Common use of Privacy and Data Protection Clause in Contracts

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected tothat have not, singly or in the aggregate, result resulted in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and has taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has and its subsidiaries have operated its their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has and its subsidiaries have been and is are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance in all material respects with such policies and procedures. The Company has and its subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company Company, its subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its subsidiaries (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has and its subsidiaries have used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the CompanyCompany and its subsidiaries. To the Company’s knowledge, the The Company has and its subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected tonot, singly individually or in the aggregate, result in a Material Adverse Effectbe material to the Company or any of its subsidiaries; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has and its subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and has taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the The Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly individually or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its subsidiaries own or have a valid right to access and use all material computer systems, networks, hardware, software, databases, websites, and equipment used to process, store, maintain and operate data, information, and functions used in connection with the business of the Company and its subsidiaries (the “Company IT Systems”). The Company IT Systems (i) are adequate for, and operate and perform in all material respects as required in connection with, the operation of the business of the Company and its subsidiaries as currently conducted, and (ii) are free of any viruses, “back doors,” “Trojan horses,” “time bombs,” “worms,” “drop dead devices” or other software or hardware components that are designed to interrupt use of, permit unauthorized access to, or disable, damage or erase, any software material to the business of the Company or any of its subsidiaries, except in the case of (i) and (ii) as would not be reasonably be expected to result in a Material Adverse Effect. The Company and its subsidiaries have implemented commercially reasonable backup, security and disaster recovery technology consistent in all material respects with applicable regulatory standards and customary industry practices. To the knowledge of the Company, no third party has operated its business breached or compromised the integrity or security of the Company IT Systems in a manner compliant which would reasonably be expected to result in a Material Adverse Effect. The Company and its subsidiaries have at all times complied in all material respects with all United States federal, state, local and non-United States applicable Laws relating to privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis the collection and use of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data information collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable informationused, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business or any of the Company as now operated and as currently proposed to be conducted as described its subsidiaries in the Registration Statementconduct of its business. No claims have been asserted or, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, threatened against the Company has or any subsidiary alleging a violation of any person’s privacy or personal information or data rights, and the consummation of the transactions contemplated hereby will not suffered breach or incurred otherwise cause any security breachesviolation of any Law related to privacy, compromises data protection, or incidents with respect to the collection and use of personal information collected, used, or held for use by the Company or any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or of its subsidiaries in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use conduct of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effectits business. The Company has not been required and its subsidiaries take reasonable measures to notify any individual of any ensure that such information security breachis protected against unauthorized access, compromise use, modification, or incident involving Sensitive Company Dataother misuse.

Privacy and Data Protection. The Company has and its Subsidiaries have operated its their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has and its Subsidiaries have been and is are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance in all material respects with such policies and procedures. The Company has and its Subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package Statement and in the Prospectus. The Company has and its Subsidiaries have used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the CompanyCompany and its Subsidiaries. To the Company’s knowledge, the The Company has and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected tonot, singly individually or in the aggregate, result in a Material Adverse Effectbe material to the Company or any of its Subsidiaries; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has and its Subsidiaries have operated its their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has and its Subsidiaries have been and is are in compliance in all material respects with internal policies and procedures reasonably designed to ensure protect the integrity and security of the data collected, handled or stored in connection with its business, including administrative, technical and physical safeguards with respect to the security, confidentiality and integrity of transactions and Sensitive Company Data (as defined below); the Company and its Subsidiaries have been and are in compliance in all material respects with the internal policies and procedures reasonably designed to promote compliance with the laws and regulations that govern privacy and data security and take, and have taken reasonably appropriate steps designed to attain compliance with such policies and procedures. The Company has and its Subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, and information identifiable to a consumer information and other confidential information of the Company Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are in all material respects reasonably adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has and its Subsidiaries have used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the CompanyCompany and its Subsidiaries. To the Company’s knowledge, the The Company has and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company DataData (including the data and information of their respective customers, employees, suppliers, vendors and any third party data maintained, processed or stored by the Company and its subsidiaries, and any such data processed or stored by third parties on behalf of the Company and its subsidiaries), except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually singly or in the aggregate, have result in a Material Adverse Effect. The Company has and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data, including, HIPAA, HITECH, the FTC Act, the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and all applicable national laws implementing or supplementing the GDPR and all related national laws, regulations and secondary legislation. