Company and its subsidiaries as currently conducted, (ii) have not malfunctioned or failed in a manner that has not been fully remediated, and (iii) to the knowledge of the Company are free and clear of all bugs, errors, defects, Trojan horses, time bombs, back doors, drop dead devices, malware and other corruptants. The Company and its subsidiaries have implemented and currently maintain commercially reasonable controls, policies, procedures, and safeguards reasonably consistent with applicable regulatory standards designed to maintain and protect all personal, personally identifiable, sensitive, household, confidential or regulated data and information) of their respective customers, employees, suppliers, vendors or any other third-party data used, gathered, accessed, stored, maintained or otherwise processed by or on behalf of the Company or any of its subsidiaries in connection with their businesses (“Personal Data”), and the integrity, continuous operation, redundancy and security of all IT Systems owned or controlled by the Company and its subsidiaries. To the knowledge of the Company, there has been no material breach, violation, destruction, loss, disablement, misappropriation, modification, disclosure, or use of or access to any Personal Data (each, a “Breach”), except for those that would not, singly or in the aggregate, reasonably be expected to result in a material effect on the Company’s business or have been remedied without material cost or liability or the duty to notify any other person. The Company and its subsidiaries have not been notified in writing of any Breach, and there are no incidents under internal review or investigation relating to a Breach that, to the knowledge of the Company, are reasonably likely to result in a finding that a Breach has occurred. The Company and its subsidiaries have complied during the last three (3) years, and are presently in compliance, in all material respects with all applicable laws and statutes, all binding industry standards, all judgments, orders, rules and regulations of any court or arbitrator or governmental or regulatory authority, all internal and external privacy policies, all contractual obligations, and any other legal obligations, in each case, relating to the privacy or security of its IT Systems and Personal Data (collectively, “Data Security Obligations”). Neither the Company nor any of its subsidiaries has received any written notification of or complaint regarding, or is aware of any pending governmental or regulatory investigations that, individually or in the aggregate, would reasonably indicate non-compliance with any Data Security Obligation and there is no action, suit or proceeding by or before any court or governmental agency, authority or body pending or, to the Company’s knowledge, threatened alleging non-compliance with any of the Data Security Obligations;
(xxx)No forward-looking statement (within the meaning of Section 27A of the Act and Section 21E of the Exchange Act) included or incorporated by reference in any of the Registration Statement, the Pricing Prospectus or the Prospectus has been made or reaffirmed without a reasonable basis or has been disclosed other than in good faith;
(xxxi)Nothing has come to the attention of the Company that has caused the Company to believe that the statistical and market-related data included in each of the Registration Statement, the Pricing Prospectus and the Prospectus is not based on or derived from sources that are reliable and accurate in all material respects;
(xxxii)There is and has been no failure on the part of the Company or any of the Company’s directors or officers, in their capacities as such, to comply with any provision of the Sarbanes-Oxley Act of 2002, as amended and the rules and regulations promulgated in