behalf) (“Data Security Obligations”, and such data and information, “Personal Data”). The Company and its subsidiaries have not received any notification of or complaint regarding and are unaware of any other facts that, individually or in the aggregate, would reasonably indicate non-compliance with any Data Security Obligation by the Company or any of its subsidiaries. There is no action, suit, investigation or proceeding by or before any court or governmental agency, authority or body pending or threatened alleging non-compliance with any Data Security Obligation by the Company or any of its subsidiaries. The Company and its subsidiaries’ respective information technology assets and equipment, computers, systems, networks, hardware, software, websites, applications, technology and databases (“IT Systems”) are adequate for, and operate and perform in all material respects as required in connection with the operation of the business of the Company and its subsidiaries as currently conducted, free and clear of all bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. The Company and each of its subsidiaries have taken all technical and organizational measures necessary to protect the IT Systems and Personal Data, and without limiting the foregoing, the Company and its subsidiaries have used reasonable efforts to establish and maintain, and have established, maintained, implemented and complied with, reasonable information technology, information security, cyber security and data protection controls, policies and procedures, consistent with industry standards and practices, that are designed to protect against and prevent breach, destruction, loss, unauthorized distribution, use, access, disablement, misappropriation or modification, or other compromise or misuse of or relating to any IT Systems and Personal Data (“Breach”). There has been no such Breach, and the Company and its subsidiaries have not been notified of and have no knowledge of any event or condition that would reasonably be expected to result in, any such Breach;
(xxx) The Company and its subsidiaries are in compliance with any and all applicable federal and state laws, rules, regulations, and court decrees applicable to the business of the Company as currently conducted, including, but not limited to, rules and regulations promulgated by the Consumer Financial Protection Bureau (including, but not limited to, the Equal Credit Opportunity Act, the Truth in Lending Act, the Electronic Fund Transfer Act, the Fair Debt Collection Practices Act, the Fair Credit Reporting Act, the Consumer Protection Act, the Servicemembers Civil Relief Act), state laws (including but not limited to, as applicable, the consumer protection laws and insurance laws), and other federal laws (including, but not limited to, as applicable, the Federal Trade Commission Act, the Electronic Signatures in Global and National Commerce Act, the Uniform Electronic Transactions Act and the Gramm-Leach-Bliley Act)) (such laws, rules and regulations, the “Regulatory Laws”);
(xxxi) None of the Company or its subsidiaries is subject to any order or action, and none has been threatened with any action, by any federal or state regulatory authority concerning its compliance with applicable Regulatory Laws.
(xxxii) The Company and its subsidiaries possess, and are in compliance with the terms of, all certificates, authorizations, franchises, licenses and permits issued by appropriate federal, state, local or foreign regulatory bodies (collectively, “Licenses”) necessary or material to the conduct of the business now conducted or proposed in the Registration Statement, the Pricing Disclosure Package and the Prospectus to be conducted by them. The Company and each of its subsidiaries are in compliance with the terms and conditions of all such Licenses and have not received any written notice of proceedings relating to the revocation or modification of any Licenses that, in each case, if determined adversely to the Company or any of its subsidiaries, would individually or in the aggregate reasonably be expected to have a Material Adverse Effect.
9