and databases (including the data of their respective customers, employees, suppliers, vendors and any third party data maintained, processed or stored by or on behalf of the Company and its
subsidiaries) (collectively, IT Systems) are adequate for, and operate and perform in all material respects as required in connection with the operation of the business of the Company and its subsidiaries, free and clear of all
material bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. Except as would not have, individually or in the aggregate, a Material Adverse Effect or as disclosed in the Registration Statement, the Time of Sale
Information or the Prospectus, the Company and its subsidiaries have implemented and maintained all commercially reasonable controls, policies, procedures, and safeguards necessary to maintain and protect their material confidential information and
the integrity, continuous operation, redundancy and security of all IT Systems and data (including all personal, personally identifiable, household, sensitive, confidential or regulated data (Data)) used in connection with their
businesses. Without limiting the foregoing, the Company and its subsidiaries have used commercially reasonable efforts to establish and maintain and have established, maintained, implemented and complied with, except as would not have, individually
or in the aggregate, a Material Adverse Effect or as disclosed in the Registration Statement, the Time of Sale Information or the Prospectus, reasonable information technology, information security, cyber security and data protection controls,
policies and procedures, including oversight, access controls, encryption, technological and physical safeguards and business continuity/disaster recovery and security plans that are designed to protect against and prevent breach, destruction, loss,
unauthorized distribution, use, access, disablement, misappropriation or modification, or other compromise or misuse of or relating to any information technology system or Data used in connection with the operation of the Companys and its
subsidiaries businesses (Breach). Except as disclosed in the Registration Statement, the Time of Sale Information or the Prospectus or as would not individually or in the aggregate have a Material Adverse Effect on the
Company and its subsidiaries, taken as a whole, to the knowledge of the Company, there has been no such Breach. Except as would not reasonably be expected, individually or in the aggregate, to result in a Material Adverse Effect, the Company and its
subsidiaries have not been notified of and have no knowledge of any event or condition that would reasonably be expected to result in any such Breach. Except as would not reasonably be expected, individually or in the aggregate, to result in a
Material Adverse Effect, the Company and its subsidiaries are presently in material compliance with all applicable laws or statutes and all judgments, orders, rules and regulations of any court or arbitrator or governmental or regulatory authority,
internal policies and contractual obligations relating to the security of IT Systems and Data and to the protection of such IT Systems and Data from unauthorized use, access, misappropriation or modification.
(vv) Privacy. Except as disclosed in the Registration Statement, the Time of Sale Information or the Prospectus or as would not
individually or in the aggregate have a Material Adverse Effect on the Company and its subsidiaries, taken as a whole, (i) the Company and its subsidiaries have complied, and are presently in compliance, in all material respects, with all
internal and external privacy policies, contractual obligations, industry standards, applicable laws, statutes, judgments, orders, rules and regulations of any court or arbitrator or other governmental or regulatory authority and any legal
obligations regarding the collection, use, transfer, import, export, storage, protection,
17