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, personal data, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the The Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company DataData and have not been notified of and have no knowledge of any event or condition that would reasonably be expected to result in any security breaches, compromises or incidents, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their its documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no No unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has and the Subsidiary have operated its their business in a manner compliant in all material respects with all United States federal, state, state and local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has and the Subsidiary have been and is are in compliance in all material respects with internal policies and procedures designed to ensure protect the integrity and security of the data collected, handled or stored in connection with its their business; the Company and the Subsidiary have been and are in compliance in all material respects with internal policies and procedures designed to promote compliance with the Health Care Laws that govern privacy and data security and take and have taken reasonably appropriate steps designed to attain compliance with such policies and procedures. The Company has and the Subsidiary have taken commercially reasonable steps to maintain the confidentiality of its the personally identifiable information, protected health information, consumer information and other confidential information of the Company Company, the Subsidiary and any third parties in its their possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and the Subsidiary (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and the Subsidiary as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, the Subsidiary have established commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the CompanyCompany and the Subsidiary. To the Company’s knowledge, after due inquiry, (i) the Company has and the Subsidiary have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and (ii) there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has and the Subsidiary have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the The Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated and its business in a manner compliant in all material respects Subsidiaries have complied with all United States federal, state, local and non-United States privacyprivacy (including, but not limited to, the General Data Protection Regulation (EU) 2016/679, “GDPR”), data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data, except for any noncompliance that would not reasonably be expected to have a Material Adverse Effect. The In each case except for any noncompliance that would not reasonably be expected to have a Material Adverse Effect, the Company has and its Subsidiaries have been and is are in compliance in all material respects with (1) internal policies and procedures designed to appropriately ensure the integrity and security of the data collected, handled or stored in connection with its business; and (2) internal policies and procedures designed to appropriately ensure compliance with the Health Care Laws that govern privacy and data security and take, and the Company has taken appropriate steps designed to ensure compliance with such internal policies and procedures. The Company has and its Subsidiaries have taken commercially reasonable appropriate steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale French Disclosure Document, the General Disclosure Package and in the Prospectus. The Company has and its Subsidiaries have used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the CompanyCompany and its Subsidiaries. To the Company’s knowledge, the The Company has and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Company Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The 3.22.1 To the best of Seller’s knowledge, the Company is, and at all times has operated its been, in compliance with (i) all applicable Laws regarding the protection, storage, use, and disclosure of Personal Data and (ii) all Contracts (or portions thereof) between the Company and vendors, marketing affiliates, and other customers and business in a manner compliant in all material respects with all United States federalpartners, state, local and non-United States privacy, data security and data protection laws and regulations that are applicable to the Companyuse and disclosure of Personal Data (such contracts being hereinafter referred to as “Privacy Agreements”). 3.22.2 To the best of Seller’s collectionknowledge, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The the Company has been established and is in compliance in all material respects with internal policies implemented and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establishupdate, maintain and has establishedenforce such policies, commercially reasonable disaster recovery programs, procedures, contracts and security planssystems with respect to the collection, procedures use, storage, transfer, retention, deletion, destruction, disclosure and facilities for the business consistent with industry standards other forms of processing of any and practices in all material respects, including, without limitation, for data and information of the Company IT Assets (“Business Data”) including any and all data held or used by information collected, used, stored, transferred, retained, deleted, destroyed, disclosed or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents processed with respect to any Company IT Asset or Sensitive Company of its Personal Data, except where such breachesas consistent and compliant with all applicable federal or state Laws relating to privacy and data protection, compromises including HIPAA. 3.22.3 To the best of Seller’s knowledge, there has not been any actual or incidents would not reasonably be expected tosuspected or, singly to the Company’s Knowledge, threatened breach, misappropriation, or in unauthorized disclosure, access, use, or dissemination of any Business Data, including any Personal Data or any violation of any federal or state data protection Laws with respect to the aggregatesame. 