“personal data” as defined by GDPR, and (iii) any other information that constitutes a natural persons’ name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number and allows the identification of such natural person, or his or her family, or permits the collection or analysis of any data related to an identified person’s health or sexual orientation, by the Company. Except as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Change, (i) none of such disclosures made or contained in any of the Policies since January 1, 2016 have been inaccurate, misleading, deceptive or in violation of any Privacy Laws or Policies, (ii) the execution, delivery and performance of this Agreement or any other agreement referred to in this Agreement will not result in a breach of any Privacy Laws or Policies by the Company or any of its subsidiaries, and (iii) neither the Company nor any of its subsidiaries (x) has since January 1, 2016 received notice of any violation of any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (y) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any Privacy Law; or (z) is a party to any order, decree, or agreement with any governmental authority, or pursuant to any ruling or determination by or before any governmental authority, that imposed any obligation or liability under any Privacy Law.
(nn) IT Systems. Since January 1, 2016, (i) there has been no security breach or attack or other compromise of or relating to any of the Company’s and its subsidiaries’ information technology and computer systems, networks, hardware, software, data (including Personal Data and data of their respective customers, employees, suppliers, vendors and any third party data maintained by or on behalf of them), equipment or technology (“IT Systems and Data”), (ii) the Company and its subsidiaries have not been notified of, and have no knowledge of any event or condition that would reasonable be expected to result in, any security breach, attack or compromise of their IT Systems and Data, (iii) the Company and each of its subsidiaries have complied, and are presently in compliance with, all applicable laws, statutes or any applicable judgment, order, rule or regulation of any court or arbitrator or governmental or regulatory authority and all industry guidelines and standards with which they have represented compliance, and their internal policies and contractual obligations, in each case, relating to the privacy and security of IT Systems and Data and to the protection of such IT Systems and Data from unauthorized use, access, misappropriation or modification and (iv) the Company and each of its subsidiaries have implemented reasonable and appropriate backup and disaster recovery technology, except, in each case of (i) – (iv), as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Change.
(oo) Export and Import Laws. Each of the Company and the Subsidiaries, and, to the Company’s knowledge, each of their affiliates and any director, officer, agent or employee of, or other person associated with or acting on behalf of, the Company has acted at all times since January 1, 2016 in compliance with applicable Export and Import Laws (as defined below) and there are no claims, complaints, charges, investigations or proceedings pending or expected or, to the knowledge of the Company, threatened between the Company or any of the Subsidiaries and any governmental authority under any Export or Import Laws. The term “Export and Import Laws” means the Arms Export Control Act, the International Traffic in Arms Regulations, the Export Administration Act of 1979, as amended, the Export Administration Regulations, and all other laws and regulations of the United States government regulating the provision of services to non-U.S. parties or the export and import of articles or information from and to the United States of America, and all similar laws and regulations of any foreign government regulating the provision of services to parties not of the foreign country or the export and import of articles and information from and to the foreign country to parties not of the foreign country.
- 16 -