Common use of Data Security; Privacy Clause in Contracts

Data Security; Privacy. Except as would not reasonably be expected to have a Material Adverse Effect, the Company’s, Parent’s and their respective Subsidiaries’ information technology assets and equipment, computers, technology systems and other systems, networks, hardware, software, websites, applications and databases (collectively, “IT Systems”) are adequate for, and operate and perform as required in connection with the operation of the business of the Company, Parent and their respective Subsidiaries as currently conducted, to Parent’s knowledge, free and clear of all material bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. The Company, Parent and their respective Subsidiaries maintain controls, policies, procedures and safeguards to maintain and protect their confidential information and the privacy, confidentiality, integrity, continuous operation, redundancy and security of all IT Systems and data (in each case, under the control of Parent or any other entity performing services for Parent) used in connection with the operation of the Company, Parent or their respective Subsidiaries (including any information that relates to an identified or identifiable individual or is otherwise considered “personal information,” “personally identifiable information” or “personal data” under applicable Law, sensitive data, confidential information or regulated data in any form (collectively, the “Protected Information”)). There have been no actual or suspected security breaches or attacks, violations, outages, accidental or unlawful destruction, loss, alteration or unauthorized uses or disclosures of or access to any IT Systems or Protected Information, or any other material incidents or compromises of or relating to any IT Systems or Protected Information, and Parent has not received any notifications by any third parties of any of the foregoing, except in each case as would not reasonably be expected to have a Material Adverse Effect.

Data Security; Privacy. Except The software, systems, networks, databases and other information technology assets (“IT Assets”) used by the Company are adequate for the operation of their businesses as currently conducted and are, to the knowledge of the Company, free of defects, malware, viruses or other corruptants. The Company takes, and has taken, commercially reasonable actions (including implementing organizational, physical, administrative and technical measures) to protect and maintain the integrity, security, operation and redundancy of the IT Assets used by or on behalf of the Company, whether proprietary or those of third parties (including all data, including personal and confidential data, stored thereon and processed thereby), and there have been no violations, outages, breaches, interruptions, or unauthorized accesses to same, other than those that would not reasonably be expected to have a Material Adverse Effect, the Company’s, Parent’s and their respective Subsidiaries’ information technology assets and equipment, computers, technology systems and other systems, networks, hardware, software, websites, applications and databases (collectively, “IT Systems”) are adequate for, and operate and perform as required in connection with the operation of the business of the Company, Parent and their respective Subsidiaries as currently conducted, to Parent’s knowledge, free and clear of all material bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. The Company, Parent and their respective Subsidiaries maintain controls, policies, procedures and safeguards to maintain and protect their confidential information and the privacy, confidentiality, integrity, continuous operation, redundancy and security of all IT Systems and data (in each case, under the control of Parent or any other entity performing services for Parent) used in connection with the operation of the Company, Parent or their respective Subsidiaries (including any information that relates to an identified or identifiable individual or is otherwise considered “personal information,” “personally identifiable information” or “personal data” under applicable Law, sensitive data, confidential information or regulated data in any form (collectively, the “Protected Information”)). There have been no actual or suspected security breaches or attacks, violations, outages, accidental or unlawful destruction, loss, alteration or unauthorized uses or disclosures of or access to any IT Systems or Protected Information, or any other material incidents or compromises of or relating to any IT Systems or Protected Information, and Parent has not received any notifications by any third parties of any of the foregoing, except in each case Except as would not not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect: (i) the Company has complied and is in compliance with all internal and external privacy policies, contractual obligations, industry standards, applicable laws, statutes, judgments, Orders, rules and regulations of any Governmental Entity and any other legal obligations, in each case, relating to the collection, use, transfer, import, export, storage, protection, disposal and disclosure by the Company of personal, personally identifiable, household, sensitive, confidential or regulated data (“Data Security Obligations”); (ii) the Company has not received any notification of or complaint regarding and is unaware of any other facts that, individually or in the aggregate, would reasonably indicate non-compliance with any Data Security Obligation; and (iii) there is no action, suit or proceeding by or before any Governmental Entity pending or threatened against the Company alleging non-compliance with any Data Security Obligation.

Data Security; Privacy. Except The software, systems, networks, databases and other information technology assets (“IT Assets”) used by the Company Group are adequate for the operation of their businesses as currently conducted and are free of defects, malware, viruses or other corruptants. The Company Group takes, and have taken, commercially reasonable actions (including implementing organizational, physical, administrative and technical measures) to protect and maintain the integrity, security, operation and redundancy of the IT Assets used by or on behalf of the Company Group, whether proprietary or those of third parties (including all data, including personal and confidential data, stored thereon and processed thereby), and there have been no violations, outages, breaches, interruptions, or unauthorized accesses to same, other than those that would not reasonably be expected to have a Material Adverse Effect, the Company’s, Parent’s and their respective Subsidiaries’ information technology assets and equipment, computers, technology systems and other systems, networks, hardware, software, websites, applications and databases (collectively, “IT Systems”) are adequate for, and operate and perform as required in connection with the operation of the business of the Company, Parent and their respective Subsidiaries as currently conducted, to Parent’s knowledge, free and clear of all material bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. The Company, Parent and their respective Subsidiaries maintain controls, policies, procedures and safeguards to maintain and protect their confidential information and the privacy, confidentiality, integrity, continuous operation, redundancy and security of all IT Systems and data (in each case, under the control of Parent or any other entity performing services for Parent) used in connection with the operation of the Company, Parent or their respective Subsidiaries (including any information that relates to an identified or identifiable individual or is otherwise considered “personal information,” “personally identifiable information” or “personal data” under applicable Law, sensitive data, confidential information or regulated data in any form (collectively, the “Protected Information”)). There have been no actual or suspected security breaches or attacks, violations, outages, accidental or unlawful destruction, loss, alteration or unauthorized uses or disclosures of or access to any IT Systems or Protected Information, or any other material incidents or compromises of or relating to any IT Systems or Protected Information, and Parent has not received any notifications by any third parties of any of the foregoing, except in each case Except as would not not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect: (i) the Company Group has complied and is in compliance with all internal and external privacy policies, contractual obligations, industry standards, applicable laws, statutes, judgments, Orders, rules and regulations of any Governmental Entity and any other legal obligations, in each case, relating to the collection, use, transfer, import, export, storage, protection, disposal and disclosure by the Company Group of personal, personally identifiable, household, sensitive, confidential or regulated data (“Data Security Obligations”); (ii) the Company Group has not received any notification of or complaint regarding and is unaware of any other facts that, individually or in the aggregate, would reasonably indicate non-compliance with any Data Security Obligation; and (iii) there is no action, suit or proceeding by or before any Governmental Entity pending or threatened against the Company Group alleging non-compliance with any Data Security Obligation.