are unaware of any other facts that, individually or in the aggregate, would reasonably indicate, non-compliance with any Data Security Obligation by the Company or any of its subsidiaries; and (iii) there is no action, suit or proceeding by or before any court or governmental agency, authority or body pending or, or to the Company’s knowledge, threatened, against the Company or any of its subsidiaries alleging non-compliance with any Data Security Obligation by the Company or any of its subsidiaries.
(y) Except as would not, individually or in the aggregate, reasonably be expected to have a material adverse effect on the Company and its subsidiaries, taken as a whole, (i) the Company’s and its subsidiaries’ respective information technology assets and equipment, computers, systems, networks, hardware, software, websites, applications, technology, data and databases (including Personal Data and the data and information of their respective customers, employees, suppliers, vendors and any third party data maintained, processed or stored by or on behalf of the Company and its subsidiaries) used in connection with the operation of the Company’s and its subsidiaries’ respective businesses (collectively, “IT Systems”) are adequate for, and operate and perform in all material respects as required in connection with, the operation of the business of the Company and its subsidiaries as currently conducted, and, to the Company’s knowledge, the IT Systems are free and clear of all bugs, errors, and defects, Trojan horses, time bombs, malware and other corruptants; (ii) the Company and each of its subsidiaries have taken commercially reasonable technical and organizational measures designed to protect the IT Systems, and without limiting the foregoing, the Company and its subsidiaries have used commercially reasonable efforts to establish and maintain, and have established, maintained, implemented and complied with, reasonable information technology, information security, cybersecurity and data protection controls, policies and procedures that are designed to protect against and prevent breach, destruction, loss, unauthorized distribution, unauthorized use, unauthorized access, disablement, ransomware attacks, misappropriation or unauthorized modification, or other compromise or misuse of or relating to any IT Systems (collectively, “Breach”); and (iii) in the past three years there has been no such Breach, and the Company and its subsidiaries have not been notified in writing of any such Breach. The representations and warranties set forth in clauses (v), (w), (x), and (y) are the only representations and warranties made by the Company with respect to intellectual property, information technology, data security, and/or data privacy matters.
(z) No material labor dispute with the employees of the Company or any of its subsidiaries exists, or, to the knowledge of the Company, is imminent; and the Company is not aware of any existing, threatened or imminent labor disturbance by the employees of any of its principal suppliers, manufacturers or contractors that could, singly or in the aggregate, have a material adverse effect on the Company and its subsidiaries, taken as a whole.
(aa) The Company and each of its subsidiaries are insured by insurers of recognized financial responsibility against such losses and risks and in such amounts, in the Company’s reasonable judgment, as are prudent and customary in the businesses in which they are engaged; neither the Company nor any of its subsidiaries has been refused any insurance coverage sought or applied for; and neither the Company nor any of its
9