3.22.4 To the best of Seller’s knowledge, neither the execution, delivery or performance of this Agreement, nor the consummation of any of the transactions contemplated by this Agreement will result in a Material Adverse Effect; and there has been no unauthorized any violation of any Privacy Agreements or illegal use any applicable Law pertaining to privacy or security of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. Personal Data. 3.22.5 The Company has commercially reasonable safeguards in place to protect Personal Data in the Company’s possession or control from unauthorized access by third Persons, including the Company’s employees and contractors. 3.22.6 To the Seller’s and Company’s Knowledge, no person has made any illegal, improper or unauthorized use of Personal Data that the Company collected, possesses, or controls. 3.22.7 The Company is not bound by any Contract or other obligation that prohibits the Business from using Personal Data, or other information if such information has been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Datade-identified.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package and in the Final Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has and its Subsidiaries have operated its their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacyprivacy (including, but not limited to, the European General Data Protection Regulation (EU) 2016/679 and the related national data protection laws of the European Union Member States and the United Kingdom), data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has and its Subsidiaries have been and is are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company has and its Subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, SEC Filings except as would not result in the Time of Sale Disclosure Package and in the Prospectusa Material Adverse Effect. The Company has and its Subsidiaries have used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the CompanyCompany and its Subsidiaries. To Except, in each case, as would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect, to the Company’s knowledgeKnowledge, the Company has and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data; to the Company’s knowledge, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in ; and the aggregate, Company and its Subsidiaries have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has and its subsidiaries have operated its their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal datadata except where any noncompliance would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Company has and its subsidiaries have been and is are in compliance in all material respects with internal their respective published privacy policies and with their internal security procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its businessbusiness except where any noncompliance would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Company has and its subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its the personally identifiable information, protected health information, consumer information and other confidential information that they process in connection with their operation of the Company and any third parties in its possession business (“Sensitive Company Data”). The To the knowledge of the Company, the tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its subsidiaries (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has and its subsidiaries have used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the CompanyCompany and its subsidiaries. To the knowledge of the Company’s knowledge, neither the Company nor its subsidiaries has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. For the past three years, except where such unauthorized or illegal use or access would not reasonably be expected toto the knowledge of the Company, individually or in the aggregate, Company and its subsidiaries have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Company Registration Statement, in the Time of Sale Disclosure Package Statement and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse EffectChange; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse EffectChange. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has and the Subsidiary have operated its their business in a manner compliant in all material respects with all United States federal, state, state and local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has and the Subsidiary have been and is are in compliance in all material respects with internal policies and procedures designed to ensure protect the integrity and security of the data collected, handled or stored in connection with its their business; the Company and the Subsidiary have been and are in compliance in all material respects with internal policies and procedures designed to promote compliance with the Health Care Laws that govern privacy and data security and take and have taken reasonably appropriate steps designed to attain compliance with such policies and procedures. The Company has and the Subsidiary have taken commercially reasonable steps to maintain the confidentiality of its the personally identifiable information, protected health information, consumer information and other confidential information of the Company Company, the Subsidiary and any third parties in its their possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and the Subsidiary (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and the Subsidiary as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, the Subsidiary have established commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the CompanyCompany and the Subsidiary. To the Company’s knowledge, after due inquiry, (A) the Company has and the Subsidiary have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and (B) there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has and the Subsidiary have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Company Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse EffectChange; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse EffectChange. