agreements with or imposed by any governmental or regulatory authority. Additionally, neither the Company including any of its employees, contractors, agents, officers or directors, nor its subsidiaries including any of the subsidiary’s employees, contractors, agents, officers or directors has been excluded, suspended or debarred from participation in any U.S. federal health care program or human clinical research or, to the knowledge of the Company, is subject to a governmental inquiry, investigation, proceeding, or other similar action that could reasonably be expected to result in debarment, suspension, or exclusion. The Company and its subsidiaries have filed, obtained, maintained or submitted all material reports, documents, forms, notices, applications, records, claims, submissions and supplements or amendments as required by the Health Care Laws, and all such reports, documents, forms, notices, applications, records, claims, submissions and supplements or amendments were timely, complete, accurate and not misleading on the date filed in all material respects (or were corrected or supplemented by a subsequent submission).
(rr) Except as disclosed in the Registration Statement, the Time of Sale Prospectus, and the Prospectus and except as would not have a material adverse effect on the Company and its subsidiaries, taken as a whole, (i) the Company and each of its subsidiaries is, and at all prior times was, in compliance with all applicable data privacy and security laws and regulations, including the European Union General Data Protection Regulation) (EU 2016/679), for which anynon-compliance with same would be reasonably likely to create a material liability (collectively, the “Privacy Laws”); (ii) to ensure compliance with the Privacy Laws, the Company and its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling, and analysis of personal data that is subject to the Privacy Laws (the “Policies”); (iii) at all times since inception, the Company has provided accurate notice of its Policies then in effect to its customers, employees, third party vendors and representatives; (iv) each of the Policies provides accurate and all required notice of the Company’s then-current privacy practices relating to its subject matter and such Policies do not contain any omissions of the Company’s then-current privacy practices; (v) the Company and its subsidiaries since inception have at all times made all disclosures to users or customers required by the Privacy Laws, and none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws or Policies; (vi) the execution, delivery and performance of this Agreement or any other agreement referred to in this Agreement will not result in a breach or violation of any Privacy Laws or Policies; and (vii) neither the Company nor any of its subsidiaries (A) has received written notice from any governmental authority of any actual or potential liability under or relating to, or actual or potential violation of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice, (B) is currently conducting or paying for, in whole or in part, any investigation, remediation, or other corrective action pursuant to any Privacy Law, or (C) is a party to any order, decree, or agreement that imposes any obligation or liability under any Privacy Law.
16