(xlii) Compliance with Health Care Laws. The Company and the Subsidiaries are, and since January 1, 2017 have been, in compliance with all applicable Health Care Laws except where failure to be in compliance would not be expected reasonably to have a Material Adverse Effect. For purposes of this Agreement, “Health Care Laws” means: (i) the Federal Food, Drug, and Cosmetic Act (21 U.S.C. §§ 301 et seq.), and the regulations promulgated thereunder; (ii) all applicable federal, state, local and foreign health care related fraud and abuse laws, including, without limitation, the U.S. Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)), the U.S. Civil False Claims Act (31 U.S.C. §§ 3729 et seq.), the Federal False Statements Law (42 U.S.C. § 1320a-7b(a)), all criminal laws relating to health care fraud and abuse, including but not limited to 18 U.S.C. §§ 286 and 287, and the health care fraud criminal provisions under the U.S. Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) (42 U.S.C. §§ 1320d et seq.), the Civil Monetary Penalties Law (42 U.S.C. § 1320a-7a), the exclusion laws (42 U.S.C. § 1320a-7), the Medicare statute (Title XVIII of the Social Security Act), and the Medicaid statute (Title XIX of the Social Security Act) and the regulations promulgated pursuant to such statutes; (iii) HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act (42 U.S.C. Section 17921 et seq.), and the regulations promulgated thereunder; (iv) the U.S. Physician Payments Sunshine Act (42 U.S.C. § 1320a-7h), and the regulations promulgated thereunder; and (v) any and all other applicable health care laws and regulation applicable to the ownership, testing, development, manufacture, packaging, processing, use, distribution, marketing, advertising, labeling, promotion, sale, offer for sale, storage, import, export or disposal of any product under development by the Company. Neither the Company nor the Subsidiaries has received written notice of any claim, action, suit, proceeding, hearing, enforcement, investigation, arbitration or other action from any court or arbitrator or governmental or regulatory authority alleging that any product operation or activity is in material violation of any Health Care Laws, and, to the Company’s knowledge, no such claim, action, suit, proceeding, hearing, enforcement, investigation, arbitration or other action is threatened. Neither the Company nor the Subsidiaries is a party to any corporate integrity agreements, monitoring agreements, consent decrees, settlement orders, or similar agreements with or imposed by any governmental or regulatory authority. Additionally, none of the Company or its Subsidiaries or any of their respective officers or directors or, to the Company’s knowledge, any of their respective employees has been excluded, suspended or debarred from participation in any U.S. federal health care program or human clinical research or, to the knowledge of the Company, is subject to a governmental inquiry, investigation, proceeding, or other similar action that could reasonably be expected to result in debarment, suspension, or exclusion. The Company and the Subsidiaries have filed, obtained, maintained or submitted all reports, documents, forms, notices, applications, records, claims, submissions and supplements or amendments as required by the Health Care Laws, and all such reports, documents, forms, notices, applications, records, claims, submissions and supplements or amendments were complete and accurate on the date filed in all material respects (or were corrected or supplemented by a subsequent submission), except in each case, as would not reasonably be expected to have a Material Adverse Effect.
(xliii) Cybersecurity and Data Privacy. The Company and the Subsidiaries’ information technology assets and equipment, computers, systems, networks, hardware, software, websites, applications, and databases (collectively, “IT Systems”) are adequate for, and operate and perform in all material respects as required in connection with the operation of the business of the Company and its subsidiaries as currently conducted, free and clear of all material bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. The Company and the Subsidiaries have implemented and maintained commercially reasonable controls, policies, procedures, and safeguards to maintain and protect their material confidential information and the integrity, continuous operation, redundancy and security of all IT Systems and data (including all Personal Data (as defined below) that is in the Company’s possession, and sensitive, confidential or
16