the Company will not knowingly or with reason to know, in violation of Sanctions, directly or indirectly use the proceeds of the offering of the Securities hereunder, or lend, contribute or otherwise make available such proceeds to any subsidiary, joint venture partner or other person or entity (i) to fund or facilitate any activities of or business with any person that, at the time of such funding or facilitation, is the subject or the target of Sanctions, (ii) to fund or facilitate any activities of or business in any Sanctioned Country or (iii) in any other manner that will result in a violation by any person (including any person participating in the transaction, whether as underwriter, initial purchaser, advisor, investor or otherwise) of Sanctions. Except as disclosed in the periodic reports filed with the Commission, for the past 5 years, the Company and its subsidiaries have not knowingly engaged in and are not now knowingly engaged in any dealings or transactions with any person that at the time of the dealing or transaction is or was the subject or the target of Sanctions or with any Sanctioned Country;
(bb) Neither the issuance, sale and delivery of the Securities nor the application of the proceeds thereof by the Company as described in each of the Registration Statement, the Pricing Prospectus and the Prospectus will violate Regulation T, U or X of the Board of Governors of the Federal Reserve System or any other regulation of such Board of Governors;
(cc) (i) The Company and its subsidiaries’ information technology assets and equipment, computers, systems, networks, hardware, software, websites, applications, and databases (collectively, “IT Systems”) are adequate for, and operate and perform in all material respects as required in connection with the operation of the Company’s and its subsidiaries’ businesses as they are currently conducted; (ii) the Company and its subsidiaries have, since January 1, 2017, complied with and are presently in compliance with all internal privacy policies, contractual obligations, applicable laws, statutes, judgments, orders, rules and regulations of any court or arbitrator or other governmental or regulatory authority and any other legal obligations, in each case, relating to (A) the privacy and security of IT Systems and (B) the collection, use, transfer, import, export, storage, protection, disposal and disclosure by the Company or any of its subsidiaries of personal, personally identifiable, sensitive, confidential or regulated data (“Data Security Obligations”, and such data, “Data”), except where the failure to comply would not reasonably be expected to have, individually or in the aggregate, a Material Adverse Effect; (iii) the Company has not received any notification of or complaint regarding and is unaware of any other facts that, individually or in the aggregate, would reasonably indicate material non-compliance with any Data Security Obligation; and (iv) there is no action, suit or proceeding by or before any court or governmental agency, authority or body pending or, to the Company’s knowledge, threatened alleging material non-compliance with any Data Security Obligation; and
(dd) The Company and its subsidiaries have taken commercially reasonable technical and organizational measures necessary to protect the IT Systems and Data used in connection with the operation of the Company’s and its subsidiaries’ businesses. Without limiting the foregoing, the Company and its subsidiaries have, since January 1, 2017, used commercially reasonable efforts to establish and maintain, and have established, maintained, implemented and complied with, reasonable information technology, information security, cyber security and data protection controls, policies and procedures, including oversight, access controls, encryption, technological and physical safeguards and business continuity/disaster
9