Common use of Compliance with Data Privacy Laws Clause in Contracts

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the its Subsidiaries are, and at all prior times during the last three (3) years were, in material compliance with all applicable state, state and federal and foreign data privacy and security laws and regulations, includingincluding without limitation the Health Insurance Portability and Accountability Act of 1996, without limitationas amended by the Health Information Technology for Economic and Clinical Health Act (collectively, “HIPAA”) and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries have has in place, comply complies with, and take takes appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, processing, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; (iv) any information which would qualify as “protected health information” under HIPAA; and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None The Company has at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any of the Policies Policy have been inaccurate, misleading, inaccurate or deceptive in violation of any Privacy Laws applicable laws and (ii) the execution, delivery and performance of the Transaction Documents will not result regulatory rules or requirements in a breach of any Privacy Laws or Policiesmaterial respect. Neither the The Company further certifies that neither it nor the Subsidiaries any subsidiary: (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The To the Company’s knowledge, the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. To the extent applicable to the Company, (i) The the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as otherwise disclosed in the Registration Statement and the Prospectus or as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, (i) The the Company and the Subsidiaries are, and its subsidiaries at all times during the last three (3) years werehave been, and are presently, in compliance with all applicable state, state and federal and foreign data privacy and security laws and regulations, includingincluding without limitation HIPAA, without limitation(ii) the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance in all material respects with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679), and (iii) the Company and its subsidiaries, are currently taking or have taken commercially reasonable actions to prepare to comply with all applicable laws and regulations with respect to Personal Data (defined below) (collectively, the “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) Protected Health Information as defined by HIPAA; (iv) “personal data” as defined by GDPR; and (ivv) any other piece of information that allows the identification of identifies such natural person. At all times, the Company and its subsidiaries have made all disclosures to users or his customers required by applicable Privacy Laws and regulatory rules or her familyrequirements, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None and none of such disclosures made or contained in any of the Policies have been inaccuratePolicy have, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. Except as otherwise disclosed in the Registration Statement and the Prospectus or as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, neither the Company nor any of its subsidiaries (i) has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, or has knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, decree or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the last three (3) years were, in compliance with all applicable state, state and federal and foreign data privacy and security laws and regulations, includingincluding without limitation HIPAA, without limitationand the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) except, in each case, where such noncompliance would not, individually or in the aggregate, result in a Material Adverse Change. To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”); (iii) except where such failure to have in place, comply with, or take such appropriate steps would not, individually or in the aggregate, result in a Material Adverse Change. The Company provides accurate notice of and its applicable Policies subsidiaries have at all times made all disclosures to its customers, employees, third party vendors and representatives as users or customers required by the Privacy Laws; applicable laws and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matterregulatory rules or requirements, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None none of such disclosures made or contained in any of the Policies have been inaccuratePolicy have, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements except where such nondisclosure would not, individually or in the aggregate, result in a Material Adverse Change. The Company further certifies that neither it nor any subsidiary: (i) has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect: (i) The the Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) regulations (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as individuals to the extent required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and and, to the knowledge of the Company, do not contain any material omissions of the Company’s then-current privacy practices, as practices to the extent required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify has the same meaning as “personally identifying personal information,” under the Federal Trade Commission Act, as amended; (iii) “personal data,” or the equivalent under Privacy Laws. Except as defined by GDPR; and (iv) any other piece of information that allows would not reasonably be expected to, individually or in the identification of such natural personaggregate, or his or her familyhave a Material Adverse Effect, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and Laws. Except as would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect, during the past three (ii3) the executionyears, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither neither the Company nor the Subsidiaries Subsidiaries, (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “”Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, place and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives in all material respects as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice in all material respects of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in any material respect in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the its Subsidiaries are, and at all prior times during the last three (3) years were, in compliance with all applicable stateprovincial, state and federal and foreign data privacy and security laws and regulations, includingincluding without limitation HIPAA and The Personal Information Protection and Electronic Documents Act, without limitationand the Company and its Subsidiaries have taken commercially reasonable actions to prepare to comply with and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) GDPR (collectively, “the "Privacy Laws”); (ii") except in each case, where such would not, either individually or in the Company and the Subsidiaries have aggregate, reasonably be expected to result in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Lawsa Material Adverse Effect. “"Personal Data” " means (i) a natural person’s 's name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver's license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “"personally identifying information” " under the Federal Trade Commission Act, as amended; (iii) “"personal data” " as defined by the European Union General Data Protection Regulation ("GDPR") (EU 2016/679); (iv) any information which would qualify as "protected health information" under the Health Insurance Portability and Accountability Act and the Health Information Technology for Economic and Clinical Health Act (collectively, "HIPAA"); and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s 's health or sexual orientation. To ensure material compliance with the Privacy Laws, the Company and its Subsidiaries have in place, materially comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling, and analysis of Personal Data (i) None the "Policies"). The Company and its Subsidiaries have at all times made all disclosures to users or customers required by applicable Laws, and none of such disclosures made or contained in any of the Policies have been inaccuratePolicy have, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, been inaccurate or in violation of any applicable Laws in any material respect. The Company further represents that, except where such event would not, either individually or in the aggregate, reasonably be expected to result in a Material Adverse Effect, neither it nor any Subsidiary: (i) has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the last three (3) years were, in material compliance with all applicable state, state and federal and foreign data privacy and security laws and regulations, includingincluding without limitation HIPAA, without limitationand the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in material compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate commercially reasonable steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy LawsData. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; (iv) any information which would qualify as “protected health information” under HIPAA; and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None There have been no breaches, violations, outages or unauthorized uses of or accesses to same, except for those that have been remedied without material cost or liability or the duty to notify any other person, nor any incidents under internal review or investigations relating to the same. The Company and its subsidiaries have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any of the Policies have been inaccuratehave, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. The Company further certifies that neither it nor any subsidiary: (i) has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except, in each case, such as would not have or reasonably be expected to result in a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies, except, in each case, such as would not have or reasonably be expected to result in a Material Adverse Effect. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries areis, and at all prior times during the last three (3) years werewas, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, including without limitation, as applicable, HIPAA, as amended, and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (and all other applicable laws and regulations with respect to Personal Data (as defined below) that have been announced as of the date hereof as becoming effective within 12 months after the date hereof, and for which any non-compliance with the same would be reasonably likely to create a material liability) as soon as they take effect (collectively, the “Privacy Laws”); (ii) . To ensure material compliance with the Privacy Laws, the Company has in place and the Subsidiaries have is in place, comply with, and take appropriate steps reasonably designed to ensure material compliance with their commercially reasonable policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”); (iii) the as applicable. The Company provides has since inception made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and has provided accurate notice of its applicable Policies then in effect to its customers, employees, third party vendors and representatives as required by applicable laws and regulatory rules or requirements, except where the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of failure to do so would not, individually or in the Company’s then-current privacy practices relating to its subject matteraggregate, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Lawshave a Material Adverse Change. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and (ii) the or Policies in any material respect. The execution, delivery and performance of the Transaction Documents this Agreement or any other agreement referred to in this Agreement will not result in a breach of violation of any Privacy Laws or Policies. Neither Except as would not, individually or in the Company nor aggregate, have a Material Adverse Change, the Subsidiaries Company: (i) to the knowledge of the Company, has not received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is not currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is not a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. To the best of the Company’s knowledge, (i) The the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as would not, individually or in the aggregate, reasonably be expected to result in a Material Adverse Effect, (i) The the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) regulations (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, and have made commercially reasonable efforts to comply with, with and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides has made commercially reasonable efforts to provide accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) the applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; and (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the in any material respect. The execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither To the knowledge of the Company, neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.. 24

