(ii) Except as would not, individually or in the aggregate, have a material adverse effect, (1) each of the Company and its subsidiaries has timely filed all tax returns that were required to have been filed by it, taking into account any valid extensions thereof, (2) each of the Company and its subsidiaries has paid all taxes that were required to have been paid by it (including in its capacity as a withholding agent) and any other assessment, fine or penalty levied against it, to the extent that any of the foregoing is due and payable, except for any such assessment, fine or penalty that is currently being contested in good faith by appropriate proceedings and for which appropriate reserves have been provided in accordance with GAAP, (3) each of the Company and its subsidiaries has made adequate accruals and reserves (in accordance with GAAP) for all taxes not yet due and payable, and (4) there is no tax deficiency, assessment or other claim that has been, or could reasonably be expected to be, asserted against the Company or any of its subsidiaries.
(jj) Neither the Company nor its controlled affiliates has taken, directly or indirectly, any action that is designed to or that has constituted or that would reasonably be expected to cause or result in the stabilization or manipulation of the price of any security of the Company to facilitate the sale or resale of the Securities.
(kk) The Company, the Guarantors and their respective affiliates and all persons acting on their behalf (other than the Initial Purchasers, as to whom the Company and the Guarantors make no representation) have complied with and will comply with the offering restrictions requirements of Regulation S in connection with the offering of the Securities outside the United States and, in connection therewith, the Time of Sale Memorandum will contain the disclosure required by Rule 902. The Securities sold in reliance on Regulation S will be represented upon issuance by a temporary global security that may not be exchanged for definitive securities until the expiration of the 40-day restricted period referred to in Rule 903 of the Securities Act and only upon certification of beneficial ownership of such Securities by non-U.S. persons or U.S. persons who purchased such Securities in transactions that were exempt from the registration requirements of the Securities Act.
(ll) Except as would not, individually or in the aggregate, have a material adverse effect, (i) the Company and each of its subsidiaries have complied and are presently in compliance with all internal and external privacy policies, contractual obligations, industry standards, applicable laws, statutes, judgments, orders, rules and regulations of any court or arbitrator or other governmental or regulatory authority and any other legal obligations, in each case, relating to the collection, use, transfer, import, export, storage, protection, disposal and disclosure by the Company or any of its subsidiaries of personal, personally identifiable, household, sensitive, confidential or regulated data (“Data Security Obligations”, and such data, “Data”); (ii) the Company has not received any notification of or complaint regarding and is unaware of any other facts that, individually or in the aggregate, would reasonably indicate non-compliance with any Data Security Obligation; and (iii) of there is no action, suit or proceeding by or before any court or governmental agency, authority or body pending or threatened alleging non-compliance with any Data Security Obligation.
(mm) Except as would not, individually or in the aggregate, have a material adverse effect, the Company and each of its subsidiaries have taken all technical and organizational measures necessary to protect the information technology systems and Data used in connection with the operation of the Company’s and its subsidiaries’ businesses. Without limiting the foregoing, the Company and its subsidiaries have used reasonable efforts to establish and maintain, and have established, maintained, implemented and complied with, reasonable information technology, information security, cyber security and data protection controls, policies and procedures, including oversight, access controls, encryption, technological and physical safeguards and business continuity/disaster recovery and security plans that are designed to protect against and prevent breach, destruction, loss, unauthorized distribution, use, access,
-10-