(ll) Cybersecurity; Data Protection. The Company’s information technology assets and equipment, including, without limitation, those owned, licensed or otherwise used (excluding any public networks), such as its data communications lines, computers, systems, networks, hardware, servers, software, websites, applications, and databases (collectively, “IT Systems”) are adequate for, and operate and perform as required in connection with the operation of the business of the Company as currently conducted and as proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package and the Prospectus, free and clear of all bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants, except in each case as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect. The Company has at all times implemented and maintained all reasonably necessary controls, policies, procedures, and safeguards consistent with industry standards and practices for similarly situated companies to maintain and protect the integrity, availability, privacy, continuous operation, redundancy and security of all IT Systems and data (including all Personal Data, personally identifiable, sensitive, confidential or regulated data) (“Company Data”) used in connection with its business, and there have been no breaches, violations, outages, compromises, or unlawful or unauthorized acquisitions of, disclosures of, uses of or accesses to the same, except in each case as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect. Except in each case as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, the Company is presently and, at all times, has been in compliance with all (i) applicable laws, statutes, judgments, orders, rules and regulations of any court, arbitrator, governmental or regulatory authority; and (ii) internal policies and contractual obligations, each (i) and (ii) relating to the privacy and security of IT Systems and Company Data.
(mm) No Unlawful Payments. Neither the Company nor any director or officer of the Company nor, to the knowledge of the Company, any employee of the Company, any agent, affiliate or other person associated with or acting on behalf of the Company has (i) used any corporate funds for any unlawful contribution, gift, entertainment or other unlawful expense relating to political activity; (ii) made or taken an act in furtherance of an offer, promise or authorization of any direct or indirect unlawful payment or benefit to any foreign or domestic government or regulatory official or employee, including of any government-owned or controlled entity or of a public international organization, or any person acting in an official capacity for or on behalf of any of the foregoing, or any political party or party official or candidate for political office; (iii) violated or is in violation of any provision of the Foreign Corrupt Practices Act of 1977, as amended, or any applicable law or regulation implementing the OECD Convention on Combating Bribery of Foreign Public Officials in International Business Transactions, or committed an offence under the Bribery Act 2010 of the United Kingdom or any other applicable anti-bribery or anti-corruption law; or (iv) made, offered, agreed, requested or taken an act in furtherance of any unlawful bribe or other unlawful benefit, including, without limitation, any rebate, payoff, influence payment, kickback or other unlawful or improper payment or benefit. The Company has instituted, maintains and enforces, and will continue to maintain and enforce policies and procedures designed to promote and ensure compliance with all applicable anti-bribery and anti-corruption laws.
(nn) Compliance with Anti-Money Laundering Laws. The operations of the Company are and have been conducted at all times in compliance with applicable financial recordkeeping and reporting requirements, including those of the Currency and Foreign Transactions Reporting Act of 1970, as amended, the applicable money laundering statutes of all jurisdictions where the Company conducts business, the rules and regulations thereunder and any related or similar rules, regulations or guidelines issued, administered or enforced by any governmental agency with respect to any jurisdiction where the Company conducts business (collectively, the “Anti-Money Laundering Laws”) and no action, suit or proceeding by or before any court or governmental agency, authority or body or any arbitrator involving the Company with respect to the Anti-Money Laundering Laws is pending or, to the knowledge of the Company, threatened.
- 17 -