Compliance with Data Privacy Laws. Except for matters that would not, individually or in the aggregate, have a Material Adverse Effect: (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in any material respect in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. To the Company’s knowledge, (i) The the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all times during for the last past three (3) years were, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation Health Insurance Portability and Accountability Act (“GDPRHIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (the “HITECH Act”) (EU 2016/67942 U.S.C. Section 17921 et seq.) (collectively, “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their in all material respects with, policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s persons’ name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” Protected Health Information as defined by GDPRHIPAA; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and (ii) the or Policies in any material respect. The execution, delivery and performance of the Transaction Documents this Agreement or any other agreement referred to in this Agreement will not result in a breach of any Privacy Laws or Policies. Neither Except as would not, individually or the aggregate, have a Material Adverse Change, neither the Company nor the Subsidiaries any of its subsidiaries, (i) to has at any time within the knowledge of the Company, has past three years received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or a governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors vendors, and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery delivery, and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies, except, in each case, as would not reasonably be expected to result in a Material Adverse Effect. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law, except, in each case, as would not reasonably be expected to result in a Material Adverse Effect.

Compliance with Data Privacy Laws. To the Company’s knowledge: (i) The the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. Except as would not, individual or in the aggregate, have a material adverse effect: (i) None none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws Laws; and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) Subsidiaries, to the knowledge of the Company, (i) has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPRGDPR (if applicable); and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation, and that is not permitted under Privacy Laws. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as would not be expected, individually or in the aggregate, to result in a Material Adverse Effect, for the past three years, the Company and its subsidiaries comply and have complied with, (i) The Company applicable laws, statutes and regulations of any governmental or regulatory authority concerning the Subsidiaries areprotection, and at all times during the last three (3) years werecollection, in compliance with all applicable stateuse, federal and foreign data privacy disclosure, transfer, storage, disposal, privacy, confidentiality, integrity and security laws and regulations, including, without limitation, the European Union General of Confidential Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); , (ii) the Company all judgments, orders, rules and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis regulations of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority binding on the Company that imposed concerns the Company’s and its subsidiaries processing of Confidential Data, (iii) the Company’s and its subsidiaries’ privacy policies and procedures, and (iv) contractual obligations to which the Company and its subsidiaries have agreed in writing relating to the privacy and security of IT Assets and Confidential Data and to the protection of such IT Assets and Confidential Data from unlawful or unauthorized use, destruction, loss, alteration, access, misappropriation or modification, and have used commercially reasonable efforts to impose equivalent contractual obligations on any obligation third parties having direct or liability indirect access to IT Assets or responsible for processing Confidential Data on behalf of the Company (collectively, the “Data Protection Requirements”). Except as would not be expected, individually or in the aggregate, to result in a Material Adverse Effect, for the past three years, (i) the Company and its subsidiaries, and to the knowledge of the Company, any third parties processing Personal Data on behalf of Company and its subsidiaries, have made required disclosures to and obtained necessary consents from individuals for, the Company’s and its subsidiaries’ collection, use, disclosure, transfer, and other processing of Personal Data, to the extent required by the Privacy Laws, and complied with all such disclosures and consents, and (ii) to the knowledge of the Company, none of such disclosures made or contained in any policies or notices have been inaccurate, misleading, deceptive, incomplete, or in violation of any Data Protection Requirements. “Personal Data” has the same meaning as “personal data”, “personal information”, “personally identifiable information”, or the equivalent under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the its Subsidiaries are, and at all prior times during the last three (3) years were, in material compliance with all applicable state, state and federal and foreign data privacy and security laws and regulations, includingincluding without limitation the Health Insurance Portability and Accountability Act of 1996, without limitationas amended by the Health Information Technology for Economic and Clinical Health Act (collectively, “HIPAA”) and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) , except for any noncompliance that would not result in a Material Adverse Effect. To ensure compliance with the Privacy Laws, the Company and the Subsidiaries have has in place, comply complies with, and take takes appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, processing, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; (iv) any information which would qualify as “protected health information” under HIPAA; and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None The Company has at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any of the Policies Policy have been inaccurate, misleading, inaccurate or deceptive in violation of any Privacy Laws applicable laws and regulatory rules or requirements in any material respect. The Company further certifies that neither it nor any subsidiary (ii) the execution, delivery and performance of the Transaction Documents will except in each case as would not result in have a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Material Adverse Effect): (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, DB2/ 46767468.11 or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law. Any certificate signed by an officer of the Company and delivered to the Agent or to counsel for the Agent pursuant to or in connection with this Agreement shall be deemed to be a representation and warranty by the Company, as applicable, to the Agent as to the matters set forth therein.