(w) Cybersecurity and Data Protection. Except as disclosed in the Registration Statement and the Prospectus or where it would not, individually or in the aggregate, result in a Material Adverse Effect, (i) there has been no security breach or incident, violation, outage, unauthorized access or disclosure, or other compromise of or relating to the Company’s or any of its subsidiaries’ information technology and computer systems, networks, hardware, software, applications, equipment or technology (collectively, “IT Systems”), or confidential data and databases (including all personal, personally identifiable, sensitive, confidential or regulated data and information of their respective customers, employees, suppliers, vendors and any third-party confidential data collected, maintained, processed or stored by the Company and its subsidiaries, and any such data collected, maintained, processed or stored by third parties on behalf of the Company and its subsidiaries) (together with IT Systems, “IT Systems and Data”), (ii) to the knowledge of the Company, the Company’s and its subsidiaries’ IT Systems are adequate for, and operate and perform as required in connection with the operation of the business of the Company and its subsidiaries as currently conducted, free and clear of all material bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants, (iii) the Company and its subsidiaries have implemented and maintained commercially reasonable controls, policies, procedures, and technological safeguards designed to maintain and protect the integrity, continuous operation, redundancy and security of all IT Systems and Data reasonably consistent with applicable industry standards and practices, or as required by applicable regulatory standards, (iv) the Company and its subsidiaries are presently in compliance with all applicable laws or statutes and all applicable material judgments, orders, rules and regulations of any court, arbitrator or governmental or regulatory authority, policies and contractual obligations relating to the privacy and security of their IT Systems and Data and to the protection of such IT Systems and Data from unauthorized use, access, misappropriation or modification (collectively, the “Privacy Obligations”); and (x) neither the Company nor any subsidiary: (y) has received written notice during the past three years asserting a violation by the Company or any of its subsidiaries of any of the Privacy Obligations; (z) is currently conducting or paying for, in whole or in part, any investigation, remediation, or other corrective action pursuant to any Privacy Obligation; or (aa) is a party to any order, decree, or agreement that imposes any obligation or liability by any governmental or regulatory authority under any Privacy Obligation.
(x) Environmental Laws. Except as disclosed in the Registration Statement and the Prospectus, (i)(A) neither the Company nor any of its subsidiaries has been or is in violation of any federal, state, local or non-U.S. statute, law (including common law), rule, regulation, ordinance, code or other legally enforceable requirement, or decision or order of any governmental agency, governmental body or court, relating to pollution, Hazardous Substances, the protection or restoration of the environment or natural resources, and health and safety including with respect to exposure to Hazardous Substances (collectively, “Environmental Laws”), (B) neither the Company nor any of its subsidiaries owns, occupies, leases, operates or uses any real property contaminated with Hazardous Substances, (C) the Company and its subsidiaries have received and are in compliance with all, and have no lability under any, permits, licenses, authorizations, identification numbers or other approvals required under applicable Environmental Laws to conduct their respective businesses, (D) there are no costs, obligations or liabilities of or relating to the Company or any of its subsidiaries associated with Environmental Laws or Hazardous
10