Section 3.20 Data Privacy.
(a) The Company and, to the knowledge of the Company, all vendors, processors, or other third parties processing information or data, in any form, that is capable, directly or indirectly, of being associated with, related to or linked to, or used to identify, describe, contact or locate, a natural Person, including name, address, telephone number, email address, billing information, health information, driver’s license number, other government-issued identifier, vehicle identification number, online identifier, device identifier, IP address, browsing history, search history and/or other data that is considered “personally identifiable information,” “personal information,” “personal data,” or any similar term by any applicable Privacy Requirements (“Personal Information”) by or for, and/or sharing Personal Information with, the Company (collectively, “Company Data Partners”), comply and have since January 1, 2020, complied in all material respects with (i) Laws relating to the privacy, security, or processing of Personal Information, data breach notification, website and mobile application privacy policies and practices, processing and security of payment card information, and email, text message, or telephone communications, (ii) policies, notices, and/or statements related to Personal Information, and (iii) contractual commitments related to the processing of Personal Information applicable to the Company (collectively, the “Privacy Requirements”).
(b) The execution, delivery, and performance of this Agreement and the Merger will not: (i) conflict with or result in a material violation or breach of any Privacy Requirements; (ii) require the consent of or provision of notice to any Person concerning such Person’s Personal Information; (iii) give rise to any right of termination or other right to impair or limit the Parent’s rights to own and process any Personal Information used in or necessary for the operation of the Company’s business; or (iv) otherwise prohibit the transfer of Personal Information to the Parent.
(c) The Company has implemented, maintained and complied with, and has required the Company Data Partners processing material Personal Information to implement, maintain and comply with, in all material respects, commercially reasonable technical, physical, and organizational measures, plans, procedures, controls, and programs, (i) protect Personal Information against any accidental, unlawful or unauthorized access, use, loss, disclosure, alteration, destruction, compromise, or cyberattack, including a ransomware attack or a denial-of-service attack (each, a “Security Incident”), and (ii) identify and address internal and external risks to the privacy and security of Personal Information. Neither the Company and to the knowledge of the Company, any of the Company Data Partners has experienced any material Security Incidents.
(d) In relation to any Security Incident and/or Privacy Requirement, the Company has not (i) notified or been required to notify any customer, consumer, employee, Governmental Entity, or other Person, or (ii) received any notice, inquiry, request, claim, complaint, correspondence or other communication from, or been the subject of any investigation or enforcement action by, any Governmental Entity or other Person. To the knowledge of the Company, there are no facts or circumstances that could give rise to the occurrence of (i) or (ii).
Section 3.21 Certain Payments. Neither the Company nor any of its Subsidiaries nor any director, officer, employee, agent or other person acting on behalf of the Company or its Subsidiaries has, directly or indirectly, (a) violated or taken any action that could potentially result in a violation of any provision of the Foreign Corrupt Practices Act of 1977, as amended, the UK Bribery Act of 2010 or its predecessor laws, or any other Laws concerning corrupt payments applicable to the Company or its Subsidiaries (collectively, the “Anti-Corruption Laws”) or (b): (i) used, offered to use or authorized the use of any funds of the Company or any of its Subsidiaries for unlawful contributions, unlawful gifts or unlawful entertainment, or for other unlawful payments, related to political activity or otherwise; (ii) made, offered to make or authorized any unlawful payment to foreign or domestic Government Officials or employees or to foreign or domestic political parties or campaigns from funds of the Company or its Subsidiaries; (iii) established or maintained any unlawful fund of monies or other assets of the Company or its Subsidiaries; (iv) made any inaccurate entry on the books or records of the Company or its Subsidiaries; (v) made, offered to make or authorized any bribe, unlawful rebate, unlawful payoff, unlawful influence payment, unlawful kickback or other unlawful payment to any person, private or public, in any form or (vi) engaged in or facilitated any transaction or dealing in property or interests in property of, received from or made any contribution of funds, goods or services to or for the benefit of, provided any payments or material assistance to, or