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential material liability of the Company or the Subsidiaries under, or actual or potential material violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationto the extent applicable to the Company and the Subsidiaries, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” data as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientationPrivacy Laws. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential material liability of the Company or the Subsidiaries under, or actual or potential material violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law, except as would not be reasonably expected to have a Material Adverse Effect; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iviii) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the Company does not have any reason to believe that the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. To the Company’s knowledge, (i) The the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except as would not, individually or in the aggregate, have a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as would not, individually or in the aggregate, have a Material Adverse Effect: (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance comply with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. Except as would not, individually or in the aggregate, have a Material Adverse Effect: (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law. Any certificate signed by an officer of the Company and delivered to the Agents or to counsel for the Agents pursuant to or in connection with this Agreement shall be deemed to be a representation and warranty by the Company, as applicable, to the Agents as to the matters set forth therein.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the last three (3) years were, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, including without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) as applicable, HIPAA, as amended by HITECH (collectively, “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply materially complies with, and take takes appropriate steps reasonably designed to ensure compliance in all material respects with their its policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Lawsapplicable. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” Protected Health Information as defined by GDPRHIPAA; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) Both the Company and its subsidiaries since inception have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and have provided accurate notice of its Policies then in effect to its customers, employees, third party vendors and representatives as required by applicable laws and regulatory rules or requirements, except where the failure to do so would not, individually or in the aggregate, have a Material Adverse Effect. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and (ii) the or Policies in any material respect. The execution, delivery and performance of the Transaction Documents this Agreement or any other agreement referred to in this Agreement will not result in a breach of violation of any Privacy Laws or Policies. Neither the The Company nor the Subsidiaries further certifies that it: (i) to the knowledge of the Company, has not received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is not currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is not a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years since May 17, 2022 were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws since May 17, 2022 and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has since May 17, 2022 received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal federal, provincial, and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“"GDPR”") (EU 2016/679) (collectively, “"Privacy Laws”"); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “"Policies”"); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s 's then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s 's then-current privacy practices, as required by Privacy Laws. “"Personal Data” " means (i) a natural person’s 's name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “"personally identifying information” " under the Federal Trade Commission Act, as amended; (iii) “"personal data” " as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s 's health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, is in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, HIPAA and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the . The Company and the Subsidiaries have has in place, comply complies with, and take takes appropriate steps reasonably designed to ensure compliance in all material respects with their its policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the . The Company provides accurate notice of its applicable relevant Policies to its customers, employees, third party vendors and representatives as where it is required by the to do so under Privacy Laws; and (iv) applicable . The Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, matter and such Policies do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s persons’ name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which that would qualify as “personally identifying information” be considered an unfair or deceptive trade practice under Section 5 of the Federal Trade Commission Act, as amended; (iii) Protected Health Information as defined by HIPAA; (iv) “personal data” as defined by GDPR; and (ivv) any other piece of information that allows the identification of such natural personperson or household. To the Company’s Knowledge, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and (ii) in any material respect. To the Company’s Knowledge, the execution, delivery and performance of the Transaction Documents this Agreement or any other agreement referred to in this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the The Company nor the Subsidiaries (i) to the knowledge of the Company, has not received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no Knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is not currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or and (iii) is not a party to any order, decree, or agreement by or with order of any court or arbitrator or governmental or regulatory authority that imposed imposes on the Company any obligation obligations or liability liabilities under any Privacy Law.. (ss)

