the Company’s knowledge, the Intellectual Property Rights licensed to the Company and its subsidiaries, are valid, subsisting and enforceable, and there is no pending or, to the Company’s knowledge, threatened action, suit, proceeding or claim by others challenging the validity, scope or enforceability of any such Intellectual Property Rights. Neither the Company nor any of its subsidiaries has received any written notice alleging any infringement, misappropriation or other violation of Intellectual Property Rights which, singly or in the aggregate, if the subject of an unfavorable decision, ruling or finding, would have a material adverse effect on the Company and its subsidiaries, taken as a whole. To the Company’s knowledge, no third party is infringing, misappropriating or otherwise violating, or has infringed, misappropriated or otherwise violated, any material Intellectual Property Rights owned by the Company. Except as would not have a material adverse effect on the Company and its Subsidiaries taken as a whole, all employees or contractors engaged in the development of Intellectual Property Rights on behalf of the Company or any subsidiary of the Company have executed an invention assignment agreement whereby such employees or contractors presently assign all of their right, title and interest in and to such Intellectual Property Rights to the Company or the applicable subsidiary, and to the Company’s knowledge no such agreement has been breached or violated. The Company and its subsidiaries use, and have used, commercially reasonable efforts to appropriately maintain all information intended to be maintained as a trade secret.
(x) Except as would not have a material adverse effect on the Company and its subsidiaries, taken as a whole, (i) the Company and each of its subsidiaries have complied and are presently in compliance with all internal and external privacy policies, contractual obligations, industry standards, applicable laws, statutes, judgments, orders, rules and regulations of any court or arbitrator or other governmental or regulatory authority and any other legal obligations, in each case, relating to the collection, use, transfer, import, export, storage, protection, disposal and disclosure by the Company or any of its subsidiaries of personal, personally identifiable, household, sensitive, confidential or regulated data (“Data Security Obligations”, and such data, “Data”) and (ii) the Company has not received any written notification of or written complaint regarding non-compliance with any Data Security Obligation. There is no action, suit or proceeding by or before any court or governmental agency, authority or body pending or, to the knowledge of the Company, threatened alleging non-compliance with any Data Security Obligation except where such actions, suits or proceedings would not, singly or in the aggregate, have a material adverse effect on the Company and its subsidiaries, taken as a whole.
(y) The Company and each of its subsidiaries have taken technical and organizational measures reasonably believed by the Company to be adequate to protect the information technology systems and Data used in connection with the operation of the Company’s and its subsidiaries’ businesses. Without limiting the foregoing, the Company and its subsidiaries have used reasonable efforts to establish and maintain, and have established, maintained, implemented and complied with, reasonable information technology, information security, cyber security and data protection controls, policies and procedures, including oversight, access controls, encryption, technological and physical safeguards and business continuity/disaster recovery and
8