to bring non-EU companies under the regulation. We anticipate that over time we may expand our business operations to include additional operations in the EU, including potentially conducting preclinical and clinical trials. With such expansion, we would be subject to increased governmental regulation in the EU countries in which we might operate, including the GDPR Also, many states have similar healthcare statutes or regulations that apply to items and services reimbursed under Medicaid and other state programs, or, in several states, that apply regardless of the payer. Additional state laws require pharmaceutical companies to implement a comprehensive compliance program and/or limit expenditure for, or payments to, individual medical or health professionals. We may incur significant costs to comply with these laws and regulations now or in the future. If our operations are found to be in violation of any of the federal and state laws described above or any other governmental regulations that apply to us, we may be subject to penalties, including criminal and significant civil monetary penalties, damages, fines, individual imprisonment, disgorgement, exclusion of products from reimbursement under government programs, additional reporting requirements and/or oversight if we become subject to a corporate integrity agreement or similar agreement to resolve allegations of non-compliance with these laws and the curtailment or restructuring of our operations, any of which could adversely affect our ability to operate our business and our results of operations. Research and Development Expenses Our research and development expenses totaled $14.1 million, $14.9 million and $29.7 million for the years ended December 31, 2017, 2016 and 2015, respectively. 12