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” data as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientationPrivacy Laws. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulationsregulations , including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as to the extent required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as to the extent required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; and (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential material liability of the Company or the Subsidiaries under, or actual or potential material violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law, except as would not be reasonably expected to have a Material Adverse Effect; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the last three (3) years were, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, including without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) as applicable, HIPAA, as amended by HITECH, as soon they took effect (collectively, “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, materially comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Lawsapplicable. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” Protected Health Information as defined by GDPRHIPAA; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) The Company and its subsidiaries since inception have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and has provided accurate notice of its Policies then in effect to its customers, employees, third party vendors and representatives as required by applicable laws and regulatory rules or requirements, except where the failure to do so would not, individually or in the aggregate, result in a Material Adverse Change. None of such disclosures made or contained in any of the Policies have has been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and (ii) the or Policies in any material respect. The execution, delivery and performance of the Transaction Documents this Agreement or any other agreement referred to in this Agreement will not result in a breach of violation of any Privacy Laws or Policies. Neither the The Company further certifies that neither it nor the Subsidiaries any subsidiary: (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except for, in each case, failure or noncompliance that would not result in a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies, except, in both cases, such as would not have a Material Adverse Effect. Neither the Company nor the Subsidiaries Subsidiaries, (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law, except, in each case, such as would not have a Material Adverse Effect.

