(rr) Statistical and Market Data.Nothing has come to the attention of the Company that has caused the Company to believe that the statistical and market-related data included or incorporated by reference in each of the Registration Statement, the Time of Sale Information and the Prospectus is not based on or derived from sources that are reliable and accurate in all material respects.
(ss) Sarbanes-Oxley Act.There is and has been no failure on the part of the Company or any of the Company’s directors or officers, in their capacities as such, to comply with any provision of the Sarbanes-Oxley Act of 2002 and the rules and regulations promulgated in connection therewith (the “Sarbanes-Oxley Act”), including Section 402 related to loans and Sections 302 and 906 related to certifications.
(tt) Status under the Securities Act.At the time of filing the Registration Statement and any post-effective amendment thereto, at the earliest time thereafter that the Company or any offering participant made abona fideoffer (within the meaning of Rule 164(h)(2) under the Securities Act) of the Securities and at the date hereof, the Company was not and is not an “ineligible issuer,” and is a well-known seasoned issuer, in each case as defined in Rule 405 under the Securities Act.
(uu) Cybersecurity; Data Protection.Except as disclosed in the Registration Statement, the Time of Sale Information or the Prospectus or as would not individually or in the aggregate have a Material Adverse Effect on the Company and its subsidiaries, taken as a whole, the Company and its subsidiaries’ information technology assets and equipment, computers, systems, networks, hardware, software, websites, applications, and databases (including the data of their respective customers, employees, suppliers, vendors and any third party data maintained by or on behalf of the Company and its subsidiaries) (collectively, “IT Systems”) are adequate for, and operate and perform in all material respects as required in connection with the operation of the business of the Company and its subsidiaries, free and clear of all material bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. Except as would not have, individually or in the aggregate, a Material Adverse Effect, the Company and its subsidiaries have implemented and maintained all commercially reasonable controls, policies, procedures, and safeguards necessary to maintain and protect their material confidential information and the integrity, continuous operation, redundancy and security of all IT Systems and data (including all personal, personally identifiable, household, sensitive, confidential or regulated data (“Personal Data”)) used in connection with their businesses. Without limiting the foregoing, the Company and its subsidiaries have used commercially reasonable efforts to establish and maintain and have established, maintained, implemented and complied with, except as would not have, individually or in the aggregate, a Material Adverse Effect, reasonable information technology, information security, cyber security and data protection controls, policies and procedures, including oversight, access controls, encryption, technological and physical safeguards and business continuity/disaster recovery and security plans that are designed to protect against and prevent breach, destruction, loss, unauthorized distribution, use, access, disablement, misappropriation or modification, or other compromise or misuse of or relating to any information technology system or Data used in connection with the operation of the Company’s and its subsidiaries’ businesses (“Breach”). Except as disclosed in the
16