with all license terms applicable to such Open Source Software; and (ii) neither the Company nor any of its subsidiaries uses or distributes or has used or distributed any Open Source Software in any manner that requires or has required (A) the Company or any of its subsidiaries to permit reverse engineering of any software code or other technology owned by the Company or any of its subsidiaries or (B) any software code or other technology owned by the Company or any of its subsidiaries to be (1) disclosed or distributed in source code form, (2) licensed for the purpose of making derivative works or (3) redistributed at no charge.
(y) Except as would not reasonably be expected to, individually or in the aggregate, have a material adverse effect on the Company and its subsidiaries, taken as a whole, (i) the Company and each of its subsidiaries have complied and are presently in compliance with all internal and external privacy policies, contractual obligations, industry standards with which they have publicly represented compliance or that are binding on the Company or its subsidiaries pursuant to contract or applicable law or regulation, applicable laws, statutes, judgments, orders, rules and regulations of any court or arbitrator or other governmental or regulatory authority, in each case, relating to privacy, data protection, and information security with respect to the collection, use, transfer, import, export, storage, protection, disposal and disclosure by the Company or any of its subsidiaries of personal, personally identifiable, household, or sensitive data (“Data Security Obligations,” and such data, “Data”); (ii) the Company and each of its subsidiaries have not received any notification of or complaint regarding, and each of them have no knowledge of any event or condition that would be expected to result in, their non-compliance with any Data Security Obligation; and (iii) there is no action, suit or proceeding by or before any court or governmental agency, authority or body pending or, to the Company’s knowledge, threatened against the Company or any of its subsidiaries alleging non-compliance with any Data Security Obligation.
(z) Except as would not reasonably be expected to, individually or in the aggregate, have a material adverse effect on the Company and its subsidiaries, taken as a whole, (i) the Company and each of its subsidiaries have taken reasonable technical and organizational measures to protect the information technology and data processing systems, facilities and services used by or for the Company or its subsidiaries, including all networks, software, hardware, websites, applications, communications facilities, platforms and related systems (collectively, “Systems”), and Data in the possession or otherwise in the control of the Company or its subsidiaries and used in connection with the operation of the Company’s and its subsidiaries’ businesses, (ii) the Systems are free and clear of all bugs, errors, defects, time bombs, malware, disabling codes or instructions, spyware, Trojan horses, worms, viruses or other malicious software routines that permit or cause unauthorized access to, or disruption, impairment, disablement or destruction of, such Systems or software, data or other materials, (iii) the Company and its subsidiaries have used reasonable efforts to establish and maintain, and have established, maintained, implemented and complied with, reasonable information technology, information security, cyber security and data protection controls, policies and procedures, including oversight, access controls, encryption, technological and physical safeguards and business continuity/disaster recovery and security plans reasonably designed to protect against and prevent breach of and unauthorized destruction, loss, unauthorized access or distribution, use, access, disablement, misappropriation or modification or other compromise or misuse of or relating to the Systems or Data used in connection with the operation of the Company’s and its subsidiaries’ businesses (“Breach”), and (iv) there has been no such Breach, and the Company and its subsidiaries have not been notified of and have no knowledge of any such event or condition that would reasonably be expected to result in, any such Breach.
9