Compliance with Data Privacy Laws. (i) The To the best of the Company’s knowledge, the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “”Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or ​ governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, materially in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. .. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been materially inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except, in each case, as would not have or reasonably be expected to result in a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies, except, in each case, as would not have or reasonably be expected to result in a Material Adverse Effect. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Except as would not, individually or in the aggregate, have a Material Adverse Effect, the Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.. 20

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except, in each case, as would not have a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies, except, in each case, as would not have a Material Adverse Effect. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a material breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. .Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.. 20

Compliance with Data Privacy Laws. Except as would not, individually or in the aggregate, reasonably be expected to result in a Material Adverse Effect, (i) The the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) regulations (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, and have made commercially reasonable efforts to comply with, with and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides has made commercially reasonable efforts to provide accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) the applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; and (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the in any material respect. The execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither To the knowledge of the Company, neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except, in each case, such as would not have or reasonably be expected to result in a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies, except, in each case, such as would not have or reasonably be expected to result in a Material Adverse Effect. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.or

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.”

Compliance with Data Privacy Laws. Except as set forth on Schedule 3.1(nn), (i) The the Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except for, in each case, failure or noncompliance that would not result in a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies, except, in both cases, such as would not have a Material Adverse Effect. Neither the Company nor the Subsidiaries Subsidiaries, (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law, except, in each case, such as would not have a Material Adverse Effect.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, in all material respects, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries areis, and at all prior times during the last three (3) years werewas, to its knowledge, in material compliance with all applicable state, state and federal and foreign data privacy and security laws and regulations, includingincluding without limitation HIPAA, without limitationand the Company has taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, has been and currently is in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries have has in place, comply complies with, and take takes appropriate steps reasonably designed to ensure compliance in all material respects with their its policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of “Personal Data (as defined below) Data” (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; (iv) any information which would qualify as “protected health information” under HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act; and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None The Company has at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any of the Policies have been inaccuratePolicy have, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. The Company further certifies that it: (i) has not received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is not currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is not a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.. (jj)

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years year were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all times during in the last three (3) past five years werehave been, in material compliance with all applicable state, state and federal and foreign data privacy and security laws and regulations, includingincluding without limitation the Health Information Technology for Economic and Clinical Health Act, without limitationand all regulations promulgated thereunder (collectively, “HIPAA”), and the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) , except as would not, individually or in the aggregate, result in a Material Adverse Change. To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by the GDPR; . The Company and (iv) its subsidiaries have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, except as would not, individually or in the aggregate, result in a Material Adverse Change. The Company further certifies that neither it nor any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. subsidiary: (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law, except with respect to subsection (i), (ii) and (iii) as would not, individually or in the aggregate, result in a Material Adverse Change.

Compliance with Data Privacy Laws. To the Company’s knowledge, (i) The Company and the Subsidiaries areis, and at all times during the last three (3) years werewas, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have has in place, comply complies with, and take takes appropriate steps reasonably designed to ensure compliance with their its policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the The Company nor the Subsidiaries (i) to the knowledge of the Company, has not received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is not currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is not a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitationas applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.. 18

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last past three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectivelyregulations(collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as to the extent required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as to the extent required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” data as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientationPrivacy Laws. (i) None of such disclosures made or contained in any of the Policies have been materially inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries Subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential material liability of the Company or the Subsidiaries under, or actual or potential material violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law, except as would not be reasonably expected to have a Material Adverse Effect; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.. 20

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been materially inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries (i) to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential material violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.