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business (a) Seller Parties’ Processing of Personal Data and any Processing of Personal Data performed on behalf of the Seller Parties, in a manner compliant each case in all material respects connection with all United States federalthe operation of the Business, statehave materially complied with, local and non-United States privacy, data security (i) provisions governing privacy and data protection laws obligations in any Contracts to which Seller or the Other Sellers are bound or have made or agreed to comply with, (ii) applicable Information Privacy and regulations Security Laws applicable to the Company’s collectionoperation of the Business, use, transfer, protection, disposal, disclosure, handling, storage (iii) the internal and analysis of personal data. The Company has been and is in compliance in all material respects with internal external written policies and procedures designed adopted by Seller Parties relating to ensure privacy and data protection of Personal Data, and (iv) industry standards and codes of conduct with respect to Personal Data Processed by or in the integrity conduct of the Business to which Seller or the Other Sellers are legally or otherwise have agreed to be bound by (collectively “Data Security Requirements”). (b) In the past three years there has been no (i) data security breach of, unauthorized Processing, or malicious disruption of Seller Parties’ systems, networks or information technology included in the Purchased Assets or used by the Business, or any Personal Data Processed thereby, (ii) Processing of Personal Data included in the Purchased Assets Processed by Seller Parties’ or in the conduct of the Business that would constitute a material breach of any Data Security Requirements, or (iii) any unauthorized Processing of any such Personal Data for which any Seller Parties is required to notify any Governmental Authorities or other Persons under any Information Privacy and Security Laws and no Seller Party has made any such notification. (c) Seller maintains and implements, and has for the past three years, maintained and implemented commercially reasonable (i) written information security programs covering the Business to identify and address internal and external risks to the security of any Personal Data, (ii) administrative, technical and physical safeguards, and (iii) policies, procedures, and rules regarding the Processing protection and security of Personal Data. (d) In the data collectedlast three years, handled no Person has made any written complaint or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and dispute against any third parties in its possession (“Sensitive Company Data”). The tangible Seller Party or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used commenced any Proceeding by or for the Company. To the Company’s knowledge, the Company has not suffered before any Governmental Authority or incurred arbitration body against any security breaches, compromises or incidents Seller Party with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual alleged violation of any information security breach, compromise Data Security Requirements applicable to the Purchased Assets or incident involving Sensitive Company Datathe Business.

Privacy and Data Protection. The Except where failure to comply would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, in each case, (i) the Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The , and (ii) the Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The Except where failure to comply would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, in each case, (i) the tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration StatementStatements, in the Time of Sale Disclosure Package and in the Prospectus. The , and (ii) the Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected tonot, singly individually or in the aggregate, reasonably be expected to result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected tonot, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect. The To the Company’s knowledge, the Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data, except where the failure to give such notice would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect.

Privacy and Data Protection. The Company has and its subsidiaries have operated its their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal datadata except where any noncompliance would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Company has and its subsidiaries have been and is are in compliance in all material respects with internal their respective published privacy policies and with their internal security procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its businessbusiness except where any noncompliance would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Company has and its subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its the personally identifiable information, protected health information, consumer information and other confidential information that they process in connection with their operation of the Company and any third parties in its possession business (“Sensitive Company Data”). The To the knowledge of the Company, the tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its subsidiaries (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has and its subsidiaries have used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the CompanyCompany and its subsidiaries. To the knowledge of the Company’s knowledge, neither the Company nor its subsidiaries has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; ;. For the past three years, to the knowledge of the Company, the Company and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, its subsidiaries have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company has been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and has taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the The Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly individually or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company has been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the The Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset Assets or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset Assets or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset Assets or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and and, to the Company's knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset Assets or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises Data or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized breaches, compromises or illegal use or access incidents would not reasonably be expected to, individually singly or in the aggregate, have result in a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company has operated its business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data, including, HIPAA, HITECH, the California Consumer Privacy Act of 2018, the FTC Act, the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and all applicable national laws implementing or supplementing the GDPR and all related national laws, regulations and secondary legislation. The Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company has been and is in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, personal data, consumer information and other confidential information of the Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Time of Sale General Disclosure Package and in the Prospectus. The Company has used commercially reasonable efforts to establish, and has have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the The Company has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company DataData and has not been notified of and has no knowledge of any event or condition that would reasonably be expected to result in any security breaches, compromises or incidents, except where such breaches, compromises